Windows 10: Defender notified threat.


  1. Posts : 2,743
    W10 Pro + W10 Preview
       30 Dec 2017 #1

    Defender notified threat.


    As my AV am using Kasperski free plus MBAM free.
    Also have set up Defender to do periodic scans (there being no conflict)

    Defender has notified a threat and quarantined it.
    Neither Kasperski or Mbam reported it.
    Link below for info on threat.
    Spyware:Win32/WebHancer.A [Microsoft] | ThreatExpert Statistics
    Attached Thumbnails Attached Thumbnails SPY.jpg  
      My ComputersSystem Spec


  2. Posts : 986
    Windows 7/64 Professional
       30 Dec 2017 #2

    Give this a read from Bleeping Computer. Lawrence Abrams has a wealth of knowledge on removing infections from computers.

    How To Remove Webhancer - Spyware and Malware Removal Guides Archive


    Jack
      My ComputersSystem Spec


  3. Posts : 2,743
    W10 Pro + W10 Preview
    Thread Starter
       30 Dec 2017 #3

    Layback Bear said: View Post
    Give this a read from Bleeping Computer. Lawrence Abrams has a wealth of knowledge on removing infections from computers.

    How To Remove Webhancer - Spyware and Malware Removal Guides Archive


    Jack
    Look at Attachment...its already been dealt with.
      My ComputersSystem Spec


  4. Posts : 3,209
    10.5 Home 1803 x64
       30 Dec 2017 #4

    dencal said: View Post
    Neither Kasperski or Mbam reported it.
    Kaspersky would probably report it as "not-a-virus:AdWare.Win32.WebHancer".

    How to enable riskware detection in Kaspersky Internet Security 2016

    EDIT: Since you are using free version:

    Protection - File Anti-Virus - High

    Additional - Threats - Detect PUP
      My ComputerSystem Spec


  5. Posts : 2,743
    W10 Pro + W10 Preview
    Thread Starter
       30 Dec 2017 #5

    TairikuOkami said: View Post
    Kaspersky would probably report it as "not-a-virus:AdWare.Win32.WebHancer".

    How to enable riskware detection in Kaspersky Internet Security 2016

    EDIT: Since you are using free version:

    Protection - File Anti-Virus - High

    Additional - Threats - Detect PUP
    Released the infection back on the computer after having added your suggested additional Kaspersky security measures.
    A scan with Kaspersky and Mbam revealed clean on both.
    Trying to get rid of them again using Defender failed as having removed them from quarantine they were now exempt from scanning.
    Finally got rid of them by tracking their paths then deleting them....though one path was different to that depicted on Defender.
    For example where it stated startup :C\ProgramData......it should have stated C\Users\ your name....etc etc.
    Attached Thumbnails Attached Thumbnails spy1.JPG  
      My ComputersSystem Spec


  6. Posts : 3,209
    10.5 Home 1803 x64
       30 Dec 2017 #6

    Gamespy is not really spyware, not even adware. WD says, that it can monitor web traffic and such, well it is a game client like xfire or steam, so that is, what it is supposed to do. It is just obsolete, so it is probably marked as such. I doubt, it could upload any data, since its servers are long gone, since 2013 actually.

    dencal said: View Post
    Finally got rid of them by tracking their paths then deleting them....though one path was different to that depicted on Defender.
    For example where it stated startup :C\ProgramData......it should have stated C\Users\ your name....etc etc.
    There are 2 startup folders on 10.
    Code:
    %ProgramData%\Microsoft\Windows\Start Menu\Programs\Startup
    %AppData%\Microsoft\Windows\Start Menu\Programs\Startup
      My ComputerSystem Spec


  7. Posts : 20,266
    Win10 Pro, Win10 Pro N, Win10 Home, Win10 Pro Insider Fast Ring, Windows 8.1 Pro, Ubuntu
       30 Dec 2017 #7

    dencal, I just noticed your thread, when you "catch" an unwanted nasty, and only one AV/Antimalware catches it, before deleting it, or while it's still in quarantine you could upload it to Virus Total, and see what a total of 68 AV engines say.
    Plus you get more information about the file in question also.
      My ComputersSystem Spec


 

Related Threads
Solved Windows Defender Threat Definitions Update? in AntiVirus, Firewalls and System Security
Normally by this time of day I've had one or two definitions updates. None since last night late: 138426 Anyone got a later version this morning?
Windows Defender Stuck on Removing Severe Threat in AntiVirus, Firewalls and System Security
I scanned my PC's with this Microsoft Safety Scanner - Free Virus Scan with the Microsoft Safety Scanner The scan found a lot of malware and removed all but three items - severe - and i read that Windows Defender would complete the job/remove...
severe threat is windows defender?! What?! in AntiVirus, Firewalls and System Security
I dont get it is this false positive? 95775
Windows Defender Advanced Threat Protection (ATP) - for consumers? in AntiVirus, Firewalls and System Security
Just wondering if there is any way that consumers like us can enroll in this service? WDATP - Windows Defender Advanced Threat Protection
Source: Windows Defender Advanced Threat Protection Preview Expands | Windows For Your Business
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 13:29.
Find Us