Windows defender false? virus report

[JayDee]

ISSUE
Windows defender reports a trojan in one of the Steam files
Steam\steamui\localization\shared_thai-json.js

Trojan:Script/ObfusScript.A!ml

OS
Windows 11

STEPS
-

EXPECTED
No false error reports.

[-=Happy Egg=- ™]

Same here, crashed my windows, then appears that messages on the steam launch...

[360hz Still Trash]

Same
Trojan:Script/Wacatac.B!ml
file: D:\Steam\package\tmp\steamui\localization\shared_thai-json.js_
file: D:\Steam\package\tmp\steamui\localization\shared_koreana-json.js_
file: D:\Steam\package\tmp\steamui\localization\shared_vietnamese-json.js_

[LeonS]

+

[Dream Sailor]

Same, only happens on the Steam launch.

[Vyger]

same here

Trojan:Script/ObfusScript.A!ml

E:\Steam\package\tmp\steamui\localization\shared_koreana-json.js_
E:\Steam\package\tmp\steamui\localization\shared_thai-json.js_

[ＬＥＭＯＮ]

same here

[ＬＥＭＯＮ]

my antivirus detected: Trojan:Script/ObfusScript.A!ml
idk what this is but it also says:
shared_vietnamese-json.js
shared_koreana-json.js

[Some Guy]

Yep, I've got the same issue, it popped up as a threat when steam launched then vanished. I ran a windows defender offline scan and it picked up the korean and thai localisation files as trojans

[Some Guy]

I've contacted steam support about the issue, will update when I get a reply

[ⴸAᒪⴸEᎡ]

Same - just had
Trojan:Script/ObfusScript.A!ml
detected in 2 files:
file: F:\Valve\steamui\localization\shared_koreana-json.js
file: F:\Valve\steamui\localization\shared_thai-json.js

and
Trojan:Win32/Phonzy.B!ml detected in
file: F:\Valve\steamui\localization\shared_vietnamese-json.js

[MikeGreenwild]

Trojan:Script/ObfusScript.A!ml
file: F:\Steam\steamui\localization\shared_koreana-json.js
file: F:\Steam\steamui\localization\shared_thai-json.js

Trojan:Script/Wacatac.H!ml
file: F:\Steam\steamui\localization\shared_russian-json.js

Trojan:Win32/Phonzy.B!ml
file: F:\Steam\steamui\localization\shared_vietnamese-json.js

[Leachim]

The same here:
Trojan:Script/ObfusScript.A!ml
detected in 2 files:
file: F:\Valve\steamui\localization\shared_koreana-json.js
file: F:\Valve\steamui\localization\shared_thai-json.js

and

Trojan:Win32/Phonzy.B!ml detected in
file: F:\Valve\steamui\localization\shared_vietnamese-json.js

Now two question. What happens if I delete these folders? Are these folders in fact malicious, because only when I start Steam does the threat notification appear?

[ElalE]

Besides many of these I also got:
Trojan:Script/Sabsik.FL.A!ml
Affected file:
C:\Steam\steamui\libraries\libraries~ef7b14eaf.js

Edit: Oh, and I forgot, I'm on Windows 10 so it's not unique to Windows 11

[Some Guy]

Originally posted by Leachim:

The same here:
Trojan:Script/ObfusScript.A!ml
detected in 2 files:
file: F:\Valve\steamui\localization\shared_koreana-json.js
file: F:\Valve\steamui\localization\shared_thai-json.js

and

Trojan:Win32/Phonzy.B!ml detected in
file: F:\Valve\steamui\localization\shared_vietnamese-json.js

Now two question. What happens if I delete these folders? Are these folders in fact malicious, because only when I start Steam does the threat notification appear?

I suspect that this is a false positive in a new update? They do happen from time to time particularly with games, but in my experience it's never happened with the steam client itself.
If you or your anti virus deletes the files, they'll be reinstalled when steam restarts. My suspicion is that this is a genuine false positive BUT for the time being it might be better to wait and see.

There's also this page on the steam support FQA which explains a bit more in depth:
https://help.steampowered.com/en/faqs/view/5F3D-1477-AFF9-C4F3

[Leachim]

Originally posted by Some Guy:

Originally posted by Leachim:

The same here:
Trojan:Script/ObfusScript.A!ml
detected in 2 files:
file: F:\Valve\steamui\localization\shared_koreana-json.js
file: F:\Valve\steamui\localization\shared_thai-json.js

and

Trojan:Win32/Phonzy.B!ml detected in
file: F:\Valve\steamui\localization\shared_vietnamese-json.js

Now two question. What happens if I delete these folders? Are these folders in fact malicious, because only when I start Steam does the threat notification appear?

I suspect that this is a false positive in a new update? They do happen from time to time particularly with games, but in my experience it's never happened with the steam client itself.
If you or your anti virus deletes the files, they'll be reinstalled when steam restarts. My suspicion is that this is a genuine false positive BUT for the time being it might be better to wait and see.

There's also this page on the steam support FQA which explains a bit more in depth:
https://help.steampowered.com/en/faqs/view/5F3D-1477-AFF9-C4F3

I believe so, because in my folder where the Trojan is located, the date is June 6, the same day as the last Steam Client Beta update. even when I deleted the folders they came back with the release date. So I believe it could be a bug in the new update. I hope for new information, thanks man.