Virus Trojan:32/Wacatac.DC!ml not completely remediated on Windows PC

simrick · 30 Aug 2020

mitrajoon said:

Windows Defender has just started reporting this on my desk top. I have run emisoft, SpyHunter5 and neither can detect it. Is there any evidence that this is real or is it a false positive? I have dozens and dozens of PWs I recently changed. Would not want to go through that again.

I would not recommend using Spyhunter. Please get that off your system.

Try ADWCleaner.
https://www.malwarebytes.com/adwcleaner/

.

TairikuOkami · 30 Aug 2020

Spyhunter is a legitimate app, it is just that inferior Malwarebytes does not like the competition.

Callender · 30 Aug 2020

@Mr Morgan

@mitrajoon

Check Post #7 in the following thread then Post #5 for a possible solution.

Stubborn PUA:Win32/InstallCore

mitrajoon · 30 Aug 2020

Ok, I have deleted the WD\scanner\service\history and am currently running the MS Safety Scanner. I won't be convinced until I've had a day or 2 of no warnings, but regardless, I thank everyone who has contributed to our understanding of this problem.

simrick · 02 Sep 2020

TairikuOkami said:

Spyhunter is a legitimate app, it is just that inferior Malwarebytes does not like the competition.

Spyhunter entice you to install and run their program, then force you to pay for the software before you are able to clean anything. It's shady business practice, especially when there are so many "legit" companies which have free tools to accomplish the same thing.

mitrajoon · 10 Sep 2020

After one week of no problems wacatac has again been detected and blocked by Windows Defender. Based on the time listed by WD it was detected when I shut down last night. I am not aware of going to any risky sites. Just before shutting down I ran Malaware ADWCleaner, CCleaner and Emisioft which found no problems and automatically shut down the computer.

I have followed all the steps outlined above to clear my PC. Any further thoughts would be appreciated.

mitrajoon · 21 Sep 2020

One more time, looking for help on this. I go through the extensive list of steps above, including running script, adaware, cleaner and emisoft. No problems noted. I make sure the temp file and WD Service files are empty. I shut down the computer. In the morning I start up and a notification says WD has blocked wacatack trojan. The time listed is the time I shut down.

Anyone?

dencal · 21 Sep 2020

mitrajoon said:

One more time, looking for help on this. I go through the extensive list of steps above, including running script, adaware, cleaner and emisoft. No problems noted. I make sure the temp file and WD Service files are empty. I shut down the computer. In the morning I start up and a notification says WD has blocked wacatack trojan. The time listed is the time I shut down.

Anyone?

Try this.....there is no need to purchase as you can do a free trial.
Scan and Remove Malware | HitmanPro and HitmanPro Alert Download

csun · 21 Sep 2020

mitrajoon said:

After one week of no problems wacatac has again been detected and blocked by Windows Defender. Based on the time listed by WD it was detected when I shut down last night. I am not aware of going to any risky sites. Just before shutting down I ran Malaware ADWCleaner, CCleaner and Emisioft which found no problems and automatically shut down the computer.

I have followed all the steps outlined above to clear my PC. Any further thoughts would be appreciated.

https://answers.microsoft.com/en-us/...d-c6059c8e0828

Windows Defender is defaulted to scan its own "Scans/History". Resulting in the discovery of the malware over

and over again. Even though, other scanners see no evidence of the malware on the PC. It doesn't exist!

Check the above link.

If not satisfied, consider a System Reset due to the length of time of this issue.

Callender · 21 Sep 2020

mitrajoon said:

One more time, looking for help on this. I go through the extensive list of steps above, including running script, adaware, cleaner and emisoft. No problems noted. I make sure the temp file and WD Service files are empty. I shut down the computer. In the morning I start up and a notification says WD has blocked wacatack trojan. The time listed is the time I shut down.

Anyone?

Consider running this for a week or two alongside Defender:

WiseVector StopX component?

It's free at the moment but will become subscription in the near future.