Win32/Heur

[The_Gun_Man]

While running the updater this popped up.

AVG

Threat detected
C:\Quake2\anticheat.dll
infected with Win32/Heur

I had to download a new one sinse it was moved to the vault, so I ran a scan on the new one and this is what came up.

[R1CH]

This is a heuristic detection and can be ignored.

[The_Gun_Man]

I can't seem to find any info on this particular virus, I realize it could very well be a false positive just wanted to make sure.

[James Knauff]

I got it too

[noglorp]

It is a false positive. Heur means heuristic detection: not matching a particular virus, but it looks kind of like a virus. This is because anticheat.dll uses a funky packer to prevent hackers from reverse engineering it. Lots of viruses try to avoid analysis with weird packing techniques too.

[Kairat]

It strikes .exe files

[gatorgirl]

So.....Does anyone know how to get rid of it?

[wision]

you can get better antivirus software (which has less false positives).. or just add the exception for r1q2

[QwazyWabbit]

Heur stands for Heuristic. Heuristic scanning uses probablilities and rules to determine the likelyhood that a file contains a virus. In this case the AVG program is trying to analyze a file based on rules about or characteristics of known viruses. One of the characteristics is packing or encrypting the code inside. This makes the file "suspicious" to the AVG program. A more advanced program might use the unpacker code to decrypt the code and analyze the instructions to see if it was really malicious. AVG doesn't.

Wision's suggestion is an excellent one. Add the anticheat.dll file to the list of files that the AVG program should not scan.

[R1CH]

The latest AVG8 does not cause problems, make sure you have updated.

[gav]

I have the latest Avg 8.0 and it gives me the same thing. Win32/heur2

[pallokallo]

Yes antivir updated their definition file too and the problem was solved but almost next week detected it again.. Just add anticheat.dll to your antivirus exception list.

[nameless]

but how to add where??? what part

[In pain]

I Am getting the same pop-ups as  well. Win32/Heur.    AVG-8 does not seem to fix or clean as well.  What is it any way?
==>Click on REMOVE threats does not seem to clean it. It comes back again.
==>Remove threat as Power User does not seem to clean it as well.
Has any one succeeded cleaning it? And what kind of S.ware? thnx.

[R1CH]

I'm going to close this thread as it is attracting too many Google hits from non-anticheat users. The solution has been stated, add your Q2 folder to AVG exceptions list or get a better AV .