{"id":723,"date":"2022-03-21T15:21:42","date_gmt":"2022-03-21T14:21:42","guid":{"rendered":"https:\/\/www.susii.nrw\/what-happened\/viruses-and-trojans\/"},"modified":"2022-04-22T11:05:56","modified_gmt":"2022-04-22T09:05:56","slug":"viruses-trojans","status":"publish","type":"page","link":"https:\/\/www.susii.nrw\/en\/first-aid\/viruses-trojans\/","title":{"rendered":"Viruses and Trojans"},"content":{"rendered":"\n<p class=\"has-text-align-center su-page-intro has-black-color has-text-color\">Information page for Trojans and virus infections on your computer, smartphone, or tablet.<\/p>\n\n\n\n<p class=\"has-text-align-center\"><em>For more information, see <a href=\"https:\/\/www.susii.nrw\/en\/first-aid\/viruses-trojans-enterprise\/\" data-type=\"page\" data-id=\"724\">Viruses and Trojans in the Enterprise<\/a>, and the topic <a href=\"https:\/\/www.susii.nrw\/en\/first-aid\/ransomware\/\" data-type=\"page\" data-id=\"712\">Ransomware<\/a>.<\/em><\/p>\n\n\n\n<div class=\"wp-block-pb-accordion-item c-accordion__item js-accordion-item no-js su-accordion su-icon-bug-report su-box-shadow\" data-initially-open=\"false\" data-click-to-close=\"true\" data-auto-close=\"true\" data-scroll=\"false\" data-scroll-offset=\"0\"><h2 id=\"at-7230\" class=\"c-accordion__title js-accordion-controller\" role=\"button\">Scan for Viruses and Trojans<\/h2><div id=\"ac-7230\" class=\"c-accordion__content\">\n<p>If you think you have a virus or Trojan, start by updating your anti-virus software and then doing a full scan of your system, network, and the external hard drives. If the anti-virus product cannot be updated, then the probability is high that you already have a virus or Trojan.&nbsp;<\/p>\n\n\n\n<p>In this case, you should fall back on the&nbsp;<strong><a rel=\"noreferrer noopener\" href=\"http:\/\/www.eucleaner.de\/\" target=\"_blank\">Botfrei EU-Cleaner<\/a><\/strong>. These special programs serve as a first line of help for the detection of viruses and Trojans and can be used in parallel to anti-virus software.&nbsp;<\/p>\n\n\n\n<p>You can manually upload individual files and websites to websites like <a href=\"https:\/\/virustotal.com\/en\/\" data-type=\"URL\" data-id=\"https:\/\/virustotal.com\/en\/\" target=\"_blank\" rel=\"noreferrer noopener\">Virustotal<\/a>, and have them analyzed by numerous anti-virus software programs. If your anti-virus software does not, despite this, find any malware, but you are still suspicious, then you should regularly repeat the full system scan with the most recent updates.<\/p>\n<\/div><\/div>\n\n\n\n<div class=\"wp-block-pb-accordion-item c-accordion__item js-accordion-item no-js su-accordion su-icon-signal-wifi-off su-box-shadow\" data-initially-open=\"false\" data-click-to-close=\"true\" data-auto-close=\"true\" data-scroll=\"false\" data-scroll-offset=\"0\"><h2 id=\"at-7231\" class=\"c-accordion__title js-accordion-controller\" role=\"button\">Disconnect the device from the network<\/h2><div id=\"ac-7231\" class=\"c-accordion__content\">\n<p>If your anti-virus software reports a find, stay calm and firstly save your data.&nbsp;<\/p>\n\n\n\n<p>After you have had a report of a finding, disconnect your computer from the Internet, from your network, and from external devices. This can prevent the malware from being further distributed to other devices.&nbsp;<\/p>\n\n\n\n<p>You should also avoid re-starting or rebooting the infected device.&nbsp;<\/p>\n\n\n\n<p>Instead, put your computer into standby.<\/p>\n<\/div><\/div>\n\n\n\n<div class=\"wp-block-pb-accordion-item c-accordion__item js-accordion-item no-js su-accordion su-icon-search su-box-shadow\" data-initially-open=\"false\" data-click-to-close=\"true\" data-auto-close=\"true\" data-scroll=\"false\" data-scroll-offset=\"0\"><h2 id=\"at-7232\" class=\"c-accordion__title js-accordion-controller\" role=\"button\">Ascertain damage<\/h2><div id=\"ac-7232\" class=\"c-accordion__content\">\n<p>If you have diagnosed a Banking Trojan infection, you should use a second device to check whether there have already been any irregularities on your account, and you should also <strong>immediately change your password for online banking<\/strong>.&nbsp;<\/p>\n\n\n\n<p>Alternatively, you can call your bank to request that the account be blocked. This is possible around the clock using the German national emergency number for blocking cards and accounts: <strong>116 116<\/strong>.&nbsp;<\/p>\n\n\n\n<p>Further information about accessibility from abroad: <strong><a rel=\"noreferrer noopener\" href=\"http:\/\/www.sperr-notruf.de\/\" target=\"_blank\">Website of the emergency blocking number service<\/a><\/strong>.&nbsp;<\/p>\n\n\n\n<p>Alongside online banking, other payment services like PayPal are the target of criminals; here also, you should check your account and perhaps change your password.<\/p>\n<\/div><\/div>\n\n\n\n<div class=\"wp-block-pb-accordion-item c-accordion__item js-accordion-item no-js su-accordion su-icon-refresh su-box-shadow\" data-initially-open=\"false\" data-click-to-close=\"true\" data-auto-close=\"true\" data-scroll=\"false\" data-scroll-offset=\"0\"><h2 id=\"at-7233\" class=\"c-accordion__title js-accordion-controller\" role=\"button\">Change passwords<\/h2><div id=\"ac-7233\" class=\"c-accordion__content\">\n<p>After a virus infection, change all of your critical passwords, e.g. for your online banking, email addresses, social networks, and online shops.&nbsp;<\/p>\n\n\n\n<p>Our tips for <a href=\"https:\/\/www.susii.nrw\/en\/prevention\/strong-passwords\/\" data-type=\"page\" data-id=\"697\">strong passwords<\/a>.<\/p>\n<\/div><\/div>\n\n\n\n<div class=\"wp-block-pb-accordion-item c-accordion__item js-accordion-item no-js su-accordion su-icon-record-voice-over su-box-shadow\" data-initially-open=\"false\" data-click-to-close=\"true\" data-auto-close=\"true\" data-scroll=\"false\" data-scroll-offset=\"0\"><h2 id=\"at-7234\" class=\"c-accordion__title js-accordion-controller\" role=\"button\">Report damage<\/h2><div id=\"ac-7234\" class=\"c-accordion__content\">\n<p>If a virus or Trojan has caused any damage, you should immediately report it to the police.&nbsp;<\/p>\n\n\n\n<p>In this case, do not make any independent attempt to remove the malware. This is the only way it is possible for the police to secure evidence and begin an enquiry.&nbsp;<\/p>\n\n\n\n<p>Use a safe second device to file a <a rel=\"noreferrer noopener\" href=\"https:\/\/service.polizei.nrw.de\/anzeige\" target=\"_blank\">police report online<\/a>&nbsp;.&nbsp;<\/p>\n\n\n\n<p><em>If it is not possible to use a separate device, you should go personally to the nearest police station to make your report. Take the infected device with you to the police station to secure evidence.<\/em><\/p>\n<\/div><\/div>\n\n\n\n<div class=\"wp-block-pb-accordion-item c-accordion__item js-accordion-item no-js su-accordion su-icon-backup su-box-shadow\" data-initially-open=\"false\" data-click-to-close=\"true\" data-auto-close=\"true\" data-scroll=\"false\" data-scroll-offset=\"0\"><h2 id=\"at-7235\" class=\"c-accordion__title js-accordion-controller\" role=\"button\">Clean the computer or install backup?<\/h2><div id=\"ac-7235\" class=\"c-accordion__content\">\n<p>After an infection with a virus or Trojan, we recommend you restore a backup, especially if you want to continue using the device for business purposes or online banking.&nbsp;<\/p>\n\n\n\n<p>Unfortunately, it cannot be guaranteed that the anti-virus software will remove 100% of the malware.&nbsp;<br>If you do not have a backup, we recommend a&nbsp;<strong>complete new installation<\/strong>. Of course you should save and secure your data beforehand.&nbsp;<\/p>\n\n\n\n<p>After a new installation or restoring a backup, you should examine your computer again intensively with&nbsp;<a rel=\"noreferrer noopener\" href=\"https:\/\/www.botfrei.de\/de\/werkzeuge\/virenscanner.html\" target=\"_blank\">anti-virus software<\/a>. This is particularly the case for data that you saved after the infection and now wish to use again on the new system.&nbsp;<\/p>\n\n\n\n<p>Help and support in the removal of malware or the reinstallation after a malware infection can be found in the&nbsp;<a href=\"https:\/\/blog.botfrei.de\/forums\/\" target=\"_blank\" rel=\"noreferrer noopener\">Botfrei forum<\/a>.<\/p>\n<\/div><\/div>\n\n\n\n<div class=\"wp-block-pb-accordion-item c-accordion__item js-accordion-item no-js su-accordion su-icon-live-help su-box-shadow\" data-initially-open=\"false\" data-click-to-close=\"true\" data-auto-close=\"true\" data-scroll=\"false\" data-scroll-offset=\"0\"><h2 id=\"at-7236\" class=\"c-accordion__title js-accordion-controller\" role=\"button\">Help and support for removal<\/h2><div id=\"ac-7236\" class=\"c-accordion__content\">\n<p>Most anti-virus software removes viruses and Trojan automatically, or offers quite detailed instructions for manual removal of malware via links.&nbsp;<\/p>\n\n\n\n<p>If you nonetheless have difficulties in the removal of malware, you can get help and support free of charge from the Botfrei Community in the&nbsp;<strong><a href=\"https:\/\/blog.botfrei.de\/forums\/\" target=\"_blank\" rel=\"noreferrer noopener\">Botfrei forum<\/a><\/strong>.<\/p>\n<\/div><\/div>\n\n\n\n<div class=\"wp-block-pb-accordion-item c-accordion__item js-accordion-item no-js su-accordion su-icon-link su-box-shadow\" data-initially-open=\"false\" data-click-to-close=\"true\" data-auto-close=\"true\" data-scroll=\"false\" data-scroll-offset=\"0\"><h2 id=\"at-7237\" class=\"c-accordion__title js-accordion-controller\" role=\"button\">Related links<\/h2><div id=\"ac-7237\" class=\"c-accordion__content\">\n<p>Botfrei.de:\u00a0<a rel=\"noreferrer noopener\" href=\"https:\/\/www.eucleaner.de\/\" target=\"_blank\">EU-Cleaner for first aid<\/a><br>Botfrei.de:\u00a0<a href=\"https:\/\/www.botfree.eu\/en\/tools\/virus-scanners.html\" data-type=\"URL\" data-id=\"https:\/\/www.botfree.eu\/en\/tools\/virus-scanners.html\" target=\"_blank\" rel=\"noreferrer noopener\">Free and subscription-based virus scanners<\/a><br>Polizei K\u00f6ln:\u00a0<a rel=\"noreferrer noopener\" href=\"https:\/\/www.susii.nrw\/downloads\/2016-10-07%20Brosch%C3%BCre_Computereinbruch_DIN_A_4_HF_4SEITER.pdf\" target=\"_blank\">Brosch\u00fcre Computereinbruch<\/a><br>BSI for Citizens:\u00a0<a rel=\"noreferrer noopener\" href=\"https:\/\/www.bsi-fuer-buerger.de\/BSIFB\/DE\/Risiken\/Schadprogramme\/Viren\/viren_node.html\" target=\"_blank\">Info-Seite zu Viren\u00a0<\/a><br>Avira:\u00a0<a rel=\"noreferrer noopener\" href=\"https:\/\/www.avira.com\/en\/security-wordbook\" data-type=\"URL\" data-id=\"https:\/\/www.avira.com\/en\/security-wordbook\" target=\"_blank\">Virus Glossary<\/a><br>Virustotal:\u00a0<a rel=\"noreferrer noopener\" href=\"https:\/\/virustotal.com\/en\/\" data-type=\"URL\" data-id=\"https:\/\/virustotal.com\/en\/\" target=\"_blank\">Examine data and websites<\/a><\/p>\n<\/div><\/div>\n","protected":false},"excerpt":{"rendered":"<p>Information page for Trojans and virus infections on your computer, smartphone, or tablet. For more information, see Viruses and Trojans in the Enterprise, and the topic Ransomware.<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":704,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"inline_featured_image":false,"footnotes":""},"_links":{"self":[{"href":"https:\/\/www.susii.nrw\/en\/wp-json\/wp\/v2\/pages\/723"}],"collection":[{"href":"https:\/\/www.susii.nrw\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.susii.nrw\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.susii.nrw\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.susii.nrw\/en\/wp-json\/wp\/v2\/comments?post=723"}],"version-history":[{"count":3,"href":"https:\/\/www.susii.nrw\/en\/wp-json\/wp\/v2\/pages\/723\/revisions"}],"predecessor-version":[{"id":816,"href":"https:\/\/www.susii.nrw\/en\/wp-json\/wp\/v2\/pages\/723\/revisions\/816"}],"up":[{"embeddable":true,"href":"https:\/\/www.susii.nrw\/en\/wp-json\/wp\/v2\/pages\/704"}],"wp:attachment":[{"href":"https:\/\/www.susii.nrw\/en\/wp-json\/wp\/v2\/media?parent=723"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}