I found a virus called Win32/Uwamson.A!ml any help on how to get rid of it?

Question

* Locked

So I was checking around on my computer and I saw a problem in the defender and it says there was a virus called Win32/Uwamson.A!ml and every time I try a scan it just re appears and if it says noting is wrong I check virus and threat protection and it re-apears and I am confused and it seems to be slowing down my computer any help? It also seems to be trying to corrupt my pc it made athing called win32toolbar and it came before I deleted it and a few days later it came back

Answer 1

Hi Ghani, I am Rob, an Independent Advisor not affiliated with Microsoft and a 15 time and dual award Microsoft MVP specializing in Windows troubleshooting and Bluescreen analysis. Please remember as independents we are not responsible for the development of Windows or the computer hardware and drivers. If you will work with me I will be here to help until the issue is resolved.

Could you have installed a game or other questionable software just before this started to show up?

If you need to check for malware here are my recommendations - these will allow you to do a thorough check and removal without ending up with a load of spyware programs running resident which can cause as many issues as the malware and may be harder to detect as the cause.

No one program can be relied upon to detect and remove all malware. Added that often easy to detect malware is often accompanied by a much harder to detect and remove payload. So it's better to be overly thorough now than to pay the high price later. Check with these to an extreme overkill point.

How do I find and remove a virus?

http://windows.microsoft.com/en-US/windows-8/ho...

TDSSKiller.exe. - Download to the Desktop - then go to it and Right Click on it - RUN AS ADMIN it will show any infections in the report after running - if it will not run change the name from tdsskiller.exe to tdsskiller.com. Whether it finds anything or not does not mean you should not check with the other methods below.

http://support.kaspersky.com/viruses/solutions?...

Microsoft Safety Scanner

http://www.microsoft.com/security/scanner/en-us...

Malwarebytes - free

http://www.malwarebytes.org/products/malwarebyt...

SuperAntiSpyware Portable Scanner - Free

http://www.superantispyware.com/portablescanner...

AdwCleaner

http://www.bleepingcomputer.com/download/adwcle...

Hitman Pro is a second opinion scanner, designed to rescue your computer from malware (viruses, trojans, rootkits, etc.) that have infected your computer despite all the security measures you have taken (such as anti-virus software, firewalls, etc.).

http://www.surfright.nl/en/hitmanpro

EmsiSoft Emergency Kit - Free - (if prompted do not install their software however do allow it to unpack the downloaded ZIP file so you can run the scanner).

https://www.emsisoft.com/en/home/emergencykit/

What is Windows Defender Offline?

http://windows.microsoft.com/en-US/windows/what...

Windows Defender Offline system requirements

http://windows.microsoft.com/en-US/windows/wind...

---

If needed here are some online free scanners to help

http://www.eset.com/onlinescan/

---

Other Free online scans

http://www.google.com/search?hl=en&source=h...

---

A comprehensive list of "Malware Removal Tools" many of which are in my methods above.

List of Malware Removal Tools

https://answers.microsoft.com/en-us/protect/for...

Here to help,

Rob

---

Standard Disclaimer: Those may be non-Microsoft websites. The pages appear to be providing accurate, safe information. Watch out for ads on the site that may advertise products frequently classified as a PUP (Potentially Unwanted Products). Thoroughly research any product advertised on the site before you decide to download and install it.

Please let us know the results and if you need further assistance. Feedback definitely helps us help all.

Answer 2

Hi Ghani R,

You may be seeing a false positive, now, from Defender.

If none of the other scanners that you have tried, detect your malware, but Defender continues

to do so, it is a false positive.

Defender has a tendency to detect what is in its Protection History, and declare that it is a current threat.

Defender has most likely, already remediated "Uwamson".

You should be able to eliminate the false alerts, by deleting Detection History from Protection History.

It is perfectly safe. Windows rebuilds Detection History, the next time that it is needed.

This link will supply the instructions for deleting Detection History.

https://answers.microsoft.com/en-us/protect/forum/all/windows-defender-identifies-the-same-pup-as-a/63f17794-3815-4784-b9cd-c6059c8e0828

Glen