mGalaxy Runway deleted by Anti Virus software - SAPE.Heur.A0707

[OverLander]

Hello,

I'm new here ... I'm just revamping my Arcade Cab with new Hardware, Emus and Frontend.

I've gone with Premium mGalaxy and all was going well in setup until my AV software told me that Runway
was infected with SAPE.Heur.A0707 Trojan.

Any ideas if this is a false positive ... ?

Thanks

Jon

[OverLander]

Also................

I've been running latest Mame64 release (all day long)  on Win10 64 Bit OS ...

I have just come back to the PC and Mame wont load ..

Anyone else had this scenario ?

Thanks

[Aeliss]

For the virus alert, I prefer mGalaxy confirm you it's a false positive, but for the mame problem, if you run just the executable, it's works ? (without rom selection).

The better way I have found for mame problems (and I have lot of problem with it, too), it s install a fresh version in an other folder, and copy/paste all files one by one (you can make folder by folder) up to find the corrupted file.

[mgalaxy]

[quote="OverLander"]
I've gone with Premium mGalaxy and all was going well in setup until my AV software told me that Runway
was infected with SAPE.Heur.A0707 Trojan.

Any ideas if this is a false positive ... ?
[/quote]

Yes, it's a false positive!
You can check by yourself on VirusTotal. Here's the report I get when submitting Runway:
https://www.virustotal.com/fr/file/acaa ... 481043243/
It appears that it is indeed reported as infected by 2 companies..out of 56 companies...you can run it without fear!
I contact Symantec to see what can be done about it!

[OverLander]

Great thanks for the feedback ?

[OverLander]

Now I need to sort the Mame problem out ....

Seems that if I install Win10 then run Mame it's ok until Win10 auto updates ...
Then it's a black screen on Mame startup ..

I've reinstalled Win10 and will keep it offline and see if that stops Mame from crashing ..

I'll just have to add mGalaxy via USB stick from another device for now ..

Want to sort it out tho so that I can connect the Uright Cab to my network ..

Anyone else using Win10 64bit with Mame0180/64 and experienced this crash ?

[mgalaxy]

Symantec has replied to my request, analysed the file and removed it from their "infected files" database

In relation to submission 11369.

Upon further analysis and investigation we have verified your submission and, as such, the detection(s) for the following file(s) will be removed from our products:

    File name: mGalaxy_Runway.exe
    MD5: d3fb3b784bb27e3d5e387f4857c5cff0
    SHA256: acaa8a44e57072a63f57e6250fac33aaa64fe15606ece4724e8116ae9e051afe
    Note: Whitelisting is available by downloading a RAPID RELEASE indicated in the Further Information section below or via the next Live Update

Further Information:
Required RAPID RELEASE sequence >= 182245

The latest Rapid Release definition available here: ftp://ftp.symantec.com/AVDEFS/norton_an ... pidrelease

https://www.virustotal.com/fr/file/acaa ... 481099959/

[OverLander]

Seems that a fresh install of win10 on a formatted disk will allow Mame to load but after a reboot
it wont run.

Here is the event log from Event Viewer if anyone can advise ?

Thanks

Jon

Faulting application name: mame64.exe, version: 0.180.0.0, time stamp: 0x058402e0
Faulting module name: mame64.exe, version: 0.180.0.0, time stamp: 0x058402e0
Exception code: 0xc0000005
Fault offset: 0x000000000165d779
Faulting process ID: 0xe5c
Faulting application start time: 0x01d250a1b062e202
Faulting application path: C:\Users\Arcade\Desktop\Mame\mame64.exe
Faulting module path: C:\Users\Arcade\Desktop\Mame\mame64.exe
Report ID: 6ba6ec8b-cfb5-4c33-8ecc-c4231efb0412
Faulting package full name:
Faulting package-relative application ID: