Questions tagged [trojan]

A trojan horse is a type of malware that poses as benevolent software, while secretly installing other malware in your system.

Filter by
Sorted by
Tagged with
0 votes
0 answers
36 views

BIOS has a password which I never set (Rootkit?)

Background info: our network was infected years ago by a hacker (loser stalker). I suspect he was using Remote Desktop, as the icon appeared when I unhid Windows items, like it had been used. I re-...
0 votes
0 answers
29 views

Windows 11 - Various .exe files closing themselves after execution

I'm running a system that runs Windows 11. The issue is, that whenever I open certain programs, they open and after 2-10s they close themselves. Between the 2-10s the programs are frozen and don't ...
  • 1
0 votes
1 answer
163 views

Is ExpressVPN trying to install malware on my PC?

I have been using ExpressVPN for a while. Today when I was trying to update it to the latest version (10.36.0.4), Kaspersky detected the following trojan: HEUR:Trojan.Win64.Reincarnation.gen Kaspersky'...
0 votes
1 answer
166 views

How is it possible to be infected by a Trojan without downloading anything suspicious?

After conducting a full scan on my Fujitsu Windows 10 laptop yesterday (Nov. 01, 2022), I got informed of this threat: Trojan:HTML/CryptoExtortBTC.A, with the detail "This program is dangerous ...
  • 151
0 votes
1 answer
106 views

What does "Affected items" mean in the threat report of Windows 10 Microsoft Defender scan?

After conducting a full scan on my Fujitsu Windows 10 laptop today (Nov. 01, 2022), I got informed of this threat: Trojan:HTML/CryptoExtortBTC.A (I do not do anything about cryptocurrency. This seems ...
  • 151
0 votes
1 answer
792 views

Trojan virus threat 'removed or restored'

I recently downloaded a file from a malicious website by mistake. It had a trojan virus with the name as following :- Trojan.win32.Zapchast My windows defender detected the threat and then quarantined ...
0 votes
0 answers
28 views

Does anyone know how to remove "Trojan:HTML/CryptoStealBTC" from Windows 10 DELL laptop? [duplicate]

snip of the message from windows defender system I have tried all ways to Quarantine, Remove the said threat from my system using Windows Security System. Still it is coming up as a threat to the ...
  • 1
0 votes
0 answers
175 views

Instance of Windowsformapp repeatedly creates an executable in the temp folder called "Velo.exe" in Windows 10

Since yesterday, I have noticed that through Windows Form an application called Velo.exe creates many subfolders (2-3 per minute, see photo) in the Temp folder with the same file called Velo.exe ...
  • 101
1 vote
1 answer
100 views

Should I do anything after formatting my computer because of malware infection?

Yesterday I realised that, after installing some software last weekend, Microsoft Defender was detecting several file on my Windows 10 document's temp folder. Some of them were deleted by the ...
0 votes
1 answer
1k views

What’s the difference between rootkit and RAT? [duplicate]

I know that both can give attacker remote access to computer. Is RAT easier to detect than rootkit? Where are they typically get installed? Can one make more damage than another? Which one is easier ...
user avatar
1 vote
0 answers
16 views

Some Virus is creating "Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\DATA\SqlManagement" folder again and again [duplicate]

c:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\DATA\SqlManagement folder is creating again and again in our Windows server 2008 R2. SqlManagement folder contains some files with ...
0 votes
0 answers
137 views

Found a weird malware at weird location (Windows Defender -Detected : Trojan:BAT/MineBicoin.K & -Affected Item: boot:\\.\E:\)

I was using Ubuntu 20.04 (no dual boot) and after that I installed Official Windows 10 2020 version (even checked sha256sum of the iso file it was genuine) and then after it booted (partition remade ...
  • 11
2 votes
1 answer
18k views

What precautions to take after a trojan Win32/Occamy.C infection

Platform Details: Windows 10, 64 bit. Infection History. I downloaded this cheat tool for a game. After that, I performed the following sequence of actions: I extracted the software from the package ...
0 votes
2 answers
82 views

Windows Defender Trojan removal

Windows Defender Win10 removed a Trojan. I clicked allow, by mistake, to allow the trojan through the firewall in the future. I cannot find the Trojan in the list of allowed apps when I check the ...
1 vote
1 answer
2k views

Best Way to Get Rid of Ceprolad.A [duplicate]

Well this is embarrassing... I was attempting to download a freeware tool and clicked on the wrong thing so I was blasted with tons of malware. Windows Defender seems to have gotten rid of some of ...
1 vote
0 answers
1k views

I accidentally downloaded a Trojan:Win32/Occamy.C virus. I did not run the EXE. Am I safe? [closed]

So I have just downloaded a Trojan virus on accident. I did not run the EXE, and now the file is gone (I don't know if I deleted it or not, but it isn't in my recycling bin.) I ran a McAfee security ...
  • 11
1 vote
1 answer
277 views

Do I Have a Trojan after Plugging in Hard Drive?

I temporarily fixed a family member’s hard drive so I could get the data off of it onto my computer. As I was transferring over the downloads, I had a windows defender message come up detecting a ...
0 votes
0 answers
280 views

Is my webcam hardwired?

I want to know if my webcam LED can be controlled by software (malware) or if it is hardwired. My understanding is that if a webcam's LED is hardwired it cannot be turned on by a hacker without the ...
user avatar
0 votes
2 answers
1k views

Windows 7 all files "access denied" after Trojan attack [duplicate]

Background: 500 GB HD began to max out, determined total folders/files should be approx 250 GB. I have Bitdefender but somehow a Trojan got by but finally found with HouseCall. Now all folders ...
0 votes
1 answer
39 views

Can TrueCrypt like software protect my external HDD from virus in svhost.exe modify my files on it?

A 'shurtcut to (1).lnk' virus infected 50 000 of my html files on an external HDD. If I will encrypt data on it, will it protect them from trojan process being run on behalf svhost.exe?
  • 182
0 votes
1 answer
77k views

"Hiren's Boot CD 16.2" vs. "Hiren's Boot CD 15.2"

I was looking for the latest HBCD and then I found this one: "Hiren's Boot CD 16.2" which seems to be the latest, however on their own website, they only have vs. "Hiren's Boot CD 15.2" not 16.2 ...
1 vote
3 answers
1k views

Firefox shows 'Your Connection is not secure' while connecting to google.com

I reinstalled firefox and Kaspersky 17,and now I am geeting this message when trying to connect to google.com : Sign of hidden malware? My pc was infected and I reinstalled win 10 x64
  • 11
0 votes
0 answers
90 views

macOS: Is it possible to find out who is intercepting my outgoing (HTTP) communication?

Quick question: Is there any way to find out who or what process is intercepting outgoing HTTP connections on macOS? Details: Environment: macOS Sierra When trying to open pretty standard web ...
1 vote
2 answers
253 views

How can I track which software/process stops the windows firewall?

Something stops the windows firewall. If I restart it, it is again stopped within 2 minutes. How can I track which software/process stops it? Or how to configure the event manager in order to track ...
  • 33
-2 votes
1 answer
192 views

Format and encrypt compromised USB stick with TrueCrypt to make it clean again?

Let's say I bought an used USB stick from a very professional hacker who has compromised the stick with really professional methods, the NSA or FBI would use to compromise it: Would it be safe to ...
0 votes
1 answer
118 views

Network detects trojan on my device, Malware/avast can't find it.

I am a new uni student, I got an email from my uni network that they have detected Win.Trojan.Hadsruda on my laptop (they sent my mac address). And if I don't remove it in one day, they will lock my ...
0 votes
1 answer
3k views

How did I contract Skeeyah.A!bit

Windows Defender just informed me it had placed the trojan Win32/Skeeyah.A!bit in quarantine. It was first found yesterday and now again today. How did I contract that? My download history reveals ...
0 votes
1 answer
1k views

Kaspersky detects Java.exe as a virus, is this a fault?

Kaspersky detected Java.exe as a virus (Apparently Trojan.Win32.Generic) Is this a fault or is this seriously a virus?
1 vote
1 answer
1k views

Avast keeps showing this virus error

I don't remember entering any "funny" website and this virus warning seems to pop-up at random once every day, anyone know what it is? How can I fix it? Object: http://mst.my03.com:8080/k.zip | [...
  • 351
0 votes
2 answers
177 views

Data encrypted by LOCKY virus [duplicate]

Is there any way to decrypt the data which is affected and encrypted by locky ransomeware hackers. one of our companies system (windows 7) is affected. i have Ubuntu installed on my PC. please help ...
0 votes
1 answer
3k views

wired TCP/IP communication under system idle process

I used Process explorer to view system idle process details. Under the TCP/IP tab i found a wired communication its like this: I have updated paid license of ESET Smart Security 9 and it shows ...
  • 558
0 votes
1 answer
119 views

Mother-in-law fell for a "Windows support" scam. Can I save her laptop? [duplicate]

My mother-in-law fell for a Windows scam. Apparently a window popped up telling her that her computer had a virus, and she should call this number where they would clean it up for her. To cut a long ...
0 votes
1 answer
73 views

Sure way to get rid of a trojan [duplicate]

I think I have a trojan. svchost.exe is consuming %25 cpu all the time, and my Microsoft Security Essentials reports a different virus every half an hour or so. From what I understand the trojan is ...
  • 109
1 vote
2 answers
892 views

Teraterm with trojan?

I have a program called Teraterm that have some little applications like keycode.exe which it is supposed to configure the keyboard to my liking but Microsoft Security Essentials detect it as a Trojan....
  • 671
0 votes
0 answers
357 views

Why is my Antivurus finding a virus on StackOverflow?

This came as a total surprise to me. I am using Avast Antivirus 11.1.2253 with virus definitions version 160330-3 on a Windows 8.1 and a Firefox browser. The issue: While reviewing some SO ...
  • 121
3 votes
3 answers
2k views

Norton Security Blocking Trojan.Gen.SMH (github.exe)

I've been using GitHub Windows App for several months and now Norton Security is blocking it because it's assuming it's a trojan (Trojan.Gen.SMH to be exact). I removed it from the quarantine but I ...
1 vote
1 answer
1k views

How to find vulnerabilities in ubuntu services? [closed]

I have an ubuntu server running. Today I found that the server got hacked and is being used for DDoS through amazon abuse report. I found the following things on the server. The following suspecious ...
  • 132
507 votes
9 answers
56k views

Did I just get hacked?

I am developing a consumer product, and it is supposed to be connected to the Internet, so as expected, it is connected to the Internet so that I can properly develop it. I went away for an hour or ...
  • 3,519
3 votes
2 answers
3k views

localhost redirect to other site... trojan?

As title, seems there's a trojan on my server When I put a url like localhost/mysite it redirect to the site free-merchants.com and then return to my site... But if I put 127.0.0.1/mysite all ...
1 vote
1 answer
9k views

Router logs show constant unknown port mapping (forwarding)?

Do I have a virus or trojan? Should I be worried? What’s going on here? I’m currently running Debian, and there are records like this for every day since these first records showed up. I ...
0 votes
2 answers
21k views

"svchost.exe (LocalServiceAndNoImpersonation)" - Is this a virus/trojan?

Looking at the screenshot you can find that there are two svchost.exe. One is svchost.exe (NetworkService) and other is svchost.exe (LocalServiceAndNoImpersonation) svchost.exe (...
1 vote
1 answer
286 views

Wordpress Trojan Removal: How do I use find/sed -i/awk to remove the line containing "$ua=strtolower" from *.php* recursively?

A trojan has infected all *.php on my server. I used this to identify and list all the files: grep -nHR "$ua=strtolower" /www/* | cut -d':' -f1 Here is the code: <?php if(!isset($GLOBALS["\x61\...
1 vote
3 answers
2k views

How can I safely do a complete hard disk drive wipe and Windows 7 reinstall due to a virus? [duplicate]

I have a Dell inspiron 1545 running Windows 7 professional and I have recently fallen victim to a Trojan virus that has somehow managed to surpass AVG, ZoneAlarm and Malwarebytes too! I have tried ...
  • 11
3 votes
1 answer
13k views

Trojan au_.exe - how to get rid of it [duplicate]

I installed the popular software 'Synthesia' from its official website. It is a program for piano transcriptions. It has always been safe. I decided to uninstall it and as soon as I uninstalled it, a ...
  • 121
2 votes
2 answers
215 views

How do I delete files that are locked when no other app can delete them?

So I found out that I had a Trojan on my external hard drive. My anti-virus app killed it, but it has created a bunch of random files on my computer which cannot be deleted. These are image files. ...
  • 548
-2 votes
1 answer
2k views

Can i get virus/trojan from cracked software when my windows is installed with avg 2015 [closed]

One of my colleages says that he is free from virus/trojan from cracked softwares as long as the PC has AVG 2015 free edition installed. Is it correct?
  • 12k
0 votes
2 answers
665 views

How can I monitor my internet traffic while infected with trojan or rootkit?

How can I monitor my internet traffic while infected with trojan or rootkit ? Which application should I use ?
0 votes
1 answer
830 views

How to remove "Ad by browser shop" Ad from browser

How can I remove this Ad? I get it in all pages. I try to clean it with Spybot Search and Destroy but not working.
5 votes
4 answers
2k views

locale.exe and tzset.exe trojans in Cygwin

I was updating wget this morning and Symantec notified me of trojans detected in locale.exe and tzset.exe Does this mean my cygwin installation is infected?
-2 votes
4 answers
2k views

Virus Asking To Format External Hard Drive [closed]

I have an external harddrive. Whenever I put its USB into the USB port of my laptop, it asks me to format my hard drive. I think this is because of some sort of virus. Can someone please help me to ...
  • 202