He clicked the final link in a forum that looked like it hadn't been updated since 2009. The post was from a user named Xenophobia .
Files labeled with "work" or specific version numbers (like 4780) on sketchy sites are often trojans. 4780 pokemon heartgold u xenophobia download work