TROJAN VIRUS DETECTED after the major update!

[Jay_Recrea]

After the 50GB+ game update, I run the game, my antivirus detected Trojan.Win32.Shelm from game file! Here is the detail:
"
Component: Intrusion Prevention
Result description: Detected
Type: Trojan
Name: UDS:Trojan.Win32.Shelm
Threat level: High
Object path: U:\SteamLibrary\steamapps\common\Delta Force\Game\DeltaForce\Binaries\Win64
Object name: DeltaForceClient-Win64-Shipping.exe
"

[FN]

Chinese malware fail to hide itself

[DaMatth]

jup +1 wont touch that ♥♥♥♥ again... it this some sort of joke?

[Naeem]

What the heck :D

[Nomad2005]

Error
Couldn’t start
C:\program files (x86)\steam\steamapps\common\DeltaForce\Game\DeltaForce/Binaries/Win64/ DeltaForceClient-Win64-shipping.exe”Delta Force
CreateProcesso return 2.

[Nomad2005]

me too

[Edge_Master]

Originally posted by FN:

Chinese malware fail to hide itself

https://steamcommunity.com/app/2537590/discussions/1/7051043016322139691/

looks like flight sim has the same issue

[VipeNess]

I got a similar message but said it was a different named trojan.

File ACE-DFS64.dll is infected with Dump:Generic.Trojan.Buggie.Marte.C.665DD20C

Photo from BitDefender: https://imgur.com/qEFFrw4

[Jay_Recrea]

No staffs from the official explain this or fix this?

[Drake Shadeslayer]

Originally posted by VipeNess:

I got a similar message but said it was a different named trojan.

File ACE-DFS64.dll is infected with Dump:Generic.Trojan.Buggie.Marte.C.665DD20C

Photo from BitDefender: https://imgur.com/qEFFrw4

same, vipre advanced security flagged it as soon as the update started downloading. could be a false positive but better to be safe than sorry and keep it quarantined until the devs can explain. that of course means game wont start as long as its quarantined if it is a false positive as it seems to be part of the anti-cheat has been flagged as a generic Trojan.

[itchiebutt]

I guess people can't Google or figure things out on their own.

So, this game uses a Kernal Level anti-cheat. That means it can be detected as a Trojan because of what a Kernal Level Ant-cheat does. This used to happen with Easy Anti-Cheat when it became a Kernal Level as well. They would have to get this fixed on their end.

[Tiiiym]

Originally posted by itchiebutt:

I guess people can't Google or figure things out on their own.

So, this game uses a Kernal Level anti-cheat. That means it can be detected as a Trojan because of what a Kernal Level Ant-cheat does. This used to happen with Easy Anti-Cheat when it became a Kernal Level as well. They would have to get this fixed on their end.

Thank you for posting this message that has a logical explanation.

Google searches will lead to here now. :]

[NTU]

false positive

[Drake Shadeslayer]

Originally posted by itchiebutt:

I guess people can't Google or figure things out on their own.

So, this game uses a Kernal Level anti-cheat. That means it can be detected as a Trojan because of what a Kernal Level Ant-cheat does. This used to happen with Easy Anti-Cheat when it became a Kernal Level as well. They would have to get this fixed on their end.

which means it has system level privileges down to to the very operating system level. in laments terms, the av flagged it as a Trojan due to the fact it can monitor and interact with the very OS with intimate detail and privileges,probably because it tried to inject code using to request superuser root access as it runs as a driver and whatever command it used must've behaved similar to what is in the av definitions and signatures so it was flagged as a Trojan.

[Jay_Recrea]

Originally posted by itchiebutt:

I guess people can't Google or figure things out on their own.

So, this game uses a Kernal Level anti-cheat. That means it can be detected as a Trojan because of what a Kernal Level Ant-cheat does. This used to happen with Easy Anti-Cheat when it became a Kernal Level as well. They would have to get this fixed on their end.

I have got Easy Anti-Cheat from game SCUM, and it is always running when I play on a multiplayer server, but my Kaspersky never detected it as a virus.