Windows Defender just informed me it had placed the trojan Win32/Skeeyah.A!bit in quarantine. It was first found yesterday and now again today. How did I contract that? My download history reveals nothing noteworthy imho:

  • A PDF file via Windows 10 Mail app (9 days ago)
  • verysleepy-cs-0.90.exe (13 days ago)
  • A Visual Studio 2015 plugin, HideMenu (14 days ago)
  • MineCraft installer (17 days ago)
  • A Word .docx which I opened in OpenOffice Writer (23 days ago)
  • camstudio.exe (36 days ago)

Could it really be one of these? Or something even further back? The most recent Windows Defender update for Skeeyah.A!bit came out two months ago, so it should have infected me no more than two days back when I got the alert, right? Could I have contracted the trojan via some Windows 10 vulnerability? I should note that my other family members use standard Windows accounts, only I have administrator rights. Thanks for shedding some light on this, I'm totally clueless!

  • You're linking directly to these exes and installers. Why? Would you like us to install them and see if we get it, too? I would accept links to the pages where you got them from but not the exes themselves. – Octopus Sep 14 '16 at 18:12
  • @Octopus: Srsly? IE will warn you and n00bs like you if you accidentally click the link. (If you're more advanced than that I'm sure you can find the pages in five seconds using the so-called search engine called "google.") – Jonas Byström Sep 14 '16 at 18:48
  • Jonas, chill out a bit there champ. – Kaizerwolf Sep 14 '16 at 19:46
  • @Kaizerwolf: Sorry, but when it started out, stackexchange used to be about asking serious questions in search of intelligent answers and there were hardly any cheesy knuckleheads about questioning the details. It was all about helping each other understand. "Why link directly to .exe's" is not helpful in the slightest. I've been here 6x longer than you and feel the original intent often gets lost these days. Does that make sense to you, or do you think I'm just a grumpy chump? – Jonas Byström Sep 14 '16 at 20:33
  • No, I think you're being a "grumpy chump". The comments are for questions and clarifications, not answers. Octopus' comment was just that; a comment, and you blew it WAY out of proportion. – Kaizerwolf Sep 14 '16 at 20:54

Any website could have been infected by malware and when you entered into one of those there was a silent download that infected you. Simply as that. It could be that you had a port open and someone scanned it and sent malware through it. You could have been infected before, or some of the devices into your same network could have been infected. The other pcs in your network could be infected or any usbs. By the way... windows defender wont do much to help you... you better start using better security measures.

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Not the answer you're looking for? Browse other questions tagged or ask your own question.