Bornstar May 16, 2023 @ 11:12am
Trojan:Win32/Tigger!rfn
My windows defender detects this trojan on the C\Program\Files(x86)\bin\msimg32.dll
Is this a false positive or what should I do ?
< >
Showing 1-13 of 13 comments
まりさ May 16, 2023 @ 11:26am 
Steam\bin\ folder does not have such file here.


Anyways:
MSimg32.dll is a component of the Microsoft Graphical Device Interface (GDI). GDI is the tool Windows uses for drawing lines, boxes, text and other basic elements of the user interface.

If defender detects it as trojan, then file is not from Microsoft.
Bornstar May 16, 2023 @ 11:28am 
Originally posted by まりさ:
Steam\bin\ folder does not have such file here.


Anyways:
MSimg32.dll is a component of the Microsoft Graphical Device Interface (GDI). GDI is the tool Windows uses for drawing lines, boxes, text and other basic elements of the user interface.

If defender detects it as trojan, then file is not from Microsoft.
Is it possible that the trojan makes it so antiviruses detect it somewhere it isnt ?
LA FLAME May 16, 2023 @ 12:28pm 
Interesting
Phoenix May 16, 2023 @ 12:34pm 
Originally posted by Bornstar:
My windows defender detects this trojan on the C\Program\Files(x86)\bin\msimg32.dll
Is this a false positive or what should I do ?

>C\Program\Files(x86)\bin\msimg32.dll

is not a valid directory, and to my knowledge \bin\ isn't associated with Steam or any Microsoft product. What program is that folder associated with? What software did oyu install that created this folder?
Bornstar May 16, 2023 @ 12:43pm 
Originally posted by Phoenix:
Originally posted by Bornstar:
My windows defender detects this trojan on the C\Program\Files(x86)\bin\msimg32.dll
Is this a false positive or what should I do ?

>C\Program\Files(x86)\bin\msimg32.dll

is not a valid directory, and to my knowledge \bin\ isn't associated with Steam or any Microsoft product. What program is that folder associated with? What software did oyu install that created this folder?
So should I just erase the bin folder ? Because it was there, i just installed steam
Maybe i made a mistake the location is

C\ProgramFiles(x86)\Steam\bin\msimg32.dll
In fact i cant find msimg32.dll on the bin folder
But windows defender tells me is there
Last edited by Bornstar; May 16, 2023 @ 12:44pm
Bornstar May 16, 2023 @ 12:44pm 
Originally posted by C.R.O.:
Interesting
Why so ?
Unn4m3d (♥AUT♥) May 16, 2023 @ 12:48pm 
Originally posted by Bornstar:
Originally posted by C.R.O.:
Interesting
Why so ?

That's just a Spam comment trying to level his badge not realizing that posting Spam does not Level your badge. They read ancient guides from times where this was still a thing. It was changed to "Search the Forums" a long, long time ago, but for some reason people still read these old guides.
Last edited by Unn4m3d (♥AUT♥); May 16, 2023 @ 12:48pm
Bornstar May 16, 2023 @ 12:57pm 
Originally posted by Midnight Aurais:
Originally posted by Bornstar:
So should I just erase the bin folder ? Because it was there, i just installed steam
Maybe i made a mistake the location is

C\ProgramFiles(x86)\Steam\bin\msimg32.dll
In fact i cant find msimg32.dll on the bin folder
But windows defender tells me is there

throw it into that virustotal link i posted curious what the results would be XD

but you dont erase the hole bin folder maybe just that file

but like i mentioned check if it breaks steam somehow by closing out steam then moving the file out of the bin folder to somewhere else then run steam and see how it behaves if it doesn't care its gone then it doesn't hurt to remove it if you get alot of detections on virustotal

virustotal is a collection of virus scanner results which can also tell you details like what it is doing
I cant because that specific file isnt on the folder and i cant upload the comolete bin folder there lol. Right now im doing a full scan with Microsoft Safety Scanner and once is done ill do one with the free version of TotalAV, i havent oppened steam yet because i dont want to trigger something lol
Bornstar May 16, 2023 @ 2:00pm 
Originally posted by Midnight Aurais:
ow i get it windows defender quarantined the file

open windows defender>virus & threat protection>protection history it should be listed in here if so windows defender already removed it
Yhea when i do something using windows defender it glitches and doesnt do anything apparently, maybe i need to restart the computer and the trojan is already gone
Bornstar May 16, 2023 @ 3:55pm 
Originally posted by Midnight Aurais:
if you think windows defender is broken you can do this to fix it

start menu>search "CMD" or "Command Prompt">Run as administrator>type "sfc /scannow" and press enter

incase sfc tells you it can't fix something due to problems with the windows iso then enter in the cmd

"dism /online /cleanup-image /restorehealth"

this command wil redownload the windows image from microsoft

after you redo the sfc /scannow

basically in a nutshell the command checks in with the iso of windows and compares the files and attempts to fix them if they are missing or corrupt could fix windows defender
I will try this, thank you
Let us know what virustotal said about that file, in the quarantine.
Bornstar May 17, 2023 @ 5:29pm 
Well guys, no idea where it was but a full scan of my pc that took almost 24 hours removed 36 infected files and this https://imgur.com/a/GBZY543

Any recomendation for a good free antivirus ?
Last edited by Bornstar; May 17, 2023 @ 6:17pm
Jacob Locke May 17, 2023 @ 5:50pm 
Should always err on the side of caution. If defender detects anything let it isolate it. If a game breaks, verify files, it Steam breaks, re-install it.
< >
Showing 1-13 of 13 comments
Per page: 1530 50

Date Posted: May 16, 2023 @ 11:12am
Posts: 13