FighterSoldier Nov 29, 2023 @ 4:12pm
Malware spotted from Steam file
I just got a notification from my antivirus that a malware has been spotted from a Steam file. Has anyone else's antivirus spot anything suspicious from Steam too or is it just me?

Edit: It is likely a false positive. My antivirus is Webroot, and I don't know if this is exclusive to Webroot, but it considers that Steam file as a threat.
Last edited by FighterSoldier; Nov 29, 2023 @ 7:28pm
Originally posted by Kage Goomba:
Well lookie here.
https://www.reddit.com/r/antivirus/comments/186jxp9/webroot_detecting_a_temporary_steam_startup_file/

Looks like its a new thing.
Research shows its a known and frequent target of malware but generally not a threat unless your system is already compromised.

Odds are - its a false positive and webroot fudged up.

If it was a threat - I'm rather confident my package would have stuck a fork in steam already.

Id flag it with webroots folks - and make an exception to ignore it/restore it or you'll risk breaking steam or something.

UNLESS - you do have a problem - one can never be too careful - but odds are in your favor (that being its not a problem)

May want to notify Steam Support as well - they have the weight to give Webroot the evil eye and tell them to "Knock it off"
< >
Showing 46-51 of 51 comments
X Afro Dec 3, 2023 @ 11:56am 
yeah, for me it was in the temporary files during update so killed it while trying to install, kind of weird. must be using similar code to change something triggering false positive or something.
Last edited by X Afro; Dec 3, 2023 @ 11:58am
Kage Goomba Dec 3, 2023 @ 12:47pm 
Originally posted by Shadowi:
when your protection acts maliciously and pretends to be innocent.
try to scan windows folder with full heuristics with this webroot software and be surprised.

Either read the thread in full or move along.
Trolling is inappropriate.
shado Dec 3, 2023 @ 5:30pm 
Originally posted by Kage Goomba:
Originally posted by Shadowi:
when your protection acts maliciously and pretends to be innocent.
try to scan windows folder with full heuristics with this webroot software and be surprised.

Either read the thread in full or move along.
Trolling is inappropriate.
ditto.
davidb11 Dec 3, 2023 @ 5:32pm 
Originally posted by Shadowi:
Originally posted by Kage Goomba:

Either read the thread in full or move along.
Trolling is inappropriate.
ditto.

You are very confused here.
THis is a legit false positive.
The problem has nothing to do with malicious programs.

Please don't ignore everything in the thread.
That's not allowed.
is the virus/trojan you're seeing Win32.LocalInfect.2?
ItZBullistic Dec 17, 2023 @ 7:39am 
Hello I took some time to reach out to Webroot support and got a reply back from them. They checked the system logs on my device and come back with this.

Hello,
Thank you for submitting your report. We have examined the logs from you system and found that the detected items were the result of a false positive and are not a threat. We have updated our security definitions to address this.
You may un-quarantine and restore the file that was quarantined by the Webroot SecureAnywhere software if you have not already done so. To restore the file:
1. Open on the cog icon next to PC Security.
2. Click the Quarantine tab.
3. Click the check box next to the filename, then click Restore.
Now that this change is in effect, we request that you run another scan of your computer (click "Scan My Computer" on the main overview window). the same detection occurs, please let us know immediately.
Thank you,
Jenny
Webroot Advanced Malware Removal Team


I did have my doubts about the file being malicious since it is directly inside steams folders. However, I wanted to double check before I unblocked it from quarantine.
< >
Showing 46-51 of 51 comments
Per page: 1530 50

Date Posted: Nov 29, 2023 @ 4:12pm
Posts: 51