Trojan Alert During Update.

[bandvagen]

Just now I was updating Black Mesa. I got 2x Trojan Alerts from Windows Defender.
Did a quick scan but Defender didn't find anything and I can't find any info about the alerts now.
False Positives?
Just a hiccup?
Anyone else have that at all?

[WeeHawky Big Mike Predator]

It's a false positive

[KalGimpa]

https://steamcommunity.com/app/362890/discussions/0/4365752248013054740/

[bandvagen]

Originally posted by Wilson:

It's a false positive

Thanks. Just been over to the Black Meas section and everyone is buzzing like bees.

[WeeHawky Big Mike Predator]

Originally posted by bandvagen:

Originally posted by Wilson:

It's a false positive

Thanks. Just been over to the Black Meas section and everyone is buzzing like bees.

Just added the .exe to your exclusions, I hear Crowbar collective is working on a fix too.

[[N]ebsun]

** Multiple ** AV software picked up a trojan - I would not be so quick to trust anyone or anything that says "false positive", until they fix it and it is no longer detected, don't use it.

Reason for the above - imagine someone you know gives you a USB drive with some files on it and tells you to install it... your AV detects a trojan, but your "trusted friend" says don't worry it's a false positive... you install it, and it steals all your data and takes over your account. Your "trusted friend" was a spy or scammer trying to steal from you.

Why use AV if you are going to assume every detection is a false positive and ignore it ?

Sure, the case is unlikely to be a real trojan, and they may have a fix soon - but usually a false positive only affects a single AV product... this one has, so far, 7 (update) 8 13 AV products detecting it. (update: now there are 13, previous was 8, it is increasing not decreasing)

The pattern of a low number of AV detections that gradually increases is typical for a new threat, as more and more security AV vendors update and detect it.

https://www.virustotal.com/gui/file/c259adc4a33b4b5488c931a3bcd2ae9711e6d672fea1f35903100c3de4548bc4

For all you know, someone could have taken over the administrator account for that game, uploaded a virus, then told everyone to ignore it as a false positive - not saying this is actually what happened, but it is a possible scenario.

Treat AV detections as real and wait for them to solve the issue.