Hmm, Windows Defender found Trojan..

[Tokszyq]

Like in the title, after update Windows Defender found a Trojan in Game


Trojan:Win32/Bearfood.A!ml

[Tokszyq]

I been kicked from session(like from the crash), then after i wanted to play game again i get notification from Steam that game have virus, and my Windows Defender founding a virus in game


https://steamuserimages-a.akamaihd.net/ugc/2367272941012719607/F64EDE4330CA2B25B15F217D23F6346B051ED6E2/



Cannot even verify files

https://steamuserimages-a.akamaihd.net/ugc/2367272941012742721/7B57F75914C1359CC55E2962B2F027CC7A30BB23/

[_Q_]

I just scanned my game files with Windows Defender and it came up clean.

[Konstanty]

False positive most probably. Weird that Windows Defender detects it, usually other commercial AV like to go crazy with heuristics.

[Tokszyq]

At 1st try Steam told me about virus as well, but i didn't take a photo of it just to verify files and now i stuck, that was weird because it never happen to me on this platform

[Konstanty]

Publicado originalmente por Tokszyq:

At 1st try Steam told me about virus as well, but i didn't take a photo of it just to verify files and now i stuck:CryingGhost:, that was weird because it never happen to me on this platform

Have you tried deleting the files and redownloading the game? Everyone on the team uses Windows Defender, we scanned the files and there is nothing. I would say it's your defender mistaking optimizations in game's code for viruses.

You could also whitelist game's directory so that windows defender would skip it:

https://support.microsoft.com/en-us/windows/add-an-exclusion-to-windows-security-811816c0-4dfd-af4a-47e4-c301afe13b26#:~:text=Go%20to%20Start%20%3E%20Settings%20%3E%20Update,%2C%20file%20types%2C%20or%20process.

[Tokszyq]

https://steamuserimages-a.akamaihd.net/ugc/2367272941016474884/6DD555148A375611919E1F77A8718E325A28EF03/

[Tokszyq]

Freshly installed game, sorry but about 10-12 years i never had problems like this on Steam Platform... I'll contact with Steam Support to make sure it's ,,false positive", but for now i'm not gonna touch this game, after ,,Domina" things

[Tokszyq]

Btw it started to Happen after that fix update 4mb, before i been playin with friend till we got communication there's update and we didn't be able to play anymore multiplayer, after that update we reach 2-3rd stage and boom, it was lookin like crash and that information from steam about virus, after verify files windows defender started to spam about that file with ,,trojan"

[Jean]

There is no virus, or trojan, or anything of the sort. New games trigger false alarms. It is what is.

[Dycilia the Red]

I just wanted to bump, I tried scanning the game directory (with windows defender) and it was clean.
But just to be safe I also did Avast and Malwarebytes, all of them turned out clean c:

[Tokszyq]

So after updating drivers problem gone

[Konstanty]

Publicado originalmente por Dycilia the Red:

I just wanted to bump, I tried scanning the game directory (with windows defender) and it was clean.
But just to be safe I also did Avast and Malwarebytes, all of them turned out clean c:

Thanks for checking (we also ran malwarebytes on it just to be sure )

Publicado originalmente por Tokszyq:

So after updating drivers problem gone:GhostScary:

Awesome, thanks for the update! Enjoy the game!

[koalabadcow]

I also want to add that bitdefender today suddenly flagged Hellcard as threat, and put it in quarantine. "Het bestand C:\Program Files (x86)\Steam\steamapps\common\HELLCARD\HELLCARD.exe is geïnfecteerd met Gen:Suspicious.Cloud.2.@x0@aK5cDqmO en is in quarantaine geplaatst."

[Tokszyq]

Publicado originalmente por koalabadcow:

I also want to add that bitdefender today suddenly flagged Hellcard as threat, and put it in quarantine. "Het bestand C:\Program Files (x86)\Steam\steamapps\common\HELLCARD\HELLCARD.exe is geïnfecteerd met Gen:Suspicious.Cloud.2.@x0@aK5cDqmO en is in quarantaine geplaatst."

Did u played before?

[Konstanty]

Publicado originalmente por koalabadcow:

I also want to add that bitdefender today suddenly flagged Hellcard as threat, and put it in quarantine. "Het bestand C:\Program Files (x86)\Steam\steamapps\common\HELLCARD\HELLCARD.exe is geïnfecteerd met Gen:Suspicious.Cloud.2.@x0@aK5cDqmO en is in quarantaine geplaatst."

Yeah, looks like a false positive again. Hopefully, this will get resolved like the last time without us having to rollback the update. We have reported this on our end but I doubt anyone at MS is manually checking reports on weekends

Meanwhile, you can report this as a false positive locally or whitelist the exe.