Author Topic: Why is Steam's vrserver.exe being declared generic Malware by Avast?  (Read 10150 times)

0 Members and 1 Guest are viewing this topic.

Offline EmoHobo

  • Sr. Member
  • ****
  • Posts: 339
https://www.virustotal.com/en/file/b13ddbacad0d8410acc9d6c18d34db1a415ab85475d946aa54c26e430a96c485/analysis/1403467653/

No results came back when I had it scanned here.  It's clean, is this a false positive?

Offline AndrewJ

  • Newbie
  • *
  • Posts: 6
Re: Why is Steam's vrserver.exe being declared generic Malware by Avast?
« Reply #1 on: June 22, 2014, 10:22:10 PM »
Avast popped up with it for me as well just when I plugged in my memory stick. When scanning the file from the backup, it also flags it, meaning it must be a false positive, since it has only started doing it.

Screenshot when I scanned the windows backup version:


Edit: It is also flagging trz61C4.tmp as well, Virustotal scan:
https://www.virustotal.com/en/file/b13ddbacad0d8410acc9d6c18d34db1a415ab85475d946aa54c26e430a96c485/analysis/1403469257/
« Last Edit: June 22, 2014, 10:36:16 PM by AndrewJ »

Offline EmoHobo

  • Sr. Member
  • ****
  • Posts: 339
Re: Why is Steam's vrserver.exe being declared generic Malware by Avast?
« Reply #2 on: June 22, 2014, 10:22:59 PM »
So just for my own curiosity, how can we confirm it's a false positive, I'm always a bit paranoid.

What is that thing about a tmp file, it's not flagging that one for me, at least not yet.
« Last Edit: June 22, 2014, 10:57:58 PM by EmoHobo »

Offline AndrewJ

  • Newbie
  • *
  • Posts: 6
Re: Why is Steam's vrserver.exe being declared generic Malware by Avast?
« Reply #3 on: June 22, 2014, 11:01:41 PM »
I think the temp file is what avast renamed the vrserver.exe file to when it was cleaning it, it was left as I didn't reboot my computer.
It has the same SHA256 as the vrserver.exe file.

Offline EmoHobo

  • Sr. Member
  • ****
  • Posts: 339
Re: Why is Steam's vrserver.exe being declared generic Malware by Avast?
« Reply #4 on: June 22, 2014, 11:05:21 PM »
Ah, well I don't know much about this stuff to be honest.

Should I just add these files to my exclusion list and keep playing games?

Offline AndrewJ

  • Newbie
  • *
  • Posts: 6
Re: Why is Steam's vrserver.exe being declared generic Malware by Avast?
« Reply #5 on: June 22, 2014, 11:06:13 PM »
I just deleted the whole vr folder in steam, and haven't had any problems playing any of my games.

Offline EmoHobo

  • Sr. Member
  • ****
  • Posts: 339
Re: Why is Steam's vrserver.exe being declared generic Malware by Avast?
« Reply #6 on: June 22, 2014, 11:07:29 PM »
I'm going to assume it's mostly just related to VR equipment.

REDACTED

  • Guest

Offline EmoHobo

  • Sr. Member
  • ****
  • Posts: 339
Re: Why is Steam's vrserver.exe being declared generic Malware by Avast?
« Reply #8 on: June 22, 2014, 11:29:08 PM »
I already reported it.

REDACTED

  • Guest
Re: Why is Steam's vrserver.exe being declared generic Malware by Avast?
« Reply #9 on: June 22, 2014, 11:30:49 PM »
I already reported it.
Good, no problem  :)

Offline EmoHobo

  • Sr. Member
  • ****
  • Posts: 339
Re: Why is Steam's vrserver.exe being declared generic Malware by Avast?
« Reply #10 on: June 23, 2014, 06:45:07 AM »
Anyone know if the issue still exists?

REDACTED

  • Guest
Re: Why is Steam's vrserver.exe being declared generic Malware by Avast?
« Reply #11 on: June 23, 2014, 08:29:34 AM »
Anyone know if the issue still exists?
Yes I can, just came on Steam this morning and Avast blocked it straight away.

REDACTED

  • Guest
Re: Why is Steam's vrserver.exe being declared generic Malware by Avast?
« Reply #12 on: June 23, 2014, 10:35:39 PM »
I've got the same message yesterday. Is it false alert or what?

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37525
  • Not a avast user
Re: Why is Steam's vrserver.exe being declared generic Malware by Avast?
« Reply #13 on: June 23, 2014, 10:39:07 PM »
I've got the same message yesterday. Is it false alert or what?
Suspicious files can be uploaded and tested with multiple malware scanners at one of these places
www.virustotal.com  /  www.metascan-online.com  /  www.jotti.org