lohadfw.blogg.se

"wscript.exe" (Access type: "SETVAL" Path: "HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS" Key: "PROXYENABLE" Value: "00000000") All indicators are available only in the private webservice or standalone version.Spawned process "hlds.exe" with commandline """" ( Show Process) Spawned process "hlds.exe" with commandline "CS 1.6 """ ( Show Process) Spawned process "hlds.exe" with commandline "ORIGINAL Counter Strike Server""" ( Show Process) Spawned process "netsh.exe" with commandline "ATI" ENABLE"" ( Show Process) Spawned process "cmd.exe" with commandline "ATI" ENABLE"" ( Show Process) Spawned process "hlds.exe" with commandline "Enjoy Public Server """ ( Show Process) Spawned process "netsh.exe" with commandline "Open Port 0""" ( Show Process) Spawned process "hlds.exe" with commandline "CS.TEST.RO""" ( Show Process) Spawned process "cmd.exe" with commandline "Open Port 0""" ( Show Process) Spawned process "reg.exe" with commandline "HKCU\Software\Valve\Steam\ActiveProcess" /v SteamClientDll /t REG_SZ /d "" /f"" ( Show Process)

Spawned process "cmd.exe" with commandline "HKCU\Software\Valve\Steam\ActiveProcess" /v SteamClientDll /t REG_SZ /d "" /f"" ( Show Process) Spawned process "ati.exe" with commandline "%TEMP%\RarSFX0\ati.exe" "" ( Show Process) Spawned process "ati.EXE" with commandline "C:\AppPatch\PCAT\ati.EXE" "" ( Show Process) Spawned process "taskkill.exe" with commandline "%WINDIR%\System32\taskkill.exe" /f /im hlds.exe"" ( Show Process) Spawned process "taskkill.exe" with commandline "%WINDIR%\System32\taskkill.exe" /f /im ati.exe"" ( Show Process) Malicious artifacts seen in the context of a contacted host 9/61 Antivirus vendors marked spawned process "ati.EXE" (PID: 2648) as malicious (classified as "QVM41.1.9E59.Malware" with 14% detection rate)Ģ/62 Antivirus vendors marked spawned process "ati.exe" (PID: 1500) as malicious (classified as "ML.Attribute" with 3% detection rate)ġ/60 Antivirus vendors marked spawned process "hlds.exe" (PID: 2956) as malicious (classified as "Trojan.Neshta" with 1% detection rate)ġ/60 Antivirus vendors marked spawned process "hlds.exe" (PID: 1140) as malicious (classified as "Trojan.Neshta" with 1% detection rate)ġ/60 Antivirus vendors marked spawned process "hlds.exe" (PID: 2896) as malicious (classified as "Trojan.Neshta" with 1% detection rate)ġ/60 Antivirus vendors marked spawned process "hlds.exe" (PID: 1352) as malicious (classified as "Trojan.Neshta" with 1% detection rate)ġ/60 Antivirus vendors marked spawned process "hlds.exe" (PID: 3536) as malicious (classified as "Trojan.Neshta" with 1% detection rate)