"Win64/Packed.Themida.L" - virus?

[Morricone]

My anti-virus detected and deleted this, whatever it means. It came from my Steam folder and happened specifically when I downloaded Helldivers 2. That's very sus, anyone else?

Democracy?

EDIT: check this link for more info from the devs
https://www.reddit.com/r/Helldivers/comments/19dp2qw/helldivers_2_nprotect_gameguard_anticheat/

[Boromir]

Themida is a commercial packer that both legitimate and malicious actors use to make analysis of their binaries difficult. Legit business use it so its harder to reverse engineer and steal any of the secret sauce while bad actors use it to hide the malicious actions from initial scans.

It's very difficult to do any kind of quick analysis of Themida packed binaries, especially packed installers that will drop many files. All of those files would need to be analyzed to see if they are malicious and if any of those are packed, again significant time and investment to see if its malicious as the actor could code delays and sleeps so that the malicious activities don't happen for days.

[Morricone]

Boromir a écrit :

Themida is a commercial packer that both legitimate and malicious actors use to make analysis of their binaries difficult. Legit business use it so its harder to reverse engineer and steal any of the secret sauce while bad actors use it to hide the malicious actions from initial scans.

It's very difficult to do any kind of quick analysis of Themida packed binaries, especially packed installers that will drop many files. All of those files would need to be analyzed to see if they are malicious and if any of those are packed, again significant time and investment to see if its malicious as the actor could code delays and sleeps so that the malicious activities don't happen for days.

That's F**d, should I uninstall and wait?

[Boromir]

I'm sure it just has to do with Gameguard. Honestly I dont know much about that specific AC. I'm at work and haven't been able to play or anything yet.
I do wonder if the game would run without that packer?

[Lunaire]

Sounds like an STD lmao (honestly)

[Boromir]

Lunaire a écrit :

Sounds like an STD lmao (honestly)

Basically that is what it is in a way.

[Itty Bitty Diddy]

Morricone a écrit :

Boromir a écrit :

Themida is a commercial packer that both legitimate and malicious actors use to make analysis of their binaries difficult. Legit business use it so its harder to reverse engineer and steal any of the secret sauce while bad actors use it to hide the malicious actions from initial scans.

It's very difficult to do any kind of quick analysis of Themida packed binaries, especially packed installers that will drop many files. All of those files would need to be analyzed to see if they are malicious and if any of those are packed, again significant time and investment to see if its malicious as the actor could code delays and sleeps so that the malicious activities don't happen for days.

That's F**d, should I uninstall and wait?

yea totally bro. didn't you hear sony is in the business of distributing computer viruses now. it's kinda their thing. /s

it's a false positive. play the game, or don't whatever homie. peece

[ryan.waldroop]

Actually, Sony has distributed root kits before, so yeah... https://en.wikipedia.org/wiki/Sony_BMG_copy_protection_rootkit_scandal

[Morricone]

I found this link, hopefully it will help answer some questions

https://www.reddit.com/r/Helldivers/comments/19dp2qw/helldivers_2_nprotect_gameguard_anticheat/

[Tex376]

Nick_Nolte's_Mugshot a écrit :

yea totally bro. didn't you hear sony is in the business of distributing computer viruses now. it's kinda their thing. /s

it's a false positive. play the game, or don't whatever homie. peece

Hey, I know you're either young, ignorant, or love defending billion dollar corps? But Sony did distribute rootkits for DRM back in the early 2000s. It would auto install it if you simply inserted the CD into a windows machine. It's worth double checking things like this with people who might ACTUALLY know what's going on.

[HOLY-BG]

The same thing happened with my ESET antivirus program.

[No skill only Tiktok]

Yes it is a virus and there is cross-contamination between computers and humans.
You need to burn down your PC asap, if you don't want to catch this rare virus yourself.

[YMD]

all antivirus are kernel level access rootkits and cannot be trusted, please uninstall

[KyrenCross]

Got this as well. I have been saved by my antivirus for 10 years now, not getting infected and flagging tons of this type of stuff everyday.

What is this?

[mitchellmark828]

KyrenCross a écrit :

Got this as well. I have been saved by my antivirus for 10 years now, not getting infected and flagging tons of this type of stuff everyday.

What is this?

literally read the first post under OP its easily explained. yall are freaking out over nothing

[⭕⃤ ᠌ ឵឵ϓØŁØ ֆШΔǤǤΞƝŞ ⭕⃤]

Got the game and installed it yesterday haven't even loaded the game up yet and ESET gave me the same warning about it. Said steam tried to access it 5 minutes ago.