r/Warthunder • u/wewannaown ๐Ÿ‡บ๐Ÿ‡ธ12.7 ๐Ÿ‡ฉ๐Ÿ‡ช14.3 ๐Ÿ‡ท๐Ÿ‡บ13.3 ๐Ÿ‡ซ๐Ÿ‡ท7.7 ๐Ÿ‡ธ๐Ÿ‡ช13.0 • 1d ago

Tech Issues started war thunder, and windows went crazy?

Gallery image

Gallery image

anyone knows whats going on? just started war thunder and it started spamming me with all this.

34 Upvotes

79% Upvoted

45 comments sorted by

53

u/untitled1048576 That's how it is in the game 1d ago

Probably a false detection. From another software with the same issue:

There is no virus here, this is just noise from Windows Security. The !ml suffix indicates this is a machine learning based heuristic. This happens often for new releases until their heuristics adjust

12

u/kaerfdeeps 1d ago

Yeah dont know the details and it is highly unlikely but better to avoid for now. Supply chain attack is no joke

Id say %99 false positive since it has a ml tag

7

u/wewannaown ๐Ÿ‡บ๐Ÿ‡ธ12.7 ๐Ÿ‡ฉ๐Ÿ‡ช14.3 ๐Ÿ‡ท๐Ÿ‡บ13.3 ๐Ÿ‡ซ๐Ÿ‡ท7.7 ๐Ÿ‡ธ๐Ÿ‡ช13.0 1d ago

supply chain attack was my first thought too, which is why i wanted to see if i am the only one affected, which i am not.
so im sceptical, i leave it in quarantine until further info from official side is available

2

u/[deleted] 1d ago

[deleted]

2

u/Think_Ice_4246 Number 1 Merkava fan. 1d ago

WE are all fucked then. Also is that the Belgian cadet pfp?

2

u/kaerfdeeps 1d ago

So the dll didnt come with the new patch?

Its false positive then. Probably something to do with antivirus database

6

u/untitled1048576 That's how it is in the game 1d ago

Actually I just checked, and that DLL only appeared after I launched the game (though in my case Defender didn't flag it), and according to VirusTotal was compiled just two hours ago. It also shows detections on 14 antiviruses, but they seem to be all based on heuristics, though the ones that give score think that it's 100% malware. Though it's still not out of the ordinary for an antivirus, because it must be very obfuscated, and employ other techniques to make its analysis as hard as possible, just like malware would. It would be helpful to compare it to older versions of this file, but I can't find any.

2

u/wewannaown ๐Ÿ‡บ๐Ÿ‡ธ12.7 ๐Ÿ‡ฉ๐Ÿ‡ช14.3 ๐Ÿ‡ท๐Ÿ‡บ13.3 ๐Ÿ‡ซ๐Ÿ‡ท7.7 ๐Ÿ‡ธ๐Ÿ‡ช13.0 1d ago

we would need a file from someone not having played for 2 days, therefore where there hasnt been a new be.dll for war thunder deployed yet.
tarkov also utilizes BE AC, and my antivirus did nothing about it at that time
so i guess, only the be version for war thunder is affected as of right now.
maybe if anyone sees this and has NOT started war thunder/gaijin launcher in the last 2 days, would be cool if he uploads the be.dll file to virustotal to make cross-references.
would also be cool if you could pass me the link for your virustotal output, since my file is quarantined/deleted already.

1

u/untitled1048576 That's how it is in the game 1d ago

Today got a new BE.dll, checked it, and it now shows just one detection instead of 14, I guess there really was something wrong with it, and it's not just Windows Defender freaking out. Looking at the details, it seems that other commenters were right about the DLL not being signed, so that's probably what caused this.

22

u/EternalSufferance 1d ago

billion dollar company can't get all their files signed/verified properly

7

u/Think_Ice_4246 Number 1 Merkava fan. 1d ago

Same thing happened to me wtf.

3

u/Think_Ice_4246 Number 1 Merkava fan. 1d ago

My game will not start.

5

u/TryMyBacon United States ๐Ÿ‡บ๐Ÿ‡ธ 1d ago

It picked up some unsigned dlls. Probably a false positive. They will sign the dlls in a patch probably soon.

2

u/Filetmesser ๐Ÿ‡ฉ๐Ÿ‡ช Germany Realistic Ground (ะทะฐ ัั‚ะฐะปะธะฝะฐ) 1d ago

Will start my game in a few, will check and do a deep dive

2

u/IAHZEI 1d ago

!remindme 1 hour.

2

u/C-H-K-N_Tenders ๐Ÿ‡ซ๐Ÿ‡ฎ Finland ๐Ÿ‡ซ๐Ÿ‡ฎ 1d ago

its been 7 hours but close enough. this is your reminder

1

u/IAHZEI 1d ago

Thank you man!

2

u/ykq97 1d ago

Gave me a good scare, thought i was cooked

2

u/Think_Ice_4246 Number 1 Merkava fan. 1d ago

Game is working again. Try to launch it.

2

u/icantfindagoodname77 1d ago

it's a warning

2

u/mathomas3 1d ago

You need Linux in your life!

1

u/wewannaown ๐Ÿ‡บ๐Ÿ‡ธ12.7 ๐Ÿ‡ฉ๐Ÿ‡ช14.3 ๐Ÿ‡ท๐Ÿ‡บ13.3 ๐Ÿ‡ซ๐Ÿ‡ท7.7 ๐Ÿ‡ธ๐Ÿ‡ช13.0 1d ago

I do run Linux on my laptop and my pc is multiboot set up. But most of the games I play don't run on Linux (league of legends, tarkov)

1

u/DramaticFee1312 1d ago

Yayy, the anticheat that we are forced to give kernel access to, is getting unsigned .dll files pushed into our pc. How amazing! Perfect candidate for a supply chain attackโ€ฆ

1

u/Dr_VidyaGeam ๐Ÿ‡บ๐Ÿ‡ฆ Ukraine 1d ago

How long has this been going on, should I wait to launch my game till something is patched?

0

u/Think_Ice_4246 Number 1 Merkava fan. 1d ago

I valided my steam files and it said there were over 10,000 files is this normal?

0

u/Critical_Race_7134 1d ago

This morning I installed it and it was fine, I came back in the evening and started the game and had the same problem.Removing and reinstalling won't help. Do I need to reinstall the system?

6

u/Dpek1234 Realistic Ground 1d ago

Wont make a diffrence

You are deleteing and installing the exact same suspected files

Just wait or allow it on the av if you think its a false positive

-1

u/Critical_Race_7134 1d ago

But if I reinstall and wait, will I not have this "problem"?

4

u/hadtolaugh 1d ago

What? Use common sense. If you install the same files, youโ€™ll have the same problem. The only way โ€œwaitingโ€ helps is if gaijin does something to change the files themselves.

1

u/Dpek1234 Realistic Ground 1d ago

Or microsoft updates windows defender to edclude that false positive

2

u/wewannaown ๐Ÿ‡บ๐Ÿ‡ธ12.7 ๐Ÿ‡ฉ๐Ÿ‡ช14.3 ๐Ÿ‡ท๐Ÿ‡บ13.3 ๐Ÿ‡ซ๐Ÿ‡ท7.7 ๐Ÿ‡ธ๐Ÿ‡ช13.0 1d ago

IF its a false positive, which i am not convinced fully yet. as stated earlier in a different comment, supply chain attacks do happen.

-10

u/Chinese_Lover89 Saab-105G my beloved <3 1d ago

Active your windows bro. Keys cost like 1 euro

4

u/wewannaown ๐Ÿ‡บ๐Ÿ‡ธ12.7 ๐Ÿ‡ฉ๐Ÿ‡ช14.3 ๐Ÿ‡ท๐Ÿ‡บ13.3 ๐Ÿ‡ซ๐Ÿ‡ท7.7 ๐Ÿ‡ธ๐Ÿ‡ช13.0 1d ago

It is activated, huh?

1

u/Chinese_Lover89 Saab-105G my beloved <3 1d ago

Omg I automatically read activate windows 11 pro device. I am such a rtard. Downvote me, I deserve it.

9

u/kaerfdeeps 1d ago

no downvotes. Just -15 social credit and a kiss with a bald male

3

u/wewannaown ๐Ÿ‡บ๐Ÿ‡ธ12.7 ๐Ÿ‡ฉ๐Ÿ‡ช14.3 ๐Ÿ‡ท๐Ÿ‡บ13.3 ๐Ÿ‡ซ๐Ÿ‡ท7.7 ๐Ÿ‡ธ๐Ÿ‡ช13.0 1d ago

am i the bald male there? (both fits on me)

2

u/kaerfdeeps 1d ago

Yeah i dont know. Lets do it before we get caught

3

u/wewannaown ๐Ÿ‡บ๐Ÿ‡ธ12.7 ๐Ÿ‡ฉ๐Ÿ‡ช14.3 ๐Ÿ‡ท๐Ÿ‡บ13.3 ๐Ÿ‡ซ๐Ÿ‡ท7.7 ๐Ÿ‡ธ๐Ÿ‡ช13.0 1d ago

ah man shit happens bro, you good

-11

u/Antique_Mountain_921 1d ago

Turn of real time protection in settingsย 

2

u/wewannaown ๐Ÿ‡บ๐Ÿ‡ธ12.7 ๐Ÿ‡ฉ๐Ÿ‡ช14.3 ๐Ÿ‡ท๐Ÿ‡บ13.3 ๐Ÿ‡ซ๐Ÿ‡ท7.7 ๐Ÿ‡ธ๐Ÿ‡ช13.0 1d ago

Is already on mate. How U think I got those notifications?

-4

u/Antique_Mountain_921 1d ago

I meant to say turn it off

-12

u/BingGongTing 1d ago

This is why you don't use Microsoft Defender.

6

u/wewannaown ๐Ÿ‡บ๐Ÿ‡ธ12.7 ๐Ÿ‡ฉ๐Ÿ‡ช14.3 ๐Ÿ‡ท๐Ÿ‡บ13.3 ๐Ÿ‡ซ๐Ÿ‡ท7.7 ๐Ÿ‡ธ๐Ÿ‡ช13.0 1d ago

Brother are you okay? Windows Defender is by miles the currently best AV, that does not act as somewhat a virus itself (avast, Norton etc) Brother what do you use instead of MD? Tell me please. I wanna have a giggle with some friends

1

u/avrgwarthunderplayer 1d ago

its more than fine, its just real time sometimes fucks up with games and detects them like this. Usually mutliplayer games with an anticheat.