Hi,
after the automatic virus data base update the .exe file of the game Portal2 is shown as a virus.
Probably it’s false-positive, how can I proof it and what I have to do that avast can fix it with the next update?
C:/ProgramFiles/Valve/Steam/Steamapps/common/portal 2/portal2.exe
It’s the original version of the steam store, shown as Win32:Malware-gen. Before the update there wasn’t a warning.
Sincerely,
RazooN
You could also check the offending/suspect file at: VirusTotal - Multi engine on-line virus scanner and report the findings here, post the URL in the Address bar of the VT results page. You can’t do this with the file securely in the chest, you need to extract it to a temporary (not original) location first, see below.
Create a folder called Suspect in the [b]C:[/b] drive. Now exclude that folder in the File System Shield, Expert Settings, Exclusions, Add, type (or copy and paste) C:\Suspect*
That will stop the File System Shield scanning any file you put in that folder.
got this as well while doing my nightly scan.
here is the link for the VirusTotal findings page;
long story short, Portal2.exe reports as “Win32:Malware-gen” for Avast, Avast5 and Gdata, but nothing else.
I registered, because I’ve just now (five minutes ago) come across the same problem.
I have no reason to believe that the file actually is infected.
Hey,
thank you for your answers!
Avast put the portal2.exe in a container and I sent a message to the avast support because of “false-positive” over the feature in the avast programm.
Yes, the link of vt shows it clearly. It’s false positive, so lets hope the next database update comes very soon.
Sincerely,
RazooN
I sent the file on my computer for analysis as well, and the results are the same:
Yes this certainly looks like a false positive, which when submitted avast should deal with quite quickly.
Restore it to its original location, periodically check it (scan it in the chest), there should still be a copy in the chest even though you restored it to the original location. When it is no longer detected then you can also remove it from the File System Shield and avast Settings, exclusions lists.
Note: When using the Browse button it only goes down to folder level accept that. Now open the entry in the exclusions and change the * to \file_name.exe where file_name.exe is the file you want to exclude.
DavidR, is this a instruction how to play the game without any warnigs and transfers into a container?
What you mean with “… in the chest”? I can’t translate it to german in my mind.
The avast Chest is (a quarantine/container), where infected files are sent, so you have to access it to send the file to avast for analysis.
AvastUI, Maintenance, Virus Chest, see image, whilst the language would be different, the actual user interface locations are in the same order.
New update, it’s fixed. Thanks for that fast support. 
Thanks for the feedback.
Avast are generally fast to correct any false positive once analysed.
I apologize in advance if this is not an appropriate place to post this, but I have problems with making Portal 2 and Avast play nice with each other, too…
Specifically, the game will periodically stutter (both audio and video) unless I disable some of the real-time shields in Avast. I would of course prefer not to do this for security reasons.
This is on a Windows XP SP3 machine. I have another machine (Vista) which has no such problems, i.e. plays Portal 2 with Avast in the background with no performance issues at all.
Any ideas? And should I be posting this somewhere else altogether?
Thanks.