Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Generic User Avatar

Doubt file is virus or no?


  • This topic is locked This topic is locked
3 replies to this topic

#1 cloudff7

cloudff7

  •  Avatar image
  • Members
  • 83 posts
  • OFFLINE
  •  
  • Local time:01:08 AM

Posted 09 October 2025 - 06:03 PM

A week or two ago, I ran a full scan with Malwarebytes Free, Kaspersky Free, and ADWCleaner Free, and no malicious items were found. Yesterday, I ran a full scan with Microsoft Defender, and it found a Trojan in AppData\Roaming\secure\QtWebKit4.dll (Trojan:Win32/Wacatac.C!ml). This file has been on my PC since 2024.
Below, I scanned the file with Virus Total.
 
 
Is this file legitimate malware? What type of malware is it? Is it malware that modifies, deletes, and corrupts personal files on the HDD and SSD?
 
Screenshots of folders:
 
 
 
 


BC AdBot (Login to Remove)

 


#2 quietman7

quietman7

    Bleepin' Gumshoe


  •  Avatar image
  • Global Moderator
  • 65,330 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:11:08 PM

Posted 09 October 2025 - 06:24 PM

Microsoft Naming scheme Example

 

Trojan:Win32/Wacatac.C!ml detection:

  • Trojan indicates Type of malware...describes what the malware does on your computer.
  • Win32/ indicates Platform...compatible operating system (such as Windows, macOS, Android) for the malware.
  • Wacatacl indicates Family...grouping of malware based on common characteristics.
    letter C indicates Variant...used sequentially for every distinct version of a malware family.
  • !ml indicates !Suffixes...a suffix that begins with ! is an indicator used by Microsoft internally.

If you need individual assistance from our experts with finding/removing a possible malware infection, checking for possible hacking or just need a second opinion, there are advanced tools which can be used to investigate but they are not permitted in this forum. If you need such help, please follow the instructions in the Malware Removal and Log Section Preparation Guide. After doing that, they should start a new topic and post their FRST logs in the Virus, Trojan, Spyware, and Malware Removal Logs Forum, NOT here, for assistance by the Malware Response Team.
 
If you choose to follow the above instructions, please reply back in this thread with a link to the new topic.


.
.
Microsoft MVP Alumni 2023Windows Insider MVP 2017-2020, MVP Reconnect 2016-2023

Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITEUnified Network of Instructors and Trusted Eliminators
Retired Police Officer, Federal Agent and Coast Guard Chief

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif


#3 cloudff7

cloudff7
  • Topic Starter

  •  Avatar image
  • Members
  • 83 posts
  • OFFLINE
  •  
  • Local time:01:08 AM

Posted 09 October 2025 - 06:50 PM

I posted the logs several hours ago and no one responds



#4 quietman7

quietman7

    Bleepin' Gumshoe


  •  Avatar image
  • Global Moderator
  • 65,330 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:11:08 PM

Posted 09 October 2025 - 06:52 PM

Your FRST log(s) is posted here and you are already receiving help.
 
Since you are now receiving help from the Malware Response Team, you should NOT make further changes to your computer (install/uninstall programs, use special fix tools, delete files, edit the registry, etc) unless advised by a Malware Response Team member...nor should you continue to ask for help elsewhere. Doing so can result in system changes which may not show it the log(s) you already posted. Further, any modifications you make on your own may cause confusion for the member assisting you and could complicate the investigative process or make things worst which would extend the time it takes to clean your computer.
 
The Malware Response Team should be the only members that you take advice from, until they have verified your system is clean.
 
To avoid confusion, I am closing this topic.
 
Good luck.
The BC Staff 

.
.
Microsoft MVP Alumni 2023Windows Insider MVP 2017-2020, MVP Reconnect 2016-2023

Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITEUnified Network of Instructors and Trusted Eliminators
Retired Police Officer, Federal Agent and Coast Guard Chief

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif





1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users