N
NathanRothermel
Guest
Hello there,
I recently reinstalled Windows 10 with the options to only reinstall Windows and keep my personal files. (Recovery -> Reset this PC -> Keep my files). It seemed at first to work fine but on my second restart (after successfully reinstalling) I get two RunDLL errors, one for StartupCheckLibrary.dll and one for winscomrssrv.dll.
I looked on the internet first for some help and found where to see in Windows Defender what made those files quarantined. I had three "Threat removed or restored" actions in my Protection history.
1- Threat removed or restored - Severe [Detected: VirTool:Win32/DefenderTamperingRestore | Status: Removed or restored]
- Affected items: regkeyvalue: hklm\software\policies\microsoft\windows defender\real-time protection\\DisableBehaviorMonitoring
2- Threat quarantined - Severe [Detected: Trojan:Win32/Tiggre!plock | Status Quarantined]
- Affected items: file: C:\Windows\System32\StartupCheckLibrary.dll and file: C:\Windows\System32\winscomrssrv.dll
3- Threat quarantined - Severe [Detected: Trojan:Win32/CoinMiner.C!rfn | Status Quarantined]
- Affected items: file: C:\Windows\System32\winlogui.exe and file: C:\Windows\System32\winrmsrv.exe
Currently, every restart I get these RunDLL errors:
I wasn't getting these errors before I reinstalled Windows but now get them on every restart.
I am currently looking for any help regarding these errors. Should I restore these files? I'm not sure how to find the files that made them get quarantined (or if I can) or if I even need to do anything since these seem to not affect my computers performance at all. If anyone has any ideas, all help is appreciated.
More...
I recently reinstalled Windows 10 with the options to only reinstall Windows and keep my personal files. (Recovery -> Reset this PC -> Keep my files). It seemed at first to work fine but on my second restart (after successfully reinstalling) I get two RunDLL errors, one for StartupCheckLibrary.dll and one for winscomrssrv.dll.
I looked on the internet first for some help and found where to see in Windows Defender what made those files quarantined. I had three "Threat removed or restored" actions in my Protection history.
1- Threat removed or restored - Severe [Detected: VirTool:Win32/DefenderTamperingRestore | Status: Removed or restored]
- Affected items: regkeyvalue: hklm\software\policies\microsoft\windows defender\real-time protection\\DisableBehaviorMonitoring
2- Threat quarantined - Severe [Detected: Trojan:Win32/Tiggre!plock | Status Quarantined]
- Affected items: file: C:\Windows\System32\StartupCheckLibrary.dll and file: C:\Windows\System32\winscomrssrv.dll
3- Threat quarantined - Severe [Detected: Trojan:Win32/CoinMiner.C!rfn | Status Quarantined]
- Affected items: file: C:\Windows\System32\winlogui.exe and file: C:\Windows\System32\winrmsrv.exe
Currently, every restart I get these RunDLL errors:
I wasn't getting these errors before I reinstalled Windows but now get them on every restart.
I am currently looking for any help regarding these errors. Should I restore these files? I'm not sure how to find the files that made them get quarantined (or if I can) or if I even need to do anything since these seem to not affect my computers performance at all. If anyone has any ideas, all help is appreciated.
More...