scrobj.dll, and powershell.exe

  • 1
  • Question
  • Updated 2 weeks ago
  • In Progress
Trend is blocking scrobj.dll, a microsoft file which is located in c:\windows\system32\scrobj.dll, It is also blocking a file called powershell which is located in C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe. Are these dangerous or can I trust them? Thank you
Photo of satishd001

satishd001

  • 130 Points 100 badge 2x thumb

Posted 3 weeks ago

  • 1
Photo of TM_Malik

TM_Malik, Employee

  • 3,858 Points 3k badge 2x thumb
Welcome to Trend Micro Community, satishd001

May we ask for a screenshot of the message so that we can verify which component of the Trend Micro program is blocking those files? From what I see it, I think those files might be blocked by the Folder Shield feature...we may need to configure the settings for Folder Shield for us to resolve this issue.

Thanks! :) 

Trend Micro Home Users Community 
(Edited)
Photo of satishd001

satishd001

  • 130 Points 100 badge 2x thumb
Good Day and thank you for your reply. Please see attached screen shot
Photo of TM_Shella

TM_Shella, Employee

  • 2,060 Points 2k badge 2x thumb
Hi  satishd001,

Thank you for providing us the needed information.

With this, it would be best for you to contact our ChatSupport from the link below so we could better check what is causing thisconcern. 

https://esupport.trendmicro.com/en-us/home/pages/technical-support/contact/prechat.aspx

Hope to hear from you soon.



Trend Micro Home Users Community 
Photo of satishd001

satishd001

  • 130 Points 100 badge 2x thumb
Hi I did contact the chat support and they are unable to say whether these files are running a code that is legit or not. 
Photo of TM_Malik

TM_Malik, Employee

  • 3,858 Points 3k badge 2x thumb
We sincerely apologize for what happened, satishd001. Rest assured we'll look into this further and make sure that this is addressed.

I just want to ask for more information about the detection, kindly send another screenshot to show us the window that opens on your PC when you click on "More details..." on the pop up message.

You can also open the window to see more details by following these steps:
- Open the Trend Micro Console
- Click on "Security Reports" right next to the gear icon beside the scan button
- Click on "See More Details"

Again, our apologies and thank you for your patience. Enjoy your weekend!

Trend Micro Home Users Community 
Photo of satishd001

satishd001

  • 130 Points 100 badge 2x thumb
Good Day Mr Malik and thank you
Please find attachment as requested.
Photo of TM_Malik

TM_Malik, Employee

  • 3,858 Points 3k badge 2x thumb
Good day, satishd001. Thank you for the screenshot. May I ask what are the folders protected by the Folder Shield feature (just in case it's enabled)? You may open that by clicking "Data" on the Trend Micro main console then choose configure beside the Folder Shield feature.

Thanks!

Trend Micro Home Users Community 
Photo of satishd001

satishd001

  • 130 Points 100 badge 2x thumb
I have two drives C & D and have selected to protect both drives entirely
Photo of TM_Malik

TM_Malik, Employee

  • 3,858 Points 3k badge 2x thumb
Hi, satishd001. That may be the reason why you are receiving those blocking popups. The Trend Micro Folder Shield feature is created to protect you from ransomware and what ransomware does is to encrypt all of your personal files; example, .DOC, .PNG, .JPEG, etc. 

Kindly configure your Folder Shield to protect only your personal folders like Documents, Pictures, Videos, OneDrive, and others. Please do not include the entire C drive in the Folder Shield. :)

Once it's configured that way, you should no longer receive those blocking popups. Thanks!

Trend Micro Home Users Community