We're gradually updating threat actor names in our reports to align with the new weather-themed taxonomy. Learn about Microsoft threat actor names
Virus:DOS/Rovnix.D
Aliases: No associated aliases
Summary
Windows Defender detects and removes this threat.
This trojan tries to install other malware, including Trojan:Win32/Claretore.L. It can cause your PC to crash.
If you can't reboot after the crash, you might have to reinstall Windows.
This threat can be installed on your PC by an exploit. Our exploit information page has more information about how this happens.
The following free Microsoft software detects and removes this threat:
- Microsoft Security Essentials or, for Windows 8, Windows Defender
- Microsoft Safety Scanner
However, in some cases you may need to use the free tool Windows Defender Offline to fully clean your PC:
The following articles may help if you're having trouble getting the tool to work:
- Windows Defender Offline: frequently asked questions
- Microsoft's Free Security Tools - Windows Defender Offline
After you've used Windows Defender Offline, you should make sure your security software is up to date and run a full scan:
Even if we've already detected and removed this particular threat, running a full scan might find other malware that is hiding on your PC.
You can also visit the Microsoft virus and malware community for more help.
Update Java
We have seen this threat being distributed by malware that exploits Java vulnerabilities. We recommend you take the following steps once you have reinstalled your operating system and security software:
You should remove older versions of Java, as keeping old and unsupported versions of Java on your PC is a serious security risk:
If you continue to get alerted about this threat, deleting your temporary Java files can help:
It's also important to keep your other software up to date:
Run the Bootrec.exe tool
To completely remove this threat you might need to run the Bootrec.exe tool using your Windows installation CD.
For Windows 8:
- Put your Windows 8 media in the DVD drive and restart your PC.
- Select a language, time and currency, and keyboard or input method, and then click Next.
- Click Repair your computer.
- Click Troubleshoot, then Advanced options.
- Click Command Prompt and then type Bootrec /FixBoot and then presss Enter.
- Type Exit and the press Enter.
- At the Choose an Option screen click Continue.
- Remove the Windows 8 CD from your DVD drive and restart your PC.
For Windows 7:
- Put your Windows 7 media in the DVD drive and restart your PC
- Press any key when you are prompted.
- Select a language, time and currency, and keyboard or input method, and then click Next.
- Click Repair your computer.
- Select the operating system that you want to repair, and then click Next.
- In the SystemRecovery Options dialog box, click Command Prompt.
- Type Bootrec.exe /fixboot, and then press Enter.
- Remove the Windows 7 CD from your DVD drive and restart your PC.