Avast WEBforum

Other => Viruses and worms => Topic started by: warnolo on March 23, 2012, 04:32:53 PM

Title: steam alarms
Post by: warnolo on March 23, 2012, 04:32:53 PM

Hello again everyone.

My avast got the virus database and started to claim that steam was infected with malware-gen.

I think it is a false positive as everyone in both forums say it is a false positive, but i have a few files on my quarantine chest. Shall i send them? and if i send them shall i send it as malware or as false positive?

Title: Re: steam alarms
Post by: Pondus on March 23, 2012, 05:04:45 PM

upload suspicious file(s) to www.virustotal.com and test with 40+ malware scanners
when you have the result, copy the URL in your addressbar and post it here for us to see


alternative
Jotti - http://virusscan.jotti.org/en
VIRScan - http://virscan.org/
Metascan - http://metascan-online.com/

Title: Re: steam alarms
Post by: warnolo on March 23, 2012, 08:14:36 PM

can't i send them to you with Avast?

Title: Re: steam alarms
Post by: warnolo on March 23, 2012, 08:19:47 PM

https://www.virustotal.com/file/6d90662a313a4eebcd429991ae14f9cd01316460e36bf5da28430cb09aef6fb6/analysis/
steamerrorreporter.exe

https://www.virustotal.com/file/1537585797244ef5cfba08357035014f0ea537efa7471c5095e9f4db59451c33/analysis/
steamservice.exe

Also i passed Malwarebyte's and didn't detected anything.

Title: Re: steam alarms
Post by: Pondus on March 23, 2012, 08:27:07 PM

Quote from: warnolo on March 23, 2012, 08:14:36 PM

can't i send them to you with Avast?

why me........i dont work for avast    ;)



if you think they are False Positives....send from chest as False Positives
you may add a link to this topic







Sigcheck for the files

file-3705570_exe - First seen by VirusTotal  2012-03-19 23:46:23 UTC ( 3 dager, 19 timer ago )

publisher................: Valve Corporation
product..................: Steam
internal name............: steamerrorreporter.exe
copyright................: Copyright (C) 2010 Valve Corporation
original name............: steamerrorreporter.exe
signing date.............: 7:55 PM 3/19/2012
signers..................: Valve
               VeriSign Class 3 Code Signing 2009-2 CA
               Class 3 Public Primary Certification Authority
file version.............: 01.34.12.06
description..............: steamerrorreporter.exe (buildbot_winslave04_steam_steam_rel_client_win32@winslave04)




SteamService.exe - First seen by VirusTotal  2012-03-23 08:08:47 UTC ( 11 timer, 15 minutter ago )


publisher................: Valve Corporation
product..................: Steam Client Service
internal name............: Steam Client Service
copyright................: Copyright (C) 2007
original name............: SteamSer.exe
signing date.............: 7:55 PM 3/19/2012
signers..................: Valve
               VeriSign Class 3 Code Signing 2009-2 CA
               Class 3 Public Primary Certification Authority
file version.............: 01.34.12.06
description..............: Steam Client Service (buildbot_winslave04_steam_steam_rel_client_win32@winslave04)

Title: Re: steam alarms
Post by: warnolo on March 23, 2012, 08:37:42 PM

Done. Let's see how it works.

Title: Re: steam alarms
Post by: warnolo on March 23, 2012, 08:41:21 PM

Now I'm a bit scared about logging in, even if i'm sure is a false positive.

Shall I continue like nothing happened and play some games or shall i wait for a future update of avast?

Title: Re: steam alarms
Post by: Pondus on March 23, 2012, 08:53:41 PM

there is only one detection on Virustotal...on one file.......and not from avast

is your avast updated ?

right click files in chest and rescan....still detected ?

Title: Re: steam alarms
Post by: warnolo on March 23, 2012, 08:55:29 PM

Yeah, it is the last version and doesnt find any virus in the files on the chest.

So free to go?

You know how paranoid i am :P

Title: Re: steam alarms
Post by: Pondus on March 23, 2012, 09:01:00 PM

then you can restore file(s) from chest    ;)