Rachel9 Posted October 20, 2016 ID:1067506 Share Posted October 20, 2016 Hello I would like to manually remove a stubborn virus that's located in the catroot2 folder. It's detected as TR/Virtool.INF.Autorun.241.66 (in Avira, Malwarebytes scan comes clean). If I delete it from the quarantine, will it be removed from my computer or will it just be removed from the quarantine and still active on the computer? I've scanned my computer with many anti-malware and anti-virus programs, they found some adware and some other stuff but not that one, as Avira still detects it. But I think Avira is right that I do have something on my computer because of the high CPU usage lately, and there's a chance the adware is coming from the TR/Virtool... If deleting the file from quarantine will not delete it from the computer, may I ask how do I manually delete it? Thanks. Link to post Share on other sites More sharing options...
TwinHeadedEagle Posted October 20, 2016 ID:1067509 Share Posted October 20, 2016 (edited) Hello and Please download Farbar Recovery Scan Tool and save it to your desktop. Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them.Only one of them will run on your system, that will be the right version. Double-click to run it. When the tool opens click Yes to disclaimer. Press Scan button. button. It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply. The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply. Edited October 20, 2016 by TwinHeadedEagle Link to post Share on other sites More sharing options...
Rachel9 Posted October 20, 2016 Author ID:1067510 Share Posted October 20, 2016 Ok, here they are: FRST.txt Addition.txt Link to post Share on other sites More sharing options...
TwinHeadedEagle Posted October 20, 2016 ID:1067511 Share Posted October 20, 2016 Can you make a picture with the location of detected threat? Link to post Share on other sites More sharing options...
Rachel9 Posted October 20, 2016 Author ID:1067512 Share Posted October 20, 2016 Here it is, it's the first one. Link to post Share on other sites More sharing options...
TwinHeadedEagle Posted October 20, 2016 ID:1067513 Share Posted October 20, 2016 (edited) There is no sense in this detection and it has to be some false detection. Please try to update Avira and to contact their support. Edited October 20, 2016 by TwinHeadedEagle Link to post Share on other sites More sharing options...
Rachel9 Posted October 20, 2016 Author ID:1067516 Share Posted October 20, 2016 Ok, I did find it suspicious because I did visite a website that showed a lot of pop-ups when it was detected, that's why I trusted Avira. But I found it odd that no other anti-malware or anti-virus program detected a trojan horse, only Avira did. I'll contact them, and thank you for your help and time Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted October 24, 2016 Root Admin ID:1068014 Share Posted October 24, 2016 Since this issue is resolved I will close the thread to prevent others from posting here. If you need assistance please start your own topic and someone will be happy to assist you. Link to post Share on other sites More sharing options...
Recommended Posts