Windows 10: Trojan:vbs/Mutuodo.A

Trojan:vbs/Mutuodo.A

Items:file:c:\users\lenovo\App Data\Local\Ramotoneke\Febelubupeb.dat

There was a virus in my computer. I scanned my laptop with MSE and it was detected. However, I have not removed it because I found that when I click on detected items it gives me 2 options remove all and allow item and the remove all tab is highlighted. But when I click on the box tab next to the virus it highlights both the tabs. When I clicked on the remove all tab it gave me an option which says this program wants to make changes in your computer. I did not clicked it and went back as I am not too sure what to do? Please suggest.

Also, in the quarantined tab I see three tabs instead of two. That is Remove all, Remove and Restore.

I have few screen shots for the same. If it is required I can send the same.


What are the other ways of checking if the virus is there or not?


I started my computer after around 6 months. An Avast security program also popped up. I installed it and used it for some days and then uninstalled it. The Trojan virus was left in the detected items and in the meantime I also made some changes in my google account but at that time the Avast security program was not uninstalled. I deleted all my activities from my google account.

Also my mouse is not working.

:)

 

VBS Msgbox

Denis,

• I was too lazy to compute the size programmatically. And, it the 2005 version the message box always came up hidden, so I always used 0 for the top. It's also part of my OCD to be able to control everything.
• I personally don't need it to timeout. I used this in vbs files to ask to continue to the next step, skip the next step or cancel the vbs. BTW, I added the code back in but keep it assign it to 0.
• Sound was calling Windows Media Player: WshShell.Run "C:\Users\donast\desktop\sndrec32.lnk",7,false the lnk is a shortcut on my old desktop that had: "C:\Program Files (x86)\Windows Media Player\wmplayer.exe"
  "C:\Users\Public\Music\Wavefiles\Twilight.wav"
• Yes. The value is the number of the button in the order specified when calling it.
• Never really thought about it as all my VBS/VBA code is relatively simple and I add comments in the file as necessary to remind me what is going on. I don't usually have anyone to share my code.

FYI I use a VBS to call it. Here's a line from a test vbs I use to run your version:

choice=Wshshell.run("custommsgbox.vbs " & wscript.scriptname & " ""CopyFiles.vbs done. Continue with UnArchVista.vbs?"" ""White"" ""Black"" 40 ""Yes"" ""No"" ""Cancel""",1,true)

Copy it to a text editor to see all the spaces, etc. Took me a while back the to figure it out.

Don

 

Rooted Malware, Virus, and Trojan Infection, Keylogger Trojan Malware

Hi,

Please click the link below and follow Stephen Boots' suggestion on how to remove Trojan virus on your computer:

• List of anti-malware product removal tools

Let us know if you need further assistance.

 

Trojans

Windows Defender is not getting rid of the Trojans. Does anyone have suggestions?

Thank you