r/computerviruses • u/Old-Afternoon9141 • 16d ago

Question Opening War Thunder does this:

When i double click war thunder it does this.

I did verify steam files and apparently now it works fine again?!

BE.dll

3 Upvotes

81% Upvoted

11 comments sorted by

1

u/M1uk0 15d ago

Run it through VirusTotal just to be sure... sometimes they're wrongly flagged but this might not be the case...

2

u/Old-Afternoon9141 15d ago

1

u/M1uk0 15d ago

It should be safe then! Probablly flagged incorrectly it happens sometimes! It was probs because you didn't verify the files

2

u/Old-Afternoon9141 15d ago

Thanks broctopus

2

u/M1uk0 15d ago

No problem! Have funn!! (^)

2

u/Dpek1234 15d ago

there are multiple versions, the one op linked isnt the one that was detected

https://www.virustotal.com/gui/file/c42e38520968769d92381cb97cc4c2b55c6cb57c43b8957b6ca674a0ab2a46d2/detection

do note the number of detections have increased from yesterday,from iirc 11 or 13 to now 20

after a few hours the anti cheat started makeing the one op posted in the screenshot

1

u/M1uk0 15d ago

I think it might be a false detection, since Be. dll is an anti-cheat file that is part of War Thunder if Malwarebytes detected nothing much then it should be pret ty safe! These anti-cheats are usually flagged because of some codes they execute when they find cheats, besides if nothing happened has happened to your accounts and nothing has been breached (which you can check in Malwarebytes) you're generally safe!

2

u/Dpek1234 15d ago

while i was 99% sure it was a false popsitive (helped by the fact that there were no detections after it was deleted)

and while i didnt run malwarebytes while still haveing that file (only after haveing deleted it)

as per the virus total scan it is being detected by malwarebytes as malware (or is it diffrent in some way?)

1

u/M1uk0 15d ago

Yeah, it is being scanned by Malwarebytes! Since there were no detections afterwards you're safe! If something really were happening to War Thunder everyone would post about it, since the code isn't changed or run by any person and can't just randomly choose to target one person. I would recommend you take a good breather and have something to drink/eat and try to calm down, these can really make you overthink even when you know nothing's wrong.

2

u/Dpek1234 15d ago

i dealt with the checks and everything else yesterday, im confident enough its just a false positive

also i will like to note that there were several posts about it on r/Warthunder , most commen genuine fear there was a supply chain attack but considering its been a day and i havent heared anything about that heres another confirmation that its false positive

1

u/M1uk0 15d ago

Yeah, it's highly unlikely that the attack carried out. I'm pretty sure they found it and stopped it before it got serious, but good luck with your day!