meta Aug 16, 2014 @ 10:14pm
Suspicious steam.exe programme detected!!!
So I recently found that my anti-malware dectected a suspious steam.exe programme. The file location is C:\Users\User\AppData\Roaming\Steam\Reversed\steam.exe . If anyone can or cannot find it in the similar location please reply below. It is detected as a potential threat that it generates BitCoin for cybercriminals. Appriciate all your help and thx.

EDIT: This is a malware witch generates bitcoins for miners. Delete this folder if you find it inside the Roaming folder. It will slow your pc down.
Last edited by meta; Feb 24, 2015 @ 11:21pm
< >
Showing 1-15 of 17 comments
LiveMChief Aug 16, 2014 @ 10:16pm 
I don't even have a steam folder in that folder.

What is inside the steam folder other then that exe?
Waahson Aug 16, 2014 @ 10:17pm 
I don't even have a Steam folder in \Roaming so.. Yeeeeah.. Delete it and run a scan again.
Last edited by Waahson; Aug 16, 2014 @ 10:17pm
meta Aug 16, 2014 @ 10:25pm 
Thanks m8s I deleted it and everything is fine....for now...
meta Aug 16, 2014 @ 10:25pm 
LOL i dun even remember nothing like steam folder will have.

Originally posted by LiveMChief:
I don't even have a steam folder in that folder.

What is inside the steam folder other then that exe?
BrinCe Aug 20, 2014 @ 11:04am 
i have the same problem mate my malawarebytes keep blocking it from accessing the internet i found it in \AppData\Roaming\Steam\Reversed\ a so i uploaded steam.exe to virustotal and it gave me that its a bitcoin mining thing so i deleted the folder but later it came back so i decided to block the folder from write and read and it came back on my documents now so i did the same thing and i hope it doesn't come back
Originally posted by -1:
i have the same problem mate my malawarebytes keep blocking it from accessing the internet i found it in \AppData\Roaming\Steam\Reversed\ a so i uploaded steam.exe to virustotal and it gave me that its a bitcoin mining thing so i deleted the folder but later it came back so i decided to block the folder from write and read and it came back on my documents now so i did the same thing and i hope it doesn't come back
It seems as if something is there.
You should take care of the situation
meta Aug 20, 2014 @ 9:50pm 
Thx for all the help I deleted it and seems fine now
[PCMR] Tizaki Aug 21, 2014 @ 12:39pm 
OP, this is BitCoin malware. I made an in-depth post about it here: http://steamcommunity.com/discussions/forum/1/35221584425122691/
Noam Chompskeet Nov 14, 2014 @ 7:05am 
I found it in AppData/Roaming/zombies/Reversed. Completely baffled as to how (1) MSE and MBAM failed to detect this and (2) what program might've installed it. I installed some weird programs trying to recover some files last week, but it didn't start until this morning when I rebooted my PC. Bizarre.
/TheDeluxe\ 0_o Nov 14, 2014 @ 7:08am 
Lol)))
TirithRR Dec 6, 2014 @ 12:12pm 
Originally posted by Truth^:
1.5 euro in 24 hour

If you are going to lie and scam people, you have to make it more alluring than 1.5 euros in 24 hours.
Bxrsxrkxr Dec 6, 2014 @ 12:13pm 
согласен господа,хоть я и не понимаю о чем вы
ReBoot Dec 6, 2014 @ 12:22pm 
Originally posted by BrinCe:
i have the same problem mate my malawarebytes keep blocking it from accessing the internet i found it in \AppData\Roaming\Steam\Reversed\ a so i uploaded steam.exe to virustotal and it gave me that its a bitcoin mining thing so i deleted the folder but later it came back so i decided to block the folder from write and read and it came back on my documents now so i did the same thing and i hope it doesn't come back
That means that you still have a virus on your PC which recreates the file again and again. Clean up the virus.
McFlurry Butts Feb 24, 2015 @ 11:04pm 
I have a boot cd. But this is good to know for future references. Thank you.
Piroxy Dec 19, 2015 @ 6:23am 
i dont even have appdata folder XD
< >
Showing 1-15 of 17 comments
Per page: 1530 50

Date Posted: Aug 16, 2014 @ 10:14pm
Posts: 17