VirusTotal Detected a Trojan in setup.exe—What Should I Do?
Asked by
MellowCedar47
I ran setup.exe, but nothing appeared to happen. I then uploaded the file to VirusTotal, where ESET detected Win64/Kryptik.HPF and WithSecure detected Trojan:W32/GenInflated.B. Malwarebytes' deep scan has not found anything so far. If the file was malicious, what steps should I take now?
Answers
Stop using the computer for anything sensitive and disconnect it from the internet. Don’t run the installer again or rely on a single clean Malwarebytes result—different scanners can miss different threats. From a separate, trusted computer, create a reputable antivirus rescue USB and scan the affected machine. If the detections are confirmed, or if you entered passwords after launching the file, change those passwords from a clean device and enable two-factor authentication. For the most reliable cleanup, back up only personal documents and perform a clean OS reinstall.
Reply to this answer
Add your answer
Answers are reviewed before publication.
CopperLynx6: A few antivirus detections can occasionally be false positives, especially with modified or unofficial software, but two Trojan detections should be treated as suspicious. The safest choice is to delete the installer, avoid executing it again, and verify any replacement download from an official source.