TDS3 wont let me run Riskii.exe

[tutankamon]

Hi all,
I have downloaded the trial version of Risk2 it is now in my Download folder on my C drive. I have scanned it with Wormguard, all OK, I have scanned it with Norton A.V. (fully updated) again all ok, but TDS3 reports
" Warning! download riskii.exe has been blocked from executing"
Positive I.D. C:/Download/riskii.exe

This seemed to be a genuine program from a genuine source. Anyone else had the same?

[Pilli]

Hi Tut, Is it a very large file, how was it packed? As this can sometimes cause a problem.
If it is smallish then please zip & submit it to submit@diamondcs.com.au for analysis.

HTH Pilli

[tutankamon]

Hi Pilli,
It is 180 mega bytes Application Risk2 installer

[hojtsy]

Try submiting the file to the online scanner at http://virusscan.jotti.dhs.org/.
Edit: 180 Megabytes. Uhhh. OK, submiting will not work.
-hojtsy-

[tutankamon]

Hi Pilli & hojtsy,
I think the best option is to save this file onto CD (for future reference) then download the trial version from another site.

[dvk01]

email gavin at support@diamondcs.com.au and he will let you know

I would assume that the site you downloaded it from must have put some form of known adware or spyware in the installler package and TDS exec protection is blocking that from running

as far as I know the exec protection doesn't rely on names or signatures but behaviour so a FP is not so likely, but allows the program to run in sandbox type environment and then blocks any known malware behaviours

[dvk01]

do a right click scan on it using TDS and see what it says

[tutankamon]

Hi dvk01,
I have copied the riskii.exe download onto CDR, and put that to one side for future reference, also I have solved my problem by using "Go Back" I have put my computer back to the start of today. So it is no longer present on my computer.

[FanJ]

Hi Tutankamon,

Maybe a suggestion:
If you like, you could send Gavin in private the download link where you got it.
Of course I don't know whether Gavin would like to have a look at it and has the time; so it's only a suggestion, nothing more. I rather would like that of course up to Gavin, no doubt!

Cheers, Jan.