Did we just download a TROJAN?

[drummerdr]

Hi,

My wife just downloaded a zip file from a bogus FedEx e-mail (apparently a common phishing scam). She opened the file and clicked on it - a doc.js file - and it opened dreamweaver on her system and showed a bunch of random code.

She then realized that it was likely a trojan, but obviously it was too late. The question is, is the virus likely to have installed if all it did was open Dreamweaver? She has a Macbook Pro running 10.9.5. We haven't noticed any erratic behavior from her browser but frankly have been too paranoid to use it much. Any thoughts on whether we're likely to have a virus - and more importantly, any TIPS on what we can do to figure out whether the virus was installed??

Thank you!!

 

[harryb2448]

Well it is not a virus. No Mac OS X viruses.

Download AdwareMedic and run th Scan function then download and install AdBlockPlus and Ghostery to prevent these things occurring.

 

[drummerdr]

Thanks Harry!

I'm not clear on the definition of "virus" compared to other malware. Is there a chance she installed something that is tracking her passwords, etc.? This seems to be the main malware type associated w/ this particular phishing scam.

Will "adware medic" help us determine whether something malicious was installed, or is this just preventative for the future?

Thanks again!

 

[chas_m]

I'm not sure why Harry B thinks that installing adblock and ghost dry will help prevent your wife from clicking links in emails, I sure you it won't.

Chances are incredibly high that what you downloaded was a virus for windows, it didn't open in the right program, it doesn't affect Macs, and in short there's nothing to worry about.

 

[vansmith]

She opened the file and clicked on it - a doc.js file - and it opened dreamweaver on her system and showed a bunch of random code.

Files with a JS extension are Javascript files which explains why it opened with Dreamweaver. This also explains what you saw - if you don't know what Javascript is, it probably looks like jibberish.

A JS file can't do any damage to the system. It only runs in browsers and is purposefully designed to be contained from the computer outside of the browser.