Question malware detected other software

[carlos88]

My question wasn't answered: a Trojan (example: QtWebKit4.dll (Trojan:Win32/Wacatac.C!ml) not identified in the Kaspersky Free full scan with an updated database will also not be recognized and will remain active and hidden in the system, performing operations on files and hackers?

Does real-time protection also require the malware signature (database) used in the scan to protect in real time?

When the malware is in a DLL, what is its active behavior?

[AlexeyK]

1 час назад, carlos88 сказал:

QtWebKit4.dll (Trojan:Win32/Wacatac.C!ml)

Do you understand that MS Defender has not been detecting this file since Friday? Its detection has been added by Kaspersky and some other vendors, but excluded by MS. From the point of view of MS, this file is clean now. If you trust the verdict of MS, you may use this file safely. This detection, which you have already mentioned a hundred times on a dozen forums, is no longer actual.

[harlan4096]

You have been answered at MalwareTIps forum, probably last year while having KFree, it detected and removed the exe file that accompanied that dll file, so the attack was stopped. And that dll file remained there, as I told many times before, as a leftover, not active in memory, and later Defender detected it on demand scan.

[AlexeyK]

42 минуты назад, harlan4096 сказал:

probably last year while having KFree, it detected and removed the exe file that accompanied that dll file, so the attack was stopped.

But I can assume something else. The file wasn't removed by Kaspersky, stole password from Mega, plus modified/deleted/damaged files, and then removed itself. This is also quite possible.

[carlos88]

25 minutes ago, AlexeyK disse:

But I can assume something else. The file wasn't removed by Kaspersky, stole password from Mega, plus modified/deleted/damaged files, and then removed itself. This is also quite possible.

so realtime kaspersky free never protected me from this malware because it stole passwords and modified and deleted files in my hdd pc windows

in 2024 or 2025? this atack cause modified/deleted/damaged files?

Edited 2 hours ago by carlos88

[harlan4096]

That is just an assumption...

[carlos88]

7 minutes ago, harlan4096 disse:

That is just an assumption...

this assuption for files in cloud Mega or files of PC? is related QtWebKit4.dll (Trojan:Win32/Wacatac.C!ml)?

folder this file refere 2024

Edited 2 hours ago by carlos88

[harlan4096]

For both 🙂

[AlexeyK]

11 минут назад, carlos88 сказал:

in 2024 or 2025? this atack cause modified/deleted/damaged files?

In 2025 or in 2024, who knows. Maybe it was this attack, maybe there were a lot of them, or maybe there weren't any attacks. Could be anything.

By the way, attacks are also possible in the future, remember this, install a good quality antivirus.

[carlos88]

Kaspersky Free realtime not block this action atack?cause modified/deleted/damaged files?

 

 

 

Edited 2 hours ago by carlos88

[harlan4096]

Can You recall if by that time KFree detected/blocked any attack? You removed it, so We have no logs nor the quarantine.

[carlos88]

I've sometimes encountered Kaspersky issuing an alert message. I've quarantined the malware, removed it, and restarted my PC. However, these files in these folders were never detected as malware by Kaspersky, so they remain on my PC.

Only this QtWebKit4.dll (Trojan:Win32/Wacatac.C!ml) was never detected as malware by Kaspersky Free, but Microsoft Defender did detect it as malware.

[harlan4096]

Yes, that dll remained in the folder, but some users already told You, that dll can't work by itself... and Yes, Defender defected it, on demand, but not active in memory, so that should answer Your question, please stop asking again and again the same, I won't reply again to repeat the same.

[carlos88]

Yes, Defender disabled the DLL, but was it Kaspersky Free who disabled this malware? Defender only took care of the DLL.

[harlan4096]

Yes, probably was KFree, detected the exe but not the dll, that remained inactive, still as a precaution, change passwords of Your online services.

[AlexeyK]

28 минут назад, carlos88 сказал:

Kaspersky Free realtime not block this action atack?

Maybe blocked, maybe didn't block, maybe there was no attack at all. Perhaps the fortune teller will help you.

[Berny]

23 minutes ago, carlos88 said:

I've quarantined the malware

It looks like you disabled 'Perform recommended actions automatically' 🤔 , anyway without logs I am looking in the dark …

[carlos88]

I configured it so that after detection it will be removed manually.
When it detects it, I see which file it is, send it to quarantine, and remove it within the quarantine.

[Berny]

This of course your free choice , I choose  for the Kaspersky recommended action.

[carlos88]

I usually delete them all when the message of malware found by kaspersky free appears, I like to check the file name and size and location

Edited 1 hour ago by carlos88

[Berny]

I check the Kaspersky reports , I can always reproduce the issue in an isolated isolated environment.

[harlan4096]

Well, I will amicably lock this thread now, enough answers, replies, and suggestions were given, thanks all!