This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Not sure if just deleting is enough? [Closed]

3 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Hi

 

I was browsing free Wordpress themes and have been predominantly going through Wordpress.com, but one preview must have led me to another page that automatically downloaded a setup.exe file. It's still sitting in my Downloads folder, unopened, but I uploaded it to VirusTotal and it shows me that it's an adware/trojan.

 

I can't see any dodgy file in my browsing history - it just seems to have disappeared. I couldn't open the last opened tab. Pages external to Wordpress.com/.org were: ThemeCobra.com, ThemesKingdom.com, ElegantThemes.com, WpExplorer-Demo.com, WPThemeSpot.com, DesignsCrazed.org. None of these flag anything on VirusTotal or McAfee, so I think it may have been a pop-under. Oddly enough…looking in my browsing history, there is nothing at all in the last couple of hours that stands out as being at all unusual or spammy.

 

I've had my mac for over a year and have never had a file download like this. I have my firewall on and only allow Apple/approved publisher installs. However, I am not sure if I need to do anything other than delete the file.

 

The file was

https://www.virustotal.com/en/file/2d3d40218fbaadb8fc748276efd74e284812b8a5ef776daa0a34440e396f4532/analysis/1431601159/

 

Its MD5 is 8f5fbe44ded37067f90f3f0094cf0906

 

The results it returned were:

 

 

AVG Downloader.GHX 20150514

AVware OutBrowse (fs) 20150514

AhnLab-V3 PUP/Win32.OutBrowse 20150513

Avast Win32:OutBrowse-AX [PUP] 20150514

Bkav W32.HfsAdware.1487 20150513

DrWeb Trojan.OutBrowse.413 20150514

ESET-NOD32 a variant of Win32/OutBrowse.CB potentially unwanted 20150514

Malwarebytes PUP.Optional.BundleInstaller.A 20150514

McAfee Adware-OutBrowse.g 20150514

McAfee-GW-Edition BehavesLike.Win32.Suspicious.hc 20150514

Qihoo-360 HEUR/QVM30.1.Malware.Gen 20150514

Sophos OutBrowse Revenyou 20150514

VIPRE OutBrowse (fs) 20150514

 

 

Is it safe to just delete the unopened file or do I need to do something more to safeguard my computer?

 

Also, if it's a Windows file, can it harm my Mac? :(

Hi crumpet,

 :welcome:

My name is Tomk. I would be glad to take a look at your log and help you with solving any malware problems. HijackThis logs can take a while to research, so please be patient and I'd be grateful if you would note the following:

  • I will be working on your Malware issues, this may or may not, solve other issues you have with your machine.
  • The fixes are specific to your problem and should only be used for the issues on this machine.
  • Please continue to review my answers until I tell you your machine appears to be clear. Absence of symptoms does not mean that everything is clear.
  • It's often worth reading through these instructions and printing them for ease of reference.
  • If you don't know or understand something, please don't hesitate to say or ask!! It's better to be sure and safe than sorry.
  • Please reply to this thread. Do not start a new topic.

 

It looks like that is just a PUP (possibly unwanted program) but if installed it will bring you adware. :pullhair:

 

You are safe to delete it. 

 

I do not know if a "windows" file can effect a mac.  My thought is that if the setup file will run on the mac… then the program will be installed - and bring whatever harm it brings.

 

I am not familiar enough with mac's to be of more help to you.  If this was a windows machine I'd get a log from you to see if I could see anything else.  Because it's a mac… all I can say is I'd run whatever security program you have installed.  If you have McAfee, McAfee will remove it.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI