Deleting Spyware

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Everytime I boot up, Windows Defender tells me they found a Trojan Horse,
what do I want to do with it. I hit delete and the program states it is
deleted but, the next time I boot up, I get the same message. Anyone else
have that problem or a fix for it?
 
Hello Rick,

I'm guessing, but I would imagine the detections are either in an archive
file (zip type compressed file) which Defender doesn't remove, since such
files could contain other wanted/needed information, or they are in a restore
folder which also isn't touched by Defender, or they are in a quarantine
fºlder.
All occurrences are harmless in that state but could cause a problem if
uncompressed or restºred.

You should see what files are involved by examining the system event lºg:
Do a start, run, eventvwr.msc, **click OK**, then click ºn

**System**, then View, then Filter, and scroll down the " event sºurce"
control to reach Windefend, that will give you a view of just Windows
Defender-related events.

Look for events with yellow triªngles

Then make a decision as to either deleting/ignoring/manually cleaning them
or in the other case emptying your restore folder and creating a new restore
point as described in these fºrums.

For the benefit of the community reading this post, please rate the pºst.

I hope this post is helpful.

Let us know how it works ºut.
 
It sounds as though the deleted file is being restored with each boot. Above
all else, you MUST turn off System Restore prior to rebooting. Try what you
have done previously with System Restore OFF. If that fails to resolve the
problem, HijackThis! is most useful in identifying any registry compromise.
Links to helpful forums are available through the Internet Security link
below.
 
Back
Top