Your logs are clean; most likely this was a “scare-ware” attack.