Trojan:Win32 "partially removed"

[sandie c]

After running Microsoft safety scanner I got this message, would anyone know what I should do? Any help would be appreciated.

 

[Ian]

Hi Sandie,

Have you tried any other anti-virus software to see if it can remove it? Perhaps you could try something like the ESET online scan:

Free Online Virus Scanner and Malware Scanner | ESET

Scan and remove malware for free with the ESET Malware Scanner. Our online virus scanner checks for any type of virus and helps you remove it. Try it today

www.eset.com

There's a "scan now" button that will run a one-time scan and see if it can remove it.

It could be worth downloading something like Avira (free) as your day-to-day antivirus: https://www.avira.com/en/free-antivirus-windows

The Microsoft Safety Scanner isn't really designed as a complete protection system.

 

[sandie c]

Thanks, I will save your info. Someone told me to do a System Restore, so I did that. Than I scanned with Malwarebytes and it did not find anything.So I hope it is gone. Maybe I will try the Eset as well, can't hurt...

 

[cebima40]

If Trojan:Win32 is only "partially removed," that means some infected files or registry entries still exist. Here’s what to do next:

1. Run a Full Scan with Windows Defender

• Open Windows Security → Virus & threat protection → Scan options → Full scan.
• If the threat persists, run an offline scan (Windows Defender Offline).

2. Use a Second Opinion Scanner

• Download Malwarebytes or HitmanPro and run a full system scan.

3. Boot into Safe Mode and Remove Manually

• Restart and press F8 (or Shift + Restart) → Select Safe Mode with Networking.
• Run a full scan again and delete any detected threats.

4. Check and Clean Registry (Carefully)

• Press Win + R, type regedit, and search for any suspicious keys related to the trojan name.
• Be careful! Only delete entries that are clearly linked to the malware.

5. Clear Temporary Files

• Press Win + R, type temp, delete all files.
• Do the same for %temp%, prefetch, and C:\Windows\Temp.

6. Reset Browsers & Disable Suspicious Startup Items

• Reset all browsers (Chrome, Edge, Firefox) to remove any injected scripts.
• Open Task Manager (Ctrl + Shift + Esc) → Startup and disable unknown entries.

7. Monitor & Restore System if Needed

• If the issue persists, try System Restore to a previous clean state.
• Consider resetting Windows if the infection is deep-rooted.

Need help identifying any suspicious files?