asked on

Windows Malicious Removal Tool + Virus detected +

Hello,

There is a strange problem with the MRT. Every month with the updates, all the computers of my domain are reporting a virus, called: TrojanSpy:Win32/Bancos.gen!A. I have scanned these computers with lots of anti-virussoftware like trendmicro, symantec, microsoft ... and they found nothing.
In the logs, there is a scan error, so i think it's not a virus. (see logs in When I scan the computer as a local administrator, there isn't a warning. When I do it as a domain administrator, the MRT program give a warning. (All my members are in the group of domain admins).

How can I solve this that every month the wizard of MRT doesn't show up with a viruswarning ? Is there a solution ?

Thanks,
Bart
mrt.log

youngrmy

You may be getting a signature of malware/Spyware instead of a virus. Try running Malware bytes on the system(s)

ASKER CERTIFIED SOLUTION

warturtle

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

Mohamed Osama

This is a generic detection, in a quick MRT scan, we can not tell if this is a valid detection or a false positive.
try running the program manually on one of the affected machine using the below command
mrt.exe /F:Y
this should force a full scan with auto clean flag on, Please note that you need to be logged in as administrator for the tool to be able to complete the cleanup, as the cleanup could involve modifying startup items or system files.
please share the log .
you may also want to post a Hijack this log from one of the machines if the problem persists.