Sign in to follow this  
Tassadar

Trojan.Trash!IK and Steam

Recommended Posts

I noticed that Steam's "half-life engine.gcf" file keeps getting detected as Trojan.Trash!IK

At first I thought it was a false positive and may be corrected in later updates, but it still continues to be detected. The Steam software is a legitimate version downloaded from the company (not a hacked version). I am not sure how to go about this issue... should I submit it as a false positive, is there a way to submit the file for further analysis? Any advice highly appreciated.

CC

PS: The file is located in C:\Program Files\Steam\steamapps\half-life engine.gcf

Share this post


Link to post
Share on other sites

Hi Tassadar,

Welcome to the forum

If you suspect that the flagging is False Positive please submit the file

to EMSI developers from the detection list

- Right Click on the item

- Choose "Submit as false alert" from the pop-up menu

Save report just in case further investigation will be needed.

Rescan after subsequent update(s)

You can use Custom Scan of the folder where file in question resides

(no need for Deep Scanning every time).

Leave all options for Custom Scan as default. You can save the scanset and reload it when necessary

My regards

Share this post


Link to post
Share on other sites

I have been using Steam and A-Squared for several years. I have Half-Life, Half-Life 2, Half-Life 2 Episode 1 and Half-Life 2 Epidode 2 as well as the other games that rely on the Half-Life and Half-Life 2 exe files to run: Portal, Blue Shift and Opposing Force. [Edit - also Half-Life: Source] I have not had any detections from the Steam installation when running an A-Squared scan.

I have just run an on demand scan of the file and it came up clean.

Does your file have the same attributes as the one shown here:

hlgcf.jpg

Share this post


Link to post
Share on other sites

Hi Tassadar,

The image is rather poor quality compare to what H_D posted, but still it is possible to see slight difference in size ... and sure date created.

Have you submitted the file as suggested?

If the flagging will stay for a couple of days and several Additional Signatures (Ikarus - "!IK") arrival

You can submit by e-mail to EMSI [email protected]

Before submitting, create a password protected archive (ZIP or RAR) containing the file(s).

Make sure the main body of the email contains the password for the compressed archive.

My regards

Share this post


Link to post
Share on other sites

Your eyes are better than mine, Lynx. I can't read that at all.

Even better, Tassadar could have answered the question.

Tassadar, when did you last update Steam and update all the game files?

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Sign in to follow this  

  • Recently Browsing   0 members

    No registered users viewing this page.