About 10–11 months ago, I visited a website that Kaspersky immediately blocked after detecting a potential malware download, and I was kicked off the site. I'm not sure whether the alert appeared when I first opened the page or after I clicked a link on it. I don't remember intentionally running or opening any downloaded file.
At the time, I only did a quick search about the incident and didn't immediately clear my Chrome cache or run a full scan. Around three months later, I cleared Chrome's cache and ran a full Kaspersky scan, which found nothing. Since then, I've deleted the cache several more times and run two additional thorough scans, also with clean results. I'm now much more careful about downloads and don't use pirated software.
I haven't noticed anything clearly suspicious. My computer was slow briefly, but that coincided with losing Ethernet access and having unreliable Wi-Fi. Task Manager doesn't show any process using unusually high CPU or memory for long periods, the GPU temperature is normal, and I haven't found suspicious files.
Recently, I noticed a file called `dingo.dingo_ship.win32` in `AppDataLocal`. A quick search made it seem related to the original Kaspersky alert. Does its presence mean the malware bypassed the antivirus, or could it simply be a leftover detection or quarantine-related file? After so much time and several clean scans, is there anything else I should do, or is it reasonable to consider the computer safe?
4 Answers
If you only visited the site and the antivirus blocked the download before you opened or ran anything, you’re very likely fine. Simply seeing a malicious download attempt usually isn’t enough for an infection, especially when the security software stopped it. Several clean full scans over many months and no unusual behavior are reassuring.
The file name may be connected to what Kaspersky detected, but finding it doesn’t automatically mean an infection succeeded. It could be a blocked download, a temporary browser file, or an item that was isolated or left behind by the security software. Check Kaspersky’s quarantine and detection history to see exactly what happened, and don’t open the file. If it’s still present and you’re unsure, let Kaspersky remove it or upload only its hash/details to the vendor’s official support tools.
You’ve already done the practical checks: cleared the browser data, kept the antivirus updated, and completed multiple thorough scans. Reinstalling the operating system is technically an option, but based on the information here there’s no clear reason to take that drastic step. Continuing to avoid suspicious downloads and keeping Windows and your browser updated should be enough.
A slow connection or computer by itself isn’t strong evidence of malware, especially when there are known Ethernet and Wi-Fi problems. Malware can sometimes evade antivirus, but after nearly a year with no suspicious activity and repeated clean scans, the chance that this particular blocked attempt left an active infection is very low. At this point, repeatedly scanning and checking caches is more likely to feed the worry than uncover a real problem.
I didn’t intentionally open or run anything. I clicked a link to another page, then the alert appeared and I was kicked out. Thanks—that makes me feel a lot better.