Steam gave me a trojan??
Not long after Steam app updated on my Win 11 laptop, I get a warning from Windows Defender that a trojan has been detected and put in quarantine.
The detected trojan: Trojan:Win32/Grondereiero.RSY!MTB
in file: C:\Program Files (x86)\Steam\steamapps\workshop\content\255710\2034713132\AutoRepair.dll

Anyone know anything about this?
< >
Showing 1-5 of 5 comments
foolexia 13 Jun @ 11:42pm 
That sounds like a false positive, it should be safe to restore and add an exception.
AutoRepair.dll is a mod for someting that you play on steam and have downloaded from workshop

so its not steam that have put that file there its you
Knight 25 Oct @ 6:36pm 
Probs a bit late to the party but I had the same thing, isolated it, removed it and rescanned (in the process of the rescan now) but I did managed to figure out that it was in one of my Cities Skylines mod files, not sure which but I have unsubscribed to all of them and deleted the game (tbf I dont play it much anymore)

Wondering if you managed to get rid fully?
Originally posted by Knight:
Probs a bit late to the party but I had the same thing, isolated it, removed it and rescanned (in the process of the rescan now) but I did managed to figure out that it was in one of my Cities Skylines mod files, not sure which but I have unsubscribed to all of them and deleted the game (tbf I dont play it much anymore)

Wondering if you managed to get rid fully?

Wanted to say this before it got closed. Awhile ago someone was clandestingly putting bad actors like that trojan in cities skylines mods on steam. I actually at the time reported it, but it was only found 1 mod did that. I suggest if you know which one it is Knight, please post it on the cities skylines forum and tell which mod it is from. It is better to let everyone know what mod it is from and if someone is doing it again. I found as i said someone did it like 3 years ago too, and warned people about it, but they told me they only found one mod with it in. If one got missed, this might be the one. Please for all the people playing cities skylines, let them know in the workshop forum post and regular. Thanks.

NOTE: I actually thought there were more mods effected by this several years ago, and this is proof of my gut feeling too.
Last edited by RPG Gamer Man; 25 Oct @ 7:12pm
#1 rule, never install a mod without having the source code. Legit modders post their stuff on github or similar.

But three months ago, sounds like it wasn't a virus. False positives always happen. but if it were a virus it would be found out very quickly. way less than 3 months. This is why consoles don't get workshop support.

With that said, this happened a few years ago and the devs monitor the workshop closely so they can catch it more quickly.

Also, mods can be made malicious at any time. If you don't want a virus, never use a mod, then you will have no worries.
Last edited by MarkJohnson; 25 Oct @ 8:47pm
< >
Showing 1-5 of 5 comments
Per page: 1530 50