Solved

Accidently downloaded malware?

  • 7 July 2020
  • 1 reply
  • 114 views

I was scrolling through my usual mod site and came across this mod I thought looked interesting. It had some manually verified files but I didn't think much of it since I download mods like that all the time. 

I hit download and extracted the folder but before placing into the mod folder I got a warning message saying a threat has been identified. It came up as "Win32.LocalInfect.2". 

I've gotten warning messages like this before but my computer deleted them before they could finish downloading, however this time it downloaded onto my computer. I immediately deleted the file and it's extracted contents before running a virus scan and a full windows defender scan. 

Both came out clean and upon further inspection I noticed the mod was an exe file and the only one posted by the author so it was more like a failure in observation on my part. I'm a safe for now or is there still more I can do? 

icon

Best answer by TripleHelix 7 July 2020, 21:00

Hello @Danny1738 

 

It sounds like your fine as it didn’t get a chance to execute but if you want Check the Threat Log see here: https://docs.webroot.com/us/en/home/wsa_pc_userguide/wsa_pc_userguide.htm#UsingReportsAndViewers/SavingThreatLogs.htm%3FTocPath%3DUsing%2520Reports%2520and%2520Viewers%7C_____2

 

Also save a scan log and look near the bottom and it will tell you what Webroot did with that file: https://docs.webroot.com/us/en/home/wsa_pc_userguide/wsa_pc_userguide.htm#UsingReportsAndViewers/SavingScanLogs.htm%3FTocPath%3DUsing%2520Reports%2520and%2520Viewers%7C_____1

 

If you can please post the MD5 hash so I can look it up online!

 

Also you can go here and delete the files here: https://docs.webroot.com/us/en/home/wsa_pc_userguide/wsa_pc_userguide.htm#ManagingQuarantine/ManagingQuarantinedItems.htm%3FTocPath%3DManaging%2520Quarantine%7C_____1

 

If you want a free Security Check you can always Submit a Support Ticket and they will let you know that all is safe or not and they will help you.

 

Note: When submitting a Support Ticket, Please wait for a response from Support. Putting in another Support Ticket on this problem before Support responses will put your first Support Ticket at the end of the queue and support can take up to 48 hours to reply or a little longer because of COVID-19.

 

Thanks,

View original

1 reply

Userlevel 7

Hello @Danny1738 

 

It sounds like your fine as it didn’t get a chance to execute but if you want Check the Threat Log see here: https://docs.webroot.com/us/en/home/wsa_pc_userguide/wsa_pc_userguide.htm#UsingReportsAndViewers/SavingThreatLogs.htm%3FTocPath%3DUsing%2520Reports%2520and%2520Viewers%7C_____2

 

Also save a scan log and look near the bottom and it will tell you what Webroot did with that file: https://docs.webroot.com/us/en/home/wsa_pc_userguide/wsa_pc_userguide.htm#UsingReportsAndViewers/SavingScanLogs.htm%3FTocPath%3DUsing%2520Reports%2520and%2520Viewers%7C_____1

 

If you can please post the MD5 hash so I can look it up online!

 

Also you can go here and delete the files here: https://docs.webroot.com/us/en/home/wsa_pc_userguide/wsa_pc_userguide.htm#ManagingQuarantine/ManagingQuarantinedItems.htm%3FTocPath%3DManaging%2520Quarantine%7C_____1

 

If you want a free Security Check you can always Submit a Support Ticket and they will let you know that all is safe or not and they will help you.

 

Note: When submitting a Support Ticket, Please wait for a response from Support. Putting in another Support Ticket on this problem before Support responses will put your first Support Ticket at the end of the queue and support can take up to 48 hours to reply or a little longer because of COVID-19.

 

Thanks,

Reply