Question alot of viruses on my pc

[nottouchable]

So my windows defender started a scan and came out with 8 viruses i cant delete them it only blocks them . When i scan with malware bytes it doesnt find any and i cant delete them? Is windows defender tripping or what . One of the viruses their names are Backdoor:MSIL/Boilod.A / Trojan:Win32/Occamy.C Please help!!!!!

 

[Dark Lord of Tech]

Run a TRIAL of Zemana Anti-Malware.

 

[nottouchable]

Run a TRIAL of Zemana Anti-Malware.

it only found one thing called something with chromium for the rest nothing not even 1 of the viruses

 

[Dark Lord of Tech]

I wouldn't trust defender results.

 

[nottouchable]

I wouldn't trust defender results.

There is a virus in this place file: C:\Users\User\AppData\Roaming\2b406d0329276d71bbd636cea9d978d2\updane.exe Thats what windows defender says it says its active and running and it cant delete it its called Program:Win32/Contebrew.A!ml

 

[britechguy]

Run an OFFLINE scan with Windows Security. There are many viruses that cannot be effectively removed when Windows itself is active. That's why Windows Security was improved to give you the capability to run an offline scan before Windows even comes up.

Gracefully close all programs that are running, then:

Settings, Update & Security, Windows Security Pane, activate Open Windows Security button. Virus & Threat Protection should be opened there, then activate the Scan Options link. In the list of radio buttons, choose the last: Windows Defender Offline Scan. Hit the Scan button then allow the system to restart. The scan will occur before Windows itself is active.

I trust Windows Defender as much as most third party antivirus/security suites, and more than some. So do third party antivirus evaluators:

See the most recent plus the last several years of historical test results from:

AV Test

AV Comparatives

SE Labs (Reports Page)

MRG Effitas (360 Protection Testing Category)

 

[mdd1963]

Assuming you are not fighting a false positive due to something you've installed that might be legit but lesser known...

Do you have a restore point from before when malware was present? Backup image from before infection?

Some malware (for years now) had been essentially diskless/fileless....; hops from registry to RAM, deletes registry entries, can't be readily found in any scan, recreates itself in registry with new random name/location/start point prior to shutdown... Professional researchers often find it typically with carefully sought evidence of it's reaching out on the network to call home, beginning it's nefarious activities, etc..

Tools like Process Explorer, Autoruns, and LastActivityView might help...; one could easily spend near countless hours investigating it's new names, places of spawn/origin, etc... and it's sometimes quite fun,.... the first few hours....

You can investigate it forever if a security researcher, and/or forever curious as to the inner workings and complexity of malware design, and not really needing the infected system back in any time sensitive fashion...
If you need it back soon, however...

One things is more certain, you could flatten your existing install (classic 'nuke and pave'/delete partitions effectively deletes everything), and fresh install (quick format is automatic to a blanked disk install) from USB installer to SSD within as few as 5 minutes... (Alas, reinstalling drivers and your software will take longer, hence the great idea of having a good 'golden image' backup for when everything is fresh/perfect)

 

[britechguy]

Assuming you are not fighting a false positive due to something you've installed that might be legit but lesser known...

If one even suspects that a false positive could be at play, it's well worth spending a couple of minutes to submit the file (or URL, too) to virustotal.com.

It runs what's submitted through the engines of over 60 antivirus and security suites. I've seen plenty of times where one declares something infected while the rest ID it as clean, and to a lesser extent, vice versa.

If you've got an actual infection the vast majority of engines will pick up on it unless it's very, very, very new.

 

[mdd1963]

Given the initial scenario of 'lots of viruses' found by Defender, a detailed (vice quick) offline scan by Defender (as you mentioned earlier), and /or Emsisoft Emergency Kit, Kaspersky Rescue CD, etc, all might help...

Malwarebytes AntiMalware not finding anything is sort of unusual in true 'I'm infected' cases.....

 

[USAFRet]

Contebrew.A!ml is usually a false positive seen in cheating software for games like csgo, minecraft, etc. If you are using a cheating software and its from this its like 90% a false positive.

But if not, you could choose the nuclear route and completely reset or just get a good antivirus.

If malwarebytes isn't finding any they are almost 99% of the time a false positive. Since malwarebytes is a lot better than windows defender we can easily make this assumption.

2 years later....
I hope the OP is still not suffering through this.

Please don't dredge up ancient threads.