Malware/RAT

[kingabing]

Every minute Windows defender starts spamming malware detected and nothing happens except for it detecting one thing: TrojanMSIL.

Bit defender cant find anything and combofix doesn't work on win 10 so help plz? 

[Altecice]

Run a malwarebytes scan.

[PlayStation 2]

Use Malwarebytes to delete it?

[Arty]

remove the notification..

[Stuff_]

Yup, try malwarebytes antimalware. Generally the best detection for malware.

[kingabing]

Use Malwarebytes to delete it?

 

Run a malwarebytes scan.

i have tryed everything except that so i will try that

[LabRat]

nasty................ "Trojan.MSIL.Agent is a malicious trojan infection which uses malicious tricks to download nasty malware threats from the web. Trojan.MSIL.Agent penetrates and installs the infected computer system without a user's awareness or authorization when he/she open unidentified email attachment or image, use instant messaging, etc. Trojan.MSIL.Agent is often bundled with free downloadable software or a malicious website you visited that set Trojan.MSIL.Agent on your machine. Trojan.MSIL.Agent may track your Internet activities, steal user names and passwords, credit card numbers and other private details. Trojan.MSIL.Agent is a serious threat for the PC system and has to be removed immediately."

 

live and learn.

[kingabing]

nasty................ "Trojan.MSIL.Agent is a malicious trojan infection which uses malicious tricks to download nasty malware threats from the web. Trojan.MSIL.Agent penetrates and installs the infected computer system without a user's awareness or authorization when he/she open unidentified email attachment or image, use instant messaging, etc. Trojan.MSIL.Agent is often bundled with free downloadable software or a malicious website you visited that set Trojan.MSIL.Agent on your machine. Trojan.MSIL.Agent may track your Internet activities, steal user names and passwords, credit card numbers and other private details. Trojan.MSIL.Agent is a serious threat for the PC system and has to be removed immediately."

 

live and learn.

soooo what do i do

[LabRat]

i would boot up in safe mode and run malwarebytes as suggested and I would run adaware av. and then I would hope that the problem was taken care of. if not.......... search it out on the web........ or reformat.

[kingabing]

Use Malwarebytes to delete it?

so far malware bytes has nothing. not sure what to do even in safe mode the program manifests itself

[PlayStation 2]

so far malware bytes has nothing. not sure what to do even in safe mode the program manifests itself

welp

im out of ideas

[LabRat]

is it in allowed items in the chart you posted above?

[kingabing]

Run a malwarebytes scan.

 

welp

im out of ideas

well now i have gen.variant.msil.perseus.3566 (b) I have no clue

[kingabing]

is it in allowed items in the chart you posted above?

no ive bocked it in all programs i have but its still there even i safe mode

[LabRat]

did you look into anything like this anywhere....? you're good at getting stuff, now it's time to try and get good at removing stuff.

 

http://www.securitystronghold.com/gates/remove-trojan-msil.html

 

http://www.securitystronghold.com/gates/remove-trojan-msil.html#Manual

[kingabing]

ok il try

[kingabing]

did you look into anything like this anywhere....? you're good at getting stuff, now it's time to try and get good at removing stuff.

 

http://www.securitystronghold.com/gates/remove-trojan-msil.html

 

http://www.securitystronghold.com/gates/remove-trojan-msil.html#Manual

the removal tool looks like a rouge so idk

[LabRat]

i'm just giving you suggestions. you can act or you can live with it. you're on your own. but if that stuff is on your computer you better pull the internet cable out of the machine.

[kingabing]

i'm just giving you suggestions. you can act or you can live with it. you're on your own. but if that stuff is on your computer you better pull the internet cable out of the machine.

do you think it will spread?

[Yongtjunkit]

so far malware bytes has nothing. not sure what to do even in safe mode the program manifests itself

no, safe mode prevent the virus from running, it loads some software and drivers only

[jagdtigger]

do you think it will spread?

Either that or it will leak a crap ton of info about you to the people who spread this thing. Best way to get rid of any infection:

1 Download some linux distro and put it onto a pendrive(on a clean machine)

2 Boot with it on the infected machine and backup your data, then fire up gparted and use the create partition table option(MBR for old machines or GPT for UEFI) on the infected drive.

3 Shutdown pc, insert install media of your favorite version of windows and do a clean install.

4 Install a proper AV(Avast for instance) and scan the backed up data, if it finds any infection  delete them. After it scanned all of it copy it back to your PC.