Anti-virus detects a virus after update

[William]

This is prob a false positive but i am writing this down if one of the devs checks the steam community page since the discord chat moves super fast.
After the new update my ESET anti-virus detected a file and deleted it which causes the game files to be corrupted and blocks the game from being launched.

Time;Scanner;Object type;Object;Detection;Action;User;Information;Hash;First seen here
29/04/2024 15:42:17;Real-time file system protection;file;D:\SteamLibrary\steamapps\downloading\553850\data\game\game.dll;a variant of Win64/Packed.Themida.L suspicious application;cleaned by deleting;PC\;Event occurred on a file modified by the application: C:\Program Files (x86)\Steam\steam.exe (558403043F0288ABA3D9A43E9DFA7E109BC0B31A).;5EB6BD1FC815EA8230B18E2BED344F0BF3324678;29/04/2024 15:41:56

[AoD_lexandro]

Yeah its a false positive. Its just some files are packed in a manner that "might" cause issues if it was nefarious.

Your good to go.

[Kovalinio]

My ESET also give me that alert

[[HFR] Totoz]

same here with ESET too

[SpacePoodle]

Why are people still using AVs?

[JGift]

Yep I got this too, also ESET

[Sundowner]

also ESET. this has been an issue in the past on the ESET forums and its just as AoD_Lexandro said.

[Tebriel]

Postat inițial de JGift:

Yep I got this too, also ESET

Same

[sh3riff]

People using antivir and not knowing how antivir works .. thus have no control over their machine.
Sad sad ..

[William]

Postat inițial de sh3riff:

People using antivir and not knowing how antivir works .. thus have no control over their machine.
Sad sad ..

Imagine me working as a infosec and knowing exactly how anti-viruses work, oh wait...
I wrote this thread so that the devs could check the HASH signature their files produce which causes it to be a false positive.

[null]

Postat inițial de sh3riff:

People using antivir and not knowing how antivir works .. thus have no control over their machine.
Sad sad ..

Yes.
Most people don't know how most technologies they use work. In fact, I'd be surprised if you knew, let alone understood, half the technologies used to post that sad attempt at belittling others.

[Maru]

can confirm this happened to me too. same file and same HASH signature

[Calv]

Postat inițial de William:

Postat inițial de sh3riff:

People using antivir and not knowing how antivir works .. thus have no control over their machine.
Sad sad ..

Imagine me working as a infosec and knowing exactly how anti-viruses work, oh wait...
I wrote this thread so that the devs could check the HASH signature their files produce which causes it to be a false positive.

Devs don't really check here.
Best bet would be to create an account in their support\zendesk site and submit it as a ticket there.

https://arrowhead.zendesk.com/hc/en-us

I'd recommend everyone that is getting this warning to do the same, the more people that report it the more likely it is to get actioned.

Likely worth including a link to this thread in your report too so they can see how many it is impacting even if others don't report it.

[ELX-Sevazinho☄]

No problem with GDATA, but i only use on manual mode, no new process alert or something suspicious since the update

[Gesta]

Hello guys, the antivirus alert I use NOD32 went off after the update.
I:\SteamLibrary\steamapps\downloading\553850\data\game\game.dll;a variant of Win64/Packed.Themida.L suspicious application;cleaned by deletion;PC\PC;An event occurred on a file modified by the application: C:\Program Files (x86)\Steam\steam.exe

[Maru]

Postat inițial de Gesta:

Hello guys, the antivirus alert I use NOD32 went off after the update.
I:\SteamLibrary\steamapps\downloading\553850\data\game\game.dll;a variant of Win64/Packed.Themida.L suspicious application;cleaned by deletion;PC\PC;An event occurred on a file modified by the application: C:\Program Files (x86)\Steam\steam.exe

Yeah same for me. same file path everything lmao