fixed malware directory location