This is a split board - You can return to the Split List for other boards.

I sign in to my friend's Steam account on my computer, and I get a virus as soon

#1ajko000Posted 6/22/2014 4:44:32 PM(edited)
as I login.

To be specific, my friend has no protection, and isn't exactly intelligent when it comes to safely navigating any form of technology.

Apparently, the infection was called "Win32:Malware-gen" and the infected file was ...Steam\VR\bin\vrserver.exe

This is courtesy of Avast.


What I want to know is, how the **** did this happen? I didn't know anything could be transferred in such a manner. Is Steam not as secure as I once thought? Avast popped up saying it was infected as soon as I hit ENTER to login.

Thanks to his over-populated friends list, I didn't have time to see what exactly the thing was, because of incessant notifications, fortunately I did manage to run a boot-time scan and find and properly deal with the infected file. Is there a way to check alerts that previously popped up? I had done a virus scan the day before as well, so I know it wasn't there prior.
---
I have OCD, so I close all my topics once I'm done with them.
#2RossfromFriendsPosted 6/22/2014 4:44:52 PM
Probably has something that infects files from the inside

What have you scanned the computer with?
---
http://i.imgur.com/qVxdb3b.jpg
http://www.last.fm/user/Grizzlybarry
#3FaPaThYPosted 6/22/2014 4:46:14 PM
ajko000 posted...

What I want to know is, how the **** did this happen? I didn't know anything could be transferred in such a manner. ?


... It can't. The problem's on your end, not his. It's not like you download his Steam folder when you log into his account or something -_-
---
"Because I realize I want you. Guts." | "....... Are you a ****?"
http://steamcommunity.com/id/Malicii/
#4ajko000(Topic Creator)Posted 6/22/2014 4:50:49 PM
FaPaThY posted...
ajko000 posted...

What I want to know is, how the **** did this happen? I didn't know anything could be transferred in such a manner. ?


... It can't. The problem's on your end, not his. It's not like you download his Steam folder when you log into his account or something -_-


I had done a virus scan the day before as well, so I know it wasn't there prior.
---
I have OCD, so I close all my topics once I'm done with them.
#5ajko000(Topic Creator)Posted 6/22/2014 4:53:30 PM
RossfromFriends posted...
Probably has something that infects files from the inside

What have you scanned the computer with?


Avast.
---
I have OCD, so I close all my topics once I'm done with them.
#6Fayt349Posted 6/22/2014 4:56:10 PM
>Avast
---
Intel i5 3570k||Vengence 8 GIG DDR3 RAM||EVGA GTX 760 ||4 TB WD Black+1TB Seagate + 128 gig Samsung Pro SSD || Corsair 650W |Asus MOBO||CM scout advance 2 case
#7ajko000(Topic Creator)Posted 6/22/2014 4:58:16 PM
Fayt349 posted...
>Avast


And? One of the best programs out there, it only gave me a false positive once, on a Project 64 installer.
---
I have OCD, so I close all my topics once I'm done with them.
#8FaPaThYPosted 6/22/2014 5:06:12 PM(edited)
ajko000 posted...
FaPaThY posted...
ajko000 posted...

What I want to know is, how the **** did this happen? I didn't know anything could be transferred in such a manner. ?


... It can't. The problem's on your end, not his. It's not like you download his Steam folder when you log into his account or something -_-


I had done a virus scan the day before as well, so I know it wasn't there prior.


Good for you, doesn't prove your friend's infected Steam folder magically teleported to your hard drive. The situation you're describing just can't happen. Either you or whoever else has access to your PC is guaranteed to be at fault here, as much as you don't want to admit it.
---
"Because I realize I want you. Guts." | "....... Are you a ****?"
http://steamcommunity.com/id/Malicii/
#9MarikhenPosted 6/22/2014 5:14:22 PM
ajko000 posted...
I had done a virus scan the day before as well, so I know it wasn't there prior.


That could be incorrect and/or is irrelevant.
#1 Virus definition or program version updates could have caused it to twig to a program/infection that it didn't before. In point of fact that's the whole point of updates in the first place.

#2 You could have picked up something in the intervening hours since the last scan.

Also, your friend's security or lack thereof has absolutely nothing to do with your situation. In the first place enough data would have to have been sent from your friend's computer to Valve's servers in order for them to be infected, and with encrypted personal information being the only data that ought to be sent to their servers that should be rather impossible.

In the second place the issue is with files that aren't actually present in my current, and fully functional, installation of Steam. That would mean that the VR\Bin directory structure and rserver.exe file were added either by using optional software or by unauthorized software. In the former case it's entirely your fault that they're there, and in either case it's not your friend's fault that they're there.

In the third place had your friend somehow managed to infect Valve's servers with a virus other people as one of the main purposes of a virus is to propagate itself and there hasn't exactly been a huge number of people complaining about such propagation happening. Plus I use Avast! and my entire Steam folder checks out as clean.

Fourthly, false positives abound.
http://forums.steampowered.com/forums/showthread.php?p=31968420
http://forums.steampowered.com/forums/showthread.php?t=2524269
https://forum.avast.com/index.php?topic=102639.0
https://forum.avast.com/index.php?topic=102283.0

If you're really worried just use sandboxing software like SandBoxie or virtual machine software like VirtualBox, run Steam and/or the software in isolation, and see what happens.
---
Logic is the antithesis of faith, else why is it that faith defies logic while logic denies faith?
#10ajko000(Topic Creator)Posted 6/22/2014 5:24:12 PM
I understand what you're all saying. Just to be clear, infections cannot transfer over the Steam client or Steam accounts?

The weird thing is, nothing Marikhen posted...
ajko000 posted...
I had done a virus scan the day before as well, so I know it wasn't there prior.


That could be incorrect and/or is irrelevant.
#1 Virus definition or program version updates could have caused it to twig to a program/infection that it didn't before. In point of fact that's the whole point of updates in the first place.

#2 You could have picked up something in the intervening hours since the last scan.

Also, your friend's security or lack thereof has absolutely nothing to do with your situation. In the first place enough data would have to have been sent from your friend's computer to Valve's servers in order for them to be infected, and with encrypted personal information being the only data that ought to be sent to their servers that should be rather impossible.

In the second place the issue is with files that aren't actually present in my current, and fully functional, installation of Steam. That would mean that the VR\Bin directory structure and rserver.exe file were added either by using optional software or by unauthorized software. In the former case it's entirely your fault that they're there, and in either case it's not your friend's fault that they're there.

In the third place had your friend somehow managed to infect Valve's servers with a virus other people as one of the main purposes of a virus is to propagate itself and there hasn't exactly been a huge number of people complaining about such propagation happening. Plus I use Avast! and my entire Steam folder checks out as clean.

Fourthly, false positives abound.
http://forums.steampowered.com/forums/showthread.php?p=31968420
http://forums.steampowered.com/forums/showthread.php?t=2524269
https://forum.avast.com/index.php?topic=102639.0
https://forum.avast.com/index.php?topic=102283.0

If you're really worried just use sandboxing software like SandBoxie or virtual machine software like VirtualBox, run Steam and/or the software in isolation, and see what happens.


Thanks for actually explaining the situation clearly and concisely. My only confusion lies with #1 and #2, because I haven't updated Avast in four days, and the time between last scan and this current one involves me doing four things, checking steam, playing TF2, shutting down and turning my computer on the next day, then the login incident. Thanks again for the help.
---
I have OCD, so I close all my topics once I'm done with them.