Gen:Variant.Lazy.447747 Virus?

[themagicaldoor]

Hi.
My Bitdefender antivirus software found this virus when it finished downloading on Steam: Gen:Variant.Lazy.447747
This is why I can't install the game I bought.
How is it possible that a game bought from Steam has a virus? Has anyone else detected this virus during or before installation?

[SIXVI6]

I haven't been able to launch that game in a while.
Just got a notification from Bitdefender about that file though. Fired up the PC and a few minutes later it said bitdefender quarantined that same file. The game has been installed for a while but this just happened today.
Not sure whats going on.

[TedQuinlan]

same here

[Martin Tm.]

Same here right now.
Bitdefender sent it to quarantine.

[Fercyful]

Same here. Virus Total says "RV_WorkshopManager.exe" is a trojan

[WaZuuuP!]

any solution?

[globefish23]

Originally posted by WaZuuuP!:

any solution?

Refund it.
Then get the community made remake.
https://rvgl.org/

[Fercyful]

Originally posted by globefish23:

Originally posted by WaZuuuP!:

any solution?

Refund it.
Then get the community made remake.
https://rvgl.org/

thanks for the link

[♫MusicMen225♫]

Originally posted by globefish23:

Originally posted by WaZuuuP!:

any solution?

Refund it.
Then get the community made remake.
https://rvgl.org/

Keep the game and eventually disregard the "virus report". It's most likely a false positive or something they added by themselves, especially with that name of the "threat" - RVGL files can also be easily installed over the Steam copy.

[Pablo Escobark]

Originally posted by ♫MusicMen225♫:

Originally posted by globefish23:

Refund it.
Then get the community made remake.
https://rvgl.org/

Keep the game and eventually disregard the "virus report". It's most likely a false positive or something they added by themselves, especially with that name of the "threat" - RVGL files can also be easily installed over the Steam copy.

It's the use of old drivers which are likely known to be vulnerable to being hijacked. It's a common practice for malware to drop a signed legitimate but vulnerable driver to exploit and load their malware into memory where antivirus and EDR software typically isn't looking, hence the "lazy" name. It's not actually malware, just typical behavior of malware.

[♫MusicMen225♫]

Originally posted by Meow:

Originally posted by ♫MusicMen225♫:

Keep the game and eventually disregard the "virus report". It's most likely a false positive or something they added by themselves, especially with that name of the "threat" - RVGL files can also be easily installed over the Steam copy.

It's the use of old drivers which are likely known to be vulnerable to being hijacked. It's a common practice for malware to drop a signed legitimate but vulnerable driver to exploit and load their malware into memory where antivirus and EDR software typically isn't looking, hence the "lazy" name. It's not actually malware, just typical behavior of malware.

Makes sense, thanks for explaining that.