Error Message

[LoneRunner]

This morning I'm getting the following error message when I click "Play" to open ACW.

Error Message.png (342.35 KiB) Viewed 834 times

I successfully played ACW last night on the same computer so not likely it's my computer. I'm operating on Windows 10.

[LoneRunner]

Just checked the ACW folder on my computer and the error message is correct, SC3-Civil War.exe is no longer in the ACW folder.

I guess I can re-install the game. But what would cause this?

Here's screenshots of the ACW folder if that's helpful:

ACW Folder.png (82.88 KiB) Viewed 828 times

ACW Folder 2.png (96.83 KiB) Viewed 828 times

[Platoonist]

I had the same issue yesterday. I resolved it by turning off my anti-virus program and then re-installing the game. Then when I got the SC-CivilWar.exe file back in the game directory where it belongs, I made a copy of it, put it on a portable drive and turned back on the anti-virus program. If my AV program makes it disappear again at least I have a replacement handy. Perhaps somebody can chime in with a method to get the anti-virus program to give this file a pass when it does a check and not quarantine it, or obliterate it or whatever it is doing.

[LoneRunner]

Thanks Platoonist. You are right. Windows 10 is identifying the exe file SC3-Civil War as a virus and automatically deleting it.

I downloaded ACW from Matrix a couple times before I could see it happening.

After the last download of ACW, the exe file SC3-Civil War was in the ACW folder. Then within a couple minutes I got a message from Windows that a potentially unwanted app was found. I clicked on the message and it listed some filename that I didn't recognize. But before I could tell Windows that I wanted to keep the app, it removed it. I checked the ACW folder and yes, the exe file SC3-Civil War was gone.

Isn't Windows great.

Anyway, I'm downloading ACW again hoping to get a screenshot of the message with the filename. Maybe there's a problem with the file. I hate to turn off my anti-virus permanently.

Hope I don't get flagged by Matrix for multiple downloads of the game.

[Platoonist]

I hate to turn off my anti-virus permanently.

I've got my anti-virus up and running in the background again. But like I said, I have a back-up of the .exe elsewhere if it strikes again. Anyway, the game is running normally at the moment. Happily, the program stores the saved games in a separate directory.

However, judging by your and my experience it does seem like this is not going to be an isolated incident.

Hope I don't get flagged by Matrix for multiple downloads of the game.

I probably downloaded this game five times on the day I bought it due to various incomplete download issues (also possibly related to anti-virus). Matrix hasn't complained yet. However, there is a physical copy coming in the mail too, so that will be a relief.

[LoneRunner]

Well...I've found a way of downloading ACW again without going through Matrix. I saved the extracted file in a separate folder and then installed the game in another folder. To re-install the game I double click on the extracted file.

Anyway I finally caught Windows in action with screenshots.

Here's the ACW folder right after installation:

Folder after download 1.png (102.36 KiB) Viewed 777 times

Here's the message from Windows:

Windows message.png (260.88 KiB) Viewed 779 times

Not sure what Beareuws.Alml has to do with ACW but the timing of the file creation matches the installation of ACW.

Notice that the Windows message only provides one choice "Start Actions". Would be good to know if there's another option. If I do nothing, after a few minutes Windows starts actions anyway and deletes the ACW exe file. Here's the ACW folder after I clicked on "Start Actions"

Folder after windows message.png (97.67 KiB) Viewed 779 times

[Hubert Cater]

Some anti virus software uses heuristics to label a file as suspected if it has behaviour similar to a known virus. This is a sort of pre-emptive method they use to either flag or remove potential issue files from your PC.

One way around this for now, until I investigate this further, is to whitelist the installation folder or specific EXE to prevent Windows AV from removing the file.

Here is some info on how to do this with Windows Defender, which it looks like you are using here, that might help:

https://support.microsoft.com/en-us/win ... 01afe13b26

[Platoonist]

Here is some info on how to do this with Windows Defender, which it looks like you are using here, that might help:

https://support.microsoft.com/en-us/win ... 01afe13b26

Ah. That is exactly the file exemption method I was looking for. Thanks!

[LoneRunner]

Some anti virus software uses heuristics to label a file as suspected if it has behaviour similar to a known virus. This is a sort of pre-emptive method they use to either flag or remove potential issue files from your PC.

One way around this for now, until I investigate this further, is to whitelist the installation folder or specific EXE to prevent Windows AV from removing the file.

Here is some info on how to do this with Windows Defender, which it looks like you are using here, that might help:

https://support.microsoft.com/en-us/win ... 01afe13b26

Thanks Hubert. I'll try it.

I foresee a couple problems though.

First, Windows Defender is indicating that Win32/Beareuws.A!ml is the problem file. I could try flagging that file as okay but is it really part of ACW?

Second, the exe file SC3-Civil War only exists for a few seconds. What I'll do is turn off Defender. Re-install ACW. Then protect the file using the method you provided. Whew.

Hope that works. Like Platoonist said, the problem could involve a lot more players than us two.

[LoneRunner]

Hoorah, I got ACW working again. Thanks Hubert and Platoonist.

For those of you who run into the same problem, here's what I did.

1. Turn off Windows Defender
o Go to Windows Security and select Virus & threat protection
o Select "Manage settings"
o Switch Real-time protection off

2. Re-install ACW. Your serial number is in your "My Page" in Matrix.

3. Using the directions that Hubert provided, place the entire ACW folder under Exclusions.

4. Turn Windows Defender back on.

Hope that works for you.

Hubert, I noticed the 3 other threads where players are running into the same problem. Perhaps some sort of notice should be sent to anyone who has purchased ACW. If that's possible.

[Hubert Cater]

First, Windows Defender is indicating that Win32/Beareuws.A!ml is the problem file. I could try flagging that file as okay but is it really part of ACW?

That file I wouldn't touch as I have no idea what that is.

There might be something Matrix can do to fix this issue entirely with the installer, I've let them know, but until then whitelisting the installation folder is the only way around this for now.

[LoneRunner]

I investigated the Beareuws.A!ml file on the internet and it sounds like a trojan. So if Windows Defender indicates that Win32/Beareuws.A!ml is a problem file don't turn off your anti-virus protection!

Here's what malwarefixes says about the trojan:

Program:Win32/Beareuws.A!ml is a computer threat that can do a number of unnecessary actions on the computer. This detection was made to identify malicious programs that are acting like a Trojan and uses different deceitful tactics to penetrate the computer. Program:Win32/Beareuws.A!ml can easily penetrate the computer through voluntary installation while user think of its carrier as legitimate application.

I think malwarefixes is associated with Avast so who knows if you can believe them.

[Hubert Cater]

I also wouldn't ever recommend turning off your AV software either. There will be an update hopefully soon and some changes with how the installer does things that will hopefully remove this issue entirely.

Let me know if after the next update it is an improvement.