Will Windows Defender Get Rid of HackTool:Win32/Crack!MTB Off My PC? What Do I Do??

Question

I accidentally installed an execution file with HackTool:Win32/Crack!MTB maleware in it and my anti viruses probably aren't getting rid of the malware. Malwarebytes shows a clear report but Windows Defender says that there are 2 detections on my PC. Defender is taking an extremely long time to get rid of the malware and I'm not sure if this will ever be removed. I don't even know what HackTool:Win32/Crack!MTB does to a PC, what else should I do and will Defender eventually remove the two copies of HackTool:Win32/Crack!MTB?

EDIT: One threat was blocked, the other was quarantined but it failed. I'm not sure if this malware is completely gone because Defender is clear of malware...

Answer 1

I accidentally installed an execution file with HackTool:Win32/Crack!MTB maleware in it and my anti viruses probably aren't getting rid of the malware.

A detection of that type does not necessarily mean that you have any malware. If you download a tool to crack a game or app, that tool may be perfectly safe. That is, it does nothing more than crack the game, but AV software, such as Windows Defender, will still detect it as a "HackTool" (possibly to discourage software piracy). Also note that downloading cracks can be a dangerous activity because the sites where they're found often include phishing ads (e.g. fake "you've been infected" pop ups) and it's also possible to download a crack that's been modified to include a malware payload. If you allow such a modified crack (via UAC) to run, then it also has rights to deploy its payload. Be very careful about where you get these tools.

Answer 2

Hi, I am an Independent Advisor.

Let me help you with this issue.

I understand you are still seeing HackTool:Win32/Crack!MTB is blocked and quarantined on Windows Defender.

Try to scan your machine using Malwarebytes on Safemode.

"Most files detected by Microsoft security software are quarantined. This means the file is moved and stopped from running or doing anything to your PC.

A quarantined file does not pose any risk to your PC. You can leave a file in quarantine for as long as you like."

Source link: https://support.microsoft.com/en-us/windows/ant...

You can remove Protection History, by following the steps below.

Open File Explorer then go to C drive.

Navigate to the path below.

C:\ProgramData\Microsoft\Windows Defender\Scans\History\Service

Remove all the files inside it and restart/reboot your computer.

Answer 3

Hello,

The first thing is to run a full scan on Windows Defender and see what it comes up with.

If Defender tells you that the virus is still there, run a Windows Defender Offline Scan which will most likely remove the malware for you.

For an extra step, turn off the Wi-Fi or Ethernet and then run another Windows Defender full scan or the Bitdefender equivalent.

Let me know how this goes.