"qtzeqffsaqcx"="rundll32.exe \"C:\\Users\\Rob\\AppData\\Local\\Temp\\qtzeqffsaqcx.dll\",DllRegisterServer" (I have log attached from the last few days). On a previous Malwarebytes scan it showed a registry entry as a malware entry. Have also noticed in Task Manager 2 instances of the command line "Powershell.exe iex $env:a" which I have not noticed before. I have also noticed in the last few days a DOS box (CMD.EXE) open and close really fast.Ī few times the system was running so slow it stayed open long enough for me to read the contents : "NOT SANDBOXED" (Google was no help there). I check Task Manager and have between 22 - 30 instances of Syswow64/dllhost.exe running a COM surrogate. Endpoint Detection & Response for Servers
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |