Thread: :Playonline\SquareEnix\FINAL FANTASY XI\ffxi.dll --- "Possible" Trojan.Gen.SMH.2

"ffxi.dll" is showing up as a Trojan.Gen.SMH.2 Could we please have this verified and fix if Possible.

Hmm Interesting, Thanks for the heads up.

I had this happen on three separate machines.

On one of them, the Anti-Virus software wanted me to restart windows probably because I was actually running the game on that machine. The file was Quarantined on the other two. When the machine where I had been playing was restarted, the quarantine happened there too.

It's the main start up of the game itself. When you press "play" on the POL Viewer, windows will try to install it again... but of course, it can't find it since I don't keep an install disc in the machine. (Plus, the version of that program on the install disc is probably very out of date.)

On one of the machines, I ran a "Check Files". It noticed the missing file and downloaded it again... but the Anti Virus software blocked it again and quarantined the tmp downloaded file even before the install process could move it into place.

I have told the anti-virus software (Norton) to put it back, and exclude it from scans. It is working again now.

But I would still like to see a more official response.

It would definitely appear that a virus definition that came out today for the Anti-Virus software has triggered this problem. I don't know if other Anti-Virus software (other than Norton) is flagging this or not.

@Dsherman I did the exact same thing; and also would like an official response.

You're probably not going to get an official response. if you do, they'll tell you to do the exact same things that have already been said here by us "unofficial" people. Just follow proper proceedure as you would with any false positive. There is no virus in the game. The detection rules on any AV software are meticulous enough that many kinds of perfectly normal behaviors can occasionally trigger false positives. I'm not sure why you're demanding an official response from something that wasn't caused by SE.

The 0.00000001% chance that it's not a false positive, its a 100% guarantee some other threat already on your system infected the file.

Spybot, MSE, and AVG are all finding nothing here.

Originally Posted by Alhanelem

You're probably not going to get an official response. if you do, they'll tell you to do the exact same things that have already been said here by us "unofficial" people. Just follow proper proceedure as you would with any false positive. There is no virus in the game. The detection rules on any AV software are meticulous enough that many kinds of perfectly normal behaviors can occasionally trigger false positives. I'm not sure why you're demanding an official response from something that wasn't caused by SE.

The 0.00000001% chance that it's not a false positive, its a 100% guarantee some other threat already on your system infected the file.

Spybot, MSE, and AVG are all finding nothing here.

Wrong, they just made an official response and they are looking into it.