Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

I Think I Have A Trojan That Keeps Reappearing


  • Please log in to reply
3 replies to this topic

#1 joebeaven

joebeaven

  • Members
  • 422 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:UK
  • Local time:09:06 PM

Posted 10 May 2016 - 08:54 AM

Hi,

 

I'm using a self-built Windows 7 Ultimate PC. I have a file here:

 

C:\Users\Joe\AppData\Roaming\windows.vbs

 

which Malwarebytes identifies as an infection (although Avira thinks it's fine).

 

Malwarebytes has removed it a few times and I've deleted it manually a few times, but it always reappears after a restart. It also always adds a shortcut to my Startup folder after a restart.

 

Here's what Malwarebytes says about it:

 

"Files: 1
Trojan.Agent.Gen, C:\Users\Joe\AppData\Roaming\windows.vbs, , [c47872624257e94d7aec7fd6b350f709],"
 
The only affect I've noticed to my computer is that I can't upload items to OneDrive any more. I get the "Aw, Snap!" error after a couple of minutes.
 
Please can someone help me to get rid of the infection?
 
Thank you,
Joe


BC AdBot (Login to Remove)

 


#2 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,490 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:04:06 PM

Posted 13 May 2016 - 02:22 PM

Yes it may or may not be... Hello, to get a second opinion, submit it to one of the following online services that analyzes suspicious files:In the "File to Scan" (Upload or Submit) box, browse to the location of the suspicious file(s) and submit (upload) it for scanning/analysis. If you get a message saying "File has already been analyzed", click Reanalyze or Scan again.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#3 joebeaven

joebeaven
  • Topic Starter

  • Members
  • 422 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:UK
  • Local time:09:06 PM

Posted 20 May 2016 - 07:39 AM

Thank you. I was able to find software to remove it using those links.



#4 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,490 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:04:06 PM

Posted 20 May 2016 - 08:58 AM

You're welcome from all of us!
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users