steamoverlayvulkanlayer64.dll coming up as malware?

[Thanatos]

Steam updated and my AV flagged this as malware. Being as it is from Steam I am almost sure that it is a false positive, but just posting here just in case anyone else has come across anything malicious from this file?


EDIT: Issue has been fixed on Webroot's side of things. Please read quoted text below:

Originally posted by Sherlock:

This False Positive has been reversed on Webroot's side of things, you should be able to restore from quarantine, with no further issues. If it does give you problems uninstall and re-isntall SecureAnywhere

If its still an issue after that you can leave them a message here:
https://detail.webrootanywhere.com/servicewelcome.asp

[DirtyFishy]

What AV are you using?

[Cathulhu]

False positive.

[Thatbrownmonster]

Never heard of that file...
Also try google,search that file name and see what other people say,if it's false positive then you just relax,if not....well delete it and check for more malware in your pc

[Thanatos]

Originally posted by DirtyFishy:

What AV are you using?

Webroot.

Originally posted by Cathulhu:

False positive.

Figure as much, never hurts to reach out though.

Originally posted by Thatbrownmonster:

Never heard of that file...
Also try google,search that file name and see what other people say,if it's false positive then you just relax,if not....well delete it and check for more malware in your pc

Tried to do some Googling on it before posting. Not much from that file in particular but nothing showing up as malicous in the the ones that are similar.

[Spawn of Totoro]

Originally posted by Thatbrownmonster:

Never heard of that file...
Also try google,search that file name and see what other people say,if it's false positive then you just relax,if not....well delete it and check for more malware in your pc

Just added I thing. A minor patch was just released to prep for Vulcan games.

My AV hasn't said anything.

[Snapjak]

It's Steam's new(ish) Vulkan API overlay dll.

[Spawn of Totoro]

Originally posted by Snapjak:

It's Steam's new(ish) Vulkan API overlay dll.

Someone read the patch notes!

[Rakiryu]

my webroot just detected this file as well

[DirtyFishy]

Originally posted by Spawn of Totoro:

Originally posted by Snapjak:

It's Steam's new(ish) Vulkan API overlay dll.

Someone read the patch notes!

Is there a link or something? I guess I should possibly know about this. (I'm always slow).

[Rakiryu]

http://store.steampowered.com/news/?feed=steam_client

[wuddih]

the obligatory your AV is developed by a ♥♥♥♥ Williams post.

32
https://virustotal.com/en/file/2ef8655dce2e6d7701aca7a1403bbe96b4a219bc4cf1697fb2f22228be8dd663/analysis/1467412411/

64
https://virustotal.com/en/file/e797d21104e93283be42995e53d67af54c7ad5a4bc46593e26af9f41a6b65c24/analysis/1467412284/

[sugarpuss]

Webroot also keeps telling me that steamoverlayvulkanlayer64.dll_ is a "Pua.Adware.Crossrider". Also occasionally something like "Win32.localinfect" (?). Started appearing after I restarted my laptop when notified there was a beta update available to download in regards to my AMD Radeon driver (it was from an AMD Install Manager program so I just went for it)...but also noticing for quite a while after the restart, Steam's trying to update but it's taking forever, waiting to hear if Malwarebytes catches it too but I assume there's no problem. EDIT: I do realize since it's a Steam thing it was probably coincidence with my driver update.

[almightypmj]

I'm also getting the same flag for steamoverlayvulkanlayer64 with Webroot. Also Malwarebytes doesn't detect anything. I suspect it's a false positive.

[Grandest of Omens]

Originally posted by Thanatos:

Originally posted by DirtyFishy:

What AV are you using?

Webroot.

Originally posted by Cathulhu:

False positive.

Figure as much, never hurts to reach out though.


God I hate webroot at times.

[sugarpuss]

Just in case anyone wants to stop the annoying Webroot notification, you can open the program, open Settings next to PC Security and find the "troublesome file" under Block/Allow Files, change it to Allow, and it should stop throwing a fit.