J06246 Posted May 21, 2021 ID:1458440 Share Posted May 21, 2021 Getting a lot of these yesterday and today. Is this a false positive? Scan date and time: 05/20/2021 10:00:02 AM Version: 4.3.2.106 Component package version: 1.0.1251 Protection update version: 1.0.40692 OS: Windows 10 (Build 19042.985) CPU: x64 File system type: NTFS Logged-in user: Scan Summary Scan Type: Threat Result: Completed Objects scanned: 586134 Time elapsed: 0h 5m 54s Processes: 0 Modules: 0 Registry keys: 0 Registry values: 0 Registry data: 0 Folders: 0 Files: 7 Scan Options Memory: True Startup: True File system: True Rootkits: True Heuristics: True Archives: True PUM: True PUP: True Threats Found Name Type Location Action ID Malware.AI.3346706190 File C:\WINDOWS\INSTALLER\{F3E4F9ED-5685-458A-9421-B1AD7198C1EE}\NEWSHORTCUT612_71A9BE5D58104E249040FD623A41C26F.EXE Quarantined b3c64d92-b97c-11eb-ac5c-1866da4a609b Malware.AI.3346706190 File C:\WINDOWS\INSTALLER\{F3E4F9ED-5685-458A-9421-B1AD7198C1EE}\NEWSHORTCUT611_A2CC2C9DABCA454BAF74905C3F287666.EXE Quarantined b39acf50-b97c-11eb-84d0-1866da4a609b Malware.AI.3346706190 File C:\WINDOWS\INSTALLER\{F3E4F9ED-5685-458A-9421-B1AD7198C1EE}\NEWSHORTCUT6111_135D5D44138147F3A442F95139B50793.EXE Quarantined b36e4ba6-b97c-11eb-98d7-1866da4a609b Malware.AI.3346706190 File C:\WINDOWS\INSTALLER\{C0FD0913-A1C0-40C7-8AE8-4072D4A41044}\NEWSHORTCUT612_71A9BE5D58104E249040FD623A41C26F.EXE Quarantined b33f9478-b97c-11eb-9173-1866da4a609b Malware.AI.3346706190 File C:\WINDOWS\INSTALLER\{AA5FB520-F649-40C6-BB8B-13419A3481A8}\NEWSHORTCUT612_71A9BE5D58104E249040FD623A41C26F.EXE Quarantined b2dcb0f6-b97c-11eb-8df0-1866da4a609b Malware.AI.3346706190 File C:\WINDOWS\INSTALLER\{AA5FB520-F649-40C6-BB8B-13419A3481A8}\NEWSHORTCUT611_A2CC2C9DABCA454BAF74905C3F287666.EXE Quarantined b2d9ccd8-b97c-11eb-a011-1866da4a609b Malware.AI.3346706190 File C:\WINDOWS\INSTALLER\{AA5FB520-F649-40C6-BB8B-13419A3481A8}\NEWSHORTCUT6111_135D5D44138147F3A442F95139B50793.EXE Quarantined adc9601e-b97c-11eb-b04c-1866da4a609b Link to post Share on other sites More sharing options...
Staff Atribune Posted May 21, 2021 Staff ID:1458469 Share Posted May 21, 2021 You will need to upload the full scan results please. Link to post Share on other sites More sharing options...
J06246 Posted May 21, 2021 Author ID:1458474 Share Posted May 21, 2021 Where can I find the full scan results? Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted May 21, 2021 Root Admin ID:1458482 Share Posted May 21, 2021 You can find Scan and Protection logs within the Malwarebytes 4 program in the following location RTP stands for Real-Time Protection and is where automatic protection operations would normally be logged If you click on the View option you should get something similar to the following with other options available. Link to post Share on other sites More sharing options...
J06246 Posted May 24, 2021 Author ID:1458977 Share Posted May 24, 2021 We don't have Premium, we have we have Enterpise endpoint Protection. And there is nowhere on the endpoints that I know of where I can open a management console like you are displaying. I have checked C:\ProgramData\Malwarebytes Endpoint Agent\Logs, but this appears to only populate a log when a manual scan is run. Thanks! Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted May 24, 2021 Root Admin ID:1459053 Share Posted May 24, 2021 Sorry about that. Please see if the following article helps @J06246 https://support.malwarebytes.com/hc/en-us/articles/360038522294-Collect-Malwarebytes-Endpoint-Agent-diagnostic-logs Link to post Share on other sites More sharing options...
J06246 Posted May 24, 2021 Author ID:1459073 Share Posted May 24, 2021 Ok I do have a diagnostics Zip I can upload but it contains info I do not want seen publicly. Please advise where I can send. Malwarebytes Diagnostics.zip Link to post Share on other sites More sharing options...
Porthos Posted May 24, 2021 ID:1459090 Share Posted May 24, 2021 44 minutes ago, J06246 said: but it contains info I do not want seen publicly This section is restricted to authorized users. 1 Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted May 24, 2021 Root Admin ID:1459091 Share Posted May 24, 2021 If you want or need more privacy you can open a Business Support Ticket and someone will assist you further. Thank you @J06246 1 Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now