Files Infected with Malware

[Sylar]

I immediately got IDP.Generic warning from my antivirus system the moment I pressed play on Steam regarding the files of the game I had bought and downloaded. The moment I pressed "Play" the infected file behavior was detected.

I've quarantined that file and deleted it accordingly. That file is: C:Program Files (x86)/Steam/steamapps/common/S.T.A.L.K.E.R. 2 Heart of Chornobyl/Stalker2/Binaries/Win64/Stalker2-Win64-Shipping.exe

I don't use AVG or Avast, I use Norton, my friend uses built-in Windows Defender. Meaning that it's highly unlikely with updated definitions for other users to also pick this up. But I see that an Avast user also reported exactly the same file here on the Steam Forum.

People don't cry wolf about these kinds of things. It's like a mortal sin in the gaming community. My choice to quarantine this file and send it for further analysis and not flag it as a false positive is based on my years of experience dealing with cyber-crime.

This is the first ever time this has happened to me when trying to play a game on Steam.

This kind of stuff simply doesn't happen here with any other game (new or old) that I've played on Steam, and is pretty concerning. If this game doesn't work without this malware, I'll be asking for a refund immediately, with 0 minutes of game-play.

Seriously, this is so disappointing. I've been looking forward to playing this game for months and supported these developers. I prepaid for it, trusted it would release today, no issues. This is what I get for my trust and support...

Like, what do you need malware for anyways? Any rudimentary scan by yourselves, the developers, would have picked this up. No excuses.

I'm now engaging a deep threat scan. I'll add the results in an edit to this thread.

Edit: IDP-Generic threats are just "basic" threats. They are called IDPs for a reason, as they can proliferates malware using generic Trojan behaviors. If you aren't 100% sure they are not a false positive, then rather send the file for analysis and wait...

[YME]

doesnt steam check files so I call BS

[Geeves]

Początkowo opublikowane przez Mattee:

Początkowo opublikowane przez Haggy:

A virus cant break hardware... you're a damn maniac.

A virus can absolutely break hardware

I mean.. I guess if you're running centrifuges to enrich uranium...

[Belyth]

Początkowo opublikowane przez Sylar:

I immediately got IDP.Generic warning from my antivirus system the moment I pressed play on Steam regarding the files of the game I had bought and downloaded. The moment I pressed "Play" the infected file behavior was detected.

I've quarantined that file and deleted it accordingly. That file is: C:Program Files (x86)/Steam/steamapps/common/S.T.A.L.K.E.R. 2 Heart of Chornobyl/Stalker2/Binaries/Win64/Stalker2-Win64-Shipping.exe

I don't use AVG or Avast, I use Norton, my friend uses built-in Windows Defender. Meaning that it's highly unlikely with updated definitions for other users to also pick this up. But I see that an Avast user also reported exactly the same file here on the Steam Forum.

People don't cry wolf about these kinds of things. It's like a mortal sin in the gaming community. My choice to quarantine this file and send it for further analysis and not flag it as a false positive is based on my years of experience dealing with cyber-crime.

This is the first ever time this has happened to me when trying to play a game on Steam.

This kind of stuff simply doesn't happen here with any other game (new or old) that I've played on Steam, and is pretty concerning. If this game doesn't work without this malware, I'll be asking for a refund immediately, with 0 minutes of game-play.

Seriously, this is so disappointing. I've been looking forward to playing this game for months and supported these developers. I prepaid for it, trusted it would release today, no issues. This is what I get for my trust and support...

Like, what do you need malware for anyways? Any rudimentary scan by yourselves, the developers, would have picked this up. No excuses.

I'm now engaging a deep threat scan. I'll add the results in an edit to this thread.

Edit: IDP-Generic threats are just "basic" threats. They are called IDPs for a reason, as they can proliferates malware using generic Trojan behaviors. If you aren't 100% sure they are not a false positive, then rather send the file for analysis and wait...

So... the game you don't own was recognized as a Virus?

[Hanfree [ESP]]

Początkowo opublikowane przez Sylar:

Blablabla LIES

First you need to buy the game, its normal you get malware when you play pirated games

[Blade]

Did you run North without psi helmet?He must be trolling

[Likkuku]

... that's LITERALLY a false positive. Tell us more about how you're lying about being in cyber security lol

[Likkuku]

Początkowo opublikowane przez Belyth:

Początkowo opublikowane przez Sylar:

I immediately got IDP.Generic warning from my antivirus system the moment I pressed play on Steam regarding the files of the game I had bought and downloaded. The moment I pressed "Play" the infected file behavior was detected.

I've quarantined that file and deleted it accordingly. That file is: C:Program Files (x86)/Steam/steamapps/common/S.T.A.L.K.E.R. 2 Heart of Chornobyl/Stalker2/Binaries/Win64/Stalker2-Win64-Shipping.exe

I don't use AVG or Avast, I use Norton, my friend uses built-in Windows Defender. Meaning that it's highly unlikely with updated definitions for other users to also pick this up. But I see that an Avast user also reported exactly the same file here on the Steam Forum.

People don't cry wolf about these kinds of things. It's like a mortal sin in the gaming community. My choice to quarantine this file and send it for further analysis and not flag it as a false positive is based on my years of experience dealing with cyber-crime.

This is the first ever time this has happened to me when trying to play a game on Steam.

This kind of stuff simply doesn't happen here with any other game (new or old) that I've played on Steam, and is pretty concerning. If this game doesn't work without this malware, I'll be asking for a refund immediately, with 0 minutes of game-play.

Seriously, this is so disappointing. I've been looking forward to playing this game for months and supported these developers. I prepaid for it, trusted it would release today, no issues. This is what I get for my trust and support...

Like, what do you need malware for anyways? Any rudimentary scan by yourselves, the developers, would have picked this up. No excuses.

I'm now engaging a deep threat scan. I'll add the results in an edit to this thread.

Edit: IDP-Generic threats are just "basic" threats. They are called IDPs for a reason, as they can proliferates malware using generic Trojan behaviors. If you aren't 100% sure they are not a false positive, then rather send the file for analysis and wait...

So... the game you don't own was recognized as a Virus?

GamePass. Doesn't show as owned if you're playing via it.

[Likkuku]

Początkowo opublikowane przez MMpioneer:

Its real malware,i downloaded game from =fitgirl=
And defender didnt do sht..
Got hacked,all acc pasword swaped,rus posts on my u2b ch..

Well, you pirated it, so yeah, it might contain malware. That being said, if it's from FITGIRLs legit site, no, it's not malware, all cracks and repacks give a positive because cracks and repacks ARE technically malware.

[Rhophius]

Początkowo opublikowane przez Sylar:

I use Norton... Another user is reporting the same file using Avast. I sent it for analysis. The likelihood of multiple AV software systems having a false positive becomes astronomical especially when they have the latest definitions updated. So, you are all welcome to continue doing what you want... If I get a refund or not depends on if it still plays.

and multiple people in the 100's of thousands not reporting the issue, lesson is, dont use norton, its just a scam, use malwarebytes instead.

[CadaveR]

Just stick to windows defender.

[⚡ FaTcaP ⚡]

same for me, malicious web site detected and blocked, with malwarebyte. bought and downloaded on steam

[CadaveR]

Początkowo opublikowane przez ⚡ FaTcaP ⚡:

same for me, malicious web site detected and blocked, with malwarebyte. bought and downloaded on steam

It's a false positive.

[⚡ FaTcaP ⚡]

that's what it seemed to me

[*D4rKsKy*]

Same here malwarebytes detects it aswell.

[CadaveR]

Just ignore it