Share via

Can anyone help me with this trojan virus (I think)?

Anonymous
2024-12-29T17:33:07+00:00

My protection history in windows says this:

(Sorry, is in spanish)

Detectado: Trojan:Script/Boxter.HNAB!MTB

Estado: En cuarentena

Los archivos en cuarentena se encuentran en un área restringida donde no pueden dañar el dispositivo. Se eliminarán automáticamente.

Fecha: 29/12/2024 18:06

Detalles: Este programa es peligroso y ejecuta comandos de un atacante.

Elementos afectados:

amsi: C:\Users\Home\AppData\Local\TradeToken Elite Innovations Inc\TradeTokenElite.js

5 minutes later it says this:

Detectado: Trojan:Script/Boxter.HNAB!MTB

Estado: Activo

Las amenazas activas no se han corregido y se están ejecutando en el dispositivo.

Fecha: 29/12/2024 18:11

Detalles: Este programa es peligroso y ejecuta comandos de un atacante.

Elementos afectados:

amsi: C:\Users\Home\AppData\Local\TradeToken Elite Innovations Inc\TradeTokenElite.js

And five minutes later, it's start again. The threat it's recognized, quarantined and then, is found again.

Windows for home | Windows 11 | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

3 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. DYARI BARHAM 33,356 Reputation points Independent Advisor
    2024-12-29T21:06:14+00:00

    Hi luisillo,

    I'm Dyari. Thanks for reaching out. I will be happy to assist you in this regard.

    Kindly uninstall all the third-party security software installed on your computer and scan for viruses & malware with the free Malwarebytes:

    https://www.malwarebytes.com/mwb-download

    You can find more steps to disinfect your computer:

    https://answers.microsoft.com/en-us/windows/for...

    Please do not hesitate to ask if you need further assistance.

    Stay safe.

    ____________________________________________________________

    Standard Disclaimer: There are links to non-Microsoft websites. The pages appear to be providing accurate, safe information. Watch out for ads on the sites that may advertise products frequently classified as a PUP (Potentially Unwanted Products). Thoroughly research any product advertised on the sites before you decide to download and install it.

    1 person found this answer helpful.
    0 comments
  2. _AW_ 67,206 Reputation points Volunteer Moderator
    2024-12-29T22:50:47+00:00

    I'll help you remove it. Please run a scan with Farbar Recovery Scan Tool (FRST) and share your logs.

    https://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/

    Note: If you are using Edge, SmartScreen may initially block the download.

    Click on the three dots next to the warning and select Keep => Show more => Keep anyway.

    • If your computer's language is not English, rename FRST64.exe to FRST64English.exe
    • Run the tool, leave the default settings, and press Scan.
    • Zip the logs, FRST.txt and Addition.txt, then upload to a cloud storage service like OneDrive, Google Drive or gofile.io
    • Post the share link.

    Share OneDrive files and folders - Microsoft Support

    0 comments
  3. Reza-Ameri 45,806 Reputation points Volunteer Moderator
    2024-12-29T20:17:41+00:00

    Are you using Microsoft Defender?

    If yes, update it and run a full system scan.

    You may run scan with Microsoft Defender Offline, have a look at Help protect my PC with Microsoft Defender Offline - Microsoft Support.

    0 comments