Share this article

Latest news

With KB5043178 to Release Preview Channel, Microsoft advises Windows 11 users to plug in when the battery is low

Copilot in Outlook will generate personalized themes for you to customize the app

Microsoft will raise the price of its 365 Suite to include AI capabilities

Death Stranding Director’s Cut is now Xbox X|S at a huge discount

Outlook will let users create custom account icons so they can tell their accounts apart easier

Windows Defender mistakes Dell firmware updates as Trojan:Win32/Vigorf.A

Microsoft is aware of the issue.

2 min. read

Published onOctober 22, 2024

published onOctober 22, 2024

Share this article

Read our disclosure page to find out how can you help Windows Report sustain the editorial teamRead more

Many users with Dell computers have reported that Windows 10/11 mistakenly identifies firmware updates with the Trojan:Win32/Vigorf.A. This Trojan is a casual malware that Microsoft Windows Defender detects automatically when it suspects something corrupt or wrong with the recently accessed files.

In this case, many Dell computers seem to be affected, and Windows Defender will label certain recent firmware updates with this tag, quarantining them or, in some cases, deleting them.

Users have reported this on both officialWindowsandDell forums, and it has happenedon Windows 10 and Windows 11 version 22H2.

So I know back in 2022, Windows Defender was making false positives on Dell PCs. Unfortunately, it appears to be happening again. This afternoon I was met with:

Detected: Trojan:Win32/VigorfA

This was connected withC:\ProgramData\Dell\SARemediation\SystemRepair\Snapshots\Backup[long code]

And alsofile:\Device\HarddiskVolumeShadowCopy1\Windows[long code]\DellUpdate.Msi

Could someone from Dell please confirm this is a false positive detection?

Both of the “Affected items” on Windows Security are linked with Dell.

For now, the detection seems to be a false positive, meaning that Windows Defender mistakenly identifies a threat in these updates. According to the independent advisors, though, Microsoft is already looking into it.

For now, it preponderantly affects only Dell computers, and the Trojan:Win32/Vigorf.A detection might automatically appear after turning your device on. Scanning your computer will prompt Windows Defender to quarantine or remove the files. If it affects you, you should let Microsoft knowin the Feedback Hub.

We don’t know if thelatest Patch Tuesday updatesaffected Windows Defender, but the Redmond-based tech giant will most likely provide more clarifications in the next few days.

All you have to know is that, currently, this is a false positive, and your Dell device is not in danger.

More about the topics:Dell computer issues,windows 10,Windows 11

Flavius Floare

Tech Journalist

Flavius is a writer and a media content producer with a particular interest in technology, gaming, media, film and storytelling.

He’s always curious and ready to take on everything new in the tech world, covering Microsoft’s products on a daily basis. The passion for gaming and hardware feeds his journalistic approach, making him a great researcher and news writer that’s always ready to bring you the bleeding edge!

User forum

0 messages

Sort by:LatestOldestMost Votes

Comment*

Name*

Email*

Commenting as.Not you?

Save information for future comments

Comment

Δ

Flavius Floare

Tech Journalist

Flavius is a writer and a media content producer with a particular interest in technology, gaming, media, film and storytelling.