How to remove in kaspersky endpoint? virus keeps running in Kaspersky Endpoint Security for Business Posted April 20, 2023 Time: Date and time when the event is received by the console 04/20/2023 1:23 pm Event category and description: Blocked Result description: Blocked Type: Trojan Name: PDM:Exploit.Win32.Generic User: NT SERVICE\MSSQLSERVER (Active user) Object: D:\Microsoft SQL Server\MSSQL11.MSSQLSERVER\MSSQL\Binn\sqlservr.exe Reason: Dangerous action Database release date: 4/20/2023 10:24:00 AM SHA256: 3E917376199B13523DFB4FCC445583D9DF0606AD0A6A02B111D8A3EE6B71E117 MD5: 3AE13C9869B7CE1135BCF21C0AAA68ED Time: Date and time when the event is received by the console 04/20/2023 1:23 pm Event category and description: Blocked Result description: Blocked Type: Trojan Name: Trojan.Multi.GenAutorunSQL.b User: NT AUTHORITY\SYSTEM (System user) Object: System Memory Reason: Dangerous action Database release date: 4/20/2023 10:24:00 AM Time: Date and time when the event is received by the console 04/20/2023 1:23 pm Event category and description: Blocked Result description: Blocked Type: Trojan Name: PDM:Trojan.Win32.GenAutorunMsSqlServerCommandRun.a User: NT SERVICE\MSSQLSERVER (Active user) Object: D:\Microsoft SQL Server\MSSQL11.MSSQLSERVER\MSSQL\Binn\sqlservr.exe Reason: Dangerous action Database release date: 4/20/2023 10:24:00 AM SHA256: 3E917376199B13523DFB4FCC445583D9DF0606AD0A6A02B111D8A3EE6B71E117 MD5: 3AE13C9869B7CE1135BCF21C0AAA68ED 1
How to remove in kaspersky endpoint? virus keeps running
in Kaspersky Endpoint Security for Business
Posted
Type: Trojan
Name: PDM:Exploit.Win32.Generic
User: NT SERVICE\MSSQLSERVER (Active user)
Object: D:\Microsoft SQL Server\MSSQL11.MSSQLSERVER\MSSQL\Binn\sqlservr.exe
Reason: Dangerous action
Database release date: 4/20/2023 10:24:00 AM
SHA256: 3E917376199B13523DFB4FCC445583D9DF0606AD0A6A02B111D8A3EE6B71E117
MD5: 3AE13C9869B7CE1135BCF21C0AAA68ED
Type: Trojan
Name: Trojan.Multi.GenAutorunSQL.b
User: NT AUTHORITY\SYSTEM (System user)
Object: System Memory
Reason: Dangerous action
Database release date: 4/20/2023 10:24:00 AM
Type: Trojan
Name: PDM:Trojan.Win32.GenAutorunMsSqlServerCommandRun.a
User: NT SERVICE\MSSQLSERVER (Active user)
Object: D:\Microsoft SQL Server\MSSQL11.MSSQLSERVER\MSSQL\Binn\sqlservr.exe
Reason: Dangerous action
Database release date: 4/20/2023 10:24:00 AM
SHA256: 3E917376199B13523DFB4FCC445583D9DF0606AD0A6A02B111D8A3EE6B71E117
MD5: 3AE13C9869B7CE1135BCF21C0AAA68ED