Steam Virus?

20.03.2011, 11:03

Och Leute ich habe die schnautze voll
Ich loade schon nicht mehr illegal runter und bekomme trotzdem fuck Trojaner
Ich wollte gerade Steam installieren
da kommt sowas

**stockcarpilot** · 20.03.2011, 11:09

Hallo

Du hattest gerade in einem anderen Threat geschrieben, das du dir Mafia 2 herunter lädst. Ist das legal???
Oder hat der Lerneffekt immer noch nicht eingesetzt? Du wolltest dich doch bessern

Gruß stockcarpilot

20.03.2011, 15:05

Mafia 2 DEMO
Was per Steam läuft
Somit legal

20.03.2011, 19:01

Oder ist es eine Fehler Meldung?
Wenn ihr mir nicht glaub schick ich ne rsit

**Leonixx** · 20.03.2011, 20:32

Die betreffende .exe bei Virustotal hochladen und auswerten. Dann siehst du ob es sich um ein false positiv handelt.

20.03.2011, 21:15

Ok hier das ergebnis:

Zitat:

Antivirus Version Last Update Result
AhnLab-V3 2011.03.20.00 2011.03.19 -
AntiVir 7.11.5.2 2011.03.20 -
Antiy-AVL 2.0.3.7 2011.03.20 -
Avast 4.8.1351.0 2011.03.20 -
Avast5 5.0.677.0 2011.03.20 -
AVG 10.0.0.1190 2011.03.20 -
BitDefender 7.2 2011.03.20 -
CAT-QuickHeal 11.00 2011.03.20 -
ClamAV 0.96.4.0 2011.03.20 -
Commtouch 5.2.11.5 2011.03.20 -
Comodo 8051 2011.03.20 -
DrWeb 5.0.2.03300 2011.03.20 -
Emsisoft 5.1.0.2 2011.03.20 -
eSafe 7.0.17.0 2011.03.17 -
eTrust-Vet 36.1.8223 2011.03.18 -
F-Prot 4.6.2.117 2011.03.20 -
F-Secure 9.0.16440.0 2011.03.20 -
Fortinet 4.2.254.0 2011.03.20 -
GData 21 2011.03.20 -
Ikarus T3.1.1.97.0 2011.03.20 -
Jiangmin 13.0.900 2011.03.20 -
K7AntiVirus 9.94.4155 2011.03.19 -
Kaspersky 7.0.0.125 2011.03.20 -
McAfee 5.400.0.1158 2011.03.20 -
McAfee-GW-Edition 2010.1C 2011.03.20 -
Microsoft 1.6603 2011.03.20 -
NOD32 5969 2011.03.20 -
Norman 6.07.03 2011.03.20 -
nProtect 2011-02-10.01 2011.02.15 -
Panda 10.0.3.5 2011.03.20 -
PCTools 7.0.3.5 2011.03.20 -
Prevx 3.0 2011.03.20 -
Rising 23.49.04.05 2011.03.18 -
Sophos 4.63.0 2011.03.20 -
SUPERAntiSpyware 4.40.0.1006 2011.03.20 -
Symantec 20101.3.0.103 2011.03.20 -
TheHacker 6.7.0.1.153 2011.03.20 -
TrendMicro 9.200.0.1012 2011.03.20 -
TrendMicro-HouseCall 9.200.0.1012 2011.03.20 -
VBA32 3.12.14.3 2011.03.18 -
VIPRE 8765 2011.03.20 -
ViRobot 2011.3.19.4366 2011.03.20 -
VirusBuster 13.6.259.2 2011.03.20 -
Additional information
Show all
MD5 : fbfe36b870595b771284e0b2199f51c2
SHA1 : a38d1a3a97f834b757190e4a9a304d78a36afabb
SHA256: 14eb908a8e2b6d5fdec682628b6ed5aa1bd13f6cbc6c24fd79 3732a48e11a9d8
ssdeep: 6144:RRHRBA8qv7m6VqMNYxUdOau0/1BmbtoAOArLy60uZNf:RRHPRqv3Vq2bdY0/fWtomrf04N
f
File size : 407336 bytes
First seen: 2011-03-17 21:25:38
Last seen : 2011-03-20 21:13:15
TrID:
Generic Win/DOS Executable (49.9%)
DOS Executable Generic (49.8%)
Autodesk FLIC Image File (extensions: flc, fli, cel) (0.1%)
sigcheck:
publisher....: Valve Corporation
copyright....: Copyright (C) 2007
product......: Steam Client Service
description..: Steam Client Service (buildbot_winslave01_steam_rel_client_win32@winsla ve01)
original name: SteamSer.exe
internal name: Steam Client Service
file version.: 01.05.31.00
comments.....: n/a
signers......: Valve
VeriSign Class 3 Code Signing 2009-2 CA
Class 3 Public Primary Certification Authority
signing date.: 12:35 AM 3/10/2011
verified.....: -
PEInfo: PE structure information

[[ basic data ]]
entrypointaddress: 0x29A16
timedatestamp....: 0x4D780EC5 (Wed Mar 09 23:35:33 2011)
machinetype......: 0x14c (I386)

[[ 4 section(s) ]]
name, viradd, virsiz, rawdsiz, ntropy, md5
.text, 0x1000, 0x451AC, 0x46000, 6.58, b32e6181ade0fad30cf61dad58febccc
.rdata, 0x47000, 0x15C78, 0x16000, 6.01, a5ac2ddaa7954babe0ea147376c2b466
.data, 0x5D000, 0x6D1A0, 0x4000, 4.63, 8297241c57dff142d3f59ee5d7c6a600
.rsrc, 0xCB000, 0xBB8, 0x1000, 4.28, a6f3b38582fd37c48de6f69b1a1c5a7e

[[ 8 import(s) ]]
SHLWAPI.dll: SHDeleteKeyW, SHStrDupA, SHDeleteKeyA
SHELL32.dll: SHGetFolderPathA, SHGetMalloc, SHGetSpecialFolderPathA, ShellExecuteA
KERNEL32.dll: TerminateProcess, LocalFree, CreateFileA, MoveFileExA, InterlockedDecrement, GetCurrentProcess, WriteFile, GetDriveTypeA, FindFirstFileA, SetLastError, CopyFileA, SetFileAttributesA, FindClose, FindNextFileA, GetVersionExA, WideCharToMultiByte, SetFilePointer, SetEndOfFile, CreateDirectoryW, FlushFileBuffers, IsDebuggerPresent, GetCurrentThreadId, VirtualFree, VirtualAlloc, HeapUnlock, HeapLock, HeapWalk, LeaveCriticalSection, EnterCriticalSection, QueryPerformanceCounter, InitializeCriticalSection, DeleteCriticalSection, Sleep, GetModuleFileNameW, LoadLibraryExA, InterlockedCompareExchange, GetCurrentThread, InterlockedExchange, DebugBreak, GlobalLock, GlobalAlloc, GlobalUnlock, GetCurrentProcessId, TlsGetValue, SetEvent, TlsSetValue, InitializeCriticalSectionAndSpinCount, CreateEventA, RaiseException, WaitForMultipleObjects, GetThreadPriority, TlsAlloc, TlsFree, ResumeThread, CreateThread, ExitThread, GetNumberOfConsoleInputEvents, ReadConsoleInputA, GetSystemTimeAsFileTime, GetLocalTime, InterlockedIncrement, HeapCreate, CompareStringW, CompareStringA, WriteConsoleW, GetConsoleOutputCP, WriteConsoleA, SetStdHandle, GetStringTypeW, GetStringTypeA, GetLocaleInfoA, GetConsoleMode, GetConsoleCP, GetTimeZoneInformation, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetEnvironmentStrings, OpenProcess, MultiByteToWideChar, GetTickCount, CreateFileW, ReadFile, GetFileAttributesW, GetFileSize, DeleteFileA, OutputDebugStringA, GetModuleFileNameA, SetConsoleCtrlHandler, LoadLibraryA, RemoveDirectoryA, GetLastError, CreateDirectoryA, SetConsoleTitleA, GetFileAttributesA, GetConsoleWindow, GetCommandLineA, GetFileAttributesExA, FreeLibrary, lstrlenA, CloseHandle, GetCurrentDirectoryA, SetEnvironmentVariableA, SetCurrentDirectoryA, CreateProcessA, GetExitCodeProcess, ExpandEnvironmentStringsA, WaitForSingleObject, GetModuleHandleA, GetProcAddress, HeapFree, HeapAlloc, GetProcessHeap, RtlUnwind, UnhandledExceptionFilter, SetUnhandledExceptionFilter, GetFullPathNameW, ExitProcess, HeapSize, LoadLibraryExW, VirtualQuery, FreeEnvironmentStringsA, GetStartupInfoA, GetFileType, SetHandleCount, IsValidCodePage, GetOEMCP, HeapReAlloc, HeapValidate, LCMapStringA, LCMapStringW, GetCPInfo, GetStdHandle, GetACP, HeapDestroy
USER32.dll: CloseClipboard, ShowWindow, MessageBoxA, SetDlgItemTextA, DialogBoxParamA, SetClipboardData, IsWindowVisible, OpenClipboard, SetWindowPos, GetDesktopWindow, EndDialog, GetDlgItem, EmptyClipboard, SetDlgItemInt, ScreenToClient, GetKeyState, PeekMessageA, GetCursorPos, GetWindowThreadProcessId, GetDlgItemInt, GetWindowRect, wsprintfA, GetWindowTextLengthA, EnumWindows
ADVAPI32.dll: AdjustTokenPrivileges, RegEnumKeyExW, RegOpenKeyExW, LookupPrivilegeValueA, SetNamedSecurityInfoA, OpenProcessToken, GetSecurityDescriptorDacl, ControlService, OpenSCManagerA, QueryServiceStatusEx, SetServiceStatus, QueryServiceStatus, QueryServiceObjectSecurity, SetSecurityDescriptorDacl, ChangeServiceConfigA, StartServiceA, InitializeSecurityDescriptor, CreateServiceA, RegisterServiceCtrlHandlerA, ChangeServiceConfig2A, SetServiceObjectSecurity, ConvertStringSidToSidA, SetEntriesInAclA, DeleteService, StartServiceCtrlDispatcherA, CloseServiceHandle, OpenServiceA, ReportEventA, DeregisterEventSource, RegisterEventSourceA, RegCloseKey, RegEnumValueA, RegDeleteValueA, RegQueryInfoKeyA, RegOpenKeyExA, RegCreateKeyExA, RegEnumKeyExA, RegQueryValueExA, RegSetValueExA
ole32.dll: PropVariantClear, CoInitialize, CoUninitialize, CoCreateInstance
OLEAUT32.dll: -, -, -
WS2_32.dll: -, -, -, -, -

[[ 1 export(s) ]]
g_dwDllEntryThreadId
ExifTool:
file metadata
CharacterSet: Unicode
CodeSize: 286720
CompanyName: Valve Corporation
EntryPoint: 0x29a16
FileDescription: Steam Client Service (buildbot_winslave01_steam_rel_client_win32@winsla ve01)
FileFlagsMask: 0x0017
FileOS: Win32
FileSize: 398 kB
FileSubtype: 0
FileType: Win32 EXE
FileVersion: 01.05.31.00
FileVersionNumber: 1.5.31.0
ImageVersion: 0.0
InitializedDataSize: 110592
InternalName: Steam Client Service
LanguageCode: English (U.S.)
LegalCopyright: Copyright (C) 2007
LinkerVersion: 8.0
MIMEType: application/octet-stream
MachineType: Intel 386 or later, and compatibles
OSVersion: 4.0
ObjectFileType: Executable application
OriginalFilename: SteamSer.exe
PEType: PE32
ProductName: Steam Client Service
ProductVersion: 01.00.00.01
ProductVersionNumber: 1.0.0.1
SourceControlID: 1053100
Subsystem: Windows command line
SubsystemVersion: 4.0
TimeStamp: 2011:03:10 00:35:33+01:00
UninitializedDataSize: 0