Hmm, are you sure you have the newest LW version (4.12.6)? I am not aware of any instance like this happening with another version but 4.12.3. You would be the first and that would mean those who have planted the files have adapted to the prevention implemented into later versions.