Can't play game because Avast deletes it's secureROM file.

[wtk]

Heya all.

Beforehand, I know this is not the game, it's Avast causing the problem.
The game is Company of Heroes - Opposing Front (bought it yesterday).
After I install and try to play, game will minimize to Vista desktop, and Avast (Home Edition) will alert me that rs.dll is a virus and will not execute it. rs.dll is the game's validation process call SecureROM. Without that file, the game cannot validate my copy of the game.

I tried adding it in the exclusion list - the dvd drive, destination game directory, wherever I can think the rs.dll file might end up. I even disabled the resident shield scanner, but it still detects the file as a virus.

Please, please can anyone give me some ideas on this. I would hate to change to another anti-virus after 3 years, just to play a game. :'(

[Vlk]

Please submit the file in question to virus@avast.com, it might be a false positive...

Thanks
Vlk

[Hard_ROCKER]

From what i've read on the Relic forums the game should work without the rs.dll file as long as you are connected to the internet ...

http://forums.relicnews.com/showthread.php?t=167391 (Scroll down to reply #11)

[Maxx_original]

this FP wil be fixed soon.. you can add the library to exclusions list temporarilly...

[Lisandro]

you can add the library to exclusions list temporarilly...

You need to use the Exclusion lists:

For the Standard Shield provider (on-access scanning):
Left click the 'a' blue icon, click on the provider icon at left and then Customize.
Go to Advanced tab and click on Add button...

For the other providers (on-demand scanning such as the screen-saver or the Simple User Interface):
Right click the 'a' blue icon, click Program Settings.
Go to Exclusions tab and click on Add button...

You can use wildcards like * and ?.
But be careful, you should 'exclude' that many files that let your system in danger.

[wtk]

Thank you all for the quick replies!

To Vlk: I will send the file asap. I'm sure it will recognize the file as a false positive in the next VPS update.

To Darth_Mikey: Not really. That file is used to validate the correct media inserted to play the game off- or on-line. Avast just deletes the file, which causes the game's SecureROM to say that there's no DVD in the try to validate.

To Maxx_original and Tech: No go on that unfortunately. I have c:\Program Files\THQ, c:\Program Files\THQ\Company of Heroes,  c:\Program Files\THQ\Company of Heroes\rs and c:\Program Files\THQ\Company of Heroes\rs\rs.dll set up in exclusions. Avast still pops up the message saying it's a virus. Even rebooted the pc, still the same.

Only thing that did work, and I really had to do as last resort, was to pause the Standard Shield. Game runs, and I'm able to play. I see there's a new VPS updated while writing this, so I'll go and see if that sorted out the problem. Otherwise, I'll have to pause the Standard Shield each time...

[DavidR]

There are two exclusions one caters for the on-demand scans and One in the Standard Shield that caters for on-access (as Tech mentioned in his post).

Either you have not added it to the standard shield exclusions or what you have entered is incorrect.

If you have added it to the standard shield, advanced, add, then please post the text of what you have entered so we can check it.

Try c:\Program Files\*\rs\rs.dll or c:\Progra~1\*\rs\rs.dll and see if that works.

[Lisandro]

To Maxx_original and Tech: No go on that unfortunately. I have c:\Program Files\THQ, c:\Program Files\THQ\Company of Heroes,  c:\Program Files\THQ\Company of Heroes\rs and c:\Program Files\THQ\Company of Heroes\rs\rs.dll set up in exclusions. Avast still pops up the message saying it's a virus. Even rebooted the pc, still the same.

Use wildcards as stated in help files or David's advices

[Maxx_original]

wtk: you must wait for the next VPS... i was not able to add the fixed detection without any tests..

[igor]

Try c:\Program Files\*\rs\rs.dll or c:\Progra~1\*\rs\rs.dll and see if that works.

Btw, the easiest solution (regarding short/long path experiments) should be copying the path from the "Virus found!" dialog - because it shows the path used to access the file (at least I hope so ).

[DavidR]

Thanks for the tip, I thought the path in the dialogue was concatenated when it is too long, but I now see it can be copied in its entirety.