Forum Discussion
Question many malwares types and files
Not every kind of malware is made to damage or destroy your files. Some are created to steal information, spy on your activity, or download other harmful software. Only a few specific kinds of malware are designed to corrupt, delete, or overwrite data. These include wipers that intentionally erase files, viruses that infect and damage existing files, and ransomware that encrypts files and makes them unusable until you pay a ransom. Most other types of malware do not destroy data on purpose, though in theory any malicious code could be written to do so.
In your examples, QtWebKit4.dll which is detected as Trojan Win32 Wacatac C ml is a Trojan downloader. Its main job is to fetch and install other pieces of malware on the system rather than damaging files. Caller.exe that DrWeb detects as Trojan DownLoader47 36298 is also a downloader that brings in more malware from the internet. The other Caller.exe which VBA32 flags as TrojanPSW Rhadamanthys belongs to the Rhadamanthys family, a password stealing Trojan that targets browsers, crypto wallets, and stored credentials. It focuses on stealing information rather than deleting or corrupting data.
So in simple terms, the malware you mentioned are Trojans used to install or steal information. They compromise privacy and security but are not meant to destroy or wipe files from your computer.
Please hit like if you like the solution.
Is this information from experts or AI?
I used Kaspersky Free and Malwarebytes Free for many years, and their scan never detected AppData\Roaming\Secure\QtWebKit4.dll (Trojan:Win32/Wacatac.C!ml). When I activated Microsoft Defender, a complete scan detected a file called AppData\Roaming\Secure\QtWebKit4.dll (Trojan:Win32/Wacatac.C!ml).
I sent it to Virus Total.
/file/935cd9070679168cfcea6aea40d68294ae5f44c551cee971e69dc32f0d7ce14b/detection
Inside this Secure folder, there's another folder, and inside it, there's the Caller.exe file. If I compress it, Defender says it's Trojan:Win32/Wacatac.C!ml. I removed it, but the full Defender scan didn't detect this EXE as malicious.
I sent it to VT.
/file/d2251490ca5bd67e63ea52a65bbff8823f2012f417ad0bd073366c02aa0b3828
I wondered, before Microsoft Defender detected it, this malware was deleting, corrupting, or modifying various files on my PC?