logo

Live Production Software Forums


Welcome Guest! To enable all features please Login or Register.

Notification

Icon
Error

Options
Go to last post Go to first unread
jeffmay  
#1 Posted : Friday, March 29, 2024 3:44:22 AM(UTC)
jeffmay

Rank: Newbie

Groups: Registered
Joined: 5/30/2020(UTC)
Posts: 6
United States
Location: Connecticut

Was thanked: 2 time(s) in 2 post(s)
After yesterday's update to 27.0.0.72, VMix is being blocked by Bitdefender's antivirus module.

The notification is: "DotNet tried to load a malicious resource detected as Gen:Variant.Remcos.1 and was blocked. Your device is safe."

VMix fails to load with this error:

This program has been modified and will now exit.
Startup EL_New
Could not load file or assembly '233472 bytes loaded from tmp 1F.tmp, version=0.0.0.0 Culture=neutral,
PublicKey Token=null' or one of its dependencies. An attempt was made to load a program with an incorrect
format.

Adding VMix64 as an exception to Bitdefender antivirus bypasses this detection allowing VMix to load.

VMix 4K 27.0.0.72
MSI PRO z490-A
Core I9-10850KA 10 core 3.6 GHz
64Gb DDR4 3200 PC4 25600
GeForce RTX 2070 16Gb
jeffmay  
#2 Posted : Friday, March 29, 2024 6:17:54 AM(UTC)
jeffmay

Rank: Newbie

Groups: Registered
Joined: 5/30/2020(UTC)
Posts: 6
United States
Location: Connecticut

Was thanked: 2 time(s) in 2 post(s)
For those who have Bitdefender and are experiencing the problem, here's the fix.

Open your Bitdefender dashboard. On the left pane select "Protection"
On the Antivirus pane select "Open"
Under "Settings" click on "Manage Exceptions"
Click "+ Add an Exception"
In Windows File Manager navigate to C:\Program Files (x86)\Vmix
Drag Vmix64.exe into the exception box, turn on the "Antivirus" switch, and save.
Click "+ Add an Exception" again
Drag Vmix.exe into the exception box, turn on the "Antivirus" switch, and save.

You will now be able to load VMix successfully.
thanks 1 user thanked jeffmay for this useful post.
STADIORADIO on 3/30/2024(UTC)
admin  
#3 Posted : Friday, March 29, 2024 12:37:39 PM(UTC)
admin

Rank: Administration

Groups: Administrators
Joined: 1/13/2010(UTC)
Posts: 5,157
Man
Location: Gold Coast, Australia

Was thanked: 4161 time(s) in 1494 post(s)
Hi,

Bitdefender is known to have false positives and generally cause issues with apps on systems including vMix.
It is recommended you remove it and instead use the built in Windows Defender instead.

Regards,

Martin
vMix
thanks 2 users thanked admin for this useful post.
boris9831 on 4/11/2024(UTC), Roy Sinclair on 4/16/2024(UTC)
jeffmay  
#4 Posted : Saturday, March 30, 2024 12:24:12 AM(UTC)
jeffmay

Rank: Newbie

Groups: Registered
Joined: 5/30/2020(UTC)
Posts: 6
United States
Location: Connecticut

Was thanked: 2 time(s) in 2 post(s)
Originally Posted by: admin Go to Quoted Post
Hi,

Bitdefender is known to have false positives and generally cause issues with apps on systems including vMix.
It is recommended you remove it and instead use the built in Windows Defender instead.


I don't disagree that Bitdefender is prone to false positives, and I don't use it on my primary VMix production machine - (Asus TUF F-15). For post production I use a desktop that, for compliance reasons, needs an AV solution more robust than Windows Defender, and I'm not alone in this. I'm not implying that this error is the fault of VMix, but for those of us who have to have a compliant AV solution it's good to understand the work-around.
thanks 1 user thanked jeffmay for this useful post.
STADIORADIO on 3/30/2024(UTC)
boris9831  
#5 Posted : Thursday, April 11, 2024 6:41:01 AM(UTC)
boris9831

Rank: Advanced Member

Groups: Registered
Joined: 10/21/2016(UTC)
Posts: 57

Thanks: 24 times
Was thanked: 6 time(s) in 5 post(s)
Just had this happen on a client system. Now I have a fix. Thanks so much to all.
mavik  
#6 Posted : Thursday, April 11, 2024 7:32:53 AM(UTC)
mavik

Rank: Advanced Member

Groups: Registered
Joined: 4/23/2017(UTC)
Posts: 1,144
Man
Location: Germany

Thanks: 3 times
Was thanked: 166 time(s) in 148 post(s)
The same issue applies to GData Antivirus.
Gen Variant Remcos detected

So it's not only Bitdefender. Is there a bigger issue. If a few AV softwares detect something there might be something.
Vproductions  
#7 Posted : Friday, April 12, 2024 9:24:03 AM(UTC)
Vproductions

Rank: Newbie

Groups: Registered
Joined: 11/16/2022(UTC)
Posts: 4
United States

I just updated today and am receiving the same error when I try to start up the application.
However, my anti-virus is not throwing an error or bringing up an alert, so maybe its something else?
I also don't have bitdefender.

It seems a temp file is created called "tmp1F.tmp"?

Quote:
Startup.EL_New
Could not load file or assembly '233472 bytes loaded from tmp1F.tmp, Version=0.0.0.0, Culture=neutral, PublicKeyToken=null' or one of its dependencies. An attempt was made to load a program with an incorrect format.


admin  
#8 Posted : Friday, April 12, 2024 12:24:34 PM(UTC)
admin

Rank: Administration

Groups: Administrators
Joined: 1/13/2010(UTC)
Posts: 5,157
Man
Location: Gold Coast, Australia

Was thanked: 4161 time(s) in 1494 post(s)
This error is due to some files used by vMix being blocked or corrupted.
It is typically caused by a false positive from Bitdefender, but can also be caused if files have not been installed properly due to apps being open.

So please download again from our web site and ensure everything is closed, including Skype, Teams etc before installing.

We have also reported the issue to Bitdefender, but unfortunately have not yet heard back from them.

Regards,

Martin
vMix
mavik  
#9 Posted : Friday, April 12, 2024 10:46:27 PM(UTC)
mavik

Rank: Advanced Member

Groups: Registered
Joined: 4/23/2017(UTC)
Posts: 1,144
Man
Location: Germany

Thanks: 3 times
Was thanked: 166 time(s) in 148 post(s)
Martin, I did as you said. Downloaded vMix 27 from your website and closed all apps and services even from the tray before reinstalling vMix. It's still the same. I use GData and usually this software only comes up if something really is an issue.
Vproductions  
#10 Posted : Thursday, April 18, 2024 12:00:33 PM(UTC)
Vproductions

Rank: Newbie

Groups: Registered
Joined: 11/16/2022(UTC)
Posts: 4
United States

Originally Posted by: admin Go to Quoted Post
This error is due to some files used by vMix being blocked or corrupted.
It is typically caused by a false positive from Bitdefender, but can also be caused if files have not been installed properly due to apps being open.

So please download again from our web site and ensure everything is closed, including Skype, Teams etc before installing.

We have also reported the issue to Bitdefender, but unfortunately have not yet heard back from them.

Regards,

Martin
vMix

Let me know if you would like me to create a separate thread, instead of continuing the discussion in this one.


I did a complete uninstall of vmix and all its dependencies.
I then manually deleted the old vmix folder and reinstalled, but am still receiving the same error.
I also tried running vmix as admin.

The only anti-virus I am running is Emsisoft Anti malware and already have all 3 vmix folders set as exceptions.

Is there a temp directory that I can/need to delete after I uninstall vmix? (Could this be caused by a corrupt cache or files in a temp folder?)

What directory/location is the "tmp1F.tmp" file located in?

Additional Computer Specs

OS: Windows 10
CPU: AMD Threadripper 3970X 3.7 GHz 32-Core Processor
Motherboard: Asus ROG ZENITH II EXTREME ALPHA EATX sTRX4 Motherboard
GPU: NVIDIA GeForce RTX 3080 Ti 12 GB Founders Edition Video Card
RAM: G.SKILL Ripjaws V Series 128GB (8 x 16GB) 288-Pin DDR4 SDRAM DDR4 3600 (PC4 28800) Intel XMP 2.0 Desktop Memory Model F4-3600C14Q2-128GVKA
Hard Drive:
(3x) Samsung 860 Evo 2 TB 2.5" Solid State Drive
(1x) Samsung 970 Pro 1 TB M.2-2280 NVME Solid State Drive
(1x) Samsung 970 EVO Plus 2 TB M.2-2280 NVME Solid State Drive
Cooling: IceGiant Prosiphon Elite CPU-Kühler
(6x) Nidec Servo Gentle Typhoon 68 CFM 120 mm Fan
NZXT Sentry Mesh 30W Fan Controller
Power Supply: EVGA T2 1600 W 80+ Titanium Certified Fully Modular ATX Power Supply
admin  
#11 Posted : Thursday, April 18, 2024 12:09:53 PM(UTC)
admin

Rank: Administration

Groups: Administrators
Joined: 1/13/2010(UTC)
Posts: 5,157
Man
Location: Gold Coast, Australia

Was thanked: 4161 time(s) in 1494 post(s)
It is not caused by temp files, it is caused by files being modified and or not installed correctly.
Try temporarily removing or disabling that 3rd party anti-virus as a test.

Then when reinstalling pay careful attention to any messages that may popup, the install should work smoothly without any errors if if it is successful.

Finally, check there aren't any other antivirus installed.
admin  
#12 Posted : Thursday, April 18, 2024 12:11:24 PM(UTC)
admin

Rank: Administration

Groups: Administrators
Joined: 1/13/2010(UTC)
Posts: 5,157
Man
Location: Gold Coast, Australia

Was thanked: 4161 time(s) in 1494 post(s)
I'm happy to report that Bitdefender have now removed the false positive in their latest update.
Vproductions  
#13 Posted : Thursday, April 18, 2024 12:31:04 PM(UTC)
Vproductions

Rank: Newbie

Groups: Registered
Joined: 11/16/2022(UTC)
Posts: 4
United States

@admin.

A.)
Thank you for your assistance. I got it working through these steps.

#1 - I uninstalled vmix and its other dependencies using Revo Uninstaller.
As I suspected, Vmix does not do a clean uninstall and leaves a large number of files and registry entries in place, after its uninstalled.

#2 - I completely disabled my security program. (Which is extremely dangerous and should normally NEVER be done in a work environment.)

#3 - With the security disabled, I did a clean install of vMix.
I then ran it a single time, before reenabling my security.

#4 - Re-Enabled Security

#5 - Rebooted the computer.

Everything is now running smoothly.


B.)

After further investigations, it seems that your vMix driver seems to be another culprit.
The file's hash is not matching the anti-virus's current known hash for that file.
It is currently being detected as malicious.

You may want to submit new copies of these files to Emsisoft along with their hashes.



Quote:
You can also submit the file causing the detection via email to our lab: fp@emsisoft.com so we can analyze and correct the suspected false detection.

https://www.emsisoft.com/en/help/1720/why-did-an-emsisoft-product-detect-an-innocent-file-as-malware-2/#:~:text=You%20can%20also%20submit%20the,correct%20the%20suspected%20false%20detection.


UserPostedImage


Quote:
vmix Video Codec

Hashes of the application executable file (_iu14D2N.tmp):
MD5: AD9C7F3400620E9B3F735FB2C767AE13
SHA-1: 6B2EB40433D77440FACF407AFC4AD4787071EAFA

Verified information according to the digital certificate of the executable file (_iu14D2N.tmp):
This file is not digitally signed

File information according to the publisher of the executable file (may be faked) (_iu14D2N.tmp):
Company:
File description: Setup/Uninstall
Copyright:
File version: 51.52.0.0



C.)
On a side note, you may have a real headache on your hands with your other corporate customers.
Most companies would never let you disable your computers security applications, for any reason, so you may have a few more of these types of posts heading your way.

admin  
#14 Posted : Thursday, April 18, 2024 1:22:21 PM(UTC)
admin

Rank: Administration

Groups: Administrators
Joined: 1/13/2010(UTC)
Posts: 5,157
Man
Location: Gold Coast, Australia

Was thanked: 4161 time(s) in 1494 post(s)
The report you posted is of a temporary file used during installation.
This is completely normal and all application installers do this, they basically extract from the installer the files to the temp folder before installing them to the correct location.

It seems the antivirus you are using is overzealous and is reporting innocent actions as malicious.

We certainly do not advocate not using anti-virus, instead we recommend Windows Defender, as it is perfectly fine for protecting a computer.
It has high ratings in all recent anti-virus rankings and reviews
and is strongly recommended over 3rd party programs which tend to have problems like this every now and then.

thanks 1 user thanked admin for this useful post.
doggy on 4/18/2024(UTC)
Roy Sinclair  
#15 Posted : Thursday, April 25, 2024 10:05:42 AM(UTC)
Roy Sinclair

Rank: Advanced Member

Groups: Registered
Joined: 11/23/2020(UTC)
Posts: 152
United States
Location: Wichita

Thanks: 9 times
Was thanked: 21 time(s) in 17 post(s)

Other than pure plain stubbornness there's no good reason these days to use any other anti-virus than the Windows Defender that comes with Windows.

None of them are perfect but Defender is on average as good as any other and it has the advantage of being both free and the least intrusive.
Users browsing this topic
Guest
Forum Jump  
You cannot post new topics in this forum.
You cannot reply to topics in this forum.
You cannot delete your posts in this forum.
You cannot edit your posts in this forum.
You cannot create polls in this forum.
You cannot vote in polls in this forum.