Hi All, My son's pc got Trojan.MSILZilla.19190 as detected by BitDefender system full scan and Goo

alexisprob99

Hi All,

My son's pc got Trojan.MSILZilla.19190 as detected by BitDefender system full scan and Google will not allow use of his email until the malware is cleaned. Do u know any service to clean above?

Missing his roblox & fortnite games

Many Thanks

Flexx

https://community.bitdefender.com/en/discussion/92135/hi-all-my-sons-pc-got-trojan-msilzilla-19190-as-detected-by-bitdefender-system-full-scan-and-goo

If bitdefender is unable to quarantine or delete the malware in general mode, you may need to switch to bitdefender rescue environment (https://www.bitdefender.com/consumer/support/answer/29132/)

Additionally, check if below steps helps you in any way.

1) Restart PC in safe mode (https://support.microsoft.com/en-us/windows/start-your-pc-in-safe-mode-in-windows-92c27cff-db89-8644-1ce4-b3e5e56fe234)

2) Open run command and run below command one by one:

temp ,delete all the files in the folder

%temp% ,delete all the files in folder

prefetch ,delete all the files in folder

3) Restart your PC in general mode by unticking the option that you selected to run the system in safe mode and then click apply.

4) Reset your browsers:

Google Chrome (https://support.google.com/chrome/answer/3296214?hl=en)

Mozilla Firefox (https://support.mozilla.org/en-US/kb/refresh-firefox-reset-add-ons-and-settings)

Microsoft Edge (https://malwaretips.com/blogs/reset-microsoft-edge/)

Vivaldi (https://help.vivaldi.com/desktop/install-update/full-reset-of-vivaldi/)

Brave (https://support.brave.com/hc/en-us/articles/360017903152-How-do-I-reset-Brave-settings-to-default-)

5) Now, to be on a safer side, I would also advise you to run these portable scanners which do not require any installation

* Download and run Malwarebytes AdwCleaner (https://www.malwarebytes.com/adwcleaner)

* ESET Online Scanner (https://download.eset.com/com/eset/tools/online_scanner/latest/esetonlinescanner.exe)

* Download and run a scan with Kaspersky Virus Removal Tool (https://devbuilds.s.kaspersky-labs.com/devbuilds/KVRT/latest/full/KVRT.exe). Make sure you checkmark System Memory, Startup Objects, Boot Sectors & System Drive before running a scan.

If the issue persists, kindly contact the bitdefender support by visiting https://www.bitdefender.com/consumer/support/ and scroll down to the bottom of the webpage where you can get in touch with support representative either by email, chat or over a call.

Regards

alexisprob99

Thank you mrmirakhur for your prompt responce. Well deserved top responder!

Issue not resolved Trojan.MSILZilla.19190 still there after bitdefender full system scan.

I performed all the tasks as you have advised. This did not resolve the problem. I had contacted Bitdefender support prior to contacting expert community and they have now responded. Whilst working for a fix, I have been asked to do the following:

use Task Scheduler to remove the following scheduled tasks:

dialersvc32

dialersvc64

( I could not find the above tasks. Could they have been removed as part of what mrmirakhur suggested? dont know)

Also use the Registry Editor to remove the the following registry values

HKEY_LOCAL_MACHINE\Software\dialerstager

HKEY_LOCAL_MACHINE\SoftwareWOW6432Node\dialerstager

(I was able to find these values and delete them this morning. Bitdefender full system scan could not find the above Trojan anylonger but found Gen:Variant.Tedy.10842 again failed disenfection)

I am waiting for Bitdefender Support responce

Flexx

https://community.bitdefender.com/en/discussion/comment/311735#Comment_311735

Well this is weird, persisting infection one after the other.

And also since none of the other portable scanners were able to find the threat makes it a suspection of false positive.

Your best help will be to reach out to malware researchers through support regarding this.

Since you already have contacted bitdefender support, I would request you to generate BDsysLog (https://www.bitdefender.com/consumer/support/answer/1922/) and share it with the support department so that they can further share the same with malware researchers.

Is it somehow possible for you to share the virustotal link for the detection of Gen:Variant.Tedy.10842 that was found on your device.

Regards