In our first release of the Genesis Pro (14th of March) we implemented a news system that would display news/updates/welcome message to the user. It’s the message that can be seen when clicking on the little envelope covering the XP counter. It’s a simple way of giving updates to the users without having to send an email. The module responsible for this is called NEWSMODULE.SEM.
The last week of April there has been an update in Windows/Antivirus database that flagged this specific file as a trojan. The reason why it may have done this is because it is the only module in the Genesis Pro that wants to connect to the outside world (it does this once when loading in the plugin) to retrieve the message.
Upon seeing this unfold we immediately made changes to the synthesizer and removed anything related to this module. However we forgot to remove it from the installation folders. Some antivirus programs (like: Kaspersky/Avast/Defender) spotted the exact same file name in the installer/uninstaller and took preventive action by notifying the user / placing in quarantine. The majority of the antivirus programs however don’t see it as a threat because it’s not doing anything.
For users that have installed the new version successfully without any notification from their antivirus program:
- Go to C:\Program Files (x86)\GenesisProDLL\GenesisPro (or your custom dll installation folder)
- Delete the following files: NEWSMODULE.SEM and OZSOFTLICENSE.SEM
For users that are unable to install at all due to their antivirus program warning them:
- Click on “Details” of your order.
- Click on “Genesis Pro VST Plugin – (click to download)” under product.
The installer is now updated and does not contain those files anymore. We would like to emphasize the fact that with this update, the Genesis Pro will be an offline program and does not pose any threat to any system.
Post is closed for comments.