Why is Steam's vrserver.exe being declared generic Malware by Avast?

EmoHobo · 2014-06-22T20:08:52.000Z

https://www.virustotal.com/en/file/b13ddbacad0d8410acc9d6c18d34db1a415ab85475d946aa54c26e430a96c485/analysis/1403467653/

No results came back when I had it scanned here. It’s clean, is this a false positive?

AndrewJ · 2014-06-22T20:22:10.000Z

Avast popped up with it for me as well just when I plugged in my memory stick. When scanning the file from the backup, it also flags it, meaning it must be a false positive, since it has only started doing it.

Screenshot when I scanned the windows backup version:

http://i.imgur.com/4DNDwuV.jpg

Edit: It is also flagging trz61C4.tmp as well, Virustotal scan:
https://www.virustotal.com/en/file/b13ddbacad0d8410acc9d6c18d34db1a415ab85475d946aa54c26e430a96c485/analysis/1403469257/

EmoHobo · 2014-06-22T20:22:59.000Z

So just for my own curiosity, how can we confirm it’s a false positive, I’m always a bit paranoid.

What is that thing about a tmp file, it’s not flagging that one for me, at least not yet.

AndrewJ · 2014-06-22T21:01:41.000Z

I think the temp file is what avast renamed the vrserver.exe file to when it was cleaning it, it was left as I didn’t reboot my computer.
It has the same SHA256 as the vrserver.exe file.

EmoHobo · 2014-06-22T21:05:21.000Z

Ah, well I don’t know much about this stuff to be honest.

Should I just add these files to my exclusion list and keep playing games?

AndrewJ · 2014-06-22T21:06:13.000Z

I just deleted the whole vr folder in steam, and haven’t had any problems playing any of my games.

EmoHobo · 2014-06-22T21:07:29.000Z

I’m going to assume it’s mostly just related to VR equipment.

system · 2014-06-22T21:28:33.000Z

Please, report any FP’s here

http://www.avast.com/contact-us.php?subject=VIRUS-FILE

EmoHobo · 2014-06-22T21:29:08.000Z

I already reported it.

system · 2014-06-22T21:30:49.000Z

EmoHobo post:9:

I already reported it.

Good, no problem

EmoHobo · 2014-06-23T04:45:07.000Z

Anyone know if the issue still exists?

system · 2014-06-23T06:29:34.000Z

EmoHobo post:11:

Anyone know if the issue still exists?

Yes I can, just came on Steam this morning and Avast blocked it straight away.

system · 2014-06-23T20:35:39.000Z

I’ve got the same message yesterday. Is it false alert or what?

Pondus · 2014-06-23T20:39:07.000Z

cve-doomsday post:13:

I’ve got the same message yesterday. Is it false alert or what?

Suspicious files can be uploaded and tested with multiple malware scanners at one of these places
www.virustotal.com / www.metascan-online.com / www.jotti.org

Announcements