nattypeprobe.dll Trojan.FakeSteam from malwarebytes?

[Jestersage]

Today, I was running malwarebytes (not AVG or avast), and it was saying the file, nattypeprobe.dll, is a Trojan.FakeSteam. Currently it's in quarantine.

Now I already googled, and it say if it's AVG it will be false positive, and it is a p2p library. However, as I point out, this is brought on by malwarebytes.

Should I:
- restore it and add exclusion?
-Somehow force steam to redownload the correct version (and if so, how?)
-Reinstall?


EDIT: Now I have quarantine it. How do I know if it broke something? (mainly play tf2 and Payday 2 through steam)

[X_3heat]

i got the same message from malwarebytes

[XetrahAegis]

I would freshly install steam that would be your best bet!

Publicado originalmente por Jestersage:

Today, I was running malwarebytes (not AVG or avast), and it was saying the file, nattypeprobe.dll, is a Trojan.FakeSteam. Currently it's in quaranteen.

Now I already googled, and it say if it's AVG it will be false positive, and it is a p2p library. However, as I point out, this is brought on by malwarebytes.

Should I restore it and add exclusion? Or can I just reinstall Steam/recheck file so I can get the newest version from Valve server?

[X_3heat]

I dont think you need to reinstall, it's probably the recent steam update

[Fish]

I'm getting this as well, it looks like a false positive to me but I still don't like it.

[XetrahAegis]

I am not sure why this is doing this. But typically reinstalling should work.

Publicado originalmente por ♥♥♥♥♥♥♥♥♥♥♥:

I dont think you need to reinstall, it's probably the recent steam update

[mjhjm]

I'm getting this same alert with Malwarebytes. Steam ran fine yesterday, today starting Steam up triggered a Malwarebytes alert on nattypeprobe.dll as Trojan.FakeSteam (possibly during update download/installation). Did Steam file refresh as recommended by Steam, and the Malwarebytes alert keeps happening.

[YooOwnIt]

This is a false positive. There's NO way Steam would release viruses as it's a trusted game company.

[XetrahAegis]

Publicado originalmente por RockON:

Publicado originalmente por lukemojo_dojo:

I am not sure why this is doing this. But typically reinstalling should work.

Has nothing to do with faultyinstall, so reinstall will not fix this, Malwarebytes needs to fix the falsepositives.

I am very sorry that I've provided you with the wrong support.

[Khronokrator]

Also having this issue; it definitely looks to be a false positive from Malwarebytes.

[Krazy_Kangaroo]

Same Issue: Don't really want to do anything until I get confirmation from Steam or the Malwarebytes team that it's a false positive.

[Krazy_Kangaroo]

Just made an exclusion for the file, steam seems to be working fine now. I'm going to run a threat scan and see if anything turns up.

[Firesnail]

I got it today IMMEDIATELY after installing a profile manager for Skyrim (MalwareBytes Premium picked It up). I'm pretty sure it's not a false positive. Those EXE/MSI files can replace any DLL that they want with their own version. I'm guessing that's what happened here. MalwareBytes quarantined it and then Steam did an update. Worked fine after that. Be VERY careful about putting in those exclusions...

[Firesnail]

You're right. It does. It's just very suspicious that I was actually using Steam just fine all night until I tried to install that mod. The first time I tried to run it, I got hit with the detection. I think something else is at play here - it doesn't smell right.

[8bit shadow]

This 'virus' ins't a virus, it was first sighted about 2 years ago by AVG and classified as a faulse possitive a few weeks later. I.e. malwarebytes virus definition is out of date again.

[Firesnail]

I just confirmed it with VirusTotal. All clean except for MalwareBytes. I also looked at my MB logs: a definition update happened at almost the exact time that I was working on the Skyrim mod. I feel better about it now.

https://www.virustotal.com/en/file/e48e35218fde53c43d868218de78700cc0775e02877a56fe6b5e0b3cd396529a/analysis/1418185082/