Windows 10: I have constantly been notified by Defender for a trojan:win32/commandrob.A!ml attack. What...

Affected items:CmdLine: C:\Windows\System32\schtasks.exe /create/tn csrss/sc ONLOGON /tr C:\Users\YAIKON\AppData\Roaming\SysWOW32\csrss.exe / rl HIGHEST /f

:)

 

My computer was attacked by the Wacatac.B!ml(trojan) and they removed files but they are still listed as if they are there but they are not functioning files .How can get them back?

My computer was attacked by the Wacatac.B!ml(trojan) and they removed files but they are still listed as if they are there but they are not functioning files .How can get them back?

 

Virus Trojan:32/Wacatac.DC!ml not completely remediated on Windows PC

This is a "Backdoor" trojan. Read about it here: Trojan:Win32/Wacatac.D!ml - Virus Lists and Removal Steps

These are the most dangerous, and most widespread, type of Trojan.

Backdoor Trojans provide the author or ‘master’ of the Trojan with remote ‘administration’ of victim machines. Unlike legitimate remote administration utilities, they install, launch and run invisibly, without the consent or knowledge of the user. Once installed, backdoor Trojans can be instructed to send, receive, execute and delete files, harvest confidential data from the computer, log activity on the computer and more.

If your computer was used for online banking or has credit card information on it, all passwords should be changed immediately to include those used for email, eBay and forums.
You should consider them to be compromised.
They should be changed by using a different computer and not the infected one, if not an attacker may get the new passwords and transaction information.

Banking and credit card institutions should be notified of the possible security breech.

 

how to remove Win32/Wacatac.B!ml

how to remove Win32/Wacatac.B!ml

***Move from Microsoft 365 and Office / Defender / For home / Windows***