Antivirus detected "Win64/Packed.Themida.L" after update 29th april

[Maru]

i have never seen this before poppin up in a steam game after an update. Theres multiple reports about this in the general and on reddit so i know am not the only one getting this detection. What is going on?

[HCFREAK]

Yeah, I got the same thing. My anti virus deleted it automatically, which now has rendered my copy of helldivers 2 unplayable. I am using NOD32 as anti virus.

[Maru]

Originally posted by HCFREAK:

Yeah, I got the same thing. My anti virus deleted it automatically, which now has rendered my copy of helldivers 2 unplayable. I am using NOD32 as anti virus.

yea same antivirus

[Calv]

Originally posted by HCFREAK:

Yeah, I got the same thing. My anti virus deleted it automatically, which now has rendered my copy of helldivers 2 unplayable. I am using NOD32 as anti virus.

You could try adding the helldivers 2 folder as an exclusion in your AV and then running the validate files option in Steam. It should reacquire whatever was deleted.

[KingOfFriedChicken]

Originally posted by HCFREAK:

Yeah, I got the same thing. My anti virus deleted it automatically, which now has rendered my copy of helldivers 2 unplayable. I am using NOD32 as anti virus.

I'd suggest verifying files to get it back see if that works, allowing it thru firewall probably a false positive my anti virus hasn't clocked it.

[CatFlower75]

when playing wih nguard anicheat remove firewall disable and uninsal all anivirus and put your secret and same pc as helldivers2 game pc wih nguard nprotect on

[LongTimeAgo]

It's a packager that can be used by both valid and malicious actors to protect binary viewing of products and software.
Why or how your anti-virus suddenly triggers this packager is interesting. Because it normally only triggers when the packager fell victim to malicious code/software.
Or did nPGG maybe inject itself in to it?
Or uses it in a malicious way?

I did see reports from this also since release of HD2, then it was patched out by a patch for nPGG.
Funny that it now returns.

[KingOfFriedChicken]

Originally posted by LongTimeAgo:

It's a packager that can be used by both valid and malicious actors to protect binary viewing of products and software.
Why or how your anti-virus suddenly triggers this packager is interesting. Because it normally only triggers when the packager fell victim to malicious code/software.
Or did nPGG maybe inject itself in to it?
Or uses it in a malicious way?

I did see reports from this also since release of HD2, then it was patched out by a patch for nPGG.
Funny that it now returns.

Very unlikely that its being used maliciously by GG all the sudden and only triggering on a very few set of AVs, could be that the game updated these AV just didnt like that in fact its so common steam has an entire support page for it lol

https://help.steampowered.com/en/faqs/view/5F3D-1477-AFF9-C4F3

That said if you think its truly dangerous you can report it as per the steps in the support page and they will investigate it, this is also why nPGG is still around on steam games, no way they are intentionally going to ingore a malicious game or program, in fact they have had them in the past and those games and their devs are ban from steam.

[Calv]

Originally posted by LongTimeAgo:

It's a packager that can be used by both valid and malicious actors to protect binary viewing of products and software.
Why or how your anti-virus suddenly triggers this packager is interesting. Because it normally only triggers when the packager fell victim to malicious code/software.
Or did nPGG maybe inject itself in to it?
Or uses it in a malicious way?

I did see reports from this also since release of HD2, then it was patched out by a patch for nPGG.
Funny that it now returns.

The AV is triggering whilst Steam is downloading the update, I'd be extremely surprised if Gameguard is somehow injecting into a file at that point in time considering it isn't even running.

[アンジェル]

Originally posted by Calv:

Originally posted by LongTimeAgo:

It's a packager that can be used by both valid and malicious actors to protect binary viewing of products and software.
Why or how your anti-virus suddenly triggers this packager is interesting. Because it normally only triggers when the packager fell victim to malicious code/software.
Or did nPGG maybe inject itself in to it?
Or uses it in a malicious way?

I did see reports from this also since release of HD2, then it was patched out by a patch for nPGG.
Funny that it now returns.

The AV is triggering whilst Steam is downloading the update, I'd be extremely surprised if Gameguard is somehow injecting into a file at that point in time considering it isn't even running.

It clearly is not. But the people here are quite resistent towards reason and explainations. So no use to fret over it after having told them they should use reference websites such as VirusTotal. Helldivers 2 is not the first game which had something like that, where certain antivirus got triggered. Most games have that in fact.

[acosnil]

Originally posted by Calv:

Originally posted by HCFREAK:

Yeah, I got the same thing. My anti virus deleted it automatically, which now has rendered my copy of helldivers 2 unplayable. I am using NOD32 as anti virus.

You could try adding the helldivers 2 folder as an exclusion in your AV and then running the validate files option in Steam. It should reacquire whatever was deleted.

Shouldn't be obligated to add malware to an allow list on your AV to play a video game you already paid for.

Originally posted by アンジェル:

Originally posted by Calv:

The AV is triggering whilst Steam is downloading the update, I'd be extremely surprised if Gameguard is somehow injecting into a file at that point in time considering it isn't even running.

It clearly is not. But the people here are quite resistent towards reason and explainations. So no use to fret over it after having told them they should use reference websites such as VirusTotal. Helldivers 2 is not the first game which had something like that, where certain antivirus got triggered. Most games have that in fact.

No, kernel level anti-cheats just engage in behavior indistinguishable from viruses, malware and anti-viruses.

Which is why you're frequently told not to run two separate AV's on your computer.

[Calv]

Originally posted by acosnil:

Originally posted by Calv:

You could try adding the helldivers 2 folder as an exclusion in your AV and then running the validate files option in Steam. It should reacquire whatever was deleted.

Shouldn't be obligated to add malware to an allow list on your AV to play a video game you already paid for.

The AV warning has nothing to do with gameguard. It is being triggered by steam when it is downloading and modifying game files.

Don't let facts get in the way of your agenda though.

[LongTimeAgo]

Originally posted by Calv:

Don't let facts get in the way of your agenda though.

The agenda being...
... Wanting a safer and less volatile environment on peoples private PC's to play their games on by not having to have nPGG be installed on their expensive equipment...?

[Calv]

Originally posted by LongTimeAgo:

Originally posted by Calv:

Don't let facts get in the way of your agenda though.

The agenda being...
... Wanting a safer and less volatile environment on peoples private PC's to play their games on by not having to have nPGG be installed on their expensive equipment...?

Guess we shouldn't read too much into you skipping over the part where it has nothing to do with Gameguard.

Clearly no bias there.

[LongTimeAgo]

Originally posted by Calv:

Originally posted by LongTimeAgo:

The agenda being...
... Wanting a safer and less volatile environment on peoples private PC's to play their games on by not having to have nPGG be installed on their expensive equipment...?

Guess we shouldn't read too much into you skipping over the part where it has nothing to do with Gameguard.

Clearly no bias there.

1. You directly accused someone of having an agenda.
2. The person in question has a distrust in nPGG. Even if the person in question was aware or not that the problem of the OP may or may not be relevant to nPGG.
3. I merely explain that the person is advocating for a safe gaming environment. That this might be the "spooky scary hidden agenda" you're trying to accuse him of.

So either explain your ridiculous remarks accusing others' or stay silent and stop trolling.

[Calv]

Originally posted by LongTimeAgo:

Originally posted by Calv:

Guess we shouldn't read too much into you skipping over the part where it has nothing to do with Gameguard.

Clearly no bias there.

1. You directly accused someone of having an agenda.
2. The person in question has a distrust in nPGG. Even if the person in question was aware or not that the problem of the OP may or may not be relevant to nPGG.
3. I merely explain that the person is advocating for a safe gaming environment. That this might be the "spooky scary hidden agenda" you're trying to accuse him of.

So either explain your ridiculous remarks accusing others' or stay silent and stop trolling.

When your first reaction to any issue, before you even read or understand the issue, is "Gameguard caused this!!!", then yes, you clearly have an agenda.