• Some users have recently had their accounts hijacked. It seems that the now defunct EVGA forums might have compromised your password there and seems many are using the same PW here. We would suggest you UPDATE YOUR PASSWORD and TURN ON 2FA for your account here to further secure it. None of the compromised accounts had 2FA turned on.
    Once you have enabled 2FA, your account will be updated soon to show a badge, letting other members know that you use 2FA to protect your account. This should be beneficial for everyone that uses FSFT.

Question detect in Microsoft Defender

Joined
Nov 29, 2024
Messages
55
I ran a full scan with Microsoft Defender on my PC and it found the unique file AppData\Roaming\secure\QtWebKit4.dll (Trojan:Win32/Wacatac.C!ml).

But before using Defender, I had run a full scan with Malwarebytes Free and Kaspersky Free and found nothing. Why did it detect this now?

Is this type of malware the kind that modifies, deletes, or corrupts personal files on the PC Windows 10?

https://www.virustotal.com/gui/file...294ae5f44c551cee971e69dc32f0d7ce14b?nocache=1
 
what cracked games or software you got? or did you open a random pdf in an email?
its possible its a false detection, but imo, its better safe than sorry and ending up losing a crypto wallet or being ransomed....
 
I don't remember

photos from the folder where the file is located

virus Microsoft Defender.png

virus Microsoft Defender2.png
 
so possibly using something cracked or not? it can come from some adobe cracks....
do you use qt for c++ dev work? if so, its probably a false positive.
if not, let defender clean it up.
 
i not programmer and use software c++

I deleted him

My question now is whether this file is actually malware or a false positive.
What is the real name and type of malware?
And does it modify, delete, or corrupt my personal files on my PC?

I performed a full scan with Kaspersky Free, Malwarebytes Free, and AdwCleaner a week or two ago with the software’s updated definitions database, but only Microsoft Defender found AppData\Roaming\secure\QtWebKit4.dll (Trojan:Win32/Wacatac.C!ml)

i posted virus total result sca above
 
It's already been removed. My concern is whether this malware AppData\Roaming\secure\QtWebKit4.dll (Trojan:Win32/Wacatac.C!ml) detected by Microsoft Defender corrupted, deleted, or modified my personal files, especially the compressed ones. Before testing with Defender, I used Kaspersky Free as my main antivirus, but I also scanned with Malwarebytes Free and Adwcleaner, and according to all of them, the system was clean and without anything. I downloaded a lot of games, ISOs, emulators, and programs, totaling 250GB, and copied them to an external hard drive. Only after that did I switch from Kaspersky Free to Defender because Kaspersky Free was no longer free. In the first full scan of Microsoft Defender, this malware was found. So, after cleaning, will I have to download everything again to ensure they are intact and copy everything again to the four external hard drives? On VirusTotal, this same malware found by Defender has several different names for different antiviruses. It's hard to tell what it actually is, but I posted the test results at the beginning of the thread, along with a screenshot of the folder where it's located.

Because they said Kaspersky was one of the best antiviruses, I thought this also applied to the free version, but I think it's only the paid version. I used the free version for years, and from what I see in the file folder, it's been on my PC since 2024.
 
Yea with all the crap you are downloading it is hard to say whether it was real or not. As said cracks often get picked up on scanners. Stop pirating everything, you'll be less stressed.
 
Yea with all the crap you are downloading it is hard to say whether it was real or not. As said cracks often get picked up on scanners. Stop pirating everything, you'll be less stressed.


Yup gone are the golden days when downloading anything had a small chance of poor loot drop. Now I even scan things from believed good sites like Microsoft patches :D or well known manufacture motherboard sites en such.

Then again I was a limewire/ Kazaa kid back in the Ol days.
 
Back
Top