Virus has been found in the installation files.

[Dice- All muted]

My ESET found and cleaned a variant of Win64/GenKryptik.GOWI trojan....

Anyone else having this problem ?

[EvilZed]

the scan actually shows viruses, but whether they are false positives is another matter; but they shouldn't be there:

VirusTotal Scanner [www.virustotal.com]

they could solve it simply with an update, but if they don't, someone might suspect that there's something going on, given that they've made 3 updates in less than a week

[Amurason]

Originally posted by EvilZed:

the scan actually shows viruses, but whether they are false positives is another matter; but they shouldn't be there:

VirusTotal Scanner [www.virustotal.com]

they could solve it simply with an update, but if they don't, someone might suspect that there's something going on, given that they've made 3 updates in less than a week

I have the same problem. I use ESET-Internet Security and it shows a trojan warning: "win64/genkryptik.gowi" . Maybe it is a false positive, but I will wait for the devs to respond.

[EvilZed]

I downloaded the new update 5 minutes ago but the file is still not fixed and therefore the virus is detected; I'm waiting for the next update in the next few days hoping they will correct the problem; for the moment I have only blocked it via firewall (I use glasswire) it is paid but it is the best in these situations

[FullMetalPanic]

It's not really virus, GenKruptik seems to be more of a designation as far as I can tell.

"Riskware/GenKryptik is classified as a type of Riskware.
Riskware is any potentially unwanted application that is not classified as malware, but may utilize system resources in an undesirable or annoying manner, and/or may pose a security risk."

Though I have also found that there have been versions that have been used for ransomware trojan (that was GenKruptic.AGWR!/tr not the same as this one).

So some are trojans, some are not.

[Possemaster]

Same here, Trojan found with both MalwareBytes and Defender. Send to Virustotal and also detected. ♥♥♥♥♥♥♥♥♥

https://i.ibb.co/b7qhgCj/Front-Virus.png

[ChYph3r™]

yeah i got the same thing since the 1.0.2 update. Im just going to refund the game

[SomewhatSolo]

Originally posted by Possemaster:

Same here, Trojan found with both MalwareBytes and Defender. Send to Virustotal and also detected. ♥♥♥♥♥♥♥♥♥

https://i.ibb.co/b7qhgCj/Front-Virus.png

I wonder why I'm not picking the same results with MawareBytes Premium or Defender. I updated but didn't run any .exe's yet. hmm... Virus Total does show it though.

[Kirpitch]

yep &(

[Stormcdt]

Win64/GenKryptik.GOWI trojan - Virus detected as well. Rather than playing the game I will play it safe and refund it for now. Hopefully the devs will action this issue soon.

[RainbowPool]

It's not a trojan just because your antivirus throws a false positive. If it later quarantines based on the false positive that doesn't mean it's a trojan.

Like Iced said, leave IT to IT people. Even if you agree with whatever ESET is, the proper thing to do here would be to specify the exact file that was flagged. That way you can give actionable information to people who know what they're doing.

Bonus points if you take the file and upload it to VirusTotal

[Ardele]

The EXE alters your PC files, beware!

If that is the case, then how the freakin god did you install, update, and patch Windows/Linux/Graphics drivers or Flash your motherboard....What is the next one? The game does Cryptomining while you play?

[Siqnes4daThiqnes]

Not sure if this is going to assist but object: ServerOperation.exe Detection: "a variant of Win64/GenKryptik.GOWI trojan" Action: "cleaned by deletion"
Information: "Event occurred on a new file created by the application

This is the log from my ESET

[Siqnes4daThiqnes]

IF the game The Front is a FRONT for stealing everyone's information that'd actually be kinda funny.

[RainbowPool]

https://www.virustotal.com/gui/file/164cf5bb66c0c7ebdbda65eac6dbfb7717b362fbad81da25862c548d93d4185e/behavior

Virus total shows 3 total scanners in its database that have issues with the ServerOperation.exe. If you look at the behavior, it does the following:

Query environment variables
Reads software policies
Enumerate files on Windows.

It calls back to these IPs:
192.229.211.108:80 (TCP)
20.99.186.246:443 (TCP)
23.216.147.76:443 (TCP)
a83f:8110:3878:1975:e848:8b48:1040:3879:53 (UDP)

ServerOperation is a file that runs when you host a server. It makes sense that it would check what files are installed (because it has to check the correct files exist) and call back to Samar's servers for things such as populating your server in the server list.

[Doc Savage]

lol you all think it got past steam file scannin false virus