TotalAV detects virus BitcoinMiner.Gen7

[Cormellion]

Having installed solasata again for the new class updates. My Antivirus software detected PUA/BitcoinMiner.Gen7 in AkSoundEngine.dll. Now I can restore the file and run the game. But why is my virus detector picking up this very specific trojen in the steam file downloads?

[Cormellion]

...\steamapps\common\Slasta_COTM\Solasta_Data\plugins\x86_64\AkSoundEngine.dll

[Grumpy Old Dude]

false positive? My AVAST doesnt

[silvergriffon]

Many viruses self-propagate by attaching themselves to specific filetypes. You could have a virus that has been quietly waiting for a .dll file to be installed that it can attach itself to. I would advise doing a full virus scan of the entire machine. If it doesn't find anything then try downloading something like the free version of malwarebytes that scans for malware rather than viruses. You can always uninstall it after scanning.

[Cormellion]

Thanks for that. It looks like my machine is clean.... both virus scans and Malbytes have completed scans and not found anything. I agree though, it didn't just popup from thin air. So obviously there is something on my system that is avoiding detection, which is a bit worrying...

[Raffelson]

Hmmm. F-Secure popped me this same virus detection. BitcoinMiner.Gen7. Why it is included with this game?

[Aimee]

Originalmente postado por Cormellion:

Thanks for that. It looks like my machine is clean.... both virus scans and Malbytes have completed scans and not found anything. I agree though, it didn't just popup from thin air. So obviously there is something on my system that is avoiding detection, which is a bit worrying...

Run your PC in Save mode, you can access this from the BIOS.
Look it up if you dont know what it is or how it works.
In save mode, you only start up programs that are vital to what you do, anything other than that does not run.
Do not run Steam or any other program, and only run a good virus scanner in this mode. If you have a good antivirus and there is a virus on your pc, you should be able to find it without it being able to avoid detection. Since the files that the virus is attached to, are not active in this mode until you manualy start the program/game yourself.

If you find nothing and your pc does not seem to give any issues, its probably a false positive. Some virusscanners show viruses that dont exist.

[Cormellion]

Cheers for that, I try that.

[Xuande]

Comes up clean through VirusTotal's scan, if anyone's wondering.

[Aimee]

Originalmente postado por Xuande:

Comes up clean through VirusTotal's scan, if anyone's wondering.

Steam checks every game for harmful code before they even put it on the website, so no surprise there.
But that does not mean that OP cant have a virus from another source that got into the Solasta files.
I hope its a false positive or can be resolved fast though.

[Klutch]

the copy you get from steam is golden, they got a great track record.

viruses can do crazy things, did you know some can even hide when you try to look for them? there is something like 35000 viruses identified everyday and growing

[Cormellion]

New computer and the same issue - I just realised I posted this issue here about 6 months ago. So I doubt very much it is an infection on this end.

[Underprivileged White Male]

9/10 times the AV software IS the virus.

[dulany67]

false positive likely

[Insert Name]

Originalmente postado por Aimee:

Originalmente postado por Xuande:

Comes up clean through VirusTotal's scan, if anyone's wondering.

Steam checks every game for harmful code before they even put it on the website, so no surprise there.
But that does not mean that OP cant have a virus from another source that got into the Solasta files.
I hope its a false positive or can be resolved fast though.

Define "harmful code" though. From the Steam and Dev's side, if they can mine for free, why would that be bad? Not from their POV. Absolutely NOT saying for certain that this is happening, but makes me wonder about quite a few games that require constant internet connection.

[Zeel Ara]

Originalmente postado por Underprivileged White Male:

9/10 times the AV software IS the virus.

We can make that 99/100 and it's still not hyperbole