Jump to content

Trojan:Win32/Skeeyah.A!rfn isn't being removed by Malwarebytes


Recommended Posts

Hi,   @Snooples         :welcome:

My name is Maurice. I will be helping and guiding you, going forward on this case.

Please follow my directions as we go along.  Please do not do any changes on your own without first checking with me.

If you will be away for more than 3 consecutive days,  do try to let me know ahead of time, as much as possible.

 

Please only just attach   all report files, etc  that I ask for as we go along.

Thanks for the reports you attached.   The items tagged by Windows Defender are ISO files.   Those types of files Malwarebytes does not touch.

Here are snippets from Windows system events logged by Windows Defender

Date: 2019-12-22 15:18:22.285
Description: 
Windows Defender Antivirus has detected malware or other potentially unwanted software.
For more information please see the following:
https://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win32/Tiggre!plock&threatid=2147723626&enterprise=0
Name: Trojan:Win32/Tiggre!plock
ID: 2147723626
Severity: Severe
Category: Trojan
Path: containerfile:_C:\$Recycle.Bin\S-1-5-21-879554299-3396115711-540680905-1001\$RBVP4EX\hlm-lostember.iso; file:_C:\$Recycle.Bin\S-1-5-21-879554299-3396115711-540680905-1001\$RBVP4EX\hlm-lostember.iso->setup.exe
Detection Origin: Local machine
Detection Type: Concrete
Detection Source: User
Process Name: Unknown
Security intelligence Version: AV: 1.307.966.0, AS: 1.307.966.0, NIS: 1.307.966.0
Engine Version: AM: 1.1.16600.7, NIS: 1.1.16600.7

Date: 2019-12-22 14:47:04.423
Description: 
Windows Defender Antivirus has detected malware or other potentially unwanted software.
For more information please see the following:
https://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win32/Skeeyah.A!rfn&threatid=2147694182&enterprise=0
Name: Trojan:Win32/Skeeyah.A!rfn
ID: 2147694182
Severity: Severe
Category: Trojan
Path: containerfile:_C:\Users\Tom\Downloads\Disco_Elysium-HOODLUM\hlm-discoelysium.iso; file:_C:\Users\Tom\Downloads\Disco_Elysium-HOODLUM\hlm-discoelysium.iso->setup.exe
Detection Origin: Local machine
Detection Type: Concrete
Detection Source: System
Process Name: Unknown
Security intelligence Version: AV: 1.307.966.0, AS: 1.307.966.0, NIS: 1.307.966.0
Engine Version: AM: 1.1.16600.7, NIS: 1.1.16600.7
 

[  1   ]

Please empty thee Recyle Bin for Windows.

 

Please delete the ISO  that is on your Downloads folder

C:\Users\Tom\Downloads\Disco_Elysium-HOODLUM\hlm-discoelysium.iso;

file:_

C:\Users\Tom\Downloads\Disco_Elysium-HOODLUM\hlm-discoelysium.iso->setup.exe

 

[   2   ]

Windows 10 has the Microsoft Windows Defender which can run the Windows Defender Offline scan.
Windows Defender Offline in Windows 10 can be run directly from within Windows, without having to create bootable media.

Click the Windows Start menu button on the Taskbar, select Settings icon. Then choose Update and Security.
 

In Windows Settings  >>> click on Windows Security from the left side list.

Next, In Windows Security section:  Click on the grey button Open Windows Security

next click on the blue Scan options

Look down the options list.  Tick on Windows Defender Offline scan.   Then click the grey "Scan now" button.


and let it scan the system.

Keep in mind that the design and what is scanned by Windows Defender is a whole different design from Malwarebytes. But do let me know how this scan goes and what the result is.

.

 

Link to post
Share on other sites
  • 2 weeks later...

Due to the lack of feedback, this topic is closed to prevent others from posting here.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this topic. Other members who need assistance please start your own topic in a new thread.

Thanks

 

Link to post
Share on other sites
Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    No registered users viewing this page.

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.