Skip to main content
4 of 6
added 161 characters in body

Is it possible for a Windows virus to jump in partitions that are for ubuntu and are not visible in "This Pc"?

I installed Ubuntu on my computer a year ago (dual booting) but I created partitions that are exclusively for Ubuntu.

This is how some Ubuntu partitions look on Disk Management.

enter image description here

On Windows I have installed Faronics Deep Freeze long ago, so everything gets deleted after restart. Although whenever I use Ubuntu, the files there, stay on it. So I'm not sure whether Faronics Deep Freeze covers Ubuntu Partitions too because they are not visible when running Windows besides on Disk Management.

So my question is that, recently, I downloaded a 3MB rar file, which I scanned through Hybrid Analysis site which also uses Virustotal site. It showed it completely clear. When I unzipped it, there was a setup file of 600 MB and I thought it was the program so I run it but it didn't do anything, and then I thought would be a good idea to upload it on Virustotal, surprisingly 4-5 antiviruses found that the file was malicious. I immediately deleted it and restarted my computer because everything would get deleted. Now I'm worried if that file infected those Ubuntu Partitions that are not visible (and also maybe not covered by Deep Freeze) and that every time I'm running Windows it can infect windows again by jumping on windows partitions by itself. Can anyone tell me if that could happen?

The analysis https://www.hybrid-analysis.com/sample/f986d36db1c558d42978111528a29a53ac3c44321875b964b0566c66f2402136

https://www.virustotal.com/gui/file/f986d36db1c558d42978111528a29a53ac3c44321875b964b0566c66f2402136/detection

I didn't keep the analysis for that setup file that zip has inside it.

If anyone want to download at their own risk. The link is

https://cdn.discordapp.com/attachments/977113873578614806/980759184654090240/File_Pass__1234.rar