Hi
I was browsing free Wordpress themes and have been predominantly going through Wordpress.com, but one preview must have led me to another page that automatically downloaded a setup.exe file. It's still sitting in my Downloads folder, unopened, but I uploaded it to VirusTotal and it shows me that it's an adware/trojan.
I can't see any dodgy file in my browsing history - it just seems to have disappeared. I couldn't open the last opened tab. Pages external to Wordpress.com/.org were: ThemeCobra.com, ThemesKingdom.com, ElegantThemes.com, WpExplorer-Demo.com, WPThemeSpot.com, DesignsCrazed.org. None of these flag anything on VirusTotal or McAfee, so I think it may have been a pop-under. Oddly enough…looking in my browsing history, there is nothing at all in the last couple of hours that stands out as being at all unusual or spammy.
I've had my mac for over a year and have never had a file download like this. I have my firewall on and only allow Apple/approved publisher installs. However, I am not sure if I need to do anything other than delete the file.
The file was
Its MD5 is 8f5fbe44ded37067f90f3f0094cf0906
The results it returned were:
AVG Downloader.GHX 20150514
AVware OutBrowse (fs) 20150514
AhnLab-V3 PUP/Win32.OutBrowse 20150513
Avast Win32:OutBrowse-AX [PUP] 20150514
Bkav W32.HfsAdware.1487 20150513
DrWeb Trojan.OutBrowse.413 20150514
ESET-NOD32 a variant of Win32/OutBrowse.CB potentially unwanted 20150514
Malwarebytes PUP.Optional.BundleInstaller.A 20150514
McAfee Adware-OutBrowse.g 20150514
McAfee-GW-Edition BehavesLike.Win32.Suspicious.hc 20150514
Qihoo-360 HEUR/QVM30.1.Malware.Gen 20150514
Sophos OutBrowse Revenyou 20150514
VIPRE OutBrowse (fs) 20150514
Is it safe to just delete the unopened file or do I need to do something more to safeguard my computer?
Also, if it's a Windows file, can it harm my Mac? ![]()