I started my PC today and immediately got bombarded with around 30-40 Exploit.Process block notifications. I read other threads and updated Malwarebytes AFTER I got these detections, should I still need to worry and are these real?
Malwarebytes
www.malwarebytes.com
-Log Details-
Protection Event Date: 10/23/23
Protection Event Time: 7:58 AM
Log File: ce3e55c8-71cd-11ee-86c8-6c02e03ef58d.json
-Software Information-
Version: 4.6.3.282
Components Version: 1.0.2158
Update Package Version: 1.0.76481
License: Trial
-System Information-
OS: Windows 11 (Build 22621.2428)
CPU: x64
File System: NTFS
User: System
-Exploit Details-
File: 0
(No malicious items detected)
Exploit: 1
Exploit.PayloadProcessBlock, C:\WINDOWS\System32\WindowsPowerShell\v1.0\powershell.exe powershell Get-CimInstance Win32_VideoController | Format-List -Property PNPDeviceID, Blocked, 701, 392684, 0.0.0, ,
-Exploit Data-
Affected Application: cmd
Protection Layer: Application Behavior Protection
Protection Technique: Exploit payload process blocked
File Name: C:\WINDOWS\System32\WindowsPowerShell\v1.0\powershell.exe powershell Get-CimInstance Win32_VideoController | Format-List -Property PNPDeviceID
URL:
(end)
This was just one of many, thank you in advance.
