Win10 Version 22H2 (OS Build 19045.4170)
My laptop was infected with Trojan_Script_Wacatac.B!ml in Feb. I've been unable to remove it. It has spread to multiple folders. For details see the zip files on my website aaa.FoxPing.com => "Trojan Win10 Info 11.zip" and "!-.zip"
How do I remove this Trojan?
Samuria, I installed SpyHunter and ran a scan. Unfortunately, Trojan files are still there.
Pony, I have had MalwareBytes for quite a few years. Unfortunately, it did not stop the Trojan, and it was unable to remove it.
Have you ever installed Aura's Anti-Virus? Or a trial version of it? Or installed other software that bundled Aura's Anti-Virus with the installer but you failed to decline the offer on install?
It seems that those files are "honeypot" files designed to prevent or fool ransomware and might be created by Aura's Anti-Virus.
Samuria, Not sure what you wanted me to do with Firefox? I just had SpyHunter5 do a scan. If you look at the contents of
https:\\aaa.FoxPing.com => "Trojan Win10 Info 11.zip" you will see some of the many Trojan folders. Those folder / contents still exist.
Pony, I purchased MalwareBytes Pro many years ago.
Callender, I purchase Aura's Anti-Virus in Feb. Aura was unable to find the Trojan. After a couple of full scans, the AuraAV\FileData folder, and the Aura RanFileData folder were infected by the Trojan.
Those files are all created by AuraAV so don't worry about it. It's part of their antiransomware component.
If you want the files gone - Uninstall AuraAV and use something else.
Related info. Read all posts.
My laptop has !-SCPGT files how to remove them
Link fixed.
How to get rid of Trojan Script/Wacatac.b ml on FF/Edge/etc.
Open the browser and select the menu icon.
From the menu, click on the Add-ons button.
Look for the Trojan Script/Wacatac.b ml extension
Get rid of Trojan Script/Wacatac.b ml by removing it from extensions
Quote