Windows 10: Trojan found, file deleted, but still trojan keeps popping up.

Discus and support Trojan found, file deleted, but still trojan keeps popping up. in Windows 10 Gaming to solve the problem; My windows defender found a threat trojan:win32/wacatac.h!ml and it was in altruistic folder in program files. I deleted the file from laptop but still... Discussion in 'Windows 10 Gaming' started by Gurleen Kaur1, Nov 13, 2023.

  1. Trojan found, file deleted, but still trojan keeps popping up.


    My windows defender found a threat trojan:win32/wacatac.h!ml and it was in altruistic folder in program files. I deleted the file from laptop but still every time i scan the laptop each time it shows same threat found and when i click on details, it shows that the trojan has infected altruistic folder which i have already deleted. Every time i scan the laptop and trojan is found, i chose remove action. But still it keeps popping up. And there are some folders in laptop also which i am unable to open. I double click on the folders but nothing happens. Is it because of trojan ?

    :)
     
    Gurleen Kaur1, Nov 13, 2023
    #1

  2. Trojan Help

    I started my comp and a system message popped up that said

    Couldn't Run:
    C:\windows\system32\dowigemu.dll


    So I Googled it for possible answers, and i found few articles that said it was a trojan.
    Good thing the files not working. I'm reluctent to mess with any of my system files, but my virus software didn't pick it up.

    Is it safe to delete this file?

    Thanks in advance.
     
    slayerusmaximus, Nov 13, 2023
    #2
  3. TSKYBing Win User
    Trojan and Malware

    2/21/2022 5:28:49 AM

    Files scanned: 1217349

    Detected files: 43

    Cleaned files: 43

    Total scan time 06:50:37

    Scan status: Finished

    C:\$SysReset\AppxLogs\_readme.txt MSIL/Filecoder.ANG trojan deleted



    C:\$SysReset\CloudImage\_readme.txt MSIL/Filecoder.ANG trojan deleted



    C:\$SysReset\Logs\_readme.txt MSIL/Filecoder.ANG trojan deleted



    C:\$SysReset\MDM\_readme.txt MSIL/Filecoder.ANG trojan deleted



    C:\$SysReset\Scratch\_readme.txt MSIL/Filecoder.ANG trojan deleted



    C:\$SysReset\_readme.txt MSIL/Filecoder.ANG trojan deleted



    C:\Aomei\_readme.txt MSIL/Filecoder.ANG trojan deleted



    C:\Boot\sm_da\_readme.txt MSIL/Filecoder.ANG trojan deleted



    C:\Boot\_readme.txt MSIL/Filecoder.ANG trojan deleted



    C:\FRST\Quarantine\C\WINDOWS\system32\Tasks\Microsoft\Windows\PI\PI.xBAD PowerShell/Kryptik.D trojan cleaned by deleting



    C:\LDPlayer\LDPlayer4.0\_readme.txt MSIL/Filecoder.ANG trojan deleted



    C:\LDPlayer\_readme.txt MSIL/Filecoder.ANG trojan deleted



    C:\MobiMoverBackup\_readme.txt MSIL/Filecoder.ANG trojan deleted



    C:\NVIDIA\_readme.txt MSIL/Filecoder.ANG trojan deleted



    C:\OneDriveTemp\S-1-5-21-2131174034-2530422207-1368632259-1001\_readme.txt MSIL/Filecoder.ANG trojan deleted



    C:\OneDriveTemp\_readme.txt MSIL/Filecoder.ANG trojan deleted



    C:\Program Files\Wondershare\Wondershare Filmora\WsAP-Filmora.dll a variant of Win64/HackTool.Crack.W potentially unsafe application cleaned by deleting



    C:\Program Files\Wondershare\Wondershare Filmora - Copy\WsAP-Filmora.dll a variant of Win64/HackTool.Crack.W potentially unsafe application cleaned by deleting



    C:\Program Files (x86)\****-GoldBerg\****\OnlineFix64.dll a variant of Win64/HackTool.Crack.AA potentially unsafe application cleaned by deleting



    C:\Riot Games\League of Legends\_readme.txt MSIL/Filecoder.ANG trojan deleted



    C:\Riot Games\Riot Client\_readme.txt MSIL/Filecoder.ANG trojan deleted



    C:\Riot Games\VALORANT\_readme.txt MSIL/Filecoder.ANG trojan deleted



    C:\Riot Games\_readme.txt MSIL/Filecoder.ANG trojan deleted



    C:\SWSetup\_readme.txt MSIL/Filecoder.ANG trojan deleted



    C:\temp\TxGameDownload\_readme.txt MSIL/Filecoder.ANG trojan deleted



    C:\temp\{AA7C2609-F5C3-4F2D-85D0-97C700C016B3}\_readme.txt MSIL/Filecoder.ANG trojan deleted



    C:\temp\_readme.txt MSIL/Filecoder.ANG trojan deleted



    C:\text\_readme.txt MSIL/Filecoder.ANG trojan deleted



    C:\Users\TSKY\AppData\Local\VirtualStore\_readme.txt MSIL/Filecoder.ANG trojan deleted



    C:\Users\TSKY\Desktop\Ready.Or.Not.v17900.Early.Access\Ready Or Not\ReadyOrNot\Binaries\Win64\Custom.dll a variant of Win64/HackTool.Crack.AD potentially unsafe application cleaned by deleting



    C:\Users\TSKY\Desktop\Ready.Or.Not.v17900.Early.Access\Ready Or Not\ReadyOrNot\Binaries\Win64\OnlineFix64.dll a variant of Win64/HackTool.Crack.AA potentially unsafe application cleaned by deleting



    C:\Users\TSKY\Downloads\Ready_or_Not_Fix_Repair_Steam_V3_Generic\ReadyOrNot\Binaries\Win64\Custom.dll a variant of Win64/HackTool.Crack.AD potentially unsafe application cleaned by deleting



    C:\Users\TSKY\Downloads\Ready_or_Not_Fix_Repair_Steam_V3_Generic\ReadyOrNot\Binaries\Win64\OnlineFix64.dll a variant of Win64/HackTool.Crack.AA potentially unsafe application cleaned by deleting



    C:\Users\TSKY\Downloads\Windows 10_Digital_License\BIN\slc.dll Win32/HackTool.WinActivator.AL potentially unsafe application cleaned by deleting



    C:\Users\TSKY\Downloads\Windows 10_Digital_License\Windows 10 Digital License Activation Script.cmd Win32/HackTool.WinActivator.AI potentially unsafe application cleaned by deleting



    C:\Users\TSKY\Downloads\BrowserSetup_b0zz0i5.exe a variant of Win32/CryptoTab.A potentially unwanted application cleaned by deleting



    C:\Users\TSKY\Downloads\counter-strike-1-6.exe a variant of Win32/GameHack.ANF potentially unsafe application cleaned by deleting



    C:\Users\TSKY\Downloads\windows.cmd BAT/RiskWare.HackTool.WinActivator.A application cleaned by deleting



    C:\Users\TSKY\_readme.txt MSIL/Filecoder.ANG trojan deleted



    C:\Windows \System32\_readme.txt MSIL/Filecoder.ANG trojan deleted



    C:\Windows \_readme.txt MSIL/Filecoder.ANG trojan deleted



    C:\Xamp Premium\_readme.txt MSIL/Filecoder.ANG trojan deleted



    D:\_readme.txt MSIL/Filecoder.ANG trojan deleted
     
    TSKYBing, Nov 13, 2023
    #3
  4. fdegrove Win User

    Trojan found, file deleted, but still trojan keeps popping up.

    Trojan or not ?

    Hi all,

    Not quite sure when this started but roughly somewhere around July I noticed a file called NTUSER.rhk that resides in
    "Users\My username".

    Googling for the .rhk file extension gave me a bit of a scare as most sites suggest this is associated with Trojan.
    Somehow I doubt it as no anti-virus software I ran seems to flag it.
    I can delete this file all I want but it keeps on cropping up.
    It only resides in my user folder together with NTUSER.DAT.
    Does anyone have a clue what it's for or have it too ?

    TIA, *Wink
     
    fdegrove, Nov 13, 2023
    #4
Thema:

Trojan found, file deleted, but still trojan keeps popping up.

Loading...
  1. Trojan found, file deleted, but still trojan keeps popping up. - Similar Threads - Trojan found file

  2. Trojan Found: Need Insight

    in AntiVirus, Firewalls and System Security
    Trojan Found: Need Insight: Fake network devices are showing up again.One of them is a phone name Trainer.The other one is HP Envy printer.Does Windows have a backdoor? I am assuming yes. I've seen where someone changed the hard drive ID, where it drive D was swapped with drive C.Trojan seems to be...
  3. Trojan found, file deleted, but still trojan keeps popping up.

    in Windows 10 Software and Apps
    Trojan found, file deleted, but still trojan keeps popping up.: My windows defender found a threat trojan:win32/wacatac.h!ml and it was in altruistic folder in program files. I deleted the file from laptop but still every time i scan the laptop each time it shows same threat found and when i click on details, it shows that the trojan has...
  4. Windows Defender found Trojan

    in Windows 10 Gaming
    Windows Defender found Trojan: Hello, today when I Full Scanned my PC using Windows Defender, it found 1 threat trojan it automatically got quarantined and later I had choice on the Windows Defender something like: learn more and there I had option to choose between removing it or returning it to pc, I...
  5. why is my computer " found trojan" scanned no malware or trojans found?

    in AntiVirus, Firewalls and System Security
    why is my computer " found trojan" scanned no malware or trojans found?: why is my computer " found trojan" scanned no malware or trojans found? https://answers.microsoft.com/en-us/protect/forum/all/why-is-my-computer-found-trojan-scanned-no-malware/5dac6e9a-b082-4965-a5aa-e6513cb40444
  6. Windows Defender found Trojan

    in Windows 10 Software and Apps
    Windows Defender found Trojan: Hello, I am on Windows 11.Windows Defender said that one zipped folder has trojan and, quarantined it.The folder from backup has been scanned with malwarebytes and Windows Malware removal tool MRT. Both did not find any problem.Could this be a false positive by Windows...
  7. Trojan downloader file keeps showing up

    in Windows 10 Ask Insider
    Trojan downloader file keeps showing up: Hello, I keep having to remove a trojan downloader file that shows up in my threats that doesn't seem to be affecting my PC I'm sure I haven't been hacked or anything, what can I do to prevent these files from keep showing up? submitted by /u/DarkMatterLuigi [link]...
  8. trojan file

    in AntiVirus, Firewalls and System Security
    trojan file: Hi I think I have a trojan file on the computer. I've run across a file $dpx$.tmp. When I click on it, it says I need permission to access. Then it says I have been denied permission to access and to click the security tab. There, it says I do not have permission to view,...
  9. Trojan Found and Deleted....but it Returns Trojan: HTML/Phish.AB!MSR

    in AntiVirus, Firewalls and System Security
    Trojan Found and Deleted....but it Returns Trojan: HTML/Phish.AB!MSR: Windows defender periodically finds a Trojan in a .htm file in my Windows Communications appdata area see attachment. You will notice that the file is in the Attachments folder. Windows defender seems to delete this threat but after a few days or a couple weeks, the threat...
  10. Trojan found in OneDrive

    in AntiVirus, Firewalls and System Security
    Trojan found in OneDrive: It shows the same date, so I'm guessing it is an install tmp file, Malwarebytes and Defender wouldn't let it go...