Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

downloaded a file (exe) but did not(?) open it - would i still be infected?


  • Please log in to reply
1 reply to this topic

#1 seraphodiabolus

seraphodiabolus

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:05:30 PM

Posted 21 April 2014 - 03:43 PM

I tried to download a WinRAR program using the google search bar.

The first link (actually an ad, but I was not being careful enough) was

WinRAR Free Download (from software-watcher.com)

winrar.software-watcher.com

I thought it was "legit" so clicked the download. I then started the installation but suddenly realized the file icon looked "unfamiliar". I stopped the installation half-way and cancelled it (I was prompted with "the installation is not complete" and asked if I really want to cancel it).

 

I went back to google search and saw the legitimate WinRAR from www.rarlab.com.

 

Google search suggests software-watcher.com sends out adwares through free downloaded programs (?not confirmed).

 

I've since deleted the "WinRAR" from software-watcher but am not sure if any adware has been installed and activated. As the program was installed in a company's computer (and I am NOT the administrator), I do not know if the computer is equipped with anti-adware programs.

 

Before I ask our IT guys to check the computer, I am soliciting input from experts on this forum. 

 

Any input will be greatly appreciated. Thank you very much.



BC AdBot (Login to Remove)

 


#2 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:07:30 AM

Posted 21 April 2014 - 10:43 PM

Google search suggests software-watcher.com sends out adwares through free downloaded programs (?not confirmed).

Confirmed Now !!!

Sweet IM, Program and Toolbar and chances of other unwanted adware programs, will be downloaded from software-watcher.com.

They do mention it on their site, if you take the time to read the fine print, regardless of what you do with downloaded programs.

These programs stay installed even if you delete all downloaded programs ..........

 

I would run these 2 programs first -

 

Please download AdwCleaner by Xplode and save to your Desktop.
* NOTE : Please close or save all work, as the computer will be Rebooted
*  Double-click on AdwCleaner.exe to run the tool.
* Vista/Windows 7/8 users right-click and select Run As Administrator.

* Click on the Scan button. (only once)
* AdwCleaner will begin...be patient as the scan may take some time to complete.
* After the scan has finished, click on the Report button...a logfile (AdwCleaner[R0].txt) will open in Notepad for review.
* Click on the Clean button. (only once)
* Press OK when asked to close all programs and follow the onscreen prompts.
* Press OK again to allow AdwCleaner to restart the computer and complete the removal process.
* After rebooting, a logfile report (AdwCleaner[S0].txt) will open automatically.

Only if you wish to, then please continue -
* Copy and paste the contents of that logfile in your next reply.
* A copy of all logfiles are saved in the C:\AdwCleaner folder which was created when running the tool.

 

 

Next -

Shut down your protection software now to avoid potential conflicts

* How To Temporarily Disable Your Anti-virus
* Please download Junkware Removal Tool to your desktop.
* Run the tool by double-clicking it.
* If you are using Windows Vista, 7, or 8, right click JRT.exe and select "Run as Administrator".
* The tool will open and start scanning your system.
* Please be patient as this can take a while to complete depending on your system's specifications.

As Above. If you wish to continue -
* On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
* Post the contents of JRT.txt into your next message.






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users