A trojan was found in Orb Of Creation.exe

[Vojislav Vojinovic]

As of 14-4-2022, 3:00 am, Avast found a trojan in Orb Of Creation.exe
Virustotal.com confirms "Trojan/Generic.ASMalwS.34D4BEA" found.
I'm not leaving a review for now that would permanently stain the game, but the devs really need to look at this.

Thanks!

[MP]

Wouldn't the gravy just maintain the sticky situation?

[Naros]

Originally posted by MihaP:

Wouldn't the gravy just maintain the sticky situation?

The Gravy of Life. XD

[BigBoy "!.OutLawZ.!"]

Hmm.. Interesting story unfolded here. At least the ending is ok.
But ok, I just hopped in the Discussions corner to look what the game has to offer to players (I hate the word Users, does me think about drug-related things, but ok...) like i always do.

If you do not mind, one thing i did missed here about the trusting the software issue..I have maybe a side solution.. Did you try a Virtual Machine to run this and let it unfold what it truly does? There's almost no catch then when things go haywire, just delete the sandbox. All (de)compiling, triggering or (ab)use of software is more safe that way. Frikked up? Delete box, reload new one.
Hereby also said the box created in the VM best is fresh (manufacturer version of yer Windows/Linux/MacOS)

It's just what i think of. Let me know if i am wrong. I gladly learn from experts.

[Zanthra]

Malicious software can be insidious enough that it can be very hard to determine that it is malicious. While VM sandboxes are part of a great many tools important for security researches to analyze potential malware, without a lot of additional tools, knowledge, and research, you should have very little confidence in whether it is a virus or not based on whether the VM goes haywire or not.

While it might not be entirely unreasonable to run Orb of Creation in a virtual machine the whole time, the resource overhead in terms of both memory usage, and hard drive usage for a VM is significant. Additionally, if it's doing something malicious like a game called Abstractism which was a game removed from Steam due to it mining cryptocurrency on user's computer, then it would simply mine it using the virtual machine instead.

[Naros]

Also; the VM runs on the same hardware. It is still your PC. So if a virus manages to for example get to your BIOS, deleting the VM will not do anything to save you. :)

It is still a very good way to protect against less advanced threats though!

[❤NYXIC❤]

i'm gonna be honest, i don't recommend using avast, literally just use any other antivirus if you're so deadset on even using one while not doing anything stupid/illegal. avast very often has false positives and it tends to make gaming near impossible because it thinks EVERYTHING is a virus, i'd personally recommend malwarebytes since i haven't had any issues with that antivirus.

[Godlyvexx]

I wouldn't trust avast, and considering you say virustotal just aggregates stuff from other virus detectors (without actually listing how trustworthy those sources are) I don't think your accusation really holds any merit. Not to mention that such a well established and popular game would be hard-pressed to hide a TROJAN of all things in their game. People have trouble sneaking bitcoin miners in their steam games without getting caught in days, so I doubt something as severe as a trojan would go unnoticed by one of the more tech-savvy players.

Also, the part saying "since every response seems dishonest"? the hell do you even mean? it was like one guy being a weirdo about a website

[Godlyvexx]

Originally posted by davidb11:

If that is all you can say, you cannot be taken seriously.
Also, Literally has a third official definition, which is to use it satirically, or by exaggeration.

Do not complain about me using the official dictionary definition.

Just because you're using it correctly doesn't mean you aren't overusing it. If I overuse the word 'perfectly' while using it perfectly each time, it's still being overused.

[{熱$Team}Samus2679]

guys OP is a troll just ignore him and move on.

[Summonsays]

Just going to chime in here for anyone seeing this in 2023. There was a period about a year ago where Avast was flagging pretty much anything made in Unity with a false positive. This seems to have been corrected. There were never any threats in this exe file. As to what software you choose to use for antivirus protection, it's up to you. There have been such great strides in self protection the last few decades that they are mostly small differences and end users probably won't notice any differences between products effectiveness.

I am a senior software developer and I use Avast, mostly because it's free but also I much prefer false positives over false negatives.