Persistent sfc /scannow found corrupted files and restored them and UDP flooding attack

[Kaspema777]

Hi there, can you help me? I have Kaspersky Premium. Sfc /scannow says I have corrupted system files and fortunately it seems to fix them  every time I try to reinstall the system.

Quote

 

2023-08-25 10:27:57, Info                  CBS    FOD: Package found on the server, but not applicable to the system: \\?\C:\WINDOWS\Servicing\InboxFodMetadataCache\metadata\ServerCore.AppCompatibility~~1.0.mum

2023-08-25 10:27:57, Info                  CBS    Mismatched locale, skip feature. compdb: TW, current location: IT

2023-08-25 10:27:57, Info                  CBS    Appl: Higher version found for package: Microsoft-Windows-TabletPCMath-Package~31bf3856ad364e35~amd64~~10.0.19041.1, superseded. (Version on system:Microsoft-Windows-TabletPCMath-Package~31bf3856ad364e35~amd64~~10.0.19041.2193)
2023-08-25 10:27:57, Info                  CBS    Appl: Evaluating package applicability for package Microsoft-Windows-TabletPCMath-Package~31bf3856ad364e35~amd64~~10.0.19041.1, applicable state: Superseded

2023-08-25 10:27:57, Info                  CBS    No startup processing required, TrustedInstaller service was not set as autostart

2023-08-25 10:30:04, Info                  CBS    CBS Engine already deactivated
2023-08-25 10:30:04, Info                  CBS    CBS Engine already deactivated
2023-08-25 10:30:04, Info                  CBS    CbsCoreFinalize: ComponentAnalyzerFinalize
2023-08-25 10:30:04, Info                  CBS    CbsCoreFinalize: PackageTrackerFinalize
2023-08-25 10:30:04, Info                  CBS    CbsCoreFinalize: CoreResourcesUnload
2023-08-25 10:30:04, Info                  CBS    CbsCoreFinalize: SessionManagerFinalize
2023-08-25 10:30:04, Info                  CBS    Lock: Lock removed: CSIInventoryCriticalSection, level: 64, total lock:10
2023-08-25 10:30:04, Info                  CBS    Lock: Lock removed: CCbsSessionManager, level: 11, total lock:9

2023-08-25 10:45:02, Info                  CBS    Trusted Installer is shutting down because: SHUTDOWN_REASON_AUTOSTOP
2023-08-25 10:45:02, Info                  CBS    TiWorker signaled for shutdown, going to exit.
2023-08-25 10:45:02, Info                  CBS    Deleting the contents of directory: \\?\C:\WINDOWS\CbsTemp
2023-08-25 10:45:02, Info                  CBS    Deletion of: \\?\C:\WINDOWS\CbsTemp successful
2023-08-25 10:45:02, Info                  CBS    CbsCoreFinalize: ExecutionEngineFinalize
2023-08-25 10:45:02, Info                  CBS    Execution Engine Finalize
2023-08-25 10:45:02, Info                  CBS    Execution Engine Finalize
2023-08-25 10:45:02, Info                  CBS    Lock: Lock removed: TiWorkerClassFactory, level: 30, total lock:3
2023-08-25 10:45:02, Info                  CBS    Lock: Lock removed: CCbsWorker, level: 5, total lock:2

 

 

[Kaspema777]

I've set the TrustedInstaller as automatic and then it let me install the updates. Can a malware do this? Or just malicious code executed by remote like Kaspersky news said...