Jump to content

Trojans, what next Malwarebytes 4.5.9 | Windows 10


Recommended Posts

50 minutes ago, computercowboys said:

Wanna be on the safe side,

Please post the log showing the detection's.

You can find Scan and Protection logs within the Malwarebytes 4 program in the following location

 

image.png

 

RTP stands for Real-Time Protection and is where automatic protection operations would normally be logged

 

image.png

 

If you click on the View option you should get something similar to the following with other options available.

 

image.png

 

Edited by Porthos
Link to post
Share on other sites

-Log Details-
Scan Date: 5/22/22
Scan Time: 5:09 PM
Log File: e6f92264-da1b-11ec-a8f9-00ff57410ca0.json

-Software Information-
Version: 4.5.9.198
Components Version: 1.0.1676
Update Package Version: 1.0.55268
License: Premium

-System Information-
OS: Windows 10 (Build 19044.1706)
CPU: x64
File System: NTFS
User: System

-Scan Summary-
Scan Type: Threat Scan
Scan Initiated By: Scheduler
Result: Completed
Objects Scanned: 354517
Threats Detected: 4
Threats Quarantined: 4
Time Elapsed: 7 min, 51 sec

-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Detect
PUM: Detect

-Scan Details-
Process: 0
(No malicious items detected)

Module: 2
Trojan.CobaltStrike, C:\PROGRAM FILES (X86)\SURFSHARK\RESOURCES\X64\SURFSHARKKEYPAIR_X64.DLL, Quarantined, 526, 1056847, , , , , 480FB159C7DFF0EBD56EBE6182466415, E2A1088A2A4E44C8B89FD9B8FDB0AB06C6CADB985260F36C335047752D5B38B9
Trojan.CobaltStrike, C:\PROGRAM FILES (X86)\SURFSHARK\SURFSHARKWIREGUARD\TUNNEL.DLL, Quarantined, 526, 1056847, , , , , 2C4C0F4281069FFBDD8945EBBEB8D168, 1F6680967FF0D4E49CADD57C144C7DD23239E0FC891FA7C302903A67A01FD3A8

Registry Key: 0
(No malicious items detected)

Registry Value: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 0
(No malicious items detected)

File: 2
Trojan.CobaltStrike, C:\PROGRAM FILES (X86)\SURFSHARK\RESOURCES\X64\SURFSHARKKEYPAIR_X64.DLL, Quarantined, 526, 1056847, 1.0.55268, , ame, , 480FB159C7DFF0EBD56EBE6182466415, E2A1088A2A4E44C8B89FD9B8FDB0AB06C6CADB985260F36C335047752D5B38B9
Trojan.CobaltStrike, C:\PROGRAM FILES (X86)\SURFSHARK\SURFSHARKWIREGUARD\TUNNEL.DLL, Quarantined, 526, 1056847, 1.0.55268, , ame, , 2C4C0F4281069FFBDD8945EBBEB8D168, 1F6680967FF0D4E49CADD57C144C7DD23239E0FC891FA7C302903A67A01FD3A8

Physical Sector: 0
(No malicious items detected)

WMI: 0
(No malicious items detected)


(end)

Link to post
Share on other sites

-Log Details-
Scan Date: 5/22/22
Scan Time: 5:09 PM
Log File: e6f92264-da1b-11ec-a8f9-00ff57410ca0.json

-Software Information-
Version: 4.5.9.198
Components Version: 1.0.1676
Update Package Version: 1.0.55268
License: Premium

-System Information-
OS: Windows 10 (Build 19044.1706)
CPU: x64
File System: NTFS
User: System

-Scan Summary-
Scan Type: Threat Scan
Scan Initiated By: Scheduler
Result: Completed
Objects Scanned: 354517
Threats Detected: 4
Threats Quarantined: 4
Time Elapsed: 7 min, 51 sec

-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Detect
PUM: Detect

-Scan Details-
Process: 0
(No malicious items detected)

Module: 2
Trojan.CobaltStrike, C:\PROGRAM FILES (X86)\SURFSHARK\RESOURCES\X64\SURFSHARKKEYPAIR_X64.DLL, Quarantined, 526, 1056847, , , , , 480FB159C7DFF0EBD56EBE6182466415, E2A1088A2A4E44C8B89FD9B8FDB0AB06C6CADB985260F36C335047752D5B38B9
Trojan.CobaltStrike, C:\PROGRAM FILES (X86)\SURFSHARK\SURFSHARKWIREGUARD\TUNNEL.DLL, Quarantined, 526, 1056847, , , , , 2C4C0F4281069FFBDD8945EBBEB8D168, 1F6680967FF0D4E49CADD57C144C7DD23239E0FC891FA7C302903A67A01FD3A8

Registry Key: 0
(No malicious items detected)

Registry Value: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 0
(No malicious items detected)

File: 2
Trojan.CobaltStrike, C:\PROGRAM FILES (X86)\SURFSHARK\RESOURCES\X64\SURFSHARKKEYPAIR_X64.DLL, Quarantined, 526, 1056847, 1.0.55268, , ame, , 480FB159C7DFF0EBD56EBE6182466415, E2A1088A2A4E44C8B89FD9B8FDB0AB06C6CADB985260F36C335047752D5B38B9
Trojan.CobaltStrike, C:\PROGRAM FILES (X86)\SURFSHARK\SURFSHARKWIREGUARD\TUNNEL.DLL, Quarantined, 526, 1056847, 1.0.55268, , ame, , 2C4C0F4281069FFBDD8945EBBEB8D168, 1F6680967FF0D4E49CADD57C144C7DD23239E0FC891FA7C302903A67A01FD3A8

Physical Sector: 0
(No malicious items detected)

WMI: 0
(No malicious items detected)


(end)

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.