C:\Program Files(x86)\Steam\GameOverlayRenderer.dll is noted as containing Win32:FakeAlert-AEQ [Trj].
You could also check the offending/suspect file at: VirusTotal - Multi engine on-line virus scanner and report the findings here the URL in the Address bar of the VT results page. You can’t do this with the file securely in the chest, you need to extract it to a temporary (not original) location first, see below.
Create a folder called Suspect in the [b]C:[/b] drive. Now exclude that folder in the File System Shield, Expert Settings, Exclusions, Add, type (or copy and paste) C:\Suspect*
That will stop the File System Shield scanning any file you put in that folder.
If only GData and avast detect it - GData uses avast as one of its two scanners so counts as 1 detection and almost certainly an FP.
Send the sample to avast as a False Positive:
Open the chest and right click on the file and select ‘Submit to virus lab…’ complete the form and submit, the file will be uploaded during the next update.
Avast was able to send it for review and I also took it out of the chest. My friend called and said that she is having an FP as well for about 6 months. Its a windows file we know how to get the file to the chest but we don’t know if it will cause any system damage while in there and filling out the FP report. What should we do? She knows its a FP because she did some research online about it and saw it was a part of the HP computer line.
I don’t know why you took it out of the chest as in theory avast would alert again unless you specifically excluded it. The idea of leaving a copy in the chest is you scan that copy to confirm when it is no longer detected. It would have been helpful as requested if you had posted the URL to the VT results.
Doing some research on-line is no substitute to confirmation, using virustotal, so your friend should do as you have confirm and submit to avast for analysis and correction.
Since you don’t mention anything about her detection, file name, malware name and location, I can’t give any detailed advice.
Malwarebytes detected steamerrorreporter as a trojan.agent now. Why are these programs saying this legitimate program is malware? 2 programs saying different files are bad?
Probably because of what it does might be considered suspicious.
That is why I suggest virustotal with 43 different scanners.
I have to let them out of quarantine to use VT again.
Nothing found for the Avast one but what MBAM found was reported by Avira. http://www.virustotal.com/file-scan/report.html?id=2051dd191abfe2c7436e95d7fbba38c765042996626e69a43a38844bf028cbde-1301910263
Not even by avast on VT even for the one detected by avast ?
If so check scan it again with avast and if nothing detected then what appears to be an FP has been corrected.
Well I can’t speak for MBAM, but if this file is part of the same program functionality then the VT results are far from conclusive and you should report it as a possible FP to MBAM.
- MBAM False Positive reporting - http://forums.malwarebytes.org/index.php?showforum=42.
FP is gone scanned files in chest and its not detected anymore.