'Windows Defender

[Azyate]

Hello, recently I keep getting a message from Windows Defender saying that under GOverlay, the OpenHardwareMonitorLib.dll is detected as a trojan.

G:\GoVerlay\OpenHardwareMonitorLib.dll.tmp → [MSILRES:OpenHardwareMonitor.Hardware.WinRing0x64.sys]

Is this a common issue, or is there something I can do about it?

[Clone003]

Can confirm, started getting it today too

[Clone003]

Microsoft Defended seems to have started flagging some older versions/programs depending on how they access stuff.
GOverlay might have to start using LibreHardwareMonitor (fork of OHM) instead of OpenHardwareMonitor

Even older versions of LibreHardwareMonitor are getting this issue

[Clone003]

I fixed it by restoring the .dll in Windows Defender
If it removes it again, you can exclude GOverlay Plus' folder from Defender, if you want while we wait for an update

[Azyate]

Yes, I whitelisted it.

[TheLaGmAn]

It a false positive but its an issue with the openhardware library.
You can also disable ohm completely so goverlay doesnt even use it, to do so:

1. Stop Goverlay
2. Open your goverlay folder, and create a new text document named “disable_ohmdll”, not need to put anything inside the file, just hit save, and a file “disable_ohmdll.txt” should appear on the goverlay folder
3. Now run goverlay again and it will not attempt to load the ohm library.

[korenchkin]

sadly it is not false positive,it is really dangerous winring0 driver,but i'm not soure about how vulnerable the system is with it loaded(what software and how can use it for malware purposes),it is problem in open hardware monitor,there probably isn't free usable driver for low level tasks ohm need (you need signed driver,that costs money-thank microsoft)..this driver is used by many programs and all of them are affected

for now,we can disable ohm and use aida/hwinfo

oh yeah,once again,don't forget to thank microsoft...and thank @TheLaGmAn for workaround!