Trojan w32/Tiggre!plock - locked my temp folder,cannot delete files

windozUser2021 · 18 Mar 2020

Hi,

Windows defender picked up the trojan named w32/Tiggre!plock,after i scanned the laptop as it was running extremely slowly.The trojan has now been deleted but i tried to delete the temp files from windows/temp as i often do,but now the files cannot be deleted.it first asks for administrator permission (ignore photos that has the "skip" highlighted,i definitely pressed the allow),i press continue to allow that,but still wont delet the temp files.I am assuming it is due to the trojan,it has locked up my files in the temp files folder.It doesnt seem like the laptop is running slow after the trojans' detection and deletion,but i am wondering what is in the files that it wont allow them to be deleted? The trojan has also backdated these files,as I often delete them. In any case,all i really want is to delete them as i have no idea what they may be trying to do.
SO HOW WOULD I DO THIS?? without re-formatting the laptop?

laptop:
acer
win8.1

Thanks in advance for any help.

Btw,the trojan somehow got onto my laptop after i started allowing java to run,to enable videos in major news sites!!
thanks for any help.thanks

AndreTen · 18 Mar 2020

I would run Rkill first, to stop possible active malware, then ADvcleaner

Update: first, welcome to Tenforums windozUser2021.

In addition to the previous, empty your recycle bin. Later, if anything weird happens again, delete your restore points.

Run Windows defender offline scan

Jacee · 18 Mar 2020

Please see this:Trojan:Win32/Tiggre!plock - How to Remove - Botcrawl

The author of this article:
Sean Doyle
Sean Doyle is a tech author and engineer with over 20 years of experience in cybersecurity, privacy, malware, Google Analytics, online marketing, and other topics. Sean's content has been featured in numerous publications.

windozUser2021 · 18 Mar 2020

AndreTen said:

I would run Rkill first, to stop possible active malware, then ADvcleaner

Update: first, welcome to Tenforums windozUser2021.

In addition to the previous, empty your recycle bin. Later, if anything weird happens again, delete your restore points.

Run Windows defender offline scan

thanks,i really wondered how i would make sure it was stopped if it isnt completely deleted.I think the trojan user had access to my laptop possibly,as my restore points have actually been deleted except for the last 2 which were on that day i think (different pc to this one),my temp files are locked so that they cant be deleted,and possibly the person got one of my useless email logins,as i cant seem to login into my account as apparently its been abused,and i havent logged in there for a long while until just lately ...
thanks for the help.

AndreTen · 18 Mar 2020

windozUser2021 said:

thanks,i really wondered how i would make sure it was stopped if it isnt completely deleted.I think the trojan user had access to my laptop possibly,as my restore points have actually been deleted except for the last 2 which were on that day i think (different pc to this one),my temp files are locked so that they cant be deleted,and possibly the person got one of my useless email logins,as i cant seem to login into my account as apparently its been abused,and i havent logged in there for a long while until just lately ...
thanks for the help.

Delete the remaining Restore points, and run the processes as told above. Also check Firewall and restore it to defaults (ADWcleaner should do that)

When malware stop running, you should be able to delete temp files. CCleaner can also do that for you

We will deal with possible intrusion later, or you could disconnect from internet temporary