Windows 10: Windows Security detected threat "Trojan: Script/Wacatac.B!ml" File affected...

Windows security detected threat and the notification said it was quarantined. That was yesterday. I didn't do anything. Today when I turned on the laptop there was an error message about some file missing or something like that. I checked Protection history and clicked remove on the quarantined threat: Trojan:Script/Wacatac.B!ml There it said file affected, which was convintl-10.dat (along with the address). Then I remembered it was the same file for which I got an error message on startup.

What do I need to do? Is there a way to restore this file? I'm currently running a full scan which seems like it will take a few hours. But will my computer be ok? I suffer from extreme anxiety so this is really distressing for me. Will this affect my data and the functioning of my laptop?? [OS build: 19042.867]

submitted by /u/yesnoyesno10
[link] [comments]

:)

 

Virus Trojan:32/Wacatac.DC!ml not completely remediated on Windows PC

Can anyone assist?

Earlier today a .zip file was downloaded onto my Windows 10 PC which contained a Trojan:32/Wacatac.DC!ml virus. I am not sure if the virus was run or not but it was detected by Windows Security.

As a precaution I have performed a System Restore in Windows but I still see the following message in Windows Security (allowing for some security details to be blacked out):






The only Action allowed for the above is Allow and all the affected items, as can be seen above, appear to be in the Downloads folder.

Neither Windows Defender or Malwarebytes indicate a problem in the Downloads folder, but can anyone suggest a tool that I can use to verify that the virus has been removed?

Also, is it possible for me to seek to clear the warning above, and does anyone know how that can be done?

Thanks

.

 

Virus Trojan:32/Wacatac.DC!ml not completely remediated on Windows PC

This is a "Backdoor" trojan. Read about it here: Trojan:Win32/Wacatac.D!ml - Virus Lists and Removal Steps

These are the most dangerous, and most widespread, type of Trojan.

Backdoor Trojans provide the author or ‘master’ of the Trojan with remote ‘administration’ of victim machines. Unlike legitimate remote administration utilities, they install, launch and run invisibly, without the consent or knowledge of the user. Once installed, backdoor Trojans can be instructed to send, receive, execute and delete files, harvest confidential data from the computer, log activity on the computer and more.

If your computer was used for online banking or has credit card information on it, all passwords should be changed immediately to include those used for email, eBay and forums.
You should consider them to be compromised.
They should be changed by using a different computer and not the infected one, if not an attacker may get the new passwords and transaction information.

Banking and credit card institutions should be notified of the possible security breech.

 

Virus Trojan:32/Wacatac.DC!ml not completely remediated on Windows PC

Maybe check startup items for third party software that might run on boot and disable if not needed.

On another note it's crap if it doesn't give you the file path.




A harmless detection from my machine. Without knowing the file path or file name it's too hard to say what the issue is. If you had WiseVector StopX running when Defender detected the trojan I'd say it likely not serious.