possibly infected?

[SkartakhDK]

On my pc, Norton just reported this plugin as infected with IDP.Generic - see its report below.

I don't know where the infection came from - although no other files on my pc are affected - so it may be good to double-check.

---

Details

Threat name: IDP.Generic
Threat type: Miscellaneous - This is an app that you may have unknowingly installed and that may harm your computer performance.
Status: Threat detected
Detected by: Behavioral Protection
On PC from: 30/09/2024, 18.12
Last Used: 17/11/2024, 09.44
Startup Item: No

Few users
Hundreds of users in the Norton Community have used this file.

Mature
This file was released 4 months ago.

High
The file risk is high.

---

Activity

Path | Type | Status
C:\Users\xxxx\AppData\Roaming\Elgato\StreamDeck\Plugins\com.nthompson.gpu.sdPlugin\gpu.exe | File | Deleted
C:\Users\xxxx\AppData\Roaming\Elgato\StreamDeck\Plugins\com.nthompson.gpu.sdPlugin\gpu.exe | Process | Terminated
C:\Windows\System32\conhost.exe | Process | Terminated

[thompsonnoahe]

Hi @SkartakhDK,

Unfortunately this isn't something I would be able to solve. Norton looks like it's being a little aggressive here. Feel free to whitelist it in the Norton settings if you're still willing to use it. From a security perspective, this plugin isn't doing anything particularly dangerous.

Thanks,

Noah

[FiraSenax]

I encountered a serious issue with the gpu.exe file. Virustotal also detected a cryptominer in it, which led to extremely high resource consumption. When running, it significantly hogged my CPU, RAM, and GPU, causing them to become almost entirely unresponsive.

[thompsonnoahe]

Hi @FiraSenax,

Can you send me a screenshot of the report and of Task Manager? I'm not at a computer at the moment, so I'm unable to do an in-depth analysis of the issue.

Regarding the issue with Norton, @SkartakhDK, I'll escalate this with the Norton security team and see if I can get this resolved.

Thanks,

Noah

[FiraSenax]

Newest Version seems to be fine, the version before was also detected by virustotal by multiple engines