Trojan:Win32/Tigger!rfn

[Bornstar]

My windows defender detects this trojan on the C\Program\Files(x86)\bin\msimg32.dll
Is this a false positive or what should I do ?

[まりさ]

Steam\bin\ folder does not have such file here.


Anyways:

MSimg32.dll is a component of the Microsoft Graphical Device Interface (GDI). GDI is the tool Windows uses for drawing lines, boxes, text and other basic elements of the user interface.

If defender detects it as trojan, then file is not from Microsoft.

[Bornstar]

Αναρτήθηκε αρχικά από まりさ:

Steam\bin\ folder does not have such file here.


Anyways:

MSimg32.dll is a component of the Microsoft Graphical Device Interface (GDI). GDI is the tool Windows uses for drawing lines, boxes, text and other basic elements of the user interface.

If defender detects it as trojan, then file is not from Microsoft.

Is it possible that the trojan makes it so antiviruses detect it somewhere it isnt ?

[LA FLAME]

Interesting

[Phoenix]

Αναρτήθηκε αρχικά από Bornstar:

My windows defender detects this trojan on the C\Program\Files(x86)\bin\msimg32.dll
Is this a false positive or what should I do ?

>C\Program\Files(x86)\bin\msimg32.dll

is not a valid directory, and to my knowledge \bin\ isn't associated with Steam or any Microsoft product. What program is that folder associated with? What software did oyu install that created this folder?

[Bornstar]

Αναρτήθηκε αρχικά από Phoenix:

Αναρτήθηκε αρχικά από Bornstar:

My windows defender detects this trojan on the C\Program\Files(x86)\bin\msimg32.dll
Is this a false positive or what should I do ?

>C\Program\Files(x86)\bin\msimg32.dll

is not a valid directory, and to my knowledge \bin\ isn't associated with Steam or any Microsoft product. What program is that folder associated with? What software did oyu install that created this folder?

So should I just erase the bin folder ? Because it was there, i just installed steam
Maybe i made a mistake the location is

C\ProgramFiles(x86)\Steam\bin\msimg32.dll
In fact i cant find msimg32.dll on the bin folder
But windows defender tells me is there

[Bornstar]

Αναρτήθηκε αρχικά από C.R.O.:

Interesting

Why so ?

[Unn4m3d (♥AUT♥)]

Αναρτήθηκε αρχικά από Bornstar:

Αναρτήθηκε αρχικά από C.R.O.:

Interesting

Why so ?

That's just a Spam comment trying to level his badge not realizing that posting Spam does not Level your badge. They read ancient guides from times where this was still a thing. It was changed to "Search the Forums" a long, long time ago, but for some reason people still read these old guides.

[Bornstar]

Αναρτήθηκε αρχικά από Midnight Aurais:

Αναρτήθηκε αρχικά από Bornstar:

So should I just erase the bin folder ? Because it was there, i just installed steam
Maybe i made a mistake the location is

C\ProgramFiles(x86)\Steam\bin\msimg32.dll
In fact i cant find msimg32.dll on the bin folder
But windows defender tells me is there

throw it into that virustotal link i posted curious what the results would be XD

but you dont erase the hole bin folder maybe just that file

but like i mentioned check if it breaks steam somehow by closing out steam then moving the file out of the bin folder to somewhere else then run steam and see how it behaves if it doesn't care its gone then it doesn't hurt to remove it if you get alot of detections on virustotal

virustotal is a collection of virus scanner results which can also tell you details like what it is doing

I cant because that specific file isnt on the folder and i cant upload the comolete bin folder there lol. Right now im doing a full scan with Microsoft Safety Scanner and once is done ill do one with the free version of TotalAV, i havent oppened steam yet because i dont want to trigger something lol

[Bornstar]

Αναρτήθηκε αρχικά από Midnight Aurais:

ow i get it windows defender quarantined the file

open windows defender>virus & threat protection>protection history it should be listed in here if so windows defender already removed it

Yhea when i do something using windows defender it glitches and doesnt do anything apparently, maybe i need to restart the computer and the trojan is already gone

[Bornstar]

Αναρτήθηκε αρχικά από Midnight Aurais:

if you think windows defender is broken you can do this to fix it

start menu>search "CMD" or "Command Prompt">Run as administrator>type "sfc /scannow" and press enter

incase sfc tells you it can't fix something due to problems with the windows iso then enter in the cmd

"dism /online /cleanup-image /restorehealth"

this command wil redownload the windows image from microsoft

after you redo the sfc /scannow

basically in a nutshell the command checks in with the iso of windows and compares the files and attempts to fix them if they are missing or corrupt could fix windows defender

I will try this, thank you

[Muppet among Puppets]

Let us know what virustotal said about that file, in the quarantine.

[Bornstar]

Well guys, no idea where it was but a full scan of my pc that took almost 24 hours removed 36 infected files and this https://imgur.com/a/GBZY543

Any recomendation for a good free antivirus ?

[Jacob Locke]

Should always err on the side of caution. If defender detects anything let it isolate it. If a game breaks, verify files, it Steam breaks, re-install it.