Windows Defender detects IDM Chrome Extension (IDMGCExt) Virus

If the Internet Download Manager (IDM) is not downloading files in Chrome, you’ll visit Chrome://extensions page to see IDM extension status, as of today, on Windows 10, you’ll see ‘This extension may have been corrupted‘ error for this extension. Clicking Repair doesn’t helps, visiting IDM Integration Module Extension page in Chrome Web Store and clicking ‘enable this item’ also doesn’t work.

Read: Repair IDM Integration Module Chrome Extension

How to repair Corrupted Chrome extensions

Windows Defender detects IDM Chrome extension (IDMGCExt) as virus

Installing the IDM extension from Web Store or manually dragging and dropping IDMGCExt.crx file (IDM Integration Module Chrome extension file) from IDM directory in Program Files to chrome extensions page doesn’t fix issue as Windows Defender on Windows 10 has quarantined it and shows ‘threats found’ notification from Action Center and Chrome download bar shows Failed-virus detected message.

So its confirmed from above that Windows Defender has detected IDMGCExt.crx file as a threat and blocking it from running. 

Trojan:Win32/Bluteal!rfn

When you visit Virus & threat protection in Windows Defender Security Center and check threat details, you know virus as Trojan:Win32/Bluteal!rfn. Uploading IDMGCExt file to VirusTotal confirmed us Microsoft antivirus solutions only detecting threat as Trojan:Win32/Bluteal!rfn (formerly known as TROJAN:WIN32/BLUTEAL!RFN), the threat has been flagged as severe,  by using that a hacker can perform number of malicious actions on your computer.

How to restore IDMGCExt file or reinstall IDM Integration Module in Chrome

Relax this is a false positive, Microsoft has acknowledged that and released new definition updates to rectify the problem. If you’re affected,

Open Windows Defender Security Center > Virus & Threat Protection, click check for updates. the new definitions will be installed.

If Windows Defender has removed IDMGCExt file, you’ll find it Quarantined in Security Center, here is how you can restore it.

1. Click Start, type Windows Defender

2. Click on best match to open Windows Defender Security Center, click ‘Threat history’, click ^ icon for threat name we mentioned above and click ‘Restore’.

If you’ve removed it as it was highlighted as severe threat, don’t worry, install IDM Integration Module for Chrome from Web Store or manually, check the below links for that.

How to Install IDM Integration Module Extension in Google Chrome Manually

Good News, IDM Extension for Chrome now available on Chrome Web Store

Are you affected?