Uninstalled due to Virus Detection in Updates

[That Goth Guy]

ESET states that Flight.dll and Scripting.dll contain a variant of Win64/Packed.VMProtect.AC
This is preventing the game from updating!
I have therefore uninstalled the game!

A little research shows this happens if a file is protected with VMProtect and has an invalid digital signature so I'm sure it's something the Developers can and should fix.

[TeamCocoa]

APOSTATE の投稿を引用：

False positives. There's no such thing as a risk from developers behind big games like this. Ignore it.

Yeah, that's what Kasperksy said.

[TeamCocoa]

In my case its Win32.BogNet in edterain4.dll. I do not discount the possibility of false positives, I find it striking the range of these hits in this discussion. Heuristic hits are all over the place. That smells.

[Troll Norris]

https://youtu.be/DriNfTB5kqE?si=xZbcbyAAFSXNxMrk

[Maki Nishikino]

No need to worry.

[Franz Makamele]

Tandy Miller の投稿を引用：

In my case its Win32.BogNet in edterain4.dll. I do not discount the possibility of false positives, I find it striking the range of these hits in this discussion. Heuristic hits are all over the place. That smells.

Yeah, something is fishy. It seems to be a lot of negligence on this topic, people are not taking cybersecurity risks seriously.

[Franz Makamele]

After further analysis it seems that there is indeed an issue with digital signature of those files, so devs should fix that. Probably False-Positive but I'll still wait for more information.

[Troll Norris]

Cyber security is mainly about how you behave rather than which security devices you use. No antivirus will save yourself if you are not aware. Also heuristic scan is something outdated. Most important is behavioral shield. That means the system is watchning how the software behaves.

[Franz Makamele]

Troll Norris の投稿を引用：

Cyber security is mainly about how you behave rather than which security devices you use. No antivirus will save yourself if you are not aware. Also heuristic scan is something outdated. Most important is behavioral shield. That means the system is watchning how the software behaves.

Yeah, that's why I stopped update, blocked all network traffic on firewall for everything related to DCS and redownloaded everything on isolated sandbox VM to perform analysis.

[ElviraDemonQueen]

bro if you want to play it and think its fine play it what so ever if in EU law you have the right to we draw yes and that what you dit but one thing is sure you are sure not alowed to ask for private company files what ever reason may be as they say go to your security provider and see what happens.

as for that you can just not care unstall and never come back or do care and just get those things checked by your security provider you got the options its on you how you want it

as for my self my own anti virus has seen no problems at all when i installed this game today

[Franz Makamele]

Eset is no longer reporting this as malware, virustotal also says it's clear.

https://www.virustotal.com/gui/file/c84711c23f2d0225c36c393539bc70158f86e442ff9b53c7fc6515ad3a2712ec/detection

[Rinky]

Franz Makamele の投稿を引用：

Eset is no longer reporting this as malware, virustotal also says it's clear.

https://www.virustotal.com/gui/file/c84711c23f2d0225c36c393539bc70158f86e442ff9b53c7fc6515ad3a2712ec/detection

WOW WHAT A SURPRISE

[bignewy]

some antivirus is over protective with files that are encrypted.

Good to see some providers are already white listing them.

thanks for letting us know.

[ken]

APOSTATE の投稿を引用：

False positives. There's no such thing as a risk from developers behind big games like this. Ignore it.

Good job there has never been a supply chain attack.

[Xupicor]

Yeah, these are false positives most likely, but it doesn't mean there can't be viruses in games on Steam or from big game companies. Like ken above mentions, these companies can be targetted too. Steam scans game files on their side, so hopefully they catch stuff before it goes out to end users, but poisoning the supply chain is a real thing.

You probably don't want to look up how many libraries were modified with malicious code before, and how long they would be out there in such a state before it was noticed.

[Jose]

In my case, the problem is that ESET has eliminated Packed.VMProtect.AC during the installation. When the installation is finished, I will deactivate the antivirus and validate the game, to see if it reinstalls it.