View original (French)

PUABundler:Win32-Rostpay virus (low)

Solved
gdbbvlf Posted messages 194 Status Member -  
bazfile Posted messages 58537 Registration date   Status Moderator Last intervention   -

Recalcitrant virus

Icon in the Windows security taskbar – (no action required), I open Windows Security, I have the page (Security at a glance), the icon (Virus & threat protection) in green – (no action required), click on this icon, I see (current threats, detected threats) – take action as recommended.

"same result with delete and quarantine"

Click to take action

the quick scan executed, presence of the same virus

I tried to delete it using several methods found on the web, nothing works

What to do please

7 answers

  1.
    MisteryBean Posted messages 8950 Registration date   Status Moderator Last intervention   1 294
     

    Hello,

    Click on "view details" in your first screenshot and take a screenshot

    0
  2. gdbbvlf Posted messages 194 Status Member 9
     

    Hello MysteryBean

    to learn more

    I deleted this file in download

    0
    1. brucine Posted messages 25275 Registration date   Status Member Last intervention   4 187
       

      Hello,

      The issue is related to driver hub, which is blacklisted because it is likely to install unwanted additional software (PUP).

      More broadly speaking, it pertains to the installation of driver hub and the unwanted software from HP besides the drivers themselves, which are all useless.

      https://forums.malwarebytes.com/topic/246894-removal-instructions-for-rostpay/

      0
  3. gdbbvlf Posted messages 194 Status Member 9
     

    Hello

    result of Malwarebytes

    0
  4. bazfile Posted messages 58537 Registration date   Status Moderator Last intervention   20 288
     

    @gdbbvlf StatusMember .

    The Windows Defender alert is an old alert from June 11, what you're seeing is the history of Windows Defender alerts, not a new alert.

    This alert concerned an executable file you had downloaded named driver_hub__install_28.exe which was located in the downloads folder; it was deleted by Windows Defender. This file contained a PUP, nothing serious.

    0
  6. gdbbvlf Posted messages 194 Status Member 9
     

    Hello Bazfile

    How do I get rid of this Windows Defender alert, please?

    0
    1. bazfile Posted messages 58537 Registration date   Status Moderator Last intervention   20 288
       

      @gdbbvlf StatusMember .

      Since the file has been deleted, it doesn't really matter that this alert is in Windows Defender's history; it's a bit like your browser's history, it allows you to see what has been done. It's just for informational purposes, nothing more. But if you wish to delete this past alert, you need to delete the history of Windows Defender, but honestly, I don't see the point.

      0
  7. gdbbvlf Posted messages 194 Status Member 9
     

    Thank you very much, you are right I will leave it like that.

    0
    1. bazfile Posted messages 58537 Registration date   Status Moderator Last intervention   20 288
       

      OK.

      0
  8. gdbbvlf Posted messages 194 Status Member 9
     

    thank you all for your advice, the problem is solved

    0
    1. bazfile Posted messages 58537 Registration date   Status Moderator Last intervention   20 288
       

      You're welcome.

      See you later on CCM.

      0