2

Windows Defender found this file in my system32\drivers directory: gfdriver.sys. Anyone have any idea what this file may be?

I'm normally very careful where I browse and what I download, so I'm curious how I might have got it. Where does it come from and what can I do to not download this again?

Thanks for any help, Google didn't really find any solid information.

markspace
  • 232

2 Answers2

2

I do not see this on any of my Windows 10 machines, and to the best of my knowledge, it is appropriate for Windows Defender to quarantine it.

You can remove from Quarantine or it will disappear on its own in a few days.

[WD Quarantine gfdriver1

I did see this that may help you with where it came from:

Quote from a Microsoft Answers thread:

I used to have (I think so) a virus called Quick Driver Updater that I got from a cracked game

Driver Update Apps are all over the place in Ads on websites.

1

When this happens to me WD says it is tied to one "APP:NetFilterSDK."

This tells us it is from some Software Development Kit and is most likely safe to use. As for where it originated, your guess is as good as mine. It could literally come from almost anywhere as SDK kits are quite common in their packaging with games, apps and wares.

It may be worth noting that I haven't had this flag pop up for quite some time (like years) until I recently re-installed GPU Tweak-III (which causes frequent BSOD crashes and GPU driver issues) AMD Overdrive and EVGA Precision X1. Running at lower clock speeds and/or even removing the software entirely seems to fix the issue.