Windows 10: can I scan a Office Word file to check Trojandownloader:097M/donoff warning from Defender

Hi,


If there a tool that will allow me to scan an Office Word document to check if the Trojandownloader:097M/donoff warning from Defender is a real threat or is a legitimate Word Add-In that adds the advertised functionality?

The document contains macros to enable teachers to easily add comments and feedback to student assignments.


The document is called

eMarking-Assistant-2-2-5.doc

and it can be downloaded from

http://emarkingassistant.com/download/software-eMarking-Assistant/


Thanks in advance for any assistance,

Peter

:)

 

trojandownloader 097m/ donoff x 2

You might not need all of these, but start at the top and reboot after each one.

Remove it with these tools. Check for updates first and then scan with each one at a time until your machine is clean.





TDSSKiller Rootkit Removal Utility

Download TDSSKiller





RogueKiller

Download RogueKiller

SuperAntiSpyware

Remove Malware & Spyware with Anti-Malware Software | Superantispyware



AdwCleaner (Free)

Download AdwCleaner





Malwarebytes (Get the free version)

Malwarebytes Download - Free Virus Scan & Virus Protection Tool



When offered, uncheck: Enable free trial of Malwarebytes Anti-Malware Premium.





Junkware Removal Tool (Free)

http://www.bleepingcomputer.com/download/junkware-removal-tool/







HitmanPro (30 day free trial)

http://www.surfright.nl/en/hitmanpro

 

defender scans

Hi Ian,

Thanks for posting your query on Microsoft Community.

This issue might occur if you have set any task scheduler for Windows Defender.

I suggest you to delete the task for Windows defender and check if it helps.

Follow the below steps:

• 
  Search and open Schedule tasks.
  
• 
  In the left-hand menu, open the Task Scheduler Library, then select
  Microsoft >Windows >Windows Defender.
  
• 
  Double-click Windows Defender Scheduled Scan.
  
• 
  Select the Triggers panel, then select Delete.
  

Hope it helps, reply to us with the status of your issue. We will be happy to assist you.

 

"TrojanDropper:O97M/Donoff|"has been quarantined but still says to remove?

What is the complete path
(location) where Windows Defender indicates that the threat resides?

What is the complete specific file.

Have a look where the file is located:

QUOTE

Scan results can be viewed by opening Windows Defender and looking at the last scan details. If anything was detected, it will show in the 'History' tab. If you want to see more detailed logs, you can view them in Event Viewer > Applications and Services
Logs > Microsoft > Windows > Windows Defender > Operational. If malware was detected malware, it will show as a 'Warning' with a yellow warning sign and details.

UNQUOTE

`~`

TrojanDownloader:O97M/Donoff threat description - Microsoft Security Intelligence