Support Board
Date/Time: Fri, 28 Feb 2025 09:18:50 +0000
Potential threats from software being detected
View Count: 822
| [2021-08-12 16:09:05] |
| NT - Posts: 4 |
|
I installed sierra chart yesterday and had to use crossover as recommended on this site as i use mac. I don't currently have anything open and yet my antivirus is picking up 'threats', telling me that an infected file attempted to run on the device. I am currently getting notifications that these threats have been deleted every few minutes. Always .exe files like shutdown.exe, netscape.exe, sdbinst.exe. This is very odd. Have copied an example set of details below. Can you explain please? Thanks An infected file attempted to run on your device. Threat name: Gen:Variant.Razy.901463 Path: /Users/nimeshthakrar/Library/Application Support/CrossOver/Bottles/Sierra Chart/drive_c/windows/syswow64/shutdown.exe We deleted the file to prevent malicious commands from being executed on your device. |
| [2021-08-12 18:07:19] |
| John - SC Support - Posts: 38259 |
|
We are not familiar with Crossover, so we really can not comment. The only thing we can say is that there is NOT a file named "shutdown.exe" that is sent with Sierra Chart. So the removal of that file will not have any impact on Sierra Chart, as it is not a Sierra Chart file. The ".exe" files that we include with Sierra Chart are the following: - SierraChart_64.exe - SC_remote_assistance.exe or SCRemoteAssis.exe (depending on version) - SierraChartFileDownloader.exe For the most reliable, advanced, and zero cost futures order routing, use the Teton service: Sierra Chart Teton Futures Order Routing |
| [2021-08-13 05:49:14] |
| User584084 - Posts: 266 |
|
I downloaded Crossover Version 21 from CodeWeavers dot com 2 days ago and did not have any installation issues. I have Avast Online Security and Malwarebytes Browser Guard installed on Google Chrome. But I don't have any Anti-Virus installed on the Mac. Did you download Crossover from CodeWeavers dot com or somewhere else? Your Crossover installation file may contain the Virus if the file wasn't downloaded from Codeweavers dot com. Crossover installs the Program Files, Program Files (x86), Program Data, Sierra Chart, users and windows directories on drive_c or drive_y on the Mac. Shutdown.exe, netscape.exe and sdbinst.exe are files that Crossover installs on the Mac. If you open the Crossover App, highlight Sierra Chart under Bottles and right click, a Finder Windows opens and shows drive_c or drive_y with directories and files installed by Crossover. Try downloading Malwarebytes Free Download and HouseCall Free Online Security Scan for the Mac. Scan your Mac to see if Malwarebytes or HouseCall detects the Gen:Varient.Razy.901463 infected file. It is also possible that your Anti-Virus is giving a false positive for shutdown.exe, netscape.exe and sbdinst,exe. Crossover calls Windows API functions to run Sierra Chart. The Windows API may be trying to access these files every few minutes and your Anti-Virus maybe preventing it from doing so. Check with the Anti-Virus Vendor about false positives for these files. Hope this helps. Date Time Of Last Edit: 2021-08-13 06:00:48
|
| [2021-08-13 15:20:38] |
| NT - Posts: 4 |
|
Thanks for the responses. I did get Crossover from the correct place and think it’s simply calling the API functions as you said. However I’d rather keep it clean and install Sierra natively.. so use a windows machine instead - will probably do that. |
To post a message in this thread, you need to log in with your Sierra Chart account: