Jump to content

Quang Nguyen

Members
  • Posts

    9
  • Joined

  • Last visited

    Never

Posts posted by Quang Nguyen

  1. Dear team,

     

    I got many alerts from Kaspersky with in our shared folder file  as follows: 

     

    Result:     Detected: HEUR:Trojan.Win32.Generic

    User:     NT AUTHORITY\SYSTEM (System user)

    Object:     xxxx\install\7z1900-x64.exe,

    Reason:     Expert analysis

    Database release date:     12/9/2019 1:50:00 PM

    Hash:     d915afab9f11697cc236803496d9dc8608932269847efb67946edf8905d426a2

     

    Many file types “exe,” were created with file type “.exe". Ex

    7z1900-x64.exe

    7z1900-x64.exe,

    All of exe file of this folder have the “exe,” and KAS alerts.

    In this time, I can't delete, or copy “exe,” , after 1 hours, Kaspersky deleted all of “exe,” file.

     

    Do you have any experience your this case ? I’m trying to identify the root cause of this incident.

    Many thanks,

     

×
×
  • Create New...