Malwarebytes report

Malwarebytes
www.malwarebytes.com

-Log Details-
Scan Date: 5/10/21
Scan Time: 11:34 AM
Log File: ea79902c-b172-11eb-8072-7085c2c1a7a5.json

-Software Information-
Version: 4.3.0.98
Components Version: 1.0.1273
Update Package Version: 1.0.40284
License: Trial

-System Information-
OS: Windows 10 (Build 19041.928)
CPU: x64
File System: NTFS
User:

-Scan Summary-
Scan Type: Threat Scan
Scan Initiated By: Manual
Result: Completed
Objects Scanned: 316457
Threats Detected: 12
Threats Quarantined: 12
Time Elapsed: 2 min, 14 sec

-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Detect
PUM: Detect

-Scan Details-
Process: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registry Key: 6
Trojan.Script.E, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\lby9tndq6xua, Quarantined, 5603, 930765, , , , , ,
Trojan.Script.E, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{4957C594-5B93-4966-A2D9-0858076F07D5}, Quarantined, 5603, 930765, , , , , ,
Trojan.Script.E, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\BOOT\{4957C594-5B93-4966-A2D9-0858076F07D5}, Quarantined, 5603, 930765, , , , , ,
RiskWare.ScheduledTask.Runner.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\5tl4qomcv2kg, Quarantined, 16266, 930791, , , , , ,
RiskWare.ScheduledTask.Runner.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{DCD87D41-8924-4DE3-BF76-D4832CC47379}, Quarantined, 16266, 930791, , , , , ,
RiskWare.ScheduledTask.Runner.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\LOGON\{DCD87D41-8924-4DE3-BF76-D4832CC47379}, Quarantined, 16266, 930791, , , , , ,

Registry Value: 0
(No malicious items detected)

Registry Data: 1
Trojan.Starter.RDP, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TERMSERVICE\PARAMETERS|SERVICEDLL, Replaced, 14767, 848409, 1.0.40284, , ame, , ,

Data Stream: 0
(No malicious items detected)

Folder: 0
(No malicious items detected)

File: 5
Trojan.Script.E, C:\WINDOWS\SYSTEM32\TASKS\lby9tndq6xua, Quarantined, 5603, 930765, , , , , 686C70A2E777BA6322673E6210950E06, D9A49F1643D5208209528B0C8453FEAE257D8152C75BDEE4CF969B14E98FAFAF
Trojan.Script.E, C:\WINDOWS\SYSTEM32\GET-DNSRECS.PS1, Quarantined, 5603, 930765, 1.0.40284, , ame, , FC804079B21CBE0F8CCC73BCD9364E67, D0341F7FCAA9524BF0C17AC91F2DC92FE9AE5A77F7BEF3920B0A17656BE1DA1D
RiskWare.ScheduledTask.Runner.Generic, C:\WINDOWS\SYSTEM32\TASKS\5tl4qomcv2kg, Quarantined, 16266, 930791, 1.0.40284, , ame, , 5CB56D2E43CB92882B6CE6732447024A, 960C168E66461C2544ACD7119967E46C544D69B0375E80AECD40071ABB375E10
Malware.AI.3702161551, C:\USERS\*****\APPDATA\ROAMING\Microsoft\Windows\Recent\mediasvc.png.lnk, Quarantined, 1000000, 0, , , , , B63ED25EA2B5CB8626EF56B2A3BEB446, 60F431F0F124D26F58137C3CF0D29E164AB658BE4DBEC2F708B1D6BCF609741A
Malware.AI.3702161551, C:\WINDOWS\BRANDING\MEDIASVC.PNG, Quarantined, 1000000, 0, 1.0.40284, DC5DDFE6DE9C0F06DCAA808F, dds, 01238906, CDA28055E28F71EB4440EC2BAE46C0D7, B3BAF4B33E28048D62B0BC31C82DABBB0A787B978AE1C435060F59AD81F50459

Physical Sector: 0
(No malicious items detected)

WMI: 0
(No malicious items detected)


(end)