Help regarding Trojan Horse download

[AnyaJones64]

How do I permanently remove a Trojan Horse Virus on a Windows 10–64 bit PC? Yesterday I tried viewing an excel file from a .gov website on science learning standards in my state, however, when I clicked on the link to the file, an automatic download started. The download showed as rejected and within my browser it was stated that a virus was detected. I didn’t click to try the download again and I removed it from my download list. My Windows Defender detector blocked and removed the Trojan download from my Temp Files. I ran several full scans and followed online instructions on deleting Temp files. I then found an article by “howtofixguide” on the trojandownloadero97m-encdoc-femtb (the one that was removed) and decided to search for the virus on my PC in my file explorer by searching 5E967C56B6ECA10A1DDCE26896607E8F.mlw in the search engine. This was listed as the virus name on the website. I used the Quick Access search in file explorer. When I pressed enter it opened up a link to a Bing Search about PCs as well as a popup within file explorer asking me to enter a username and password for bing.com. I'm considering running a full scan, doing a factory reset, and changing all of my personal information. Do you have any other advice? Or can you explain what happened when I entered the name in my file search engine? Thank you.

 

Note: I have windows 10 64-bit and I'm currently running Malwarebytes.

[MKDB]

Hello @AnyaJones64  and 

 

My name is MKDB and I will assist you.

 

 

Let's keep these principles as we proceed. Make sure to read the entire post below first.

• Please follow the steps in the given order and post back the log files.
• Please attach all log files into your post.
• Temporarily disable your antivirus or other security software first. Make sure to turn it back on once the scans are completed.
• Temporarily disable Microsoft SmartScreen to download software below if needed. Make sure to turn it back on once the scans are completed.
• Searching, detecting and removing malware isn't instantaneous and there is no guarantee to repair every system.
• Before we start, please make sure that you have an external backup, not connected to this system, of all private data.
• Please be patient and stick with me until I give you the "all clear".
• Only run the tools I guide you to. Please don't run any other scans, download, install or uninstall any programs while I'm working with you.
• Cracked or hacked or pirated programs are not only illegal, but also will make a computer a malware victim. Having such programs installed, is the easiest way to get infected. It is the leading cause of ransomware encryptions. It is at times also big source of current trojan infections. Please uninstall them now, if any are here, before we start the cleaning procedure.
• As English is not my native language, please do not use slang or idoms. It may be hard for me to understand.
• If you do not respond within 4 days, your topic will be closed. If you are away for a longer time, please let me know.

 

 

 

Step 1

• If you already have Malwarebytes Anti-Malware installed, then open Malwarebytes and click on the Scan button. It will automatically check for updates and run a Threat Scan.
• If you don't have Malwarebytes installed or if you don't run the newest version yet, please download it from here and install it.
• Once the MBAM dashboard opens, click on Settings (gear icon).
• Click on Security tab and make sure that all four Scan options are enabled.
• Close Settings and click on the Scan button on the dashboard.
• Once the scan is completed make sure you have it quarantine any detections it finds.
• If no detections were found click on the Save results drop-down, then the Export to TXT button and save the file as a Text file to your desktop.
• If there were detections then once the quarantine has completed click on the View report button, then click the Export drop-down, then the Export to TXT  button, and save the file as a Text file to your desktop or other location you can find and attach that log on your next reply.
• If the computer restarted to quarantine you can access the logs from the Detection History, then the History tab. Highlight the most recent scan and double-click to open it. Then click the Export drop-down, then the Export to TXT  button, and save the file as a Text file to your desktop or other location you can find and attach that log on your next reply.
• If Malwarebytes won't run, then please skip to the next step and let me know in your next reply that the scanner would not run.

 

 

 

Step 2

Please download AdwCleaner and save it to your desktop.

• Double-click to run it.
• Accept the End User License Agreement.
• Click Scan Now.
• When finished, if items are found please click Next / Quarantine.
• Maybe your PC will be rebooted, AdwCleaner will be opened automatically.
• Click View Log File.
• AdwCleaner will open one log (AdwCleaner[Cxx].txt).
• Please attach the log to your next reply.

 

 

 

Step 3

Please download the suitable version of Farbar Recovery Scan Tool (FRST) and save it to your desktop: 32bit | 64bit

• Double-click to run it. When the tool opens, click Yes to disclaimer.
• Press the Scan button.
• FRST will create two logs (FRST.txt + Addition.txt) in the same directory the tool is run.
• Please attach these logfiles to your next reply.

 

[MKDB]

Hi @AnyaJones64,

do you still need help? If so, please follow my instructions and post the logfiles.

Thank you.

[AdvancedSetup]

Due to the lack of feedback, this topic is closed to prevent others from posting here.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this topic. Other members who need assistance please start your own topic in a new thread.

Tips to help protect from infection

Thanks