Copy link to clipboard
Copied
Hello,
We are March 20, 2023, around 4:00 PM ETC
So I downloaded and tried to install Adobe Reader. I made sure it was from the official website, as I already have a story with a third-party one. So it was no doubt from get.adobe.com. Halfway through installation, Windows Defender blocked it because it found the Wacatac B, a serious threat, attached to the .exe file. The affected file was rooted in: C:/PRogramData/Adobe/Temp/7682/installer.bin. It was deleted at that moment.
Just in case, I went back and double-checked my browsing history. And again, that was get.adobe.com.
Did that happen to anyone, how could this be?
I think the threat was blocked, but I'm running a full scan through my laptop at the moment, with Windows Defender again, and with Malware Bytes later. I will edit if further detail is found.
Copy link to clipboard
Copied
This error is the result of an heuristic analysis of your virus scanner and only means, that it has detected some behavior in the app in question, that it interprets as bad. But that doesn't mean that something is bad. This is just the interpretation of the virus scanner, and you can't take it's results always as 100 % correct. Official and malicious apps are often do the same things, but for different purposes. This is why it is so difficult to distinguish between malicous and good.
Copy link to clipboard
Copied
Definitely something going on here. An item named Adobe Reader DC appeared on my external flash drive and then dissapeared.