leecher1337 / ntvdmx64

Run Microsoft Windows NTVDM (DOS) on 64bit Editions
778 stars 80 forks source link

ESET Endpoint antivirus detects it on windows 11 #224

Closed haka-s closed 12 months ago

haka-s commented 1 year ago

as the title says when i try to run it on windows 11 i get pop up saying it has deleted a file in memory, i don't get any indication as to wich file it is, i've whitelisted the files that get added to windows defender but i still get the detections, can you point me on wich file i should whitelist to stop getting these errors?

leecher1337 commented 1 year ago

%systemroot%\syswow64\ldntvdm.dll %systemroot%\system32\ldntvdm.dll

haka-s commented 1 year ago

i got them whitelisted already but i'm still getting the detections, i think it has something to do with the way it injects into the console process

leecher1337 commented 1 year ago

Maybe ask your antivirus vendor on how to stop behavioural detection in the product or disable/uninstall it completely, there is not much that can be done from my side as I cannot influence the behaviour of the AV product.