Windows Defender detected TrojanClicker:JS/Chroject.A
I recently removed
Trojan:Win32/Nymaim, which was detected by
Windows Defender on a Microsoft Windows 10 system. When Windows Defender
detected that malware, it prevented the weekly backup program on the system,
which was the Windows 7 backup and restore utility, from completing
successfully. After removing that malware, I ran the backup program again, but
I found that again the backup program did not complete successfully due to
Windows detecting a
trojan during the backup operation. This time it was
TrojanClicker:JS/Chroject.A.
[ More Info ]
[/security/trojans]
permanent link
Windows Defender detected Trojan:Win32/Nymaim
When I checked a Windows 10 system to ensure that the Windows 7 backup program
that is scheduled to perform weekly backups of the system was functioning
properly, I found that the last successful backup occurred on November 11, 2018.
When I clicked on "More information" to determine the cause of the weekly
backups failing, I saw the message "Operation did not complete successfully
because the file contains a virus or potentially unwanted software." So I
opened the Windows Security application by clicking on the Windows Start button,
then selecting Settings, then Update & Security, then
Windows Security. I then clicked on Virus & threat protection
and selected Protection history, which showed an entry of "Remediation
incomplete" for the backup that ran on February 16, 2020. The issue encountered
was listed as "servere." I clicked on the downward-pointing arrowhead next
to "severe" which showed the following for the malware detected:
| Threat detected: | Trojan:Win32/Nymaim |
| Alert level: | Severe |
| Date: | 2/16/2020 10:46 PM |
| Category: | Trojan |
| Details: | This program is dangerous and executes commands from
an attacker. |
[ More Info ]
[/security/trojans]
permanent link
Ozdok/Mega-D Infected System
I encounted some problems disinfecting a system infected with the
Ozdok/Mega-D trojan.
[ More Info ]
[/security/trojans]
permanent link
AdSpy.TTC Detected by Spybot
I ran a scan of a family member's system with
Spybot Search & Destroy
version 1.5, which reported
AdSpy.TTC based on
the presence of a registry entry, but when I checked the system for
C:\Program Files\MSN Apps\MSN Toolbar\MSN
Toolbar\01.02.5000.1021\en-us\msntb.dll, which was the file
referenced by the registry entry Spybot detected, I did not see it on
the system and
CastleCops
identified the
CLSID key referenced as being associated with legitmate software.
[ More
Info ]
[/security/trojans]
permanent link
Clamav Detected Trojan.Dropper.Small-8
When I ran a scan on a system with
ClamWin, which provides a version of
clamav for Windows, it reported that it found Trojan.Dropper.Small-8
in
42odhr0b.exe.
[ More Info ]
[/security/trojans]
permanent link
