Trojan.ModifiedMS

Short bio

Trojan.ModifiedMS is Malwarebytes generic detection name for Trojans that are present on affected Windows systems as altered Microsoft files.

Symptoms

The files detected as Trojan.ModifiedMS will be signed by the actual Microsoft Corporation, but are no longer the original files. A malicious payload will have been added to the file.

Protection

Malwarebytes protects users from Trojan.ModifiedMS by using real-time protection. At the moment there are no files detected as Trojan.ModifiedMS in the wild.

Remediation

Malwarebytes can detect and remove Trojan.ModifiedMS without further user interaction.

1. Please download Malwarebytes to your desktop.
2. Double-click mb3-setup-consumer-{version}.exe and follow the prompts to install the program.
3. Then click Finish.
4. Once the program has fully updated, select Scan Now on the Dashboard. Or select the Threat Scan from the Scan menu.
5. If another update of the definitions is available, it will be implemented before the rest of the scanning procedure.
6. When the scan is complete, make sure that All Threats are selected, and click Remove Selected.
7. Restart your computer when prompted to do so.

Malwarebytes cannot always replace the removed file with the original, so users may want to run the Windows System File Checker after the removal has been completed.