lainchan / sec

PUA:WIN32/Packunwan

This · 2023-11-09 04:39
Lain, i need your help. I have downloaded from rutracker. When i opened the .txt file with installing instructions, it mentioned " there is a virus but its minor and harmless, the virus is needed to run the program ". I then looked at the rutracker thread which is here : https://rutracker.org/forum/viewtopic.php?t=6336218 On the bottom of the page, there is a reddit link to : https://www.reddit.com/r/Piracy/comments/120xk62/psa_ftuapps_removed_from_megathread_for/ What do i do. I have run Windows defender, and rogue killer. Both say the computer is clean after the complete system scan. But, windows defender still says " PUA:WIN32/Packunwan" and when i click to remove it, it just doesn't and still says the same. Yet, Rogue-killer says my computer is perfectly clean, and so does windows defender after running a scan. There is no performance drop with the computer, i also haven't noticed anything else, besides this message on windows defender. Maybe lainon knows more, and wants to help me.
Project 2501 · 2023-11-09 05:46
Maybe it's just defender freaking out for nothing. It did that to me once on an old 2014-ish copy of cheat engine once in recent times. You can show more info and see to which file windows think is problematic. its most likely going to be the file from rutracker and might be just a false alarm.
кани · 2023-11-09 06:12
holy fuarrrk are You telling me that Windows DEFENDER bleep a false positive?!!!!!
This · 2023-11-09 07:10
>>22846 The file it links to does not exist. Whats so strange is, I cant get the message away. It just sticks there no matter what i do. And when i click to remove it, by windows defender, it still remains.
k4rm4c0m4 · 2023-11-09 10:03
>>22848 It doesn't exist because it is quarantined. Go into your Virus & Threat Protection (Viren- & Bedrohungsschutz), you see under Current Threats (Bedrohungen oder Probleme kp wie msoft das übersetzt) currently quarantined files which you can either purge entirely or allow temporarily/permanently on your system.
This · 2023-11-09 10:36
>>22849 Thing is, when i purge them. It just shows it up again. Its as if defender cant purge the file. An just shows the message again after me clicking purge.
This · 2023-11-09 12:50
>>22850 I deleted the whole dir, in which it said was the file. Rouge killer cant find anything, and defender still tells me about the deleted directory and the file in there. Which is all gone now. I dont know, maybe someone recommend me an antivirus that is proven and known against Packunwan. But i shouldn't be surprised, even that i never had problems with links from Rutracker. Anyone can tell me more ?
Leto Atreides I · 2023-11-09 17:22
>>22851 If you're worried about it, reformat. If you're not, reformat anyway. Nice and clean.
Donna Hawthorne · 2023-11-11 20:07
>>22852 This is the only real solution if you suspect at all that the device is compromised. There's no way you can trust it anymore. Most likely though it's just the antivirus being dumb. Don't pirate stuff on a windows machine (why are you using windows for anything other than running required software for something?)?