Indie game storeFree gamesFun gamesHorror games
Game developmentAssetsComics
SalesBundles
Jobs
Tags
(+2)

What kind of trojans and which program have reported it? My antivirus software didn't rise any alarms. And I got info about false positive cases.

I used a site called VirusTotal but there was only one report, so I don't know if you know what happened

(3 edits) (+2)

I had information about false positive cases from some users which uses different antivirus software.

Personally I use Windows Defender (which is quite good and up to date tool). I didn't got any information about viruses found in newest release. It happen in past that also Windows Defender raise some virus detection but I report my application to Microsoft they checked it and made update for Windows Defender to no report problem with it.

You can read it in dedicated post of forum

In general detection of viruses in different antivirus tools are done by heuristic algorithms. They try to "predict" if given part of code can be virus. Often it happen that it leads to warning which in fact are not viruses (that is called "false positive").

Of course if you afraid to install it do not do it.

From my side I can only said that if you got game from reliable source (where I put personally my game: which are itch.io / IndieDB / GamesJolt) it should not contains viruses.

Thanks for feedback.

hey, I’m using the windows defender and it says that the new version has a Trojan. Can you please fix it?

(1 edit)

It is false positive. The install file has been checked with many antivius tools and most of them do not detect any problem. You can see the report in below link (even Microsoft Defender has no problem with it)

https://www.virustotal.com/gui/file/330232770292eb4b316726c2636fdde08ee3b83c891b...

Sometimes some antivirus software detects problem with unpopular application (which were not installed on thouseds of PCc). As they based on heuristic (simply saying guessing) they often makes false reports. By default windows suspect not popular program which are not digitally signed as this appp. Unfortunately signing which makes application safe from OS point of view is possible only for companies (as Movie Business is hobby project even if I would paid for certificate it will not be granted for private person).

From my side I can only says that few thousands of persons already installed latest version and they didn't get any problems.

But of course I totally understand that you may be scared with this install. If you have any doubts do not install it.


UPDATE: I reported it to Microsoft to check once again new version by them.

I have send it to Microsoft. And there is no problem with the file. It was rescaned and no problems was detected. Screenshot attached.

You can check it also under following url: Submission details (b3b93ea5-280a-4741-aead-927b4f8028c6) - Microsoft Security Intelligence

(but you will have to login with your Microsoft account).


Answer for Microsoft:

Analyst comments:

We have removed the detection. Please follow the steps below to clear cached detection and obtain the latest malware definitions.

1. Open command prompt as administrator and change directory to c:\Program Files\Windows Defender

2. Run “MpCmdRun.exe -removedefinitions -dynamicsignatures”

3. Run "MpCmdRun.exe -SignatureUpdate"

Alternatively, the latest definition is available for download here: https://www.microsoft.com/en-us/wdsi/definitions Thank you for contacting Microsoft.

After performing this steps you antivirus should have no more problem with install file.

I’ve updated the version of the anti virus and I still can’t install the game, same problem.

Thanks for info... but I cannot do anything more. You can report it by yourself (you can put there more information about messages, version of antivirus database and so on). https://www.microsoft.com/en-us/wdsi/filesubmission

(3 edits) (-1)

I was  starting to use VirusTotal (nice tool by the way) and I would give you some hint how to interpret results (as you misinterpret it). VirusTotal uses one engine to check the file against many different antivirus tools. If during the checking it fails on some antivirus software it doesn't mean that the virus is inside. In case of BF2Setup indeed 2 of the AV software detect some problems (I have never hear about it before). But 62 other (with known names as Microsoft, Kaspersky, Symantec, McAfee) didn't found any problem.

Why those 2 has detected some problems? Because of they algorithm which is used to do heuristic (which in fact is guessinng). I do not know which algorithm is used for particular antivirus but I read on some dev forums some radiculitis rules like if code consist File.Exist method used it is marked as virus/malware/trojan/dangerous app.

The problem is that this is basic method which is used when you program application which uses files... in other case if file will not exist application crashes (you need to handle such cases in the code). If such rules are used that means that almost all programs will be treated as virus. And for such "antivirus" you have to be very skeptical.

So it is necessary to understand the result and use common sens when interpreting results of antivirus software.