Game i bought has a trojan virus.

[Segert]

A game a bought a while ago. Called Palais de Reine has a trojan virus when you install. And it will be blocked by antivirus. It seems everyone has this problem with this game here are the discussions about this game:
https://steamcommunity.com/app/1023700/discussions/

I reported the game for being a virus a while ago. What do i see today. It is on sale... wtf.. It has a virus and still being sold? How is that allowed by steam?

Heck i want my money back for a game i cant play because it has a trojan virus. I just reported it again. So did others. But steam dont seem to react.
https://store.steampowered.com/app/1023700/Palais_de_Reine/

[Cathulhu]

So it is not impossible like you previously claimed.

[davidb11]

Cathulhu님이 먼저 게시:

So it is not impossible like you previously claimed.

The odds are so small, it has less of a chance of happening than me winning the lottery in full 400 times in a row. :P
So, it is essentially impossible.

Yes, it's not 100% impossible, but you're basically saying that it's not impossible to survive a nuclear explosion directly detonated on your face. :P
And that is literally impossible.
Same with a human being being able to hang out in the core of the sun without issue.

[AustrAlien2010]

Crazy Tiger님이 먼저 게시:

Try a manual ticket. Find the purchase here: https://help.steampowered.com/en/wizard/HelpWithPurchase. Open the purchase, choose the "I have a question about this purchase" option and explain politely.

This is a reasonable resolve. It simply tells the user what they may do next, and does not keep them deliberating on if they downloaded a virus or not. Whether or not it's a virus is impossible to know for us, unless we download the title too. Something I wasn't planning on.

Given that situation, the only thing that essentially matters is finding resolve. Either by suggesting that they contact Steam Support, or by suggesting that they contact their anti-virus company (to ask how they can white-list something in their anti-virus software.)
I can't think of any other alternative solution.

[RiO]

davidb11님이 먼저 게시:

There are literally two different checks against EVERY single Anti-Virus ever for a game on Steam when it is first added to Steam!
AGHHH.
From both Valve itself, and the file hosting service for files Steam uses.

Good grief.
The odds of someone sneaking in a virus is so TINY it's not even possible to claim it makes sense to bring up!
OOOF.
THis is well documented!

There was a malicious Steam Workshop mod for Cities Skylines that literally had a trojan dropper included, allowing importing code directly from Github without any checks in place.
Look it up. Story's well-known. Neither the publisher of the game, nor Valve managed to detect it. They only found out about it while investigating the modder in question for other unrelated allegations.

There's also the fact that Valve left a gaping hole in DOTA 2 for the past 15 months, which allowed remote code execution and where a hacker had been messing around trying to kit together a dropper for the last 11 months (since March 2022) undetected.

The Tales of Symphonia remaster was also marked as malware by multiple anti-virus vendors as well, because it used a version of the VMProtect anti-tampering tech that had been compromised; stolen; and was being actively used by several malicious groups to sneak malware passed AV software. As it works by running code in a fully encrypted virtual machine, there's no way to scan such code for malware - and thus several anti-malware vendors rightfully decided to just block anything identifies as using this known-compromised version of VMProtect.

And there's a litany of games available on Steam where updates don't pass through Steam's pipelines at all; but are done directly via the games' own launchers. There's literally no telling what sanity checks - if any - are applied at all.


The odds of things going wrong are small.
Yes. But not to be discounted off-hand.
AVs are known to have false-positives, but until you've actually submitted a sample and heard back from them - you shouldn't assume.

[davidb11]

Weird, and seemingly near impossible.
But alright.
I'll look that up.

[Segert]

AustrAlien2010님이 먼저 게시:

Crazy Tiger님이 먼저 게시:

Try a manual ticket. Find the purchase here: https://help.steampowered.com/en/wizard/HelpWithPurchase. Open the purchase, choose the "I have a question about this purchase" option and explain politely.

This is a reasonable resolve. It simply tells the user what they may do next, and does not keep them deliberating on if they downloaded a virus or not. Whether or not it's a virus is impossible to know for us, unless we download the title too. Something I wasn't planning on.

Given that situation, the only thing that essentially matters is finding resolve. Either by suggesting that they contact Steam Support, or by suggesting that they contact their anti-virus company (to ask how they can white-list something in their anti-virus software.)
I can't think of any other alternative solution.

Its windows defender. Unlikely i can contact microsoft and ask them to whitelist it.

even if it is a false positive. I cant play it. As it is blocked by my PC. Dont know or dare to allow it.
also the name of the virus is: Trojan:Win32/Masson.A!ac Dont know if that tells you guys something.

[Segert]

davidb11님이 먼저 게시:

Weird, and seemingly near impossible.
But alright.
I'll look that up.

Thing about software is. Nothing is impenetrable. Banks, Crypto. all can be hacked. Heck with crypto they even said it was impossible. Few years later. It happened. With Computers and software it is more of a question of when and not If something gets hacked. Steam accounts can get hacked for example. There are documented cases of this.

So it is not impossible for Steam to get compromised somewhere with 1 or 2 games. Everything can be breach with software. Except closed enviroments. Like a LAN connection from one PC to another. But Steam is connected to the internet. So it can get infected. Has it one of the best defenses. Yes. But so has banks. and that can still happen.

But i can of course believe this is a false positive. That is more likely. But what do i do about it? The dev. A small indie dev. Is after a year or so. Not going to update it i think.

[Joke]

Segert님이 먼저 게시:

Its windows defender. Unlikely i can contact microsoft and ask them to whitelist it.

even if it is a false positive. I cant play it. As it is blocked by my PC. Dont know or dare to allow it.
also the name of the virus is: Trojan:Win32/Masson.A!ac Dont know if that tells you guys something.

Contact the game publisher, and tell them about it.

They have interest in getting their game whitelisted, as they will have problems selling it otherwise. They will contact MS about it.

Edit:
After looking at the games steam forum, I see this problem have been going on for a long time.

It seems the developers aren't even trying to have the game whitelisted.
Or they don't understand what's going on on the forums, due to language (the company is japanese)

So exclude it from Windows Defender if you want to play it, or get a refund if not.

[Faedrill]

Segert님이 먼저 게시:

Thing about software is. Nothing is impenetrable. Banks, Crypto. all can be hacked. Heck with crypto they even said it was impossible. Few years later. It happened. With Computers and software it is more of a question of when and not If something gets hacked. Steam accounts can get hacked for example. There are documented cases of this.

So it is not impossible for Steam to get compromised somewhere with 1 or 2 games. Everything can be breach with software. Except closed enviroments. Like a LAN connection from one PC to another. But Steam is connected to the internet. So it can get infected. Has it one of the best defenses. Yes. But so has banks. and that can still happen.

But i can of course believe this is a false positive. That is more likely. But what do i do about it? The dev. A small indie dev. Is after a year or so. Not going to update it i think.

Whitelist it, ask the dev to change it or accept that you will never play that game anymore.

https://support.microsoft.com/en-us/windows/add-an-exclusion-to-windows-security-811816c0-4dfd-af4a-47e4-c301afe13b26