Can't remove Trojan

TheUnknownM

New Member
Thread author
Jun 11, 2012
6
I am new here. when i used the bit defender online scanner i get this "Your system is infected with Trojan.Heur.FU.pyW@aac2YAn" and it can't remove it. i tried mostly every virus scanner and they do not detect it, please help me remove this
 
P

Plexx

Have you tried downloading Malwarebytes Anti-Malware (no need to activate trial), install it, update to latest signature and do a full system scan?

Also could you provide us more information of what is the infected file and location?

In any case Malwarebytes should be able to remove it.

Edit: Also download Trojan Remover, HitMan Pro and Emsisoft Emergency Kit for additional 3 additional scans.

When doing the scans (full/complete scans) please do it in Safemode with Network.

If it fails, please post here along with these rules.
 

Littlebits

Retired Staff
May 3, 2011
3,893
TheUnknownM said:
I am new here. when i used the bit defender online scanner i get this "Your system is infected with Trojan.Heur.FU.pyW@aac2YAn" and it can't remove it. i tried mostly every virus scanner and they do not detect it, please help me remove this

BitDefender Online Scanner is known to have fake results and false positives. It is kind of a promotional ad to get people to buy their products.

If none of other scanners detect it, then it is most definitely a false alert.

I recommend run the basic scanners in Windows Safe Mode and see if they detect the Trojan, if they don't detect it, then don't worry about it.

Better choices for online scanners:

Symantec (Norton)

Eset (Nod32)

F-Secure

TrendMicro House Call

Panda ActiveScan (requires free registration)

Emsisoft (watch for false positives)

Microsoft Safety Scanner

Enjoy!!:D
 
P

Plexx

Littlebits said:
TheUnknownM said:
I am new here. when i used the bit defender online scanner i get this "Your system is infected with Trojan.Heur.FU.pyW@aac2YAn" and it can't remove it. i tried mostly every virus scanner and they do not detect it, please help me remove this

BitDefender Online Scanner is known to have fake results and false positives. It is kind of a promotional ad to get people to buy their products.

If none of other scanners detect it, then it is most definitely a false alert.

I recommend run the basic scanners in Windows Safe Mode and see if they detect the Trojan, if they don't detect it, then don't worry about it.

Better choices for online scanners:

Symantec (Norton)

Eset (Nod32)

F-Secure

TrendMicro House Call

Panda ActiveScan (requires free registration)

Emsisoft (watch for false positives)

Microsoft Safety Scanner

Enjoy!!:D

Out of the list above, I had recently best results with ESET, F-secure and Panda. Tred and Symantec were not that good. But again it was a fresh collection of malware and whatnot.

Didnt know Emsisoft had an online scanner.
 

TheUnknownM

New Member
Thread author
Jun 11, 2012
6
biozfear said:
Have you tried downloading Malwarebytes Anti-Malware (no need to activate trial), install it, update to latest signature and do a full system scan?

Also could you provide us more information of what is the infected file and location?

In any case Malwarebytes should be able to remove it.

Edit: Also download Trojan Remover, HitMan Pro and Emsisoft Emergency Kit for additional 3 additional scans.

When doing the scans (full/complete scans) please do it in Safemode with Network.

If it fails, please post here along with these rules.

Yes. i have downloaded malwarebytes in safe mode.it found nothing. i am downloading the scanners you linked me and going to try to see if it will detect that Trojan
edit: I do not know if it is a fake positive but.my computer wen't a bit slow when it said it found that trojan.
 

Malware Maniac

Level 1
May 14, 2012
673
TheUnknownM said:
Yes. i have downloaded malwarebytes in safe mode.it found nothing. i am downloading the scanners you linked me and going to try to see if it will detect that Trojan
edit: I do not know if it is a fake positive but.my computer wen't a bit slow when it said it found that trojan.

If malwarebytes didn't detect the file then if possible find where the file is that bitdefender detected and upload the file to VirusTotal. If no other antivirus engines don't detect it then it is likely a false positive.
 

TheUnknownM

New Member
Thread author
Jun 11, 2012
6
Malware Maniac said:
TheUnknownM said:
Yes. i have downloaded malwarebytes in safe mode.it found nothing. i am downloading the scanners you linked me and going to try to see if it will detect that Trojan
edit: I do not know if it is a fake positive but.my computer wen't a bit slow when it said it found that trojan.

If malwarebytes didn't detect the file then if possible find where the file is that bitdefender detected and upload the file to VirusTotal. If no other antivirus engines don't detect it then it is likely a false positive.

I scanned with bit defender online scanner and it did not upload it i think. but it is probably a false positive.
 

TheUnknownM

New Member
Thread author
Jun 11, 2012
6
I scanned with those 3 scanners you sent me biozfear. Emsisoft Emergency Kit found a suspicious file that is GameMon.des in C:\Windows\SysWOW64. is that a virus? also. it deleted like 3 or 4 tracking cookies and 70+ of them failed idk why
 

jamescv7

Level 85
Verified
Honorary Member
Mar 15, 2011
13,070
If you believe that the file is a legit and falsely detected by Trojan you don't have to worry about.

If you're current AV detected it then put on the exclusion list or report on the said security website to clear out since it may take a few days or depends.
 
P

Plexx

TheUnknownM said:
I scanned with those 3 scanners you sent me biozfear. Emsisoft Emergency Kit found a suspicious file that is GameMon.des in C:\Windows\SysWOW64. is that a virus? also. it deleted like 3 or 4 tracking cookies and 70+ of them failed idk why

GameMon.des is a false positive. This is a service that belongs to nProtect anti-hacking system found in most online games.

If it was deleted, moment you launch the game who uses nProtect it should automatically download again so there shouldn't be any worry.

As for the tracking cookies, use ccleaner first to clear all data.

It is most likely that Bitdefender is showing you a false positive.

Have a try with ESET Online scanner, link provided by Littlebits.

If ESET still does not detect that file Bitdefender did, then I believe it is safe to assume its a False positive, and please ditch Bitdefender and go for something better (software or online scanner)
 

TheUnknownM

New Member
Thread author
Jun 11, 2012
6
biozfear said:
TheUnknownM said:
I scanned with those 3 scanners you sent me biozfear. Emsisoft Emergency Kit found a suspicious file that is GameMon.des in C:\Windows\SysWOW64. is that a virus? also. it deleted like 3 or 4 tracking cookies and 70+ of them failed idk why

GameMon.des is a false positive. This is a service that belongs to nProtect anti-hacking system found in most online games.

If it was deleted, moment you launch the game who uses nProtect it should automatically download again so there shouldn't be any worry.

As for the tracking cookies, use ccleaner first to clear all data.

It is most likely that Bitdefender is showing you a false positive.

Have a try with ESET Online scanner, link provided by Littlebits.

If ESET still does not detect that file Bitdefender did, then I believe it is safe to assume its a False positive, and please ditch Bitdefender and go for something better (software or online scanner)

Lol. yeah. I scanned my computer with 5 virus scanners and thought i had a virus. guess not, the Trojan.Heur.FU.pyW@aac2YAn was the Panda security toolbar. thank's for trying to help me with my problem guys
 
P

Plexx

TheUnknownM said:
Lol. yeah. I scanned my computer with 5 virus scanners and thought i had a virus. guess not, the Trojan.Heur.FU.pyW@aac2YAn was the Panda security toolbar. thank's for trying to help me with my problem guys

You can simply remove Panda Security toolbar and keep the URL Filter component. That is what most users do.

Just in case, as a suggestion, please post your configuration here.
 

pcjunklist

Level 1
Dec 28, 2011
523
You could also just install the toolbar from visicom media which actually carries the more up to date versions of panda scanner
http://software.visicommedia.com/en/products/antiphishing/

TheUnknownM said:
biozfear said:
TheUnknownM said:
I scanned with those 3 scanners you sent me biozfear. Emsisoft Emergency Kit found a suspicious file that is GameMon.des in C:\Windows\SysWOW64. is that a virus? also. it deleted like 3 or 4 tracking cookies and 70+ of them failed idk why

GameMon.des is a false positive. This is a service that belongs to nProtect anti-hacking system found in most online games.

If it was deleted, moment you launch the game who uses nProtect it should automatically download again so there shouldn't be any worry.

As for the tracking cookies, use ccleaner first to clear all data.

It is most likely that Bitdefender is showing you a false positive.

Have a try with ESET Online scanner, link provided by Littlebits.

If ESET still does not detect that file Bitdefender did, then I believe it is safe to assume its a False positive, and please ditch Bitdefender and go for something better (software or online scanner)

Lol. yeah. I scanned my computer with 5 virus scanners and thought i had a virus. guess not, the Trojan.Heur.FU.pyW@aac2YAn was the Panda security toolbar. thank's for trying to help me with my problem guys
 

pcjunklist

Level 1
Dec 28, 2011
523
The Visicom Media installer used to be 1 version above the Panda toolbar install version (at least when I installed it). I just installed the 1 from panda and it seems they have switched and the Panda version is now 1.0.1.34 and the Visicom is 1.0.1.30. So disregard my previous statement, it seems as though Visicom has stopped updating on their end.
 

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top