You're viewing a topic that has been removed.
logo elektroda
logo elektroda
X
logo elektroda

Microsoft Defender Detected Trojan:Win32/Wacatac.C!ml in secureQtWebKit4.dll, Malwarebytes

aranbadan87 414 4
ADVERTISEMENT
  • #1 21715314
    aranbadan87
    Level 2  
    I ran a full scan with Microsoft Defender on my PC and it found the unique file AppData\Roaming\secure\QtWebKit4.dll (Trojan:Win32/Wacatac.C!ml).

    But before using Defender, I had run a full scan with Malwarebytes Free and Kaspersky Free and found nothing. Why did it detect this now?

    Is this type of malware the kind that modifies, deletes, or corrupts personal files on the PC Windows 10?

    https://www.virustotal.com/gui/file/935cd9070...294ae5f44c551cee971e69dc32f0d7ce14b?nocache=1
    AI: Have you recently installed any new programs or noticed any unusual behavior on your PC before this detection?
    no
    AI: What action did Microsoft Defender take with the QtWebKit4.dll file—was it quarantined, deleted, or is it still present on your system?
    quarantined
    Pursuant to Art. 20 of the Digital Services Act (DSA), you can make an appeal to the internet platform provider bok@elektroda.pl or Contact form
  • ADVERTISEMENT
  • #2 21715767
    BlackWhite46
    Level 11  
    aranbadan87 wrote:
    But before using Defender I ran a full scan with Malwarebytes Free and Kaspersky Free and found nothing. Why did it detect it now?
    .
    Antiviruses are not identical, there are differences between them, including how they detect certain files.
    It is also possible that the other software was not fully up to date, so this file was not in their database.
  • ADVERTISEMENT
  • #3 21715963
    aranbadan87
    Level 2  
    >>21715767 My question now is whether this file is actually malware or a false positive.
    What is the real name and type of malware?
    And does it modify, delete, or corrupt my personal files on my PC?

    I performed a full scan with Kaspersky Free, Malwarebytes Free, and AdwCleaner a week or two ago with the software’s updated definitions database, but only Microsoft Defender found AppData\Roaming\secure\QtWebKit4.dll (Trojan:Win32/Wacatac.C!ml)

    i posted virus total result sca above
  • ADVERTISEMENT
  • #4 21716538
    aranbadan87
    Level 2  
    It’s already been removed. My concern is whether this malware AppDataRoamingsecureQtWebKit4.dll (Trojan:Win32/Wacatac.C!ml) detected by Microsoft Defender corrupted, deleted, or modified my personal files, especially the compressed ones. Before testing with Defender, I used Kaspersky Free as my main antivirus, but I also scanned with Malwarebytes Free and AdwCleaner, and according to all of them, the system was clean and without anything. I downloaded a lot of games, ISOs, emulators, and programs, totaling 250GB, and copied them to an external hard drive. Only after that did I switch from Kaspersky Free to Defender because Kaspersky Free was no longer free. In the first full scan of Microsoft Defender, this malware was found. So, after cleaning, will I have to download everything again to ensure they are intact and copy everything again to the four external hard drives? On VirusTotal, this same malware found by Defender has several different names for different antiviruses. It’s hard to tell what it actually is, but I posted the test results at the beginning of the thread, along with a screenshot of the folder where it’s located.

    Because they said Kaspersky was one of the best antiviruses, I thought this also applied to the free version, but I think it’s only the paid version. I used the free version for years, and from what I see in the file folder, it’s been on my PC since 2024.
ADVERTISEMENT