TheCG Posted May 19, 2021 ID:1457891 Share Posted May 19, 2021 HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE and C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows I havn't downloaded anything new other than a windows update in the past two weeks yesterday there was nothing on a full scan today there are detections and i havnt used the Computer its been in sleep for last 13 hours. MBAM5.19.21.txt Link to post Share on other sites More sharing options...
cemkaner Posted May 19, 2021 ID:1457896 Share Posted May 19, 2021 I'm getting the same message under essentially the same circumstances. Result: Completed Objects Scanned: 293486 Threats Detected: 47 Threats Quarantined: 0 Time Elapsed: 1 min, 31 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Enabled Heuristics: Enabled PUP: Detect PUM: Detect -Scan Details- Process: 0 (No malicious items detected) Module: 0 (No malicious items detected) Registry Key: 37 RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Microsoft\Windows\Application Experience\PcaPatchDbTask, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{A3901308-DBB6-4E9D-A54A-8E48F59FFDA8}, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\PLAIN\{A3901308-DBB6-4E9D-A54A-8E48F59FFDA8}, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Microsoft\Windows\Sysmain\WsSwapAssessmentTask, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{638672E6-20F1-499D-BFCC-9EA7935257C4}, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\PLAIN\{638672E6-20F1-499D-BFCC-9EA7935257C4}, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\MAINTENANCE\{638672E6-20F1-499D-BFCC-9EA7935257C4}, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Microsoft\Windows\Application Experience\StartupAppTask, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{3D363385-64B8-4207-AC46-3EE180DD87F2}, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\PLAIN\{3D363385-64B8-4207-AC46-3EE180DD87F2}, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\MAINTENANCE\{3D363385-64B8-4207-AC46-3EE180DD87F2}, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Microsoft\Windows\ApplicationData\CleanupTemporaryState, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{E003BEA4-7D11-4522-9834-25C3F9F93F53}, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\PLAIN\{E003BEA4-7D11-4522-9834-25C3F9F93F53}, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\MAINTENANCE\{E003BEA4-7D11-4522-9834-25C3F9F93F53}, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Microsoft\Windows\Autochk\Proxy, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{36A78C3E-A142-4F86-903E-AE26291F646C}, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\BOOT\{36A78C3E-A142-4F86-903E-AE26291F646C}, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Microsoft\Windows\SharedPC\Account Cleanup, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{8DB27523-093D-4B93-A00B-68F6317DFAE1}, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\PLAIN\{8DB27523-093D-4B93-A00B-68F6317DFAE1}, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\MAINTENANCE\{8DB27523-093D-4B93-A00B-68F6317DFAE1}, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Microsoft\Windows\StateRepository\MaintenanceTasks, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{58CCC4DA-C86D-4E3D-8FAF-A7B24D8F3950}, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\PLAIN\{58CCC4DA-C86D-4E3D-8FAF-A7B24D8F3950}, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\MAINTENANCE\{58CCC4DA-C86D-4E3D-8FAF-A7B24D8F3950}, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{86158314-60CF-4F3F-85B5-2399327EA496}, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\PLAIN\{86158314-60CF-4F3F-85B5-2399327EA496}, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{C9ABE41C-5E65-4E52-8BAD-4F1BCA3B5715}, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\LOGON\{C9ABE41C-5E65-4E52-8BAD-4F1BCA3B5715}, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\MAINTENANCE\{C9ABE41C-5E65-4E52-8BAD-4F1BCA3B5715}, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{B97C7632-DD50-4F07-8E4E-F1450795BF78}, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\PLAIN\{B97C7632-DD50-4F07-8E4E-F1450795BF78}, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\MAINTENANCE\{B97C7632-DD50-4F07-8E4E-F1450795BF78}, No Action By User, 11812, 941491, , , , , , Registry Value: 0 (No malicious items detected) Registry Data: 0 (No malicious items detected) Data Stream: 0 (No malicious items detected) Folder: 0 (No malicious items detected) File: 10 RiskWare.Injector.Generic, C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\Application Experience\PcaPatchDbTask, No Action By User, 11812, 941491, 1.0.40646, , ame, , 9F0ACCD368DEBDA3AA6D8B29423CF3EE, 2E45B19A08F38A948D25B4F8A8459770531DF09A185633D61AE7B9DAC986A1A9 RiskWare.Injector.Generic, C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\Sysmain\WsSwapAssessmentTask, No Action By User, 11812, 941491, 1.0.40646, , ame, , F1C1C8BDD3D71C4DA978A1703159E4AF, D3152B9140BCB0FC9A88AF2C59DC72D39B72F11B1D5661A6E94AF0A175566E81 RiskWare.Injector.Generic, C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\Application Experience\StartupAppTask, No Action By User, 11812, 941491, 1.0.40646, , ame, , 0BDE2A4342F763D8A55251395C14AF63, 78C9BB91A173FEC99ED549854EC81DC4768665F6D2CC579495B19205598143C4 RiskWare.Injector.Generic, C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\ApplicationData\CleanupTemporaryState, No Action By User, 11812, 941491, 1.0.40646, , ame, , B97EEB6111E0CAFC5660C41463BB20B4, 592760F890E9BD0BDD4D5F1FD1B67328512C3BAAFBAF2A84597589D4D4606A73 RiskWare.Injector.Generic, C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\Autochk\Proxy, No Action By User, 11812, 941491, 1.0.40646, , ame, , 072DCBFD73085D1358EBACE36C1EE1F9, 151FD26B9E524C11DCCE8CEDE5107BE2DAFB60F42A0DD6F9976FF589C76ECB94 RiskWare.Injector.Generic, C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\SharedPC\Account Cleanup, No Action By User, 11812, 941491, 1.0.40646, , ame, , 691CA16FBAA65A6D4983D0949F678F8B, 504A9783D21D5B6F8711FE5F901DD6C60284E677E1A8CA759BD8198F6F614CD5 RiskWare.Injector.Generic, C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\StateRepository\MaintenanceTasks, No Action By User, 11812, 941491, 1.0.40646, , ame, , 183D04307BA05AC13166A073984CC57B, A7E9E380DB7E0CA9A62A5C438AC2B6890287D52D7BB95BF19F410C2ECB77BD30 RiskWare.Injector.Generic, C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange, No Action By User, 11812, 941491, 1.0.40646, , ame, , C169971DBB83A272CD3925491D102517, D354CF8F6010392B8DE353107D33E0F01F13273BDB0A21A1A644FC6AD2DCDA83 RiskWare.Injector.Generic, C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup, No Action By User, 11812, 941491, 1.0.40646, , ame, , 39622D5C2D4710EDA8BE8FD1D127EC79, 9308B1A28C4DD92BCE2F2816FCC5362C6A460FA6F558688AF021EC5F750E811D RiskWare.Injector.Generic, C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector, No Action By User, 11812, 941491, 1.0.40646, , ame, , DAE393BFDB531A00F4A7C7489AD0FBAF, CFB8670684E4DFA22B947D091FBBEE33C0FBB88766BA9CEB3E366CB4FADDE761 Physical Sector: 0 (No malicious items detected) WMI: 0 (No malicious items detected) (end) 1 Link to post Share on other sites More sharing options...
TheCG Posted May 19, 2021 Author ID:1457900 Share Posted May 19, 2021 1 minute ago, cemkaner said: I'm getting the same message under essentially the same circumstances. Result: Completed Objects Scanned: 293486 Threats Detected: 47 Threats Quarantined: 0 Time Elapsed: 1 min, 31 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Enabled Heuristics: Enabled PUP: Detect PUM: Detect -Scan Details- Process: 0 (No malicious items detected) Module: 0 (No malicious items detected) Registry Key: 37 RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Microsoft\Windows\Application Experience\PcaPatchDbTask, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{A3901308-DBB6-4E9D-A54A-8E48F59FFDA8}, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\PLAIN\{A3901308-DBB6-4E9D-A54A-8E48F59FFDA8}, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Microsoft\Windows\Sysmain\WsSwapAssessmentTask, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{638672E6-20F1-499D-BFCC-9EA7935257C4}, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\PLAIN\{638672E6-20F1-499D-BFCC-9EA7935257C4}, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\MAINTENANCE\{638672E6-20F1-499D-BFCC-9EA7935257C4}, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Microsoft\Windows\Application Experience\StartupAppTask, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{3D363385-64B8-4207-AC46-3EE180DD87F2}, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\PLAIN\{3D363385-64B8-4207-AC46-3EE180DD87F2}, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\MAINTENANCE\{3D363385-64B8-4207-AC46-3EE180DD87F2}, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Microsoft\Windows\ApplicationData\CleanupTemporaryState, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{E003BEA4-7D11-4522-9834-25C3F9F93F53}, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\PLAIN\{E003BEA4-7D11-4522-9834-25C3F9F93F53}, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\MAINTENANCE\{E003BEA4-7D11-4522-9834-25C3F9F93F53}, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Microsoft\Windows\Autochk\Proxy, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{36A78C3E-A142-4F86-903E-AE26291F646C}, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\BOOT\{36A78C3E-A142-4F86-903E-AE26291F646C}, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Microsoft\Windows\SharedPC\Account Cleanup, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{8DB27523-093D-4B93-A00B-68F6317DFAE1}, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\PLAIN\{8DB27523-093D-4B93-A00B-68F6317DFAE1}, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\MAINTENANCE\{8DB27523-093D-4B93-A00B-68F6317DFAE1}, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Microsoft\Windows\StateRepository\MaintenanceTasks, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{58CCC4DA-C86D-4E3D-8FAF-A7B24D8F3950}, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\PLAIN\{58CCC4DA-C86D-4E3D-8FAF-A7B24D8F3950}, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\MAINTENANCE\{58CCC4DA-C86D-4E3D-8FAF-A7B24D8F3950}, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{86158314-60CF-4F3F-85B5-2399327EA496}, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\PLAIN\{86158314-60CF-4F3F-85B5-2399327EA496}, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{C9ABE41C-5E65-4E52-8BAD-4F1BCA3B5715}, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\LOGON\{C9ABE41C-5E65-4E52-8BAD-4F1BCA3B5715}, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\MAINTENANCE\{C9ABE41C-5E65-4E52-8BAD-4F1BCA3B5715}, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{B97C7632-DD50-4F07-8E4E-F1450795BF78}, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\PLAIN\{B97C7632-DD50-4F07-8E4E-F1450795BF78}, No Action By User, 11812, 941491, , , , , , RiskWare.Injector.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\MAINTENANCE\{B97C7632-DD50-4F07-8E4E-F1450795BF78}, No Action By User, 11812, 941491, , , , , , Registry Value: 0 (No malicious items detected) Registry Data: 0 (No malicious items detected) Data Stream: 0 (No malicious items detected) Folder: 0 (No malicious items detected) File: 10 RiskWare.Injector.Generic, C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\Application Experience\PcaPatchDbTask, No Action By User, 11812, 941491, 1.0.40646, , ame, , 9F0ACCD368DEBDA3AA6D8B29423CF3EE, 2E45B19A08F38A948D25B4F8A8459770531DF09A185633D61AE7B9DAC986A1A9 RiskWare.Injector.Generic, C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\Sysmain\WsSwapAssessmentTask, No Action By User, 11812, 941491, 1.0.40646, , ame, , F1C1C8BDD3D71C4DA978A1703159E4AF, D3152B9140BCB0FC9A88AF2C59DC72D39B72F11B1D5661A6E94AF0A175566E81 RiskWare.Injector.Generic, C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\Application Experience\StartupAppTask, No Action By User, 11812, 941491, 1.0.40646, , ame, , 0BDE2A4342F763D8A55251395C14AF63, 78C9BB91A173FEC99ED549854EC81DC4768665F6D2CC579495B19205598143C4 RiskWare.Injector.Generic, C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\ApplicationData\CleanupTemporaryState, No Action By User, 11812, 941491, 1.0.40646, , ame, , B97EEB6111E0CAFC5660C41463BB20B4, 592760F890E9BD0BDD4D5F1FD1B67328512C3BAAFBAF2A84597589D4D4606A73 RiskWare.Injector.Generic, C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\Autochk\Proxy, No Action By User, 11812, 941491, 1.0.40646, , ame, , 072DCBFD73085D1358EBACE36C1EE1F9, 151FD26B9E524C11DCCE8CEDE5107BE2DAFB60F42A0DD6F9976FF589C76ECB94 RiskWare.Injector.Generic, C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\SharedPC\Account Cleanup, No Action By User, 11812, 941491, 1.0.40646, , ame, , 691CA16FBAA65A6D4983D0949F678F8B, 504A9783D21D5B6F8711FE5F901DD6C60284E677E1A8CA759BD8198F6F614CD5 RiskWare.Injector.Generic, C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\StateRepository\MaintenanceTasks, No Action By User, 11812, 941491, 1.0.40646, , ame, , 183D04307BA05AC13166A073984CC57B, A7E9E380DB7E0CA9A62A5C438AC2B6890287D52D7BB95BF19F410C2ECB77BD30 RiskWare.Injector.Generic, C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange, No Action By User, 11812, 941491, 1.0.40646, , ame, , C169971DBB83A272CD3925491D102517, D354CF8F6010392B8DE353107D33E0F01F13273BDB0A21A1A644FC6AD2DCDA83 RiskWare.Injector.Generic, C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup, No Action By User, 11812, 941491, 1.0.40646, , ame, , 39622D5C2D4710EDA8BE8FD1D127EC79, 9308B1A28C4DD92BCE2F2816FCC5362C6A460FA6F558688AF021EC5F750E811D RiskWare.Injector.Generic, C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector, No Action By User, 11812, 941491, 1.0.40646, , ame, , DAE393BFDB531A00F4A7C7489AD0FBAF, CFB8670684E4DFA22B947D091FBBEE33C0FBB88766BA9CEB3E366CB4FADDE761 Physical Sector: 0 (No malicious items detected) WMI: 0 (No malicious items detected) (end) Welp thats super weird, do you have steam? my steam started installing a few games in background after waking the computer. Link to post Share on other sites More sharing options...
cemkaner Posted May 19, 2021 ID:1457908 Share Posted May 19, 2021 I have steam, but no reason to think it is misbehaving. I don't boot steam at login and task manager doesn't show it running. I'm not going to run anything on that computer until I deal with this potential infection Link to post Share on other sites More sharing options...
TheCG Posted May 19, 2021 Author ID:1457912 Share Posted May 19, 2021 i dont blame you im about to restart mine, after quarentine QS doesnt show anything, but ima restart...... cross your fingers for me Link to post Share on other sites More sharing options...
Robmc7 Posted May 19, 2021 ID:1457918 Share Posted May 19, 2021 Hi, just came on for this very thing, I was playing Death Stranding on Steam and it popped up with 47 items after I stopped playing. I've looked through other threads similar and they're saying it's a database error? I've quarnatined for now (just in case), but I'm not going to delete until can get confirmation. Link to post Share on other sites More sharing options...
Boorput Posted May 19, 2021 ID:1457925 Share Posted May 19, 2021 I'm glad I'm not the only one! This problem just popped up when I booted my pc today. No services like Steam or something run at startup. Just MB. As they are all Windows services and regkeys, I didn't know what to do.. I'm going to follow this up. I'll add my results as well, but they are similar to previous posts. Thanks in advance for any help on this subject! latest scan.txt 1 Link to post Share on other sites More sharing options...
Porthos Posted May 19, 2021 ID:1457944 Share Posted May 19, 2021 This was a False Positive detection. You can restore all entries from quarantine titled as Riskware.Injector.Generic, it only detected Scheduled Tasks. 1 Link to post Share on other sites More sharing options...
Staff shadowwar Posted May 19, 2021 Staff ID:1457945 Share Posted May 19, 2021 This is a fp. Please update and restore from quarantine if you quarantined. 1 Link to post Share on other sites More sharing options...
TheCG Posted May 19, 2021 Author ID:1457987 Share Posted May 19, 2021 1 hour ago, shadowwar said: This is a fp. Please update and restore from quarantine if you quarantined. alright trying it Now. Link to post Share on other sites More sharing options...
TheCG Posted May 19, 2021 Author ID:1457995 Share Posted May 19, 2021 ran a scan after restoring form quarantine, no detection this time. Link to post Share on other sites More sharing options...
Uki Posted May 19, 2021 ID:1458099 Share Posted May 19, 2021 Yeah I had the exact same issue, same number of issues 47 total, 10 files, 37 registry keys. except I deleted all the items in quarantine... Link to post Share on other sites More sharing options...
Boorput Posted May 20, 2021 ID:1458251 Share Posted May 20, 2021 I quarantined, then replaced and ran again. Nothing this time! Solved for me! Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now