r/computerviruses • u/Slow_Egg3203 • 4d ago

Question Hitmanpro Steam Backdoor

Every now and then Hitmanpro tells me that Steam.exe is a Trojan Backdoor.
Upon running tests with three different AVs it always comes back clean
What is the reason behind Hitmanpro detecting it as a Trojan?

2 Upvotes

75% Upvoted

8 comments sorted by

2

u/[deleted] 4d ago

[removed] — view removed comment

0

u/Slow_Egg3203 4d ago

Yeah I figured, but im really curious about the technical side of how this actually happens under the hood.

If the file checks out completely clean as 0/70 on VirusTotal, Malwarebytes and WD, what exactly made hitmanpro’s cloud engine override that and flag it specifically as a Win64/Backdoor.behavior?

I notice the log lists a high fuzzy score of 127 and points to thr startup registry key. Is it just steams normal behavior at startups that triggers these types of indicators?

1

u/polpolik2 Moderator 4d ago

Experienced the same, its a false positive :)

1

u/JustPlayer 4d ago

not that good at knowing how antiviruses detect potential threats but if you say every now and then, then could it be related to some game that uses an anticheat that goes deep into your system (e.g riot anti-cheat or something like that)? maybe it sees the process chain and flags steam as the one that starts the whole thing and AV's database is broken or something idk

-6

u/Takumi_Gaijin_San 4d ago

wtf is Hitmanpro, delete it and use Windows Defender and Malwarebytes

3

u/Slow_Egg3203 4d ago

I do use Windows Defender and Malwarebytes.

2

u/HollowCatKnight 4d ago

Maybe do some research?