Windows 10: Trojan:Script/Conteban.A!ml

Discus and support Trojan:Script/Conteban.A!ml in AntiVirus, Firewalls and System Security to solve the problem; I seem to have somehow gotten this virus Trojan:Script/Conteban.A!ml according to Windows Defender. I don't know when/where it came from but was first... Discussion in 'AntiVirus, Firewalls and System Security' started by RodCorkum, Nov 21, 2020 at 7:22 PM.

  1. RodCorkum Win User

    Trojan:Script/Conteban.A!ml


    I seem to have somehow gotten this virus Trojan:Script/Conteban.A!ml according to Windows Defender. I don't know when/where it came from but was first noticed November 15. I spend a lot of time on various trusted genealogy web sites and that day I had been on Find-a-Grave.com in my messaging center there. I had copied some text from the message center, pasted it into a text file to remove the formatting, then pasted from the text file into a Word document. I attached that Word document to an email and the moment I hit Send on the email, Windows Defender popped up a "Threats Found" message. I promptly contacted the email recipient to delete and not open my document. Since then I've been trying to find out how to eliminate this without much success. Somehow I can't believe that it would have come in from that copy and paste from Find-a-Grave - that sounds too much like just a coincidence. I don't email many Word documents and the last time before that was October 12 that I had emailed one with no problems so I know it was fine way back then.


    I have created simple "test" Word documents and scanned them using both Windows Defender and Malwarebytes and both say the document is clean. So then I tested by emailing it to myself and again the moment I hit "send", up comes the "Threats Found" message so I tell it to quarantine it. The same message also pops up when the email comes back in to me. The test document I created was saved on my desktop and if I go to delete it before running the quarantine it won't delete saying it is infected. I don't understand how the virus wasn't in the document before being emailed but was afterward even though this is still the original document and it would have been a copy that was emailed. Whatever this is, it only seems to be affecting Word documents.


    Anyway, I've run Windows Defender three ways, Quick Scan, Full Scan, and Offline Scan and none of them found anything. I've also run a full scan with Malwarebytes that took many hours and it came up clean too. I even tried doing a System Restore to a restore point from November 12 - 3 days before this appeared but that didn't make any difference either.That worked for me a few years ago when I got a virus at work but I knew the day I got that and where it came from. There is one other restore point listed from November 8 if it would be worth trying that one. The only other one showing was when a system image was done 6 months earlier.


    I was even considering the possibility of running a "Fresh Start" but that seems quite drastic. I'm not worried about having to reinstall all my programs again but was unsure if that would actually reinstall Windows 10 as the computer is rather old.


    I have a Gateway desktop SX2100-ER2 from 2012 that originally came with Windows 7 Home and I updated it to Windows 10 Home just before Microsoft's free update program expired. I'm currently running version 1909. I didn't want to try the "Fresh Start" not knowing if I would actually get my Win 10 reinstalled or if it would go back to the original Win 7. I still use Microsoft Office 2003 all I need is Word and Excel for home use and it works fine for me. I have to use Office 365 at work and I hate it - can never find what I want in those damned "ribbons". My desktop email program is IncrediMail that I've been using for many years - no longer available but I still like it. Hey, I'm 69 and quite comfortable with dinosaur technology. All this newfangled stuff is way too complicated! I've still got a Win XP desktop from my office that I couldn't bear to let them toss out - hardly any mileage on it! Still trying to figure out what I could use it for.


    So after this long winded explanation I guess I'm looking for any suggestions of what to do next. I'm not an IT person but have some computer knowledge so if you want me to try anything really technical, I'll need some step by step "how to" instructions. The other alternative was to go to Malwarebytes forum but since the message popup came from Windows Defender I figured I'll post here first.


    Rod Corkum

    :)
     
  2. Jacee Win User

    Virus Trojan:32/Wacatac.DC!ml not completely remediated on Windows PC

    This is a "Backdoor" trojan. Read about it here: Trojan:Win32/Wacatac.D!ml - Virus Lists and Removal Steps

    These are the most dangerous, and most widespread, type of Trojan.

    Backdoor Trojans provide the author or ‘master’ of the Trojan with remote ‘administration’ of victim machines. Unlike legitimate remote administration utilities, they install, launch and run invisibly, without the consent or knowledge of the user. Once installed, backdoor Trojans can be instructed to send, receive, execute and delete files, harvest confidential data from the computer, log activity on the computer and more.

    If your computer was used for online banking or has credit card information on it, all passwords should be changed immediately to include those used for email, eBay and forums.
    You should consider them to be compromised.
    They should be changed by using a different computer and not the infected one, if not an attacker may get the new passwords and transaction information.

    Banking and credit card institutions should be notified of the possible security breech.
     
  3. Mr Morgan Win User

    Trojan:Script/Conteban.A!ml

    Virus Trojan:32/Wacatac.DC!ml not completely remediated on Windows PC

    Can anyone assist?

    Earlier today a .zip file was downloaded onto my Windows 10 PC which contained a Trojan:32/Wacatac.DC!ml virus. I am not sure if the virus was run or not but it was detected by Windows Security.

    As a precaution I have performed a System Restore in Windows but I still see the following message in Windows Security (allowing for some security details to be blacked out):


    Trojan:Script/Conteban.A!ml [​IMG]



    The only Action allowed for the above is Allow and all the affected items, as can be seen above, appear to be in the Downloads folder.

    Neither Windows Defender or Malwarebytes indicate a problem in the Downloads folder, but can anyone suggest a tool that I can use to verify that the virus has been removed?

    Also, is it possible for me to seek to clear the warning above, and does anyone know how that can be done?

    Thanks

    .
     
Thema:

Trojan:Script/Conteban.A!ml

Loading...
  1. Trojan:Script/Conteban.A!ml - Similar Threads - Trojan Script Conteban

  2. Conteban Trojan

    in AntiVirus, Firewalls and System Security
    Conteban Trojan: Hi, I recently have been getting a warning of conteban trojan from windows security. It says the threat is severe. So I click remove. Everything seems ok then I edit a word doc which is kept on an external portable drive and try to attach it to an email and I get the warning...
  3. Virus Trojan:32/Wacatac.DC!ml not completely remediated on Windows PC

    in AntiVirus, Firewalls and System Security
    Virus Trojan:32/Wacatac.DC!ml not completely remediated on Windows PC: Can anyone assist? Earlier today a .zip file was downloaded onto my Windows 10 PC which contained a Trojan:32/Wacatac.DC!ml virus. I am not sure if the virus was run or not but it was detected by Windows Security. As a precaution I have performed a System Restore in...
  4. Program:Win32/Uwasson.A!ml

    in AntiVirus, Firewalls and System Security
    Program:Win32/Uwasson.A!ml: Hello I wanted to close discord when i noticed that windos defender had a red x on it i went to virus and threat protection and did a full scan and in my current theards two therads popped up both saying Win32/Uwasson.A1ml and the severity is medium for both, the first one...
  5. trojan win32 wacata g ml

    in AntiVirus, Firewalls and System Security
    trojan win32 wacata g ml: I really wanna know this specific trojan please is there a person that can tell me exactly this type of trojan? I heard it is not extracting your personal files but is that true? Also, my windows defender didn't do anything it just warned me, and then after a few minutes I...
  6. Trojan Virus Wacatac.C!ml

    in AntiVirus, Firewalls and System Security
    Trojan Virus Wacatac.C!ml: Hello, I recently bought software and installed it on my PC. However, the Software is refusing to open because of Microsoft Defender. I saw the following notification: https://prnt.sc/rt3a0n upon checking Microsoft defender. I reached out to the software provider...
  7. Visual Studio C script detected as Trojan virus

    in Windows 10 Customization
    Visual Studio C script detected as Trojan virus: [ATTACH] Hi, I am trying to write a simple C code script on visual studio and it keeps getting detected as a Trojan:Win32/Ludicrouz.Z threat. Visual studio keeps timing out with the error that "operation did not complete successfully because the file contains a virus or...
  8. Trojan:Win32/Wacatac.D!ml

    in AntiVirus, Firewalls and System Security
    Trojan:Win32/Wacatac.D!ml: I cant delete this whitmy windows defender and that virus don't give me to install other anti virus https://answers.microsoft.com/en-us/windows/forum/all/trojanwin32wacatacdml/e490226a-96de-4fd3-84e8-37757d1fbbaf"
  9. Problem Removing Trojan bomitag.c!ml

    in AntiVirus, Firewalls and System Security
    Problem Removing Trojan bomitag.c!ml: Hi, I have trouble removing bomitag.c!ml Trojan from my laptop(windows 10). The windows defenders detects this Trojan every time I do a quick scan but it is unable to delete it permanently. Although I delete it by clicking on "start actions" in windows defender, it keeps...
  10. Trojan bomitag.c!ml

    in AntiVirus, Firewalls and System Security
    Trojan bomitag.c!ml: Hi, I have trouble removing bomitag.c!ml Trojan from my laptop(windows 10). The windows defenders detects this Trojan every time I do a quick scan but it is unable to delete it permanently. Although I delete it by clicking on "take action" in windows defender, it keeps...