More than likely a false positive, sometimes happens when steam has an update and the virus checker hasn't been updated to take it into account.
Def. false positive imo. Although, I supose something could have injected itself into steam.exe.
Have a quick check on Steam forums to see if anyone else has picked this up. I'd expect an update for Kaspersky if this is a false positive.
Well, that detection is dated at 19 Feb. I ran a full scan today and nothing was detected. I've had no warnings since, in fact I wouldn't have even noticed that if I didn't check the 'All Detected Malware' bit. Puzzled why it says quarantined though, I didn't do it and I can still run it?
Thanks guys
Last edited by watercooled; 27-02-2009 at 02:12 PM.
How can I be sure it isn't malware? And where could it have come from? I found this page https://support.steampowered.com/kb_...4361-MVDP-3638 but it doesn't say anything about false positives with the Steam.exe
The fact it didn't find it when you scanned today kinda confirms it was a false positive doesn't it? Would assume your AV has been updated since it "detected" the problem.
Is it still showing as quarantined? If so i'd unquarentine it and rerun just to make sure, if it still finds nothing then i wouldn't worry about it.
I've asked on the Steam forums too. Someone recommended to upload it to virustotal.com and it was clean. I also restored the quarantined file to the desktop and uploaded that, it was the exact same file (same checksums)! Can't think why there was a copy in quarantine plus one in the normal location. I scanned it again with Kaspersky and it reported it was clean. Also, if you try to restore an infected file from quarantine, it grabs it back straight away (like with the Eicar test virus) but with this one it restored it and even removed it from the detected list. Maybe a program update added it to a white list or something?
Hi, I work for Kaspersky UK and I can confirm this was a false positive. As you can see by the wording "generic" in the detection it was being picked up by the heuristics rather than the database updates. This was resolved and hence it is not detected anymore.
0iD (05-03-2009),Singh400 (06-03-2009),watercooled (05-03-2009),Zak33 (02-04-2009)
Bit like Nod32 - anything that isn't actually Windows (ironically) or Internet Explorer is classified riskware.
Moo.
I actually heard on Security Now podcast that some AV software (can't remember which, sorry) deleted crucial OS files and caused the system to fail to boot lol.
Thanks for the help Lisa, and welcome to Hexus!
No problem I will pop in from time to time to see if anyone needs any help.
There are currently 1 users browsing this thread. (0 members and 1 guests)