Windows 10: How do I delete Trojan:Win64/Spyboy!MSR?

Discus and support How do I delete Trojan:Win64/Spyboy!MSR? in Windows 10 Gaming to solve the problem; I was notified 4 days ago July 22, 2023 about this and I checked Win. security and it appears to be a severe threat. I tried to scan but it says no... Discussion in 'Windows 10 Gaming' started by Jimrex Caoile, Jul 26, 2023.

  1. JIMREX CAOILE
    Jimrex Caoile Win User

    How do I delete Trojan:Win64/Spyboy!MSR?


    I was notified 4 days ago July 22, 2023 about this and I checked Win. security and it appears to be a severe threat. I tried to scan but it says no malicious files detected then I tried to remove it but it didn't work. But I remembered ZAM.exe, it started appearing the same day I was notified. I also saw this in affected items, this seems connected to "Malwarefox Antimalware" so I uninstalled this app. The trojan remains in my pc and nothing is happening but i'm concernced about this, what should I do? File pic C:\Users\AMD Ryzen 5\Downloads\Capture.JPG

    :)
     
    Jimrex Caoile, Jul 26, 2023
    #1
  2. TSKYBING
    TSKYBing Win User

    Trojan and Malware

    2/21/2022 5:28:49 AM

    Files scanned: 1217349

    Detected files: 43

    Cleaned files: 43

    Total scan time 06:50:37

    Scan status: Finished

    C:\$SysReset\AppxLogs\_readme.txt MSIL/Filecoder.ANG trojan deleted



    C:\$SysReset\CloudImage\_readme.txt MSIL/Filecoder.ANG trojan deleted



    C:\$SysReset\Logs\_readme.txt MSIL/Filecoder.ANG trojan deleted



    C:\$SysReset\MDM\_readme.txt MSIL/Filecoder.ANG trojan deleted



    C:\$SysReset\Scratch\_readme.txt MSIL/Filecoder.ANG trojan deleted



    C:\$SysReset\_readme.txt MSIL/Filecoder.ANG trojan deleted



    C:\Aomei\_readme.txt MSIL/Filecoder.ANG trojan deleted



    C:\Boot\sm_da\_readme.txt MSIL/Filecoder.ANG trojan deleted



    C:\Boot\_readme.txt MSIL/Filecoder.ANG trojan deleted



    C:\FRST\Quarantine\C\WINDOWS\system32\Tasks\Microsoft\Windows\PI\PI.xBAD PowerShell/Kryptik.D trojan cleaned by deleting



    C:\LDPlayer\LDPlayer4.0\_readme.txt MSIL/Filecoder.ANG trojan deleted



    C:\LDPlayer\_readme.txt MSIL/Filecoder.ANG trojan deleted



    C:\MobiMoverBackup\_readme.txt MSIL/Filecoder.ANG trojan deleted



    C:\NVIDIA\_readme.txt MSIL/Filecoder.ANG trojan deleted



    C:\OneDriveTemp\S-1-5-21-2131174034-2530422207-1368632259-1001\_readme.txt MSIL/Filecoder.ANG trojan deleted



    C:\OneDriveTemp\_readme.txt MSIL/Filecoder.ANG trojan deleted



    C:\Program Files\Wondershare\Wondershare Filmora\WsAP-Filmora.dll a variant of Win64/HackTool.Crack.W potentially unsafe application cleaned by deleting



    C:\Program Files\Wondershare\Wondershare Filmora - Copy\WsAP-Filmora.dll a variant of Win64/HackTool.Crack.W potentially unsafe application cleaned by deleting



    C:\Program Files (x86)\****-GoldBerg\****\OnlineFix64.dll a variant of Win64/HackTool.Crack.AA potentially unsafe application cleaned by deleting



    C:\Riot Games\League of Legends\_readme.txt MSIL/Filecoder.ANG trojan deleted



    C:\Riot Games\Riot Client\_readme.txt MSIL/Filecoder.ANG trojan deleted



    C:\Riot Games\VALORANT\_readme.txt MSIL/Filecoder.ANG trojan deleted



    C:\Riot Games\_readme.txt MSIL/Filecoder.ANG trojan deleted



    C:\SWSetup\_readme.txt MSIL/Filecoder.ANG trojan deleted



    C:\temp\TxGameDownload\_readme.txt MSIL/Filecoder.ANG trojan deleted



    C:\temp\{AA7C2609-F5C3-4F2D-85D0-97C700C016B3}\_readme.txt MSIL/Filecoder.ANG trojan deleted



    C:\temp\_readme.txt MSIL/Filecoder.ANG trojan deleted



    C:\text\_readme.txt MSIL/Filecoder.ANG trojan deleted



    C:\Users\TSKY\AppData\Local\VirtualStore\_readme.txt MSIL/Filecoder.ANG trojan deleted



    C:\Users\TSKY\Desktop\Ready.Or.Not.v17900.Early.Access\Ready Or Not\ReadyOrNot\Binaries\Win64\Custom.dll a variant of Win64/HackTool.Crack.AD potentially unsafe application cleaned by deleting



    C:\Users\TSKY\Desktop\Ready.Or.Not.v17900.Early.Access\Ready Or Not\ReadyOrNot\Binaries\Win64\OnlineFix64.dll a variant of Win64/HackTool.Crack.AA potentially unsafe application cleaned by deleting



    C:\Users\TSKY\Downloads\Ready_or_Not_Fix_Repair_Steam_V3_Generic\ReadyOrNot\Binaries\Win64\Custom.dll a variant of Win64/HackTool.Crack.AD potentially unsafe application cleaned by deleting



    C:\Users\TSKY\Downloads\Ready_or_Not_Fix_Repair_Steam_V3_Generic\ReadyOrNot\Binaries\Win64\OnlineFix64.dll a variant of Win64/HackTool.Crack.AA potentially unsafe application cleaned by deleting



    C:\Users\TSKY\Downloads\Windows 10_Digital_License\BIN\slc.dll Win32/HackTool.WinActivator.AL potentially unsafe application cleaned by deleting



    C:\Users\TSKY\Downloads\Windows 10_Digital_License\Windows 10 Digital License Activation Script.cmd Win32/HackTool.WinActivator.AI potentially unsafe application cleaned by deleting



    C:\Users\TSKY\Downloads\BrowserSetup_b0zz0i5.exe a variant of Win32/CryptoTab.A potentially unwanted application cleaned by deleting



    C:\Users\TSKY\Downloads\counter-strike-1-6.exe a variant of Win32/GameHack.ANF potentially unsafe application cleaned by deleting



    C:\Users\TSKY\Downloads\windows.cmd BAT/RiskWare.HackTool.WinActivator.A application cleaned by deleting



    C:\Users\TSKY\_readme.txt MSIL/Filecoder.ANG trojan deleted



    C:\Windows \System32\_readme.txt MSIL/Filecoder.ANG trojan deleted



    C:\Windows \_readme.txt MSIL/Filecoder.ANG trojan deleted



    C:\Xamp Premium\_readme.txt MSIL/Filecoder.ANG trojan deleted



    D:\_readme.txt MSIL/Filecoder.ANG trojan deleted
     
    TSKYBing, Jul 26, 2023
    #2
  3. MOIRTY
    Moirty Win User
    Trojan Found and Deleted....but it Returns (Trojan: HTML/Phish.AB!MSR)

    Windows defender periodically finds a Trojan in a .htm file in my Windows Communications appdata area (see attachment). You will notice that the file is in the Attachments folder. Windows defender seems to delete this threat but after a few days or a couple
    weeks, the threat will return in the exact same location.

    I have no evidence that the Trojan is actually running on my computer. I believe it is just sitting in the file waiting to be executed. I have not knowingly run this file and am usually careful about phishing attacks.

    Only Microsoft Defender will find it. I tried using Malwarebytes, Bitdefender and Microsoft Safety Scanner. None of these even finds it.

    MS-Defender says that it is successful at removing it and a scan immediately after the clean will not find the Trojan.

    A few troubleshooting actions to date:

    • Have removed the threat and immediately opened all known Microsoft communications programs (Outlook, Windows Calendar/Mail, Skype, Skype-Biz, Teams). I then reran a scan but did not find the Trojan. Nevertheless, it did return a couple weeks later.
    • I have started my computer in Safe Mode and deleted the entire package folder. After rebooting, the Trojan is no longer found by Defender. However, the folder and its content is eventually recreated along with the Trojan threat.
    • I had a case opened at Microsoft (who more-or-less had me repeat everything I had already done). MS ultimately recommended that I rebuild/refresh my entire computer. I am not adverse to doing this but I am worried that since the Trojan appears to be in
      an attachment within Windows communications, it will simply return. I do not want to waste my time.

    I currently run a daily scan of the appdata\package folder so that I can identify when the file returns.

    MS-Surface Pro i7/16GB/512GB with all Windows 10 Pro updates completed.

    Office 365 environment with most all files stored in OneDrive or SharePoint.

    Thank you for any further thoughts on this issue.

    -bs


    How do I delete Trojan:Win64/Spyboy!MSR? d96afd83-e398-49da-836d-8aa82a4861ec?upload=true.jpg
     
    Moirty, Jul 26, 2023
    #3
  4. ANDREI K DIOUMAEV
    Andrei K Dioumaev Win User

    How do I delete Trojan:Win64/Spyboy!MSR?

    All the people say there is a bug on yesterday (21) update of windows 10. I am facing the same issue!!

    I tried to go into

    C:\ProgramData\Microsoft\Windows Defender\Scans\History\Service\DetectionHistory\

    as was recommended, but my Windows (for me as a user, not Admin) does not allow to go into the

    \Scans

    subdirectory. My access stops at the

    C:\ProgramData\Microsoft\Windows Defender

    level, and Windows report that the "\Scans" subdirectory is empty.

    Please, comment

    Regards

    P.S. The system - on the computer I tried the above - was last updated with the "Feature update to Windows 10, version 22H2" back in May-2023; I got the message about the "Win64/Spyboy!MSR" trojan on different computer
     
    Andrei K Dioumaev, Jul 26, 2023
    #4
Thema:

How do I delete Trojan:Win64/Spyboy!MSR?

Loading...

  1. How do I delete Trojan:Win64/Spyboy!MSR? - Similar Threads - delete Trojan Win64

  2. How do I remove Trojan:Win64/Spyboy!MSR?

    in Windows 10 Gaming
    How do I remove Trojan:Win64/Spyboy!MSR?: I cannot seem to delete Trojan:Win64/Spyboy!MSR file: \??\C:\WINDOWS\System32\drivers\zamguard64.sys.I have already followed the instructions on this thread. After both scans, the threat still shows that it's detected and action is needed but nothing happens when I tell it to...

  3. How do I remove Trojan:Win64/Spyboy!MSR?

    in Windows 10 Software and Apps
    How do I remove Trojan:Win64/Spyboy!MSR?: I cannot seem to delete Trojan:Win64/Spyboy!MSR file: \??\C:\WINDOWS\System32\drivers\zamguard64.sys.I have already followed the instructions on this thread. After both scans, the threat still shows that it's detected and action is needed but nothing happens when I tell it to...

  4. How do I remove Trojan:Win64/Spyboy!MSR?

    in AntiVirus, Firewalls and System Security
    How do I remove Trojan:Win64/Spyboy!MSR?: I cannot seem to delete Trojan:Win64/Spyboy!MSR file: \??\C:\WINDOWS\System32\drivers\zamguard64.sys.I have already followed the instructions on this thread. After both scans, the threat still shows that it's detected and action is needed but nothing happens when I tell it to...

  5. How do I remove this from my computer: Trojan:Win64/Spyboy!MSR

    in Windows 10 Gaming
    How do I remove this from my computer: Trojan:Win64/Spyboy!MSR: How do I remove this from my computer: Trojan:Win64/Spyboy!MSR https://answers.microsoft.com/en-us/windows/forum/all/how-do-i-remove-this-from-my-computer/698e9dde-1920-4176-9577-45b61a3dace5

  6. How do I remove this from my computer: Trojan:Win64/Spyboy!MSR

    in Windows 10 Software and Apps
    How do I remove this from my computer: Trojan:Win64/Spyboy!MSR: How do I remove this from my computer: Trojan:Win64/Spyboy!MSR https://answers.microsoft.com/en-us/windows/forum/all/how-do-i-remove-this-from-my-computer/698e9dde-1920-4176-9577-45b61a3dace5

  7. How do I remove this from my computer: Trojan:Win64/Spyboy!MSR

    in AntiVirus, Firewalls and System Security
    How do I remove this from my computer: Trojan:Win64/Spyboy!MSR: How do I remove this from my computer: Trojan:Win64/Spyboy!MSR https://answers.microsoft.com/en-us/windows/forum/all/how-do-i-remove-this-from-my-computer/698e9dde-1920-4176-9577-45b61a3dace5

  8. How do I delete Trojan:Win64/Spyboy!MSR?

    in Windows 10 Software and Apps
    How do I delete Trojan:Win64/Spyboy!MSR?: I was notified 4 days ago July 22, 2023 about this and I checked Win. security and it appears to be a severe threat. I tried to scan but it says no malicious files detected then I tried to remove it but it didn't work. But I remembered ZAM.exe, it started appearing the same...

  9. How do I delete Trojan:Win64/Spyboy!MSR?

    in AntiVirus, Firewalls and System Security
    How do I delete Trojan:Win64/Spyboy!MSR?: I was notified 4 days ago July 22, 2023 about this and I checked Win. security and it appears to be a severe threat. I tried to scan but it says no malicious files detected then I tried to remove it but it didn't work. But I remembered ZAM.exe, it started appearing the same...

  10. Trojan Found and Deleted....but it Returns Trojan: HTML/Phish.AB!MSR

    in AntiVirus, Firewalls and System Security
    Trojan Found and Deleted....but it Returns Trojan: HTML/Phish.AB!MSR: Windows defender periodically finds a Trojan in a .htm file in my Windows Communications appdata area see attachment. You will notice that the file is in the Attachments folder. Windows defender seems to delete this threat but after a few days or a couple weeks, the threat...