Steam & Trojan.generic

[games130]

hi.. well i just tried to reinstalled my steam now that i have finish my exam. However the Kaspersky Internet Security 6.0 that i have on my computer detects that steam has a Trojan.generic in it... It is contained inside the file SteamTmp.exe

I never had this problem with my previous antivirus. Can someone care to explain if its okie to continue to use Steam or not?

[Gordy]

Download avg free and see what it picks up avoid using steam to log into your account till its been checked!

Steamtmp.exe sounds very dodgy as steam.exe is the normal one!

[FatalSaviour]

I agree with Gordy. I won't be at home till next week to check it out myself, but Steam.exe is, as Gordy says, the normal executable, and SteamTmp.exe just sounds like it's asking for problems .
What previous AV were you using? I really think this should have picked up on anything malicious.

[games130]

i was previously using Bitdefender but it was causing my pc to laggg so i had to change. Bit defender did not comain about the steam though... but i was not sure if there was Steamtmp.exe in the file last time.

[Lee H]

steamtmp.exe is not dodgy at all.

If Steam.exe finds that there is a newer version available, it downloads it from one of the content servers (as Steamtmp.exe or steamnew.exe or some name like that), deletes the old Steam.exe, renames the new file to Steam.exe, starts it running and then exits (thus passing control over to the updated Steam.exe).

As for lag with Bitdefender - I cannot say I've seen this on any PC from a XP 1800+ upto and including various A64 based systems.

[Paul Adams]

You're getting this message when installing Steam?

It could be that steam.exe is updating itself, and due to file locks it downloads the new version to a temporary file name, then replaces the file on disk and restarts the process - hence why there isn't normally a "SteamTmp.exe" file present.

From this thread it sounds like it's a normal process - same here too.

It sounds like a false positive from the AV program, but I would test it through at least 2 other AVs to see if it's just Kapersky being odd.

Edit:
Ah, seems like Lee found the same info

[jeNK^]

Sounds like the content server that you received the file from has been infected, either that or your anti-virus proggie is a bit over zealous, which won't be the first time AV software does that.

Try AntiVir, it kicks AVG's ass

[Lee H]

your anti-virus proggie is a bit over zealous, which won't be the first time AV software does that.

Yeap sounds like a false positive to me.

Saying that any file creating a copy of itself and renaming itself slightly different to the main file and then tries to access the internet sounds a little 'dodgy' in my ears

[jeNK^]

I forget the name of it exactly, but it's used a lot in companies.. begins with 'S'.. Soph or summin.. argh.. anyway, it wouldn't let me use mirc because it was a risk. Any other AV software I used was fine with it.

[dave87]

I forget the name of it exactly, but it's used a lot in companies.. begins with 'S'.. Soph or summin.. argh.. anyway, it wouldn't let me use mirc because it was a risk. Any other AV software I used was fine with it.

That'd be Sophos - bit of a pain but does its job well in large networked environments. With its latest release (once you've got it setup that is) it is pretty easy to manage too.

[bledd]

probably just a fasle positive

if you got it by typing in www.steampowered.com and downloading from there, there's little chance of it being a virus

[games130]

well.. the problem only occur when i am installing steam. Yeah i direct install from the steam website.

After installation however, i tried scaning the files with Kaspersky and AVG and they both found no virus.

About the bitdefender that i was using... the problem might be my hard disk as it is abit faulty. I will test it out again after i receive my replacement. I noticed the extreme lagg when i tried installing a software. The installation just stop and when i check the processor all the processing speed is taken up by the bit defender processor. I think it was bdss.exe

[DavidM]

I forget the name of it exactly, but it's used a lot in companies.. begins with 'S'.. Soph or summin.. argh.. anyway, it wouldn't let me use mirc because it was a risk. Any other AV software I used was fine with it.

I have similar problems which is why I don't bother with IRC now.

[games130]

what is this Sophos anyway?

[XA04]

^^ AntiVirus, which is good for networks.


Sounds like a false positive but do a check online at http://housecall.trendmicro.com to be sure.