the file is 'kali-linux-2021.1-installer-i386.iso'
my pc says its a virus and it is it takes 80% cpu usage and i cant stop it when i go into windows security it says i cant delete it I tried the mount and eject and it didnt work and i also did file assasin. please help
and antimalware service executable takes the rest of my cpu usage.
Last edited by S0WW13; 07 Mar 2021 at 11:27. Reason: added info
Hi, you should be able to delete anything from 'outside' Windows (i.e. Windows not running) as has been said many times on tenforums.
Either
a. Boot to a command prompt (e.g. starting by SHIFT + left click a Restart option) and follow through prompts to a command prompt
This requires a degree of familiarity with using this. Or
b. Boot your PC from a live boot disk.
Otherwise download and use
Emco Unlockit
- this will allow the file to be deleted when the PC is restarted (Windows not running) if it can't delete it otherwise. Free.
You can also consider adding it as an exception in your security settings.
Welcome to the Ten forums,
Hmm Kali, a reminder of something went wrong. Is your machine 32-bit or 64?
-Have you tried to rename the file?
-Do you have an Ubuntu base bootable stick? If yes, you could boot into try Ubuntu, locate the 32-bit ISO in file manager and delete it or move to trash or cut and paste into the Downloads folder of the installer. Reboot into Windows. Safe and efficient choice.
-You could also boot in safe mode (settings>advanced startup) and delete the defect ISO from there.
-Revo Uninstaller Pro is a good app to try, but it may not work in your case. Search for the file and force deletion:
Download Revo Uninstaller Freeware - Free and Full Download
Good luck,
Note: High CPU usage could be killed in Task Manager (CTRL+ALT+DELETE) by selecting End Process. Try this first and delete the Kali file immediately after or rename it. You may have only 3 second to do so. In all cases, a Windows 10 installer is a must (repair or clean install).
Not mentioned, but is probably 100% effective. Restore a backup image from prior to the infection.
If you do not have one, second best would be to restore a Restore Point prior to the infection.
In the event you do not do System Image Backups, which make dealing with these problems easy, here is a link to highly recommended software to get you going down the road to peace of mind.
Macrium Software | Macrium Reflect Free
Before deleting our install yesterday, we downloaded the i386 file from the Kali website and Norton was detecting a trojan after scanning Mount. Searching Kali in regedit shows an entry for Kali. You should start by deleting the Key. Make sure you are not deleting Kalinga.
F3 to search. There seems to be only one related key.
Mount seems to be responsible for that and there's an executable file linked to kalidot org that may introduce the bug. After deleting the registry key, I was able to delete the ISO file with the help of Privazer cleaner: Delete without a trace.
Norton free trial is another option to get rid of it.
Last edited by MikeMecanic; 09 Mar 2021 at 23:44.
This issue is also present in the weekly (Sunday) ISO 32-bit or amd64: 03072021
Is Defender detecting the trojan when scanning mount (+6000 files) or is Norton LifeLock written by the Hand of God?
Code:Filename: set_8.0.3+git20200609-0kali2_all.deb Threat name: OSX.Trojan.Gen Full Path: D:\pool\main\s\set\set_8.0.3+git20200609-0kali2_all.deb Threat type: Virus. Programs that infect other programs, files, or areas of a computer by inserting themselves or attaching themselves to that medium. Many Users Thousands of users in the Norton Community have used this file. Mature This file was released 4 months ago. High This file risk is high.
You can enter safe mode and delete it there:
https://support.microsoft.com/en-us/...4-b3e5e56fe234
If not, disabling Defender trough GPO and try again.
Lockhunter me funcionó, le das click a other y seleccionas la opcion de eliminar cuando se reinicie el sistema
Quote