Jump to content
BettyB723

is clover really a trojan

Recommended Posts

yes, I have not had a chance to run the script yet....hope to within the next few days.

Share this post


Link to post
Share on other sites

OK, Thanks for letting me know.   Just so you know, the run will not take a long time.   under 15 minutes.

Share this post


Link to post
Share on other sites

I just was going to fun the file FRST64 and couldn't find it anywhere..not in downloads or recycle bin. Then I starting looking at the past messages and couldn't find where you sent it to me. Perhaps when you attached First.txt you really meant to send the other file? 

Share this post


Link to post
Share on other sites

The FIXLIST script is attached to this post.   This is a copy of my message from August 8.  The FRST64 is on the D drive   ( where you had it before).

The tool named FRST64.exe  is already on the  D drive  Downloads folder.

I have a custom script ( below) to go along with this fix.

 

Please Close and save any open work files before you start this next step.  It will involve a Windows Restart at the end of it.

I am sending a   custom Fix script which is going to be used by the FRST64  tool. They will both work together as a pair.

Please RIGHT-click the (attached file named) FIXLIST and select SAVE AS and save it directly ( as is) to the D:\Downloads folder

The tool named FRST64.exe  is already on the  D drive  Downloads folder.

Start the Windows Explorer and then, open the  D rive  Downloads folder.


Double click FRST64

  to run the tool. If the tool warns you the version is outdated, please download and run the updated version.
Click the Fix button just once, and wait.

 

FRST_Fixl.png.c4c1c0dddcc49b11fa400590f070bd5e.png

 

PLEASE have lots and lots of patience when this starts. You will see a green progress bar start. Lots of patience. Some machines take longer than others.
If you receive a message that a reboot is required, please make sure you allow it to restart normally.
The tool will complete its run after restart.
When finished, the tool will make a log ( Fixlog.txt) in the same location from where it was run.

Please attach the FIXLOG.txt with your reply.    Also advise on the situation after this run.

Sincerely,

Fixlist.txt

Share this post


Link to post
Share on other sites

hate to say, but there is no frst64 in my D:DATA/download directory. there is a FRSTEnglish.exe and FRST.txt. I have looked more than once because sometimes I see the forest instead of the trees. and that directory is in alphabetical order!!!

Share this post


Link to post
Share on other sites

Then the one to use is FRSTENGLISH

( that is the same program as FRST64 )

Share this post


Link to post
Share on other sites

Hi.  Thank you for the log report.  That was a good run.

This pc should be clear of "clover".   How are things at this point ?   Do you need help on anything else?

 

The Microsoft Safety Scanner  is a free Microsoft stand-alone virus scanner that  can be used to scan for & remove malware or potentially unwanted software from a system.

The download links & the how-to-run-the tool are at this link at Microsoft

https://docs.microsoft.com/en-us/windows/security/threat-protection/intelligence/safety-scanner-download

 

Let me know the result of this.

 

Share this post


Link to post
Share on other sites

clean with nothing detected.

My original question was is clover really a trojan which was not really answered. I no longer have it, of course, but sure would like to be able to use it as it is a great utility to give tabs to file explorer and also have a bar of shortcuts to my most used folders. Any word on that???

Share this post


Link to post
Share on other sites

Yes the "clover" that was on this machine was a trojan threat.   I would not recommend using it.

Microsoft classified it as    Name: Trojan:Win32/CryptInject

Share this post


Link to post
Share on other sites

I am happy to have helped.  I am marking the case for closure, but first some tips for best practices.

 

Best practices & malware prevention:
Free games & free programs are like "candy". We do not accept them from "strangers".

Follow best practices when browsing the Internet, especially on opening links coming from untrusted sources.
First rule of internet safety: slow down & think before you "click".


Never click links without first hovering your mouse over the link and seeing if it is going to an odd address ( one that does not fit or is odd looking or has typos).

 

Never open attachments that come with unexpected ( out of the blue ) email no matter how enticing.
Never open attachments from the email itself. Do not double click in the email. Always Save first and then scan with antivirus program.
 

Pay close attention when installing 3rd-party programs. It is important that you pay attention to the license agreements and installation screens when installing anything off of the Internet. If an installation screen offers you Custom or Advanced installation options, it is a good idea to select these as they will typically disclose what other 3rd party software will also be installed.
Take great care in every stage of the process and every offer screen, and make sure you know what it is you're agreeing to before you click "Next".

Use a Standard user account rather than an administrator-rights account when "surfing" the web.
See more info on Corrine's SecurityGarden Blog http://securitygarden.blogspot.com/p/blog-page_7.html
Dont remove your current login. Just use the new Standard-user-level one for everyday use while on the internet.

 
Do a Windows Update.

Make certain that Automatic Updates is enabled.
https://support.microsoft.com/en-us/help/12373/windows-update-faq




Keep your system and programs up to date. Several programs release security updates on a regular basis to patch vulnerabilities. Keeping your software patched up prevents attackers from being able to exploit them to drop malware.

For other added tips, read "10 easy ways to prevent malware infection"

With best regards.

Share this post


Link to post
Share on other sites
Guest
This topic is now closed to further replies.

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.