It seems that you're using an outdated browser. Some things may not work as they should (or don't work at all).
We suggest you upgrade newer and better browser like: Chrome, Firefox, Internet Explorer or Opera

×
Malwarebytes has flagged the new exe from the last patch as malware and quarantined 2 files. The "exe" file and an "Ink" file. I don't care what explanation anyone gives, you have to trust your anti virus software or what's the point of it? I've uninstalled and deleted everything associated with Empire Earth 2. I won't install it again.
Gog released an update for EE2, which modifies some of game files (including EE2.exe and EE2X.exe), without changing their modification time, in order to replace 4:3 resolutions with 16:9 ones. In my opinion it's a stupid decision for an official store to apply game modifications like this. Many AV programs will find it as a suspicious modification. In this case the Malwarebytes alert is a false positive, because besides of simple tweaks in executables nothing was injected, but still it's a weird behavior for a digital store to release updates like this. If at least they digitally signed these executables...

People who were looking for unofficial modifications, could simply install Unofficial Patch 1.5: https://ee2.eu/patch
which supports all possible screen resolutions (including 4k) and has a much better support for the modern hardware.
Besides that, Unofficial Patch 1.5 executables are signed and don't trigger AV alerts:

https://www.virustotal.com/gui/file/2d5ceecd212b657387c552e7058d8a3ec6739380eb740728d6af0869e5a5048c
https://www.virustotal.com/gui/file/9582d8ac910a0903e71f89f1674a614115941387d41a8f6f58602b299b70d687
https://www.virustotal.com/gui/file/fe59bd467b0787f037fbd59445289d4a4fff73f1e03774490e5d4a33355d71f7
low rated
Guy above say completely nonsense not related information. That happenes when someone try to promote un-official projects for the games - they litteraly do this in every topics of game sub-forum not matter how it related to thread subject. Happened in every threads for games, if this games have such mods. Sometimes warez adverts happens, eg Warcraft 2 'combat edition'-repack. When someone ask for additional localisation - it is good to promote combat-repack, but sometimes this promoting happened in not related thread.
Not matter which one game and whico one mod... even really good ones worth to try advertised in such nonsensly bad manner. And i cant name this mod above is a worth to try.
....
Back to topic sibject
I dont know why many people (at least on steam forums) suggest MWB as a good checking tool. MWB like to find something in random files. Random mean random. Not just for warez content.

VirusTotal also do mistakes. Well, obviously they signatures database is always out of date from used AV\anti-spywares. But they have something above that.

Use free editions of Kaspersky, Dr,Web or better of all - standart MSE\Defender. Do manually check updates\signates updates for Defender and manually fast-check and then separate files check if you suspect some files.
Then go to virustotal and look suspected files there.

As alternative to MWB use Dr.Web CureIT. There is also same tools from Microsoft - but two differ not clear if they have differ malware threads signatures. Not needed - if AV im suggested not 100% recommendation - CureIT is best tool for checking PC\separate files. This and Microsoft AV'ses. There is also Spyware Process Detector - but kinda old (not a big problem) tool and trial-ware ($$$) - this not only check signatures, it show you no-signed Microsoft dll as suspiciuos explained to you that it suspicous cause do not have Ms signature. Cause this tool is anti-spyware, not AV, it do nothing to heal\remvoe such files - only warn you. I dont know if there is a good FREE alternative for that tool.

Lack of signature shouldnt affect AV. Normally presense of digital signature on exe should be good for affect AV triggering as good files, but in case what user above say -... Mmm... First of this signatures made for users, not for AV. Presense of it in mod-project say to you you downloaded if from offciail mirror who do not modify it before mirrored this mod. GOG installers sign only say to you that you have correctly downloaded exe file, or not modified if this is about ***** things downloadings.

Some AV will do check difgital signatures - for Microsoft, Apple and Valve exe's and dll's (like steamclient.dll). Maybe some AV also have white-list of some esle signatures. But this is not related to this thread issue. Im sure there is no white-list for Empire Earth exe files signs.
.........
Look youreself for mods. if you want install some - do this for better reasons than just for avoiding antivirusses triggering. For content reasons.

Also, of you look at pinned threads you wiil find there linked mods can triggered AV for some questionable used... mmm... things.
Post edited April 12, 2022 by QWEEDDYZ
avatar
QWEEDDYZ: Guy above say completely nonsense not related information. That happenes when someone try to promote un-official projects for the games - they litteraly do this in every topics of game sub-forum not matter how it related to thread subject.
Hehe, seems like the troll is back.

You've already been "corrected" by multiple different users in the original topic: https://www.gog.com/forum/empire_earth_series/empire_earth_2_windows_881_fix_and_empire_earth_ii_unofficial_patch_14/post55

Now, you troll dare to call my post a "nonsense" and "not related information", while in over 70% of my post I described what was changed in the recent update from Gog, and what triggers the possible AV alerts.

So let's analyze your "sense" and "related information":
avatar
QWEEDDYZ: Use free editions of Kaspersky, Dr,Web
"Kaspersky Lab is a Russian multinational cybersecurity and anti-virus provider headquartered in Moscow, Russia"

"Doctor Web is a Russian IT-security solutions vendor developing Dr.Web anti-virus for businesses and personal use, as well as anti-virus as a service since..."

Germany warns against using Kaspersky software, citing ‘considerable’ cyber risk:
https://techcrunch.com/2022/03/15/germany-kaspersky-risk-invasion/

Italy Investigates Russia's Kaspersky Antivirus Software:
https://www.securityweek.com/italy-investigates-russias-kaspersky-antivirus-software

Kaspersky Named First Russian Company on Security Risk List:
https://www.bloomberg.com/news/articles/2022-03-25/fcc-calls-kaspersky-china-telecom-china-mobile-security-risks

Russia could use Kaspersky antivirus software in cyberattacks in Europe,:
https://www.euronews.com/next/2022/03/15/russia-could-use-kaspersky-antivirus-software-in-cyberattacks-in-europe-german-agency-warn

Not enough? https://www.google.com/search?q=kaspersky

Now, you dare to write how bad Malwarebytes is and you recommend spyware programs to users. Unbelievable.

The rest of the post doesn't even deserve reading or analyze.
Post edited April 12, 2022 by DrMonaLisa
avatar
QWEEDDYZ: Guy above say completely nonsense not related information. That happenes when someone try to promote un-official projects for the games - they litteraly do this in every topics of game sub-forum not matter how it related to thread subject. Happened in every threads for games, if this games have such mods. Sometimes warez adverts happens, eg Warcraft 2 'combat edition'-repack. When someone ask for additional localisation - it is good to promote combat-repack, but sometimes this promoting happened in not related thread.
Not matter which one game and whico one mod... even really good ones worth to try advertised in such nonsensly bad manner. And i cant name this mod above is a worth to try.
....
Back to topic sibject
I dont know why many people (at least on steam forums) suggest MWB as a good checking tool. MWB like to find something in random files. Random mean random. Not just for warez content.

VirusTotal also do mistakes. Well, obviously they signatures database is always out of date from used AV\anti-spywares. But they have something above that.

Use free editions of Kaspersky, Dr,Web or better of all - standart MSE\Defender. Do manually check updates\signates updates for Defender and manually fast-check and then separate files check if you suspect some files.
Then go to virustotal and look suspected files there.

As alternative to MWB use Dr.Web CureIT. There is also same tools from Microsoft - but two differ not clear if they have differ malware threads signatures. Not needed - if AV im suggested not 100% recommendation - CureIT is best tool for checking PC\separate files. This and Microsoft AV'ses. There is also Spyware Process Detector - but kinda old (not a big problem) tool and trial-ware ($$$) - this not only check signatures, it show you no-signed Microsoft dll as suspiciuos explained to you that it suspicous cause do not have Ms signature. Cause this tool is anti-spyware, not AV, it do nothing to heal\remvoe such files - only warn you. I dont know if there is a good FREE alternative for that tool.

Lack of signature shouldnt affect AV. Normally presense of digital signature on exe should be good for affect AV triggering as good files, but in case what user above say -... Mmm... First of this signatures made for users, not for AV. Presense of it in mod-project say to you you downloaded if from offciail mirror who do not modify it before mirrored this mod. GOG installers sign only say to you that you have correctly downloaded exe file, or not modified if this is about ***** things downloadings.

Some AV will do check difgital signatures - for Microsoft, Apple and Valve exe's and dll's (like steamclient.dll). Maybe some AV also have white-list of some esle signatures. But this is not related to this thread issue. Im sure there is no white-list for Empire Earth exe files signs.
.........
Look youreself for mods. if you want install some - do this for better reasons than just for avoiding antivirusses triggering. For content reasons.

Also, of you look at pinned threads you wiil find there linked mods can triggered AV for some questionable used... mmm... things.
pathetic troll
Thats artile is incorrect about what exactly is "risk". But it ok for you been such non-awared. I know about that better than you.

Since release of MSE, i dont think we need any else antivirusses. Additonal tools maybe - but that not for MWB, and its for CureIT instead.
Before Microsft russians be best in doing security soft. Well, only russians. Any else always be trash.

While im argumentic everything, only what you can do is post rude and nonsense.

Still

Look youreself for mods. if you want install some - do this for better reasons than just for avoiding antivirusses triggering. For content reasons.

Also, of you look at pinned threads you wiil find there linked mods can triggered AV for some questionable used... mmm... things.
Users above cant help you, gonrodnot. They agenda is something out of your topic. Pinned threads (you can look there for yourself) not enough for them, they still want spread it in every threads. I dont know why (because no one blocked you from readins pinned threads). They dont care what you write in first post.
Post edited April 12, 2022 by QWEEDDYZ
avatar
QWEEDDYZ: Before Microsft russians be best in doing security soft. Well, only russians. Any else always be trash.
Yes. Russian software created/funded by KGB agents, that uses user's computers to cyber-attacks and remote DDOS attacks is not a trash :)
Looks like the "special military operation" extends to promotion of malicious software on Gog forums as well.
avatar
QWEEDDYZ: While im argumentic everything, only what you can do is post rude and nonsense.
avatar
QWEEDDYZ: Pinned threads (you can look there for yourself) not enough for them, they still want spread it in every threads
This is exactly how "argumentic" you are. Writing lies to prove your false point.

Many of EE2-related topics get my help without any mention of UP1.5:

https://www.gog.com/forum/empire_earth_series/is_there_any_way_to_remove_farms_in_ee2
https://www.gog.com/forum/empire_earth_series/ee2_can_you_upgrade_units_for_each_epoch

As long as the issue can be fixed without UP1.5.

So yes, continue your hypocrisy by lying and then crying of getting rude replies.


Also, to somebody reading the previous bullshit from this user. Using the periodical scanners like MSE is a totally idiotic recommendation, equal to not using any AV at all. Nearly 100% of threats in 2022 are blocked by the active Real-time protection, and it's the only way to prevent the serious problems. Do not listen to this Russian security expert if you don't want to end up paying ransomware unblocking fees to his friends from neighborhood.
avatar
QWEEDDYZ: Guy above say completely nonsense not related information. That happenes when someone try to promote un-official projects for the games - they litteraly do this in every topics of game sub-forum not matter how it related to thread subject. Happened in every threads for games, if this games have such mods. Sometimes warez adverts happens, eg Warcraft 2 'combat edition'-repack. When someone ask for additional localisation - it is good to promote combat-repack, but sometimes this promoting happened in not related thread.
Not matter which one game and whico one mod... even really good ones worth to try advertised in such nonsensly bad manner. And i cant name this mod above is a worth to try.
....
Back to topic sibject
I dont know why many people (at least on steam forums) suggest MWB as a good checking tool. MWB like to find something in random files. Random mean random. Not just for warez content.

VirusTotal also do mistakes. Well, obviously they signatures database is always out of date from used AV\anti-spywares. But they have something above that.

Use free editions of Kaspersky, Dr,Web or better of all - standart MSE\Defender. Do manually check updates\signates updates for Defender and manually fast-check and then separate files check if you suspect some files.
Then go to virustotal and look suspected files there.

As alternative to MWB use Dr.Web CureIT. There is also same tools from Microsoft - but two differ not clear if they have differ malware threads signatures. Not needed - if AV im suggested not 100% recommendation - CureIT is best tool for checking PC\separate files. This and Microsoft AV'ses. There is also Spyware Process Detector - but kinda old (not a big problem) tool and trial-ware ($$$) - this not only check signatures, it show you no-signed Microsoft dll as suspiciuos explained to you that it suspicous cause do not have Ms signature. Cause this tool is anti-spyware, not AV, it do nothing to heal\remvoe such files - only warn you. I dont know if there is a good FREE alternative for that tool.

Lack of signature shouldnt affect AV. Normally presense of digital signature on exe should be good for affect AV triggering as good files, but in case what user above say -... Mmm... First of this signatures made for users, not for AV. Presense of it in mod-project say to you you downloaded if from offciail mirror who do not modify it before mirrored this mod. GOG installers sign only say to you that you have correctly downloaded exe file, or not modified if this is about ***** things downloadings.

Some AV will do check difgital signatures - for Microsoft, Apple and Valve exe's and dll's (like steamclient.dll). Maybe some AV also have white-list of some esle signatures. But this is not related to this thread issue. Im sure there is no white-list for Empire Earth exe files signs.
.........
Look youreself for mods. if you want install some - do this for better reasons than just for avoiding antivirusses triggering. For content reasons.

Also, of you look at pinned threads you wiil find there linked mods can triggered AV for some questionable used... mmm... things.
Seriously dude ? a post with a explanation about whats triggering the false positive and coming from someone who knows code is " nonsense information and not related " are you out of your mind?
Dude stop its been a year man , you dont like something dont use it all this grudge for what? make your own stuff if you dont like something .
Your lies and non-sense need to stop and move the fuck on
avatar
gonrodnot: Malwarebytes has flagged the new exe from the last patch as malware and quarantined 2 files. The "exe" file and an "Ink" file. I don't care what explanation anyone gives, you have to trust your anti virus software or what's the point of it? I've uninstalled and deleted everything associated with Empire Earth 2. I won't install it again.
its a false postive dont worry about it
Post edited April 12, 2022 by Scorpio_pt
Explanation of what? Modified exe file? Withoud "modification date" (whateever it mean now)? This is false detection indeed... well, or not. But his explanation is nonsense. Nothing else. just a thing: if this is false - it is false. There is no good reason for false triggering. So it just not need to explain.

Installing GOG Galaxy and games to D:\Games\GOG\ , set all exe files to be run-as-admin (do not turn off entirely VAC) is enough usually for Widnows Defender.
Adding Games as expection = for other AV applications.

if it be from program files, no set run-as-amin on exe, games also in program files, and GOG Galaxy used to pdated - AV triggeret to Galaxy client. And thats normal in that case.
In any case alwasy better install games to X:\Games\game-name\ and set admin run (without it and with truned off UAC Windows will use VirtualStore and do not give permissions, instead of give it, so it should be promt popo-up about admin rights and usetr should press 'Yes').
And maybe im too old, but better use offline installers. it can be added to Galaxy after offline installation.
Post edited April 12, 2022 by QWEEDDYZ
avatar
QWEEDDYZ: Explanation of what? Modified exe file? Withoud "modification date" (whateever it mean now)? This is false detection indeed. But his explanation is nonsense. Nothing else.
Are you trying to tell us, that a "security expert" like you doesn't know what a file modification time is?

Maybe have some self reflection and stop flooding EE series topics if you lack the basic IT knowledge taught in the primary school.

I counted that 100% of players (in this and the other topics) react with negative replies to your posts, and never confirm your "vision" (because we can't talk about the facts that are simply non existing in your posts). So maybe it's time for you to finally realize that it's not something wrong with everyone else, just you?
Editing exe files for widescreen comaptibility do not trigger AV (normally), and not related to modifed 'modified date'. If you want edit exe for that - you need edit only that part. GOG should do nothing else. Ofc if there is digital signature been prevously - it be gone. But that not trigger AV normally, cause only few white-listed sign are checked. This sign info if for user himself.
And that simple fact not related to anything you can do with my rating (i dont care).

His problem can be cause of program files installation (and only if auto-update from Galaxy). In that case it not from AV program or antivirus. its still false detetion, But stiil bad explanation. Meaning GOG version are broken, and mod-version is fixed. Not related to subject topic.
Post edited April 12, 2022 by QWEEDDYZ
avatar
QWEEDDYZ: Editing exe files for widescreen comaptibility do not trigger AV (normally), and not related to modifed 'modified date'. If you want edit exe for that - you need edit only that part. GOG should do nothing else. Ofc if there is digital signature been prevously - it be gone. But that not trigger AV normally, cause only few white-listed sign are checked. This sign info if for user himself.
And that simple fact not related to anything you can do with my rating (i dont care).

His problem can be cause of program files installation (and only if auto-update from Galaxy). In that case it not from AV program or antivirus. its still false detetion, But stiil bad explanation. Meaning GOG version are broken, and mod-version is fixed. Not related to subject topic.
everything you just said is wrong holy shit
I think QWEEDDYZ is embarrassing himself to the point that the best solution will be ignoring his further destabilization attempts.

The nonsense regarding UAC, or changing the disk letter to X:/ is just ridiculous. It totally doesn't matter what folder on disk games are installed in, especially when it's done by a client software like Gog Galaxy. Only "Program files (x86", "Program files" folders on C:/ have additional restrictions from Windows that disallow third-party programs to interfere with files inside without administrative permissions. All other locations are unrestricted.

For security reasons, do not set your games to start as administrator. This is not needed on Empire Earth II, and giving the full administrative permissions to a process compiled in 2005 is just wrong.

Everybody has rights to believe what their AV software shows. Even if somebody disagrees with it, adding to exceptions is not a solution for these users. If Gog f***d up this way, then users who care about the AV warnings have an alternative that can still allow them to enjoy the game.