The malware was downloaded when I clicked the MediaFire link...it wasn't in the package itself. This is actually the third time I've gotten something - and the first two times it was vitrumode, which was nasty - from Media Fire.
This time it installed a game (or may have activated a file in a pre-loaded game?) from WildTangent named EnglishOtto. When it did it, my ZoneAlarm popped up and quaranteed it right away. But at the time it happened, I'd 1) installed the latest version of Calibre, and 2) looked into downloading the tools fire from the MediaFire link. I knew it wasn't Calibre!
I have scripts disabled automatically, so I had to allow them on the MediaFire site. It initiated a download immediately - before I even had a chance to click a link to download the tools file. I knew I was in trouble as soon as it happened and ran all the programs I had (Spyware S&D, Malwarebytes, Super AntiSpyware). It looks like ZoneAlarm did it's job and caught this one (it didn't catch the two virtumode infections).
|