How do I search for file names with 3 alpha followed by 5 numbers?

bhs67 said:

The Trojan is still there

Who says so?

Denis

bhs67 said:

The Trojan is still there. It continues to interrupt Win10 File Explorer, opening pdf files, and Visual Studio 2019 compilation.

Plus it continues to replicate folders / files. Rename the "!-" folder, then another "!-" folder appears. Zip that folder and attach to an email -> message: "Virus detected".

I suggest you boot from a antivirus drive and do a offline scan.

Maybe a Mod can move your thread to the https://www.tenforums.com/antivirus-...stem-security/ section of the forum for better results.
Or repost over there.

bhs67 said:

Done => How do I remove a Trojan?. Thanks!

Good to hear.

As a feedback, do you have an idea how did you've got a Trojan infection?

bhs67 said:

- - - Updated - - -

I forgot to mention. The Recycle Bin folder is now a subfolder of $RECYCLE.BIN. Subfolders under the $RECYCLE.BIN folder has folder names such as "S-1-5-18". The Recycle Bin folder is accessible. The subfolders under $RECYCLE.BIN are not accessible.

A search, using "Everything", finds pdf files in those subfolders -> with names such as $I08MNCM.pdf, $I1ABVD0.pdf, $I3KKBLF.pdf. These are Trojan files. They are not accessible and cannot be restored.

Here's a useful site: Link
also, check out posts on this site: Another Link

(bunch of search results for that virus: Trojan_Script_Wacatac.B!ml - Search )


Also,
a) the "S-1-5-18" folder name for the Recycle Bin is just some Windows feature. I have a bunch of results with 21 instead of 18.
> S-1-5-18 - Search
> S-1-5-21 - Search
b) The dollar sign in front of a filename, and a bunch of random letters and/or numbers is just a renamed method Windows uses for deleted files, with the dollar symbol intending to mean it is hidden. You can look that up online as well.
Check out my picture: