Jump to content

Is this a real threat?


Sorcadin

Recommended Posts

I started my PC today and immediately got bombarded with around 30-40 Exploit.Process block notifications. I read other threads and updated Malwarebytes AFTER I got these detections, should I still need to worry and are these real?

Malwarebytes
www.malwarebytes.com

-Log Details-
Protection Event Date: 10/23/23
Protection Event Time: 7:58 AM
Log File: ce3e55c8-71cd-11ee-86c8-6c02e03ef58d.json

-Software Information-
Version: 4.6.3.282
Components Version: 1.0.2158
Update Package Version: 1.0.76481
License: Trial

-System Information-
OS: Windows 11 (Build 22621.2428)
CPU: x64
File System: NTFS
User: System

-Exploit Details-
File: 0
(No malicious items detected)

Exploit: 1
Exploit.PayloadProcessBlock, C:\WINDOWS\System32\WindowsPowerShell\v1.0\powershell.exe powershell Get-CimInstance Win32_VideoController | Format-List -Property PNPDeviceID, Blocked, 701, 392684, 0.0.0, ,

-Exploit Data-
Affected Application: cmd
Protection Layer: Application Behavior Protection
Protection Technique: Exploit payload process blocked
File Name: C:\WINDOWS\System32\WindowsPowerShell\v1.0\powershell.exe powershell Get-CimInstance Win32_VideoController | Format-List -Property PNPDeviceID
URL:

 

(end)

 

This was just one of many, thank you in advance.

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.