Files Infected with Malware

[Sylar]

I immediately got IDP.Generic warning from my antivirus system the moment I pressed play on Steam regarding the files of the game I had bought and downloaded. The moment I pressed "Play" the infected file behavior was detected.

I've quarantined that file and deleted it accordingly. That file is: C:Program Files (x86)/Steam/steamapps/common/S.T.A.L.K.E.R. 2 Heart of Chornobyl/Stalker2/Binaries/Win64/Stalker2-Win64-Shipping.exe

I don't use AVG or Avast, I use Norton, my friend uses built-in Windows Defender. Meaning that it's highly unlikely with updated definitions for other users to also pick this up. But I see that an Avast user also reported exactly the same file here on the Steam Forum.

People don't cry wolf about these kinds of things. It's like a mortal sin in the gaming community. My choice to quarantine this file and send it for further analysis and not flag it as a false positive is based on my years of experience dealing with cyber-crime.

This is the first ever time this has happened to me when trying to play a game on Steam.

This kind of stuff simply doesn't happen here with any other game (new or old) that I've played on Steam, and is pretty concerning. If this game doesn't work without this malware, I'll be asking for a refund immediately, with 0 minutes of game-play.

Seriously, this is so disappointing. I've been looking forward to playing this game for months and supported these developers. I prepaid for it, trusted it would release today, no issues. This is what I get for my trust and support...

Like, what do you need malware for anyways? Any rudimentary scan by yourselves, the developers, would have picked this up. No excuses.

I'm now engaging a deep threat scan. I'll add the results in an edit to this thread.

Edit: IDP-Generic threats are just "basic" threats. They are called IDPs for a reason, as they can proliferates malware using generic Trojan behaviors. If you aren't 100% sure they are not a false positive, then rather send the file for analysis and wait...

[I Throw Spears.]

Originally posted by Sylar:

I immediately got IDP.Generic warning from my antivirus system the moment I pressed play on Steam regarding the files of the game I had bought and downloaded. The moment I pressed "Play" the infected file behavior was detected.

I've quarantined that file and deleted it accordingly. That file is: C:Program Files (x86)/Steam/steamapps/common/S.T.A.L.K.E.R. 2 Heart of Chornobyl/Stalker2/Binaries/Win64/Stalker2-Win64-Shipping.exe

I don't use AVG or Avast, I use something much better. Meaning that it's supposed to be highly unlikely that I also pick this up. But I see that an Avast user also reported exactly the same file here on the Steam Forum.

People don't cry wolf about these kinds of things. It's like a mortal sin in the gaming community. My choice to quarantine this file and send it for further analysis and not flag it as a false positive is based on my years of experience dealing with cyber-crime.

This is the first ever time this has happened to me when trying to play a game on Steam.

This kind of stuff simply doesn't happen here with any other game (new or old) that I've played on Steam, and is pretty concerning. If this game doesn't work without this malware, I'll be asking for a refund immediately, with 0 minutes of game-play.

Seriously, this is so disappointing. I've been looking forward to playing this game for months and supported these developers. I prepaid for it, trusted it would release today, no issues. This is what I get for my trust and support...

Like, what do you need malware for anyways? Any rudimentary scan by yourselves, the developers, would have picked this up. No excuses.

I'm now engaging a deep threat scan. I'll add the results in an edit to this thread.

What AV is "something much better".

Thats pretty concerning you didnt even name it.

So yes, almost all of these types of posts are due to someone having some uber goofy AV that they have sunk cost fallacy about.

[Zukabazuka]

What anti virus program are you using?

[Gizzmoe]

Originally posted by Sylar:

I prepaid for it, trusted it would release today, no issues. This is what I get for my trust and support...

Don't be such a drama queen, it's just a false positive.

[Femboy Collector]

yeah i saw the malware too and it started downloading all my foot porn that i paid alot of money for keep safe brother

[13xforever]

IDP.Generic can't be less specific

"IDK, Pedro, seems fishy to me"

plz understand, that unless it's a specific virus signature with full classification, it's all hallucinations of the heuristics engine

all the "AI", "ML", "Generic", "Heur", etc are not real detections

if in doubt, your av vendor must have a way to request a manual file analysis to confirm the detection or mark it as false positive

[Ouro]

"I don't use AVG or Avast, I use something much better. Meaning that it's supposed to be highly unlikely that I also pick this up."
Tells me absolutely everything i need to know about you and why you're an idiot.

[Captain Caveman]

IDP.Generic gives away that it's a crappy signature based AV that ceased being relevant about 5 years ago.

[Sylar]

I use Norton... Another user is reporting the same file using Avast. I sent it for analysis. The likelihood of multiple AV software systems having a false positive becomes astronomical especially when they have the latest definitions updated. So, you are all welcome to continue doing what you want... If I get a refund or not depends on if it still plays.

[Myztkl©-Kev]

"My choice to quarantine this file and send it for further analysis and not flag it as a false positive is based on my years of experience dealing with cyber-crime." screams you have no idea what you are talking about to me, because from my 20+ years of experience as a computer technician, it's a false positive lol. Game doesn't even have DRM outside of steams. Also never mentioned your AV while claiming it's much better than Avast or AVG is a red flag too. Lots of people claim bit defender is better than those too, and all it was good for was finding false positives and intrusively deleting perfectly safe files. You think Valve would allow a game with an actual virus or malware in it? You know Valve manually checks every game right? Sounds pretty paranoid to me.

[Silamon]

Originally posted by Gayness of thousand men:

yeah i saw the malware too and it started downloading all my foot porn that i paid alot of money for keep safe brother

Yeah I got a virus alert and then all my documents were in Swahili. This is very serious, we should forward it to everybody so they will know.

[Ouro]

Originally posted by Sylar:

I use Norton...

LMFAOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO

[ntg]

have you never heard of a false positive before?

[Myztkl©-Kev]

Originally posted by Sylar:

I use Norton... Another user is reporting the same file using Avast. I sent it for analysis. The likelihood of multiple AV software systems having a false positive becomes astronomical especially when they have the latest definitions updated. So, you are all welcome to continue doing what you want... If I get a refund or not depends on if it still plays.

bro, norton is literally the worst. The game will not still play, you deleted the MAIN EXECUTABLE

[Myztkl©-Kev]

Originally posted by Haggy:

Norton is trash just like all AV, seriously uninstall that ♥♥♥♥ and use Windows Defender.

i wouldn't recommend that, this guy sounds like he'd click every sketchy link on the internet, and those are the type of people that need more than windows defender even if they are ♥♥♥♥ in other ways.

[wonderpookie]

Originally posted by Sylar:

I'm now engaging a deep threat scan. I'll add the results in an edit to this thread.

Godspeed soldier!