Trojan:Win32/Comroki!rts

I have seen you post this before. Only one question.

Script blocking. I have no idea if any script blocking is running or not.

Here are the files.

I don't see anything in those reports. What did Microsoft Safety Scanner find, exactly? Do you have the name of the file and path?

Trojan Win32/Comroki

Saturday evening.
I downloaded and ran the Microsoft Safety Scanner it showed it found one thing as it was scanning.
When done it popped up a window showing Trojan Win32/Comroki removed.
No log or path or option to save a log or anything.

Friday evening Mbam found nothing. My weekly scan.
Avast never showed a bad page or anything yesterday.
Actually only went to 3 web sites yesterday before downloading the Safety Scanner and running.

After Safety Scanner said it found and removed the trojan I then ran the ESET, Avast and Mbam again after Safety Scanner and found nothing.
Ran Win Defender this morning- forgot it was on here and running also. Nothing found.

So totally confused here.

False alarm or if I had it it is now gone?

Well, MSE sounded the alarm for that on mine also (Trojan Win32/Comroki). However, the file it said was infected was rkill.com. I d/l ed that copy of the file about a month ago from the legit website.

When I scanned the exact same file (rkill.com) I keep on my external HD with MSE, it came back negative.

It detected this shortly after I applied the update for MSE (To ver 2.1.1116.0). I wonder if that had anything to do with it?

Meanwhile, I've done an extensive check of the system and found nothing. I tried d/l ing rkill again to see if it would pick it up as infected, and although it was the same version, it didn't register anything when scanned.

RKill is not malicious. VirusTotal shows that only a few AVs flag it as anything :)
I believe, Mike, that a F/P was flagged.

I was wondering if it was a false positive.

I assumed it probably was when I scanned the rkill file on the external HD and it found nothing, along with d/l ing the same version of rkill and nothing showing up.

However, I still did some through investigating, since paranoia is a good thing when it comes to viruses/malware.

@Jacee - MSE has never detected rkill as malicious on my machine...until that one time....curious...

Me too on the paranoia.

I also have rkill downloaded.
Since the Safety Scanner gives you no info other than the name of what says it removed it could have been a reaction to anything.

Thanks for the help Jacee.

Whew! Nice one.