Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Windows Defender says I have Trojan: Win32/BlueTeal.B!rfn I can manually get as far as; cache2/entries but that's where it ends. Please help!

  • 5 replies
  • 1 has this problem
  • 15 views
  • Last reply by newsie2000

Every time I run a full scan it comes up. I remove it and it is back again upon the next full scan (it does not show up on the quick scan.) I just installed Malwarebytes; however it does not find it, then I run a full scan for Defender it's there again. Here is a print-screen of the entire destination. I use Windows 8.1 if that matters. Please help! Thanks for your time.

Also what is cache2? Can I just clear it all out? Thanks again.

Every time I run a full scan it comes up. I remove it and it is back again upon the next full scan (it does not show up on the quick scan.) I just installed Malwarebytes; however it does not find it, then I run a full scan for Defender it's there again. Here is a print-screen of the entire destination. I use Windows 8.1 if that matters. Please help! Thanks for your time. Also what is cache2? Can I just clear it all out? Thanks again.
Attached screenshots

Chosen solution

That is a file in the Firefox disk cache.

You can clear the disk cache via "Clear Recent History" or manually remove the cache2 folder. See the about:cache page and the about:profiles page for the location of the cache.

Location used for the disk cache and other temporary files in "AppData\Local" (Local Directory on about:profiles).

  • C:\Users\<user>\AppData\Local\Mozilla\Firefox\Profiles\<profile>\
  • ~/Library/Caches/Firefox/Profiles/
Read this answer in context 👍 1

All Replies (5)

Separate Security Issue, please update your Flash 27.0 r0 by removing it with https://helpx.adobe.com/flash-player/kb/uninstall-flash-player-windows.html reinstall with Flash Player Version: 30.0.0.113 Current Version https://get.adobe.com/flashplayer/otherversions/ Step 1: Select Operating System Step 2: Select A Version (Firefox, . . . .) Note: Other software is offered in the download. <Windows Only>

Please use more than 1 scanner as each uses diff tech :

Save your Report and google each before deleting anything as do not want to delete something you need, If need help :

Post in only 1 forum, then wait.

Please let us know if this solved your issue or if need further assistance.

Chosen Solution

That is a file in the Firefox disk cache.

You can clear the disk cache via "Clear Recent History" or manually remove the cache2 folder. See the about:cache page and the about:profiles page for the location of the cache.

Location used for the disk cache and other temporary files in "AppData\Local" (Local Directory on about:profiles).

  • C:\Users\<user>\AppData\Local\Mozilla\Firefox\Profiles\<profile>\
  • ~/Library/Caches/Firefox/Profiles/

In addition to clearing the cache, make sure your Windows Defender files are up-to-date as Microsoft has been fine-tuning this detection to reduce false positives: https://www.bleepingcomputer.com/news/security/windows-defender-detecting-legitimate-files-as-trojan-win32-blutealbrfn/

Thanks to everyone for your replies. Sorry for the slow reply, as I still had Malwarebytes on my computer for a 2 week trial. I just went back to Defender and "the blue-teal" was not there upon completing a full scan. Cor-el's answer was the best for me at the time (although flashplayer also updated within this time too) as I always clear my cookies/cache/ etc daily; just knowing that it was a Firefox file (and false positive) eased my mind. Thanks again!