Ransomware Warning From Windows Defender on Steam – Is It a False Positive?
Asked by
GamerDude82
Hey folks, I ran into something weird today while gaming on Steam. My game crashed and then Steam followed suit. I opened Task Manager to troubleshoot, and after some time, I noticed that Windows Defender flagged and deleted a threat related to Steam. There were four detections in total, all timed around the crashes. The threats identified were Behavior:Win32/GenRansom.A!cl and Behavior:Win32/BMCIBlock.C!cl, both targeting C:Steamsteam.exe. I've double-checked, and the executable is from my legitimate install with the Valve digital signature. I suspect it might be a false positive since there hasn't been any weird behavior or file encryptions on my end, and I haven't downloaded anything dodgy recently—only some safe utilities like GPU-Z and MSI Afterburner. Has anyone else dealt with something similar? Should I be worried or is it likely just a glitch?
Answers
If you're concerned about malware, consider running a full scan with Malwarebytes Free too. It can sometimes catch things that Defender misses.
Reply to this answer
You might want to upload the suspicious files to Virus Total. I had a similar experience with Defender giving me false positives recently, so you're not alone!
Reply to this answer
happened to me on June 11
Reply to this answer
Add your answer
Answers are reviewed before publication.
GamerDude82: I did a full scan with Defender and an offline check, but I’ll definitely try Malwarebytes next. Thanks for the tip!