Windows 10: Trojan "Trojan:Script/Sabsik.FL.A!ml" detected after ZIP file extraction – am I fully...

Hi everyone,I recently downloaded a ZIP file, and when I tried to extract it, Windows Defender flagged it as a threat and prompted me to remove it. I allowed Defender to remove the threat, which was classified as low risk.After that, the ZIP file was automatically moved to the Recycle Bin. The next day, when I opened the Recycle Bin to permanently delete the file, Windows Defender immediately showed another warning — this time without me even clicking on the file. It identified a more serious threat: Trojan:Script/Sabsik.FL.A!ml, and classified it as severe. I immediately quarantined the file

:)

 

Trojan Script Wacatac B!ml

Hi,

I am using Windows 11.I went to a hotel website , trying to make a reservation , after entering the dates, pressed check availability or check rates , A red screen came up , with a virus warning, Windows defender detected it. I quarantine it and said Detected : Trojan Script Wacatac B!ml, severe.

I used Windows defender to remove the trojan and now the status showed : a threat or app was Removed from this device.

based on this information, can I assume that this trojan is gone forever, or it's still hiding somewhere.

Thank you.

 

Trojan Bearfoos.A!ml

Hi, windows defender detected this trojan and the affected file is the windows search file. In fact, since it was quarantined Windows can no longer do indexing.

I think it is a false positive. Does anyone know anything more about it? Thank you very much



Detected: Trojan:Win32/Bearfoos.A!ml

Affected file: file: C:\Windows\System32\SearchIndexer.exe

Service: WSearch

 

Virus Trojan:32/Wacatac.DC!ml not completely remediated on Windows PC

This is a "Backdoor" trojan. Read about it here: Trojan:Win32/Wacatac.D!ml - Virus Lists and Removal Steps

These are the most dangerous, and most widespread, type of Trojan.

Backdoor Trojans provide the author or ‘master’ of the Trojan with remote ‘administration’ of victim machines. Unlike legitimate remote administration utilities, they install, launch and run invisibly, without the consent or knowledge of the user. Once installed, backdoor Trojans can be instructed to send, receive, execute and delete files, harvest confidential data from the computer, log activity on the computer and more.

If your computer was used for online banking or has credit card information on it, all passwords should be changed immediately to include those used for email, eBay and forums.
You should consider them to be compromised.
They should be changed by using a different computer and not the infected one, if not an attacker may get the new passwords and transaction information.

Banking and credit card institutions should be notified of the possible security breech.