Trojan:Win32/Dynamer!dtc or Trojan:Win32/Sisproc Virus Detected on a Microlink Computer

Problem

On a computer supplied by Microlink PC, Microsoft Security Essentials detects a virus named “Trojan:Win32/Dynamer!dtc” or “Trojan:Win32/Sisproc” in a file named Win7_EULA.exe which is located in D:\DO NOT DELETE\System_Backup.wim.

You are unable to remove or disinfect the file.

Cause

The file is safe but has been wrongly detected by Microsoft Security Essentials (and possibly other virus scanners) as a virus due to how it was originally compiled. It is the license agreement contained inside the backup of your computer which you have to accept on the first run of the computer. The program wasn’t detected as a virus until Summer 2011.

As of 16 August 2011, the EULA application has been reprogrammed and ever since this change, has stopped being detected as a virus. However, on machines loaded before this date you will need to add this file to an exceptions list using the solution below.

Solution

To stop the file from appearing in future scans of Microsoft Security Essentials, you can exclude it by following these steps:

  1. Click the Start button.
  2. Click All Programs.
  3. Click on “Microsoft Security Essentials” to open the program.
  4. Click the Settings tab.
  5. On the left, click on “Excluded files and locations”.
  6. In the first input box, type “D:\DO NOT DELETE” (without quotes) and press Enter.
  7. Click the “Save changes” button at the bottom of the window.
If you are Microlink customer and have any further queries then you can email us or contact Microlink.

2 comments

  1. many thanks for your help this morning! perfect in just a few minutes….another satisfied customer.

  2. I did as you wrote, but Microsoft Security Essential signals it again.
    Not only but now Security Essential also signals the presence of another virus: HackTools: Win32/Keygen.
    About Security Essential does not accept the characters ” \

    Giuanpadan

Leave a comment

Your email address will not be published. Required fields are marked *