Share via

How to remove Trojan:win32/CobaltStrike.QK!MTV from my windows?

Anonymous
2024-02-13T16:33:25+00:00

I have tried to scan the pc through windows scanner but nothing has happened.

Windows for home | Windows 10 | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments No comments

13 answers

Sort by: Most helpful
  1. Ferdinand Nanalig 30,325 Reputation points Independent Advisor
    2024-02-14T16:57:36+00:00

    Most files detected by Microsoft security software are quarantined. This means the file is moved and stopped from running or doing anything to your PC.

    Select Start > Settings > Update & Security > Windows Security > Virus & threat protection.

    Under Current threats, select Threat history.

    Under Quarantined threats, select See full history.

    Source link https://support.microsoft.com/en-us/windows/ant....

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments No comments
  2. Ferdinand Nanalig 30,325 Reputation points Independent Advisor
    2024-02-13T17:06:17+00:00

    Hi, I am an Independent Advisor.

    Let me help you with this issue.

    I understand that your computer is infected with Trojan:win32/CobaltStrike.QK!MTV.

    Did you recently install any 3rd party software before getting this virus?

    Please follow the steps below on how to remove this virus.

    Let's try downloading the free version of Malwarebytes, it is a freeware that you can use to scan, detect, and delete viruses like the one you currently have.

    You can download the free version from this link

    https://www.malwarebytes.com/

    Once installed please make a full scan. You may remove this software once you are done with it.

    You can also try an online malware scanner - https://www.eset.com/int/home/online-scanner/

    Please also try Microsoft Safety Scanner - https://learn.microsoft.com/en-us/microsoft-365...

    And follow these additional steps.

    Open up the Task Manager by right-clicking the taskbar, on the Task Manager window click on more details below then look for the open process associated with the pop-up, if you can't see it in the process tab go to the details tab and look for that process then if you see right click it and then go to the file location and then once you have located the file delete it.

    Remove temp files and unwanted addons/Extensions in Chrome and Edge

    For Chrome: Open Google Chrome, click the 3 dots at the top right corner click Settings, then on the left pane click Extensions, on the Extensions page look for anything related to the virus then click Remove.

    For new Edge: Open Microsoft Edge, click on the 3 dots at the top right corner then click Extensions, then on the Extensions page, look for any add-ons related to the virus then click Remove.

    Uninstall an unwanted application in Programs and features,

    Go to start type in Control Panel, then go to Programs and then Programs and Features then go to the list of the programs look for anything unusual or any application that you are not aware right click then uninstall.

    Delete Temporary files off Windows 10.

    Tap the Windows Key then R on your keyboard, on the Run box type in %temp% then press enter.

    Once it is up highlight all then delete, if there is a filé open that can't be deleted just skip it.

    Hope this helps.

    URL Disclaimer please read.

    Note: This is a non-Microsoft website. The page appears to be providing accurate, safe information. Watch out for ads on the site that may advertise products frequently classified as PUP (Potentially Unwanted Products). Thoroughly research any product advertised on the site before you decide to download and install it.

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments No comments
  3. Anonymous
    2024-02-14T04:21:06+00:00

    I removed the folder but the thread is still there. I am currently using Avast One's free version. I tried Malwarebytes but nothing happened. but the main thing is when I scan the thread with Windows Defender it popped up a notification saying

    Page not available

    Your IT administrator has limited access to some areas of this app, and the item you tried to access is not available. Contact IT helpdesk for more information.

    but avast, malwarebytes both says no threads found

    Was this answer helpful?

    0 comments No comments
  4. Ferdinand Nanalig 30,325 Reputation points Independent Advisor
    2024-02-13T18:27:23+00:00

    Yes, make sure that you are in the correct Temp folder, if any files and folders cannot be removed then you can skip that part.

    Was this answer helpful?

    0 comments No comments
  5. Anonymous
    2024-02-13T18:25:59+00:00

    should i delete all temp files and folders?

    Was this answer helpful?

    0 comments No comments