Този сайт ще има ограничена функционалност, докато се извършва тече неговата поддръжка. Ако дадена статия не може реши проблема ви и искате да зададете въпрос, нашата общност е готова да ви помогне на @firefox в Twitter и /r/firefox в Reddit.

Търсене в помощните статии

Избягвайте измамите при поддръжката. Никога няма да ви помолим да се обадите или изпратите SMS на телефонен номер или да споделите лична информация. Моля, докладвайте подозрителна активност на "Докладване за злоупотреба".

Научете повече

Windows Defender detected Trojan:Script/Wacatac.H!ml

  • 6 отговора
  • 5 имат този проблем
  • Последен отговор от 2

more options

Hello,

I just did a full windows defender scan and it turns out Trojan:Script/Wacatac.H!ml popped up when it was done and it said the files affected were:

containerfile: C:\Users\User\AppData\Local\Mozilla\Firefox\Profiles\.default-release\cache2\entries\InsertHashHere

file: C:\Users\User\AppData\Local\Mozilla\Firefox\Profiles\.default-release\cache2\entries\InsertHashHere->(GZip)

I removed the hashes or whatever they were behind the entries, I was wondering if this was a false positive? I didn't notice any slowed down or hacked accounts, also windows defender quarantined it. I've also reinstalled Firefox and deleted all folders associated with Mozilla in AppData.

Hello, I just did a full windows defender scan and it turns out Trojan:Script/Wacatac.H!ml popped up when it was done and it said the files affected were: containerfile: C:\Users\User\AppData\Local\Mozilla\Firefox\Profiles\.default-release\cache2\entries\InsertHashHere file: C:\Users\User\AppData\Local\Mozilla\Firefox\Profiles\.default-release\cache2\entries\InsertHashHere->(GZip) I removed the hashes or whatever they were behind the entries, I was wondering if this was a false positive? I didn't notice any slowed down or hacked accounts, also windows defender quarantined it. I've also reinstalled Firefox and deleted all folders associated with Mozilla in AppData.

Всички отговори (6)

more options

Anything found in the Cache is harmless if left untouched as it will be overwritten over time as Cache is used or be deleted if you clear the Cache.

We had an article about this, but is was for old Firefox versions and the steps for clearing the cache are outdated.

"Clear the Cache":

Полезно?

more options

Thank you very much,

So basically unless I didn't open it it's probably just a false positive?

I've also cleared my cache and reinstalled Firefox from scratch.

Полезно?

more options

My windows defender just found exactly the same trojan in exactly the same location. Followed the steps above, is anyone able to confirm if this was something that was downloaded as browsing (such as an object on a website) and IS a trojan or if this is just a false positive on the part of windows defender?

Полезно?

more options

Funkyshark88 said

My windows defender just found exactly the same trojan in exactly the same location. Followed the steps above, is anyone able to confirm if this was something that was downloaded as browsing (such as an object on a website) and IS a trojan or if this is just a false positive on the part of windows defender?

yeah, also the weird part is that it only happends on 1 website for me.

Променено на от 2

Полезно?

more options

oops why did it sent so many times

Променено на от 2

Полезно?

more options

Funkyshark88 said

My windows defender just found exactly the same trojan in exactly the same location. Followed the steps above, is anyone able to confirm if this was something that was downloaded as browsing (such as an object on a website) and IS a trojan or if this is just a false positive on the part of windows defender?

I've did some testing and figured out which website was causing it (for me atleast) it was twitch.tv the streaming platform, whenever I visited that website and did a full windows defender scan it detected it. Its most likely a false positive or the website might have been hacked (which i highly doubt) also I would recommend you to run a full windows defender, MSERT, malwarebytes scan just to be sure ur not infected. I avoided the website for now and it hasnt appeared again.

Променено на от 2

Полезно?

Задаване на въпрос

You must log in to your account to reply to posts. Please start a new question, if you do not have an account yet.