Jump to content

Malwarebytes cant remove Trojan.Roraccoon

Recommended Posts

Two days ago my computer started running really slow, so i did a scan with Windows Defender and found nothing. So I ran malwarebytes and it found 2 Trojan.Roraccoon's. Went through the process like normal, select the two malware and click quarantine selected. Malwarebytes says it quarantined them but needs to restart. Restart computer and when i run the threat scan again they are found again. I ran FRST and attached the FRST.txt and affition.txt and also attached the export log of my last scan. 


Im hoping someone could help me please

Thank you





Link to post
Share on other sites

Hello, Welcome to Malwarebytes.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.

Remove this program in bold via the Control Panel > Programs > Programs and Features.
CCleaner (HKLM\...\CCleaner) (Version: 5.45 - Piriform)

Version 5.45 is compromised. Delete it and get the previous version.

Please download the attached Fixlist.txt file to  the same folder where the Farbar tool is running from.
The location is listed in the 3rd line of the FRST.txt log you have submitted.

Run FRST and click Fix only once and wait.

The tool will create a log (Fixlog.txt) please post it to your reply.

After the restart if the problem persists with chrome execute this.
Chrome Secure Preferences detection always comes back


Let me know if the problem persists.


Link to post
Share on other sites

Hi Nasdaq,

Thank you for taking the time to look into this for me. I uninstalled CCleaner through the control panel like you instructed but I decided not to reinstall it, don't know if that will effect anything but wanted to let you know. I downloaded the fixlist.txt and saved it to the same folder as where the Farbar tool is running. When I opened FRST a pop up opended that said Failed to update (4). I clicked ok and then clicked fix and waited like you said till it was done. It did require a restart, so I restarted it and ran Malwarebytes again but the trojans were still there. I clicked the link for Chrome Secure Preferences detection always comes back that you provided and followed the steps but it still persists.


Link to post
Share on other sites


If Edge is your default browser try this.

Edge > May be a Syncing issues.
Turn it off and leave it off for a day or two.

Your may have to reset Edge.
Reset, Repair or Reinstall Edge browser in Windows 10

This may help also.
Microsoft Edge: How to Clear Browser History and Cache

If the problem exists in other browsers please advise.

Link to post
Share on other sites

  • 2 weeks later...
  • Root Admin

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread.



Link to post
Share on other sites

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.