Trojan Horse virus - Battle Eye

[tcLunat1c]

Hey all.
Since the update from 9 dec2021, my Norton Security give with starting battle eye a trojan horse and closes the game and delete the treat. The message of Battle eye is that it failed with installing it(4, 50000005).

When i scan the Myth folder , Norton detects a virus in the battle eye map.

What did i do?:
- delete battle eye folder in the Myth of Empire folder.
- Norton Full scan & scan whole Myth of Empire folder, result: No virus.
- In steam Validate the files of this game. Needs to bring back 36 missing files.
- When get those 36 files back , my norton detect again a trojan horse.

I cant play this game anymore. i have played since the release. I hope the devs can help me or find something.

Norton log:
-------------------------------------------------
Filename: BEService_x64.exe
Threat name: Trojan.Gen.9Full path: F:\Steam\steamapps\common\Myth of Empires\MOE\Binaries\Win64\BattlEye\BEService_x64.exe

____________________________

____________________________


Present on computers from
10-12-2021 at 19:16:44

Last used
10-12-2021 at 19:16:44

Startup Item
new

Started
new

Threat type: Heuristic virus. Threat detection based on malware heuristics.

____________________________


BEService_x64.exe Threat Name: Trojan.Gen.9
To search


Many users
Thousands of users in the Norton Community have used this file.

very new
This file was released less than 1 week ago.

High
This file has a high risk.


____________________________


Source: external media


____________________________

File Actions

File: F:\Steam\steamapps\common\Myth of Empires\MOE\Binaries\Win64\BattlEye\ BEService_x64.exe Blocked
____________________________


File Fingerprint - SHA:
Not available
File Fingerprint - MD5:
Not available

[Xype]

tcLunat1c の投稿を引用：

okay i understand. so i have to wait till norton accept the new version? maybe i can use online scan to scan those files if it is safe. Tnx for helping me guys.

You can use windows defender, also malwarebytes.

[Zalzany]

tcLunat1c の投稿を引用：

Tachyon の投稿を引用：

Norton is ♥♥♥♥. Get an antivirus that doesn't give false positives.

Sorry to say , but if you read my full message it didnt give false positives till yesterday. I dotn need this kind of messages, but just want help.

Sorry to say its been doing false positives for over a decade. This is just first one you know of since you used it. Most people pointing this out to you use to that ♥♥♥♥ program. I mean windows defender is more reliable then that bloated cash grab imo.

Its like first time I had to explain to my aging mother that its not the updates to the spybot I but on her pc that caused her to get bad stuff, its some crap she did every day that did it. But of some how that never works in my less computer competent peoples minds "its like this wasn't there before the updates!" its like no it just didn't get flagged before, and like 200 more things happed on your pc then you know of since then.

But battleeye is super common to cause false positives it peeks under the curtain so to speak to look for 3rd parties running at same time. Update probally included a minor battleeye update and set off you cheapest yet most money hungry antivirus around. Because it doesn't just look for known viruses and what not, it sees that battle eye is looking for cheats and hax while you play, and it flips it ♥♥♥♥ going "that program is done looking at other things the in its .exe file directory! That is mighty sus!"

[HE DID IT]

Heyo! Don't worry, I also have the same problem. I've literally tried everything too but as the comments before have stated, we'll have to wait and see or use a defender. I've also made a post about this too

[Rash]

Norton? May as well give the game a COVID test.

[Professor Goat]

jesus, please just go back to console. lmfao sell the pre-built pc, leave.

seriously, video game giving false positives? welcome to pc gaming in 1998.

[mrt-prodz]

tcLunat1c の投稿を引用：

okay i understand. so i have to wait till norton accept the new version? maybe i can use online scan to scan those files if it is safe. Tnx for helping me guys.

If you search for "battleye virus" or "battleye malware" you'll find lots of forum threads about various antivirus false flagging it.

I understand this still doesn't answer your question about how and if the files are safe, my advice is to send the flagged file to virustotal[dot]com, and depending on the report decide if you want to wait for Norton to stop flagging it.

My opinion about antivirus nowadays is that they are mostly bloatwares eating up resources and waiting to be exploited on your system. (you can find CVE online about Kaspersky, McAfee, Norton, ZoneAlarm, Avira, Avast and even Microsoft Defender)

[dbix11]

Windows defender is 100% sufficient. Don't waste your time and money on anti virus bloatware

[Uncle Trev]

Get rid of norton. It's garbage. Otherwise tell norton to whitelist the program and let it run. It's not a trojan.

[Rogue]

It's a kernel level anti-cheat used by the game called BattlEye . You just need better anti-virus or just whitelist the file. https://www.battleye.com/

Some other games have it, e.g Battlefield, Arma, etc.

[HE DID IT]

Heyo! I'm back again but with a solution this time. It has something to do with the firewall, so if you aren't planning to uninstall Norton like I am, try this.

So you'll need to disable Auto-Protect and Smart Firewall. For each, you'll receive a popup asking how long you'll want to disable it. If you need help, here's the guide below.
https://www.nortonlifelockpartner.com/faq/art/how-to-temporarily-disable-norton-security/
Note: I think you can still run without having to turn off Norton Task Notifs (but don't hold me on that).

Once I did that, I went to Steam to verify the game and that's pretty much it. A friend helped me out to find a way to get around Norton since I couldn't figure out how to whitelist BattlEye.

[Xype]

dbix11 の投稿を引用：

Windows defender is 100% sufficient. Don't waste your time and money on anti virus bloatware

I would still recommend a FREE VERSION of malwarebytes manual deep scan every couple of months.

[Xype]

Caller to Norton Customer Support, "Hello, I had a virus on my computer and I tried to remove it and now my computer is messing up."

Norton Customer Support, "Do you have Norton Antivirus Installed?"

Caller to Norton Customer Support, "No, that is the virus I tried to remove"

[Pre55ure]

CCP sliding in your DMs

[АлЖи]

Trojan Horse virus - Battle Eye nope! it is not virys!

[Femapisa]

tcLunat1c の投稿を引用：

Hey all.
Since the update from 9 dec2021, my Norton Security give with starting battle eye a trojan horse and closes the game and delete the treat. The message of Battle eye is that it failed with installing it(4, 50000005)...

I have battle eye in one of my games and I was never warned by Norton but I had the same problem last year with the HEUSINKVELD software for my pedals, so I didn't install anything for the pedals, they work fine without the software .
Anyone who has Norton is well protected, it's simply the best anti-virus on the market, I've been using it forever and I've never had any problems.