Jump to content
Kaspersky Support Forum

Request for Support Regarding Trojan.Script.Miner.gen Alert During Every Video Call on Facebook

Khalid-Here

By Khalid-Here
in Virus and Ransomware related questions

 Share

Recommended Posts

Khalid-Here

Khalid-Here

Posted
Posted

Subject:

Dear Support Team,

Around six to seven months ago, I noticed suspicious activity on my Google account, where it seemed someone had requested my account information.

https://imgur.com/ltZdYKN

https://imgur.com/5jIRMvL

Actions Taken:

  1. Transferred all my data to a new Google account.
  2. Deleted all data, including my Facebook account, from the old account.
  3. Changed passwords for important accounts.

After taking these actions, my computer seemed to return to normal, and I resumed using it for both work and personal activities.

However, I often use Facebook video calls to communicate with friends, and yesterday, something strange happened. My Kaspersky software alerted me about a Trojan named Trojan.Script.Miner.gen during a video call.

Actions Taken:
I immediately formatted my computer to address the issue.

Unfortunately, today, I noticed that during every Facebook video call I make, Kaspersky automatically shows the same warning about the Trojan.Script.Miner.gen. This has left me confused and concerned about what might be happening on my computer.

I have recorded a video of the problem to help explain what is happening, But the issue is that I cannot upload the video file here, so  i uploaded the video via this link

https://i.imgur.com/TUFh4qz.mp4


 

The Report: 

23/01/2025 12:31:02 PM	C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\F4FEDCB8-DAA4-4513-A1F5-C5A79D46190B\root\Document Themes 16\Organic.thmx	Organic.thmx	C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\F4FEDCB8-DAA4-4513-A1F5-C5A79D46190B\root\Document Themes 16	File	Not processed	Object not processed	Not processed					Microsoft Office Click-to-Run (SxS)	OfficeClickToRun.exe	C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe	C:\Program Files\Common Files\microsoft shared\ClickToRun	5164	WORKGROUP\DESKTOP-TQHM1V3$	Initiator	Size
23/01/2025 12:31:07 PM	C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\F4FEDCB8-DAA4-4513-A1F5-C5A79D46190B\root\Integration\C2RInt.16.msi	C2RInt.16.msi	C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\F4FEDCB8-DAA4-4513-A1F5-C5A79D46190B\root\Integration	File	Not processed	Object not processed	Not processed					Microsoft Office Click-to-Run (SxS)	OfficeClickToRun.exe	C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe	C:\Program Files\Common Files\microsoft shared\ClickToRun	5164	WORKGROUP\DESKTOP-TQHM1V3$	Initiator	Size
23/01/2025 12:31:08 PM	C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\F4FEDCB8-DAA4-4513-A1F5-C5A79D46190B\root\Integration\SPPRedist.msi	SPPRedist.msi	C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\F4FEDCB8-DAA4-4513-A1F5-C5A79D46190B\root\Integration	File	Not processed	Object not processed	Not processed					Microsoft Office Click-to-Run (SxS)	OfficeClickToRun.exe	C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe	C:\Program Files\Common Files\microsoft shared\ClickToRun	5164	WORKGROUP\DESKTOP-TQHM1V3$	Initiator	Size
23/01/2025 12:39:31 PM	C:\Users\Windows\Downloads\Unconfirmed 486955.crdownload\exe	exe	C:\Users\Windows\Downloads\Unconfirmed 486955.crdownload//	File	Corrupted	Object corrupted	Corrupted					Google Chrome	chrome.exe	C:\Program Files\Google\Chrome\Application\chrome.exe	C:\Program Files\Google\Chrome\Application	3760	DESKTOP-TQHM1V3\Windows	Initiator	
23/01/2025 5:41:40 PM	C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\DeliveryOptimization\Cache\325d0f30fbd7756516febaa49d906bb8b5a964db\content.bin\SkypeMsixPackage-x86.msix	SkypeMsixPackage-x86.msix	C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\DeliveryOptimization\Cache\325d0f30fbd7756516febaa49d906bb8b5a964db\content.bin//	File	Corrupted	Object corrupted	Corrupted					Host Process for Windows Services	svchost.exe	C:\Windows\System32\svchost.exe	C:\Windows\System32	6148	WORKGROUP\DESKTOP-TQHM1V3$	Initiator	
Yesterday, 24/01/2025 6:56:19 AM	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\GrShaderCache\f_00008b	f_00008b	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\GrShaderCache	File	Processing error	Processing error	Processing error					Google Chrome	chrome.exe	C:\Program Files\Google\Chrome\Application\chrome.exe	C:\Program Files\Google\Chrome\Application	6712	DESKTOP-TQHM1V3\Windows	Initiator	
Yesterday, 24/01/2025 6:56:19 AM	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 3\Cache\Cache_Data\f_000217	f_000217	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 3\Cache\Cache_Data	File	Processing error	Processing error	Processing error					Google Chrome	chrome.exe	C:\Program Files\Google\Chrome\Application\chrome.exe	C:\Program Files\Google\Chrome\Application	8468	DESKTOP-TQHM1V3\Windows	Initiator	
Yesterday, 24/01/2025 6:56:19 AM	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 3\Cache\Cache_Data\f_000218	f_000218	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 3\Cache\Cache_Data	File	Processing error	Processing error	Processing error					Google Chrome	chrome.exe	C:\Program Files\Google\Chrome\Application\chrome.exe	C:\Program Files\Google\Chrome\Application	8468	DESKTOP-TQHM1V3\Windows	Initiator	
Yesterday, 24/01/2025 9:33:37 AM	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 3\Cache\Cache_Data\f_0004b4\f_0004b4	f_0004b4	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 3\Cache\Cache_Data\f_0004b4//	File	Detected	Malicious object detected	Detected	HEUR:Trojan.Script.Miner.gen	Trojan	High	Heuristic analysis	Google Chrome	chrome.exe	C:\Program Files\Google\Chrome\Application\chrome.exe	C:\Program Files\Google\Chrome\Application	8468	DESKTOP-TQHM1V3\Windows	Initiator	Expert analysis
Yesterday, 24/01/2025 9:33:46 AM	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 3\Cache\Cache_Data\f_0004b4\f_0004b4	f_0004b4	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 3\Cache\Cache_Data\f_0004b4//	File	Detected	Malicious object detected	Detected	HEUR:Trojan.Script.Miner.gen	Trojan	High	Heuristic analysis	Google Chrome	chrome.exe	C:\Program Files\Google\Chrome\Application\chrome.exe	C:\Program Files\Google\Chrome\Application	8468	DESKTOP-TQHM1V3\Windows	Initiator	Expert analysis
Yesterday, 24/01/2025 9:33:46 AM	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 3\Cache\Cache_Data\f_0004b4	f_0004b4	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 3\Cache\Cache_Data	File	Deleted	Object deleted	Deleted	HEUR:Trojan.Script.Miner.gen	Trojan	High	Heuristic analysis	Google Chrome	chrome.exe	C:\Program Files\Google\Chrome\Application\chrome.exe	C:\Program Files\Google\Chrome\Application	8468	DESKTOP-TQHM1V3\Windows	Initiator	
Yesterday, 24/01/2025 9:33:46 AM	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 3\Cache\Cache_Data\f_0004b4\f_0004b4	f_0004b4	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 3\Cache\Cache_Data\f_0004b4//	File	Deleted	Object deleted	Deleted	HEUR:Trojan.Script.Miner.gen	Trojan	High	Heuristic analysis	Google Chrome	chrome.exe	C:\Program Files\Google\Chrome\Application\chrome.exe	C:\Program Files\Google\Chrome\Application	8468	DESKTOP-TQHM1V3\Windows	Initiator	
Yesterday, 24/01/2025 9:33:46 AM	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 3\Cache\Cache_Data\f_0004b4	f_0004b4	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 3\Cache\Cache_Data	File	Backup copy created	A backup copy of the object was created	Backup copy created	HEUR:Trojan.Script.Miner.gen	Trojan	High	Heuristic analysis	Google Chrome	chrome.exe	C:\Program Files\Google\Chrome\Application\chrome.exe	C:\Program Files\Google\Chrome\Application	8468	DESKTOP-TQHM1V3\Windows	Initiator	
Yesterday, 24/01/2025 9:37:33 AM	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 3\Cache\Cache_Data\f_0004ee\f_0004ee	f_0004ee	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 3\Cache\Cache_Data\f_0004ee//	File	Detected	Malicious object detected	Detected	HEUR:Trojan.Script.Miner.gen	Trojan	High	Heuristic analysis	Google Chrome	chrome.exe	C:\Program Files\Google\Chrome\Application\chrome.exe	C:\Program Files\Google\Chrome\Application	4724	DESKTOP-TQHM1V3\Windows	Initiator	Expert analysis
Yesterday, 24/01/2025 9:37:42 AM	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 3\Cache\Cache_Data\f_0004ee\f_0004ee	f_0004ee	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 3\Cache\Cache_Data\f_0004ee//	File	Detected	Malicious object detected	Detected	HEUR:Trojan.Script.Miner.gen	Trojan	High	Heuristic analysis	Google Chrome	chrome.exe	C:\Program Files\Google\Chrome\Application\chrome.exe	C:\Program Files\Google\Chrome\Application	4724	DESKTOP-TQHM1V3\Windows	Initiator	Expert analysis
Yesterday, 24/01/2025 9:37:42 AM	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 3\Cache\Cache_Data\f_0004ee	f_0004ee	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 3\Cache\Cache_Data	File	Deleted	Object deleted	Deleted	HEUR:Trojan.Script.Miner.gen	Trojan	High	Heuristic analysis	Google Chrome	chrome.exe	C:\Program Files\Google\Chrome\Application\chrome.exe	C:\Program Files\Google\Chrome\Application	4724	DESKTOP-TQHM1V3\Windows	Initiator	
Yesterday, 24/01/2025 9:37:42 AM	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 3\Cache\Cache_Data\f_0004ee\f_0004ee	f_0004ee	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 3\Cache\Cache_Data\f_0004ee//	File	Deleted	Object deleted	Deleted	HEUR:Trojan.Script.Miner.gen	Trojan	High	Heuristic analysis	Google Chrome	chrome.exe	C:\Program Files\Google\Chrome\Application\chrome.exe	C:\Program Files\Google\Chrome\Application	4724	DESKTOP-TQHM1V3\Windows	Initiator	
Yesterday, 24/01/2025 9:37:42 AM	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 3\Cache\Cache_Data\f_0004ee	f_0004ee	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 3\Cache\Cache_Data	File	Backup copy created	A backup copy of the object was created	Backup copy created	HEUR:Trojan.Script.Miner.gen	Trojan	High	Heuristic analysis	Google Chrome	chrome.exe	C:\Program Files\Google\Chrome\Application\chrome.exe	C:\Program Files\Google\Chrome\Application	4724	DESKTOP-TQHM1V3\Windows	Initiator	
Yesterday, 24/01/2025 10:40:06 AM	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_0000b5\f_0000b5	f_0000b5	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_0000b5//	File	Detected	Malicious object detected	Detected	HEUR:Trojan.Script.Miner.gen	Trojan	High	Heuristic analysis	Google Chrome	chrome.exe	C:\Program Files\Google\Chrome\Application\chrome.exe	C:\Program Files\Google\Chrome\Application	4724	DESKTOP-TQHM1V3\Windows	Initiator	Expert analysis
Yesterday, 24/01/2025 10:40:14 AM	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_0000b5\f_0000b5	f_0000b5	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_0000b5//	File	Detected	Malicious object detected	Detected	HEUR:Trojan.Script.Miner.gen	Trojan	High	Heuristic analysis	Google Chrome	chrome.exe	C:\Program Files\Google\Chrome\Application\chrome.exe	C:\Program Files\Google\Chrome\Application	4724	DESKTOP-TQHM1V3\Windows	Initiator	Expert analysis
Yesterday, 24/01/2025 10:40:14 AM	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_0000b5	f_0000b5	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data	File	Deleted	Object deleted	Deleted	HEUR:Trojan.Script.Miner.gen	Trojan	High	Heuristic analysis	Google Chrome	chrome.exe	C:\Program Files\Google\Chrome\Application\chrome.exe	C:\Program Files\Google\Chrome\Application	4724	DESKTOP-TQHM1V3\Windows	Initiator	
Yesterday, 24/01/2025 10:40:14 AM	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_0000b5\f_0000b5	f_0000b5	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_0000b5//	File	Deleted	Object deleted	Deleted	HEUR:Trojan.Script.Miner.gen	Trojan	High	Heuristic analysis	Google Chrome	chrome.exe	C:\Program Files\Google\Chrome\Application\chrome.exe	C:\Program Files\Google\Chrome\Application	4724	DESKTOP-TQHM1V3\Windows	Initiator	
Yesterday, 24/01/2025 10:40:14 AM	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_0000b5	f_0000b5	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data	File	Backup copy created	A backup copy of the object was created	Backup copy created	HEUR:Trojan.Script.Miner.gen	Trojan	High	Heuristic analysis	Google Chrome	chrome.exe	C:\Program Files\Google\Chrome\Application\chrome.exe	C:\Program Files\Google\Chrome\Application	4724	DESKTOP-TQHM1V3\Windows	Initiator	
Yesterday, 24/01/2025 10:46:03 AM	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_0000d4\f_0000d4	f_0000d4	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_0000d4//	File	Detected	Malicious object detected	Detected	HEUR:Trojan.Script.Miner.gen	Trojan	High	Heuristic analysis	Google Chrome	chrome.exe	C:\Program Files\Google\Chrome\Application\chrome.exe	C:\Program Files\Google\Chrome\Application	4724	DESKTOP-TQHM1V3\Windows	Initiator	Expert analysis
Yesterday, 24/01/2025 10:46:11 AM	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_0000d4\f_0000d4	f_0000d4	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_0000d4//	File	Detected	Malicious object detected	Detected	HEUR:Trojan.Script.Miner.gen	Trojan	High	Heuristic analysis	Google Chrome	chrome.exe	C:\Program Files\Google\Chrome\Application\chrome.exe	C:\Program Files\Google\Chrome\Application	4724	DESKTOP-TQHM1V3\Windows	Initiator	Expert analysis
Yesterday, 24/01/2025 10:46:11 AM	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_0000d4	f_0000d4	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data	File	Deleted	Object deleted	Deleted	HEUR:Trojan.Script.Miner.gen	Trojan	High	Heuristic analysis	Google Chrome	chrome.exe	C:\Program Files\Google\Chrome\Application\chrome.exe	C:\Program Files\Google\Chrome\Application	4724	DESKTOP-TQHM1V3\Windows	Initiator	
Yesterday, 24/01/2025 10:46:11 AM	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_0000d4\f_0000d4	f_0000d4	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_0000d4//	File	Deleted	Object deleted	Deleted	HEUR:Trojan.Script.Miner.gen	Trojan	High	Heuristic analysis	Google Chrome	chrome.exe	C:\Program Files\Google\Chrome\Application\chrome.exe	C:\Program Files\Google\Chrome\Application	4724	DESKTOP-TQHM1V3\Windows	Initiator	
Yesterday, 24/01/2025 10:46:11 AM	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_0000d4	f_0000d4	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data	File	Backup copy created	A backup copy of the object was created	Backup copy created	HEUR:Trojan.Script.Miner.gen	Trojan	High	Heuristic analysis	Google Chrome	chrome.exe	C:\Program Files\Google\Chrome\Application\chrome.exe	C:\Program Files\Google\Chrome\Application	4724	DESKTOP-TQHM1V3\Windows	Initiator	
Yesterday, 24/01/2025 10:47:47 AM	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_0000db\f_0000db	f_0000db	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_0000db//	File	Detected	Malicious object detected	Detected	HEUR:Trojan.Script.Miner.gen	Trojan	High	Heuristic analysis	Google Chrome	chrome.exe	C:\Program Files\Google\Chrome\Application\chrome.exe	C:\Program Files\Google\Chrome\Application	4724	DESKTOP-TQHM1V3\Windows	Initiator	Expert analysis
Yesterday, 24/01/2025 10:47:56 AM	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_0000db\f_0000db	f_0000db	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_0000db//	File	Detected	Malicious object detected	Detected	HEUR:Trojan.Script.Miner.gen	Trojan	High	Heuristic analysis	Google Chrome	chrome.exe	C:\Program Files\Google\Chrome\Application\chrome.exe	C:\Program Files\Google\Chrome\Application	4724	DESKTOP-TQHM1V3\Windows	Initiator	Expert analysis
Yesterday, 24/01/2025 10:47:56 AM	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_0000db	f_0000db	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data	File	Deleted	Object deleted	Deleted	HEUR:Trojan.Script.Miner.gen	Trojan	High	Heuristic analysis	Google Chrome	chrome.exe	C:\Program Files\Google\Chrome\Application\chrome.exe	C:\Program Files\Google\Chrome\Application	4724	DESKTOP-TQHM1V3\Windows	Initiator	
Yesterday, 24/01/2025 10:47:56 AM	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_0000db\f_0000db	f_0000db	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_0000db//	File	Deleted	Object deleted	Deleted	HEUR:Trojan.Script.Miner.gen	Trojan	High	Heuristic analysis	Google Chrome	chrome.exe	C:\Program Files\Google\Chrome\Application\chrome.exe	C:\Program Files\Google\Chrome\Application	4724	DESKTOP-TQHM1V3\Windows	Initiator	
Yesterday, 24/01/2025 10:47:56 AM	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_0000db	f_0000db	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data	File	Backup copy created	A backup copy of the object was created	Backup copy created	HEUR:Trojan.Script.Miner.gen	Trojan	High	Heuristic analysis	Google Chrome	chrome.exe	C:\Program Files\Google\Chrome\Application\chrome.exe	C:\Program Files\Google\Chrome\Application	4724	DESKTOP-TQHM1V3\Windows	Initiator	
Yesterday, 24/01/2025 10:50:20 AM	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_00010f\f_00010f	f_00010f	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_00010f//	File	Detected	Malicious object detected	Detected	HEUR:Trojan.Script.Miner.gen	Trojan	High	Heuristic analysis	Google Chrome	chrome.exe	C:\Program Files\Google\Chrome\Application\chrome.exe	C:\Program Files\Google\Chrome\Application	4724	DESKTOP-TQHM1V3\Windows	Initiator	Expert analysis
Yesterday, 24/01/2025 10:50:30 AM	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_00010f\f_00010f	f_00010f	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_00010f//	File	Detected	Malicious object detected	Detected	HEUR:Trojan.Script.Miner.gen	Trojan	High	Heuristic analysis	Google Chrome	chrome.exe	C:\Program Files\Google\Chrome\Application\chrome.exe	C:\Program Files\Google\Chrome\Application	4724	DESKTOP-TQHM1V3\Windows	Initiator	Expert analysis
Yesterday, 24/01/2025 10:50:30 AM	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_00010f	f_00010f	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data	File	Deleted	Object deleted	Deleted	HEUR:Trojan.Script.Miner.gen	Trojan	High	Heuristic analysis	Google Chrome	chrome.exe	C:\Program Files\Google\Chrome\Application\chrome.exe	C:\Program Files\Google\Chrome\Application	4724	DESKTOP-TQHM1V3\Windows	Initiator	
Yesterday, 24/01/2025 10:50:30 AM	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_00010f\f_00010f	f_00010f	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_00010f//	File	Deleted	Object deleted	Deleted	HEUR:Trojan.Script.Miner.gen	Trojan	High	Heuristic analysis	Google Chrome	chrome.exe	C:\Program Files\Google\Chrome\Application\chrome.exe	C:\Program Files\Google\Chrome\Application	4724	DESKTOP-TQHM1V3\Windows	Initiator	
Yesterday, 24/01/2025 10:50:30 AM	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_00010f	f_00010f	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data	File	Backup copy created	A backup copy of the object was created	Backup copy created	HEUR:Trojan.Script.Miner.gen	Trojan	High	Heuristic analysis	Google Chrome	chrome.exe	C:\Program Files\Google\Chrome\Application\chrome.exe	C:\Program Files\Google\Chrome\Application	4724	DESKTOP-TQHM1V3\Windows	Initiator	
Yesterday, 24/01/2025 10:53:07 AM	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_000118\f_000118	f_000118	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_000118//	File	Detected	Malicious object detected	Detected	HEUR:Trojan.Script.Miner.gen	Trojan	High	Heuristic analysis	Google Chrome	chrome.exe	C:\Program Files\Google\Chrome\Application\chrome.exe	C:\Program Files\Google\Chrome\Application	4724	DESKTOP-TQHM1V3\Windows	Initiator	Expert analysis
Yesterday, 24/01/2025 10:53:17 AM	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_000118\f_000118	f_000118	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_000118//	File	Detected	Malicious object detected	Detected	HEUR:Trojan.Script.Miner.gen	Trojan	High	Heuristic analysis	Google Chrome	chrome.exe	C:\Program Files\Google\Chrome\Application\chrome.exe	C:\Program Files\Google\Chrome\Application	4724	DESKTOP-TQHM1V3\Windows	Initiator	Expert analysis
Yesterday, 24/01/2025 10:53:17 AM	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_000118	f_000118	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data	File	Deleted	Object deleted	Deleted	HEUR:Trojan.Script.Miner.gen	Trojan	High	Heuristic analysis	Google Chrome	chrome.exe	C:\Program Files\Google\Chrome\Application\chrome.exe	C:\Program Files\Google\Chrome\Application	4724	DESKTOP-TQHM1V3\Windows	Initiator	
Yesterday, 24/01/2025 10:53:17 AM	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_000118\f_000118	f_000118	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_000118//	File	Deleted	Object deleted	Deleted	HEUR:Trojan.Script.Miner.gen	Trojan	High	Heuristic analysis	Google Chrome	chrome.exe	C:\Program Files\Google\Chrome\Application\chrome.exe	C:\Program Files\Google\Chrome\Application	4724	DESKTOP-TQHM1V3\Windows	Initiator	
Yesterday, 24/01/2025 10:53:17 AM	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_000118	f_000118	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data	File	Backup copy created	A backup copy of the object was created	Backup copy created	HEUR:Trojan.Script.Miner.gen	Trojan	High	Heuristic analysis	Google Chrome	chrome.exe	C:\Program Files\Google\Chrome\Application\chrome.exe	C:\Program Files\Google\Chrome\Application	4724	DESKTOP-TQHM1V3\Windows	Initiator	
Yesterday, 24/01/2025 6:17:37 PM	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_00017b\f_00017b	f_00017b	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_00017b//	File	Detected	Malicious object detected	Detected	HEUR:Trojan.Script.Miner.gen	Trojan	High	Heuristic analysis	Google Chrome	chrome.exe	C:\Program Files\Google\Chrome\Application\chrome.exe	C:\Program Files\Google\Chrome\Application	492	DESKTOP-TQHM1V3\Windows	Initiator	Expert analysis
Yesterday, 24/01/2025 6:17:47 PM	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_00017b\f_00017b	f_00017b	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_00017b//	File	Detected	Malicious object detected	Detected	HEUR:Trojan.Script.Miner.gen	Trojan	High	Heuristic analysis	Google Chrome	chrome.exe	C:\Program Files\Google\Chrome\Application\chrome.exe	C:\Program Files\Google\Chrome\Application	492	DESKTOP-TQHM1V3\Windows	Initiator	Expert analysis
Yesterday, 24/01/2025 6:17:47 PM	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_00017b	f_00017b	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data	File	Deleted	Object deleted	Deleted	HEUR:Trojan.Script.Miner.gen	Trojan	High	Heuristic analysis	Google Chrome	chrome.exe	C:\Program Files\Google\Chrome\Application\chrome.exe	C:\Program Files\Google\Chrome\Application	492	DESKTOP-TQHM1V3\Windows	Initiator	
Yesterday, 24/01/2025 6:17:47 PM	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_00017b\f_00017b	f_00017b	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_00017b//	File	Deleted	Object deleted	Deleted	HEUR:Trojan.Script.Miner.gen	Trojan	High	Heuristic analysis	Google Chrome	chrome.exe	C:\Program Files\Google\Chrome\Application\chrome.exe	C:\Program Files\Google\Chrome\Application	492	DESKTOP-TQHM1V3\Windows	Initiator	
Yesterday, 24/01/2025 6:17:46 PM	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_00017b	f_00017b	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data	File	Backup copy created	A backup copy of the object was created	Backup copy created	HEUR:Trojan.Script.Miner.gen	Trojan	High	Heuristic analysis	Google Chrome	chrome.exe	C:\Program Files\Google\Chrome\Application\chrome.exe	C:\Program Files\Google\Chrome\Application	492	DESKTOP-TQHM1V3\Windows	Initiator	
Yesterday, 24/01/2025 6:28:07 PM	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_00019b\f_00019b	f_00019b	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_00019b//	File	Detected	Malicious object detected	Detected	HEUR:Trojan.Script.Miner.gen	Trojan	High	Heuristic analysis	Google Chrome	chrome.exe	C:\Program Files\Google\Chrome\Application\chrome.exe	C:\Program Files\Google\Chrome\Application	5268	DESKTOP-TQHM1V3\Windows	Initiator	Expert analysis
Yesterday, 24/01/2025 6:28:16 PM	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_00019b\f_00019b	f_00019b	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_00019b//	File	Detected	Malicious object detected	Detected	HEUR:Trojan.Script.Miner.gen	Trojan	High	Heuristic analysis	Google Chrome	chrome.exe	C:\Program Files\Google\Chrome\Application\chrome.exe	C:\Program Files\Google\Chrome\Application	5268	DESKTOP-TQHM1V3\Windows	Initiator	Expert analysis
Yesterday, 24/01/2025 6:28:16 PM	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_00019b	f_00019b	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data	File	Deleted	Object deleted	Deleted	HEUR:Trojan.Script.Miner.gen	Trojan	High	Heuristic analysis	Google Chrome	chrome.exe	C:\Program Files\Google\Chrome\Application\chrome.exe	C:\Program Files\Google\Chrome\Application	5268	DESKTOP-TQHM1V3\Windows	Initiator	
Yesterday, 24/01/2025 6:28:16 PM	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_00019b\f_00019b	f_00019b	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_00019b//	File	Deleted	Object deleted	Deleted	HEUR:Trojan.Script.Miner.gen	Trojan	High	Heuristic analysis	Google Chrome	chrome.exe	C:\Program Files\Google\Chrome\Application\chrome.exe	C:\Program Files\Google\Chrome\Application	5268	DESKTOP-TQHM1V3\Windows	Initiator	
Yesterday, 24/01/2025 6:28:16 PM	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_00019b	f_00019b	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data	File	Backup copy created	A backup copy of the object was created	Backup copy created	HEUR:Trojan.Script.Miner.gen	Trojan	High	Heuristic analysis	Google Chrome	chrome.exe	C:\Program Files\Google\Chrome\Application\chrome.exe	C:\Program Files\Google\Chrome\Application	5268	DESKTOP-TQHM1V3\Windows	Initiator	
Yesterday, 24/01/2025 6:38:10 PM	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_000207\f_000207	f_000207	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_000207//	File	Detected	Malicious object detected	Detected	HEUR:Trojan.Script.Miner.gen	Trojan	High	Heuristic analysis	Google Chrome	chrome.exe	C:\Program Files\Google\Chrome\Application\chrome.exe	C:\Program Files\Google\Chrome\Application	7976	DESKTOP-TQHM1V3\Windows	Initiator	Expert analysis
Yesterday, 24/01/2025 6:38:21 PM	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_000207\f_000207	f_000207	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_000207//	File	Detected	Malicious object detected	Detected	HEUR:Trojan.Script.Miner.gen	Trojan	High	Heuristic analysis	Google Chrome	chrome.exe	C:\Program Files\Google\Chrome\Application\chrome.exe	C:\Program Files\Google\Chrome\Application	7976	DESKTOP-TQHM1V3\Windows	Initiator	Expert analysis
Yesterday, 24/01/2025 6:38:21 PM	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_000207	f_000207	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data	File	Deleted	Object deleted	Deleted	HEUR:Trojan.Script.Miner.gen	Trojan	High	Heuristic analysis	Google Chrome	chrome.exe	C:\Program Files\Google\Chrome\Application\chrome.exe	C:\Program Files\Google\Chrome\Application	7976	DESKTOP-TQHM1V3\Windows	Initiator	
Yesterday, 24/01/2025 6:38:21 PM	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_000207\f_000207	f_000207	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_000207//	File	Deleted	Object deleted	Deleted	HEUR:Trojan.Script.Miner.gen	Trojan	High	Heuristic analysis	Google Chrome	chrome.exe	C:\Program Files\Google\Chrome\Application\chrome.exe	C:\Program Files\Google\Chrome\Application	7976	DESKTOP-TQHM1V3\Windows	Initiator	
Yesterday, 24/01/2025 6:38:21 PM	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_000207	f_000207	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data	File	Backup copy created	A backup copy of the object was created	Backup copy created	HEUR:Trojan.Script.Miner.gen	Trojan	High	Heuristic analysis	Google Chrome	chrome.exe	C:\Program Files\Google\Chrome\Application\chrome.exe	C:\Program Files\Google\Chrome\Application	7976	DESKTOP-TQHM1V3\Windows	Initiator	
Yesterday, 24/01/2025 6:50:12 PM	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_000217\f_000217	f_000217	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_000217//	File	Detected	Malicious object detected	Detected	HEUR:Trojan.Script.Miner.gen	Trojan	High	Heuristic analysis	Google Chrome	chrome.exe	C:\Program Files\Google\Chrome\Application\chrome.exe	C:\Program Files\Google\Chrome\Application	8428	DESKTOP-TQHM1V3\Windows	Initiator	Expert analysis
Yesterday, 24/01/2025 6:50:22 PM	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_000217\f_000217	f_000217	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_000217//	File	Detected	Malicious object detected	Detected	HEUR:Trojan.Script.Miner.gen	Trojan	High	Heuristic analysis	Google Chrome	chrome.exe	C:\Program Files\Google\Chrome\Application\chrome.exe	C:\Program Files\Google\Chrome\Application	8428	DESKTOP-TQHM1V3\Windows	Initiator	Expert analysis
Yesterday, 24/01/2025 6:50:22 PM	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_000217	f_000217	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data	File	Deleted	Object deleted	Deleted	HEUR:Trojan.Script.Miner.gen	Trojan	High	Heuristic analysis	Google Chrome	chrome.exe	C:\Program Files\Google\Chrome\Application\chrome.exe	C:\Program Files\Google\Chrome\Application	8428	DESKTOP-TQHM1V3\Windows	Initiator	
Yesterday, 24/01/2025 6:50:22 PM	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_000217\f_000217	f_000217	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_000217//	File	Deleted	Object deleted	Deleted	HEUR:Trojan.Script.Miner.gen	Trojan	High	Heuristic analysis	Google Chrome	chrome.exe	C:\Program Files\Google\Chrome\Application\chrome.exe	C:\Program Files\Google\Chrome\Application	8428	DESKTOP-TQHM1V3\Windows	Initiator	
Yesterday, 24/01/2025 6:50:21 PM	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_000217	f_000217	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data	File	Backup copy created	A backup copy of the object was created	Backup copy created	HEUR:Trojan.Script.Miner.gen	Trojan	High	Heuristic analysis	Google Chrome	chrome.exe	C:\Program Files\Google\Chrome\Application\chrome.exe	C:\Program Files\Google\Chrome\Application	8428	DESKTOP-TQHM1V3\Windows	Initiator	
Yesterday, 24/01/2025 6:58:12 PM	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_00022e\f_00022e	f_00022e	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_00022e//	File	Detected	Malicious object detected	Detected	HEUR:Trojan.Script.Miner.gen	Trojan	High	Heuristic analysis	Google Chrome	chrome.exe	C:\Program Files\Google\Chrome\Application\chrome.exe	C:\Program Files\Google\Chrome\Application	4984	DESKTOP-TQHM1V3\Windows	Initiator	Expert analysis
Yesterday, 24/01/2025 6:58:22 PM	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_00022e\f_00022e	f_00022e	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_00022e//	File	Detected	Malicious object detected	Detected	HEUR:Trojan.Script.Miner.gen	Trojan	High	Heuristic analysis	Google Chrome	chrome.exe	C:\Program Files\Google\Chrome\Application\chrome.exe	C:\Program Files\Google\Chrome\Application	4984	DESKTOP-TQHM1V3\Windows	Initiator	Expert analysis
Yesterday, 24/01/2025 6:58:22 PM	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_00022e	f_00022e	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data	File	Deleted	Object deleted	Deleted	HEUR:Trojan.Script.Miner.gen	Trojan	High	Heuristic analysis	Google Chrome	chrome.exe	C:\Program Files\Google\Chrome\Application\chrome.exe	C:\Program Files\Google\Chrome\Application	4984	DESKTOP-TQHM1V3\Windows	Initiator	
Yesterday, 24/01/2025 6:58:22 PM	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_00022e\f_00022e	f_00022e	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_00022e//	File	Deleted	Object deleted	Deleted	HEUR:Trojan.Script.Miner.gen	Trojan	High	Heuristic analysis	Google Chrome	chrome.exe	C:\Program Files\Google\Chrome\Application\chrome.exe	C:\Program Files\Google\Chrome\Application	4984	DESKTOP-TQHM1V3\Windows	Initiator	
Yesterday, 24/01/2025 6:58:22 PM	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data\f_00022e	f_00022e	C:\Users\Windows\AppData\Local\Google\Chrome\User Data\Profile 5\Cache\Cache_Data	File	Backup copy created	A backup copy of the object was created	Backup copy created	HEUR:Trojan.Script.Miner.gen	Trojan	High	Heuristic analysis	Google Chrome	chrome.exe	C:\Program Files\Google\Chrome\Application\chrome.exe	C:\Program Files\Google\Chrome\Application	4984	DESKTOP-TQHM1V3\Windows	Initiator	
Yesterday, 24/01/2025 7:48:00 PM	C:\Users\Windows\AppData\Roaming\IDM\DwnlData\Windows\eiqHtAYDCDfjmdpTRgzA_4\eiqHtAYDCDfjmdpTRgzA.rar\proDAD Disguise 2.0.214.2\disguise-2.0.214.2.exe\current\prodad_opencv48.dll	prodad_opencv48.dll	C:\Users\Windows\AppData\Roaming\IDM\DwnlData\Windows\eiqHtAYDCDfjmdpTRgzA_4\eiqHtAYDCDfjmdpTRgzA.rar//proDAD Disguise 2.0.214.2/disguise-2.0.214.2.exe//current	File	Corrupted	Object corrupted	Corrupted					Internet Download Manager (IDM)	IDMan.exe	C:\Program Files (x86)\Internet Download Manager\IDMan.exe	C:\Program Files (x86)\Internet Download Manager	10956	DESKTOP-TQHM1V3\Windows	Initiator	
Yesterday, 24/01/2025 7:48:00 PM	C:\Users\Windows\AppData\Roaming\IDM\DwnlData\Windows\eiqHtAYDCDfjmdpTRgzA_4\eiqHtAYDCDfjmdpTRgzA.rar\proDAD Disguise 2.0.214.2\disguise-2.0.214.2.exe	disguise-2.0.214.2.exe	C:\Users\Windows\AppData\Roaming\IDM\DwnlData\Windows\eiqHtAYDCDfjmdpTRgzA_4\eiqHtAYDCDfjmdpTRgzA.rar//proDAD Disguise 2.0.214.2	File	Corrupted	Object corrupted	Corrupted					Internet Download Manager (IDM)	IDMan.exe	C:\Program Files (x86)\Internet Download Manager\IDMan.exe	C:\Program Files (x86)\Internet Download Manager	10956	DESKTOP-TQHM1V3\Windows	Initiator	
23/01/2025 12:28:12 PM						Task started							avp.exe	C:\Program Files (x86)\Kaspersky Lab\Kaspersky 21.20\avp.exe	C:\Program Files (x86)\Kaspersky Lab\Kaspersky 21.20		DESKTOP-TQHM1V3\Windows	Active user	
23/01/2025 5:39:31 PM						Task started							avp.exe	C:\Program Files (x86)\Kaspersky Lab\Kaspersky 21.20\avp.exe	C:\Program Files (x86)\Kaspersky Lab\Kaspersky 21.20		NT AUTHORITY\SYSTEM	System user

Could you please guide me on what might be causing this and how I can resolve it?

Thank you for your assistance.

Kind regards,

Berny

Berny

Posted
Posted

@Khalid-Here Welcome.

Please download and run AdwCleaner(*) as ADMIN.

  1. ⚠️ Don’t fix eventual detections ⚠️
  2.  Please attach the TXT Log in your next post

(*) No installation required

  • Like 1
Khalid-Here

Khalid-Here

Posted
  • Author
Posted

Dear Mr. Berny

This is the Reports:

  

# -------------------------------
# Malwarebytes AdwCleaner 8.4.2.0
# -------------------------------
# Build:    03-04-2024
# Database: 2024-03-04.1 (Local)
# Support:  https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Scan
# -------------------------------
# Start:    01-25-2025
# Duration: 00:00:09
# OS:       Windows 10 (Build 19045.5371)
# Scanned:  32066
# Detected: 0


***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

No malicious folders found.

***** [ Files ] *****

No malicious files found.

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

No malicious tasks found.

***** [ Registry ] *****

No malicious registry entries found.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries found.

***** [ Chromium URLs ] *****

No malicious Chromium URLs found.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries found.

***** [ Firefox URLs ] *****

No malicious Firefox URLs found.

***** [ Hosts File Entries ] *****

No malicious hosts file entries found.

***** [ Preinstalled Software ] *****

No Preinstalled Software found.



########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S00].txt ##########

 and:

  

Malwarebytes
www.malwarebytes.com

-Log Details-
Scan Date: 25/01/2025
Scan Time: 1:47 AM
Log File: 3796b526-da7b-11ef-97d2-94de80af524a.json

-Software Information-
Version: 5.2.5.158
Components Version: 1.0.5135
Update Package Version: 1.0.94930
License: Free

-System Information-
OS: Windows 10 (Build 19045.5371)
CPU: x64
File System: NTFS
User: DESKTOP-TQHM1V3\Windows

-Scan Summary-
Scan Type: Threat Scan
Scan Initiated By: Manual
Result: Completed
Objects Scanned: 191952
Threats Detected: 0
Threats Quarantined: 0
Time Elapsed: 2 min, 45 sec

-Scan Options-
Memory: Enabled
Startup: Enabled
File system: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Detect
PUM: Detect

-Scan Details-
Process: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registry Key: 0
(No malicious items detected)

Registry Value: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 0
(No malicious items detected)

File: 0
(No malicious items detected)

Physical Sector: 0
(No malicious items detected)

WMI: 0
(No malicious items detected)


(end)

 

Khalid-Here

Khalid-Here

Posted
  • Author
Posted (edited)

Dear Berny,

Thank you so much for your effort in trying to help me.

Here’s a detailed summary of the actions I have taken so far:

AdwCleaner Download and Scan
When I searched for AdwCleaner, the first website that appeared was Malwarebytes. I downloaded the application, but I realized that it required installation before I could run a scan. Unfortunately, I could not find an option to run the application without installing it. After installation, I performed a scan as shared in my previous post and the second file, but the results showed all entries as "0."

AdwCleaner 8.4.2.0 Attempt
After noticing your request for a log report, I understood that another version or program might include that option. I then found AdwCleaner 8.4.2.0, ran it as an administrator, but received the same results—everything was "0" in the report. These findings were also included in my earlier post and the first file.

Testing Facebook Calls
I tested the call functionality on Facebook to see if there was any difference. Surprisingly, there was no action or response from Kaspersky during this process.

Clearing Browser Cache and Resetting Chrome
After receiving your reply, I followed your instructions to clear the browser cache and about the Chrome its already my default browser from the beginning. I cleared the cache for all four profiles I use on Google Chrome. Additionally, I uninstalled Malwarebytes and restarted my computer.

Post-Restart Facebook Test
After restarting the computer, I tested Facebook again by making a call. This time, the action started, and it showed that there was a Trojan present.

Please let me know if you need any further details or additional steps from my side.

 

2025-01-25_040726.thumb.png.4fb24545292d9c3bfdc57debd800a674.png2025-01-25_040755.png.b53ef62e2b462639e4c0468d1cc39d27.png2025-01-25_040836.thumb.png.8049fccca3a7063b96fd76faf2a9a60f.png2025-01-25_040857.thumb.png.b2ccbb901a482d2aaac3531786fecd31.png

 

 

Edited by Khalid-Here
Berny

Berny

Posted
Posted

@Khalid-Here You are welcome.

For privacy reasons we don’t request system logs , I think that Kaspersky Technical Support is your next option, in the meantime other suggestions may come up in this Forum thread.

Khalid-Here

Khalid-Here

Posted
  • Author
Posted

Thank you for your response and for explaining that system logs can't be requested here due to privacy reasons. I truly appreciate your recommendation to contact Kaspersky Technical Support, and will also keep an eye on this Forum thread for any other helpful suggestions.

 

Reaching Kaspersky Support:
As this is my first time trying to contact Kaspersky, I initially thought technical support was available here on the forum. However, I am unsure how to reach out to Kaspersky Technical Support. Any guidance or links to help me get in touch with them would be greatly appreciated.

 

Details About the Issue and What I Did:

I was able to identify the suspicious, infected file that is automatically generated at the beginning of video calls on Facebook. To confirm, I temporarily disabled Kaspersky protection and monitored the path of the file associated with profile number 5 during the call.

 

Scanning the File:

  • After securing the file, I scanned it using Kaspersky’s program, which confirmed the presence of a Trojan in the file.
  • I also uploaded the file to the website. However, the website’s analysis indicated the file was clean, which left me feeling confused and concerned.

I’ve also attached a screenshot of the findings to help clarify the situation further.

2025-01-25_062322.thumb.png.1a8f308f174b64431d3f7bc9cbb7e936.png

 

 

Additional Observations:
The strange thing is that this behavior occurs only with one specific Facebook account.

  • This account is the only one that generates Trojans at the beginning of each video call.
  • I conducted several tests with other Facebook accounts, and they all work normally without any issues.

 

Some Questions:

  1. Could you provide guidance on how I may have gotten this virus?
  2. Why does this issue appear specifically during Facebook video calls and only with this account?
  3. Why is this Trojan being generated even though I have:
  • Removed all browser add-ons.
  • Formatted my computer.
  1. What steps should I take to remove the Trojan and protect my computer and work files?
  2. How can I best communicate this issue to Kaspersky Technical Support to ensure they understand all the details?

 


Your help means a lot to me, as I am very concerned about the safety of my computer and the security of my files.

Thank you so much for the support and assistance provided here on the forum. I truly value what you all do and wish you continued success and good fortune in the future.

 

 

 

 

Quote

Event: Malicious object detected
User: DESKTOP-TQHM1V3\Windows
User type: Initiator
Application name: explorer.exe
Application path: C:\Windows
Component: File Anti-Virus
Result description: Detected
Type: Trojan
Name: HEUR:Trojan.Script.Miner.gen
Precision: Heuristic analysis
Threat level: High
Object type: File
Object name: f_000075
Object path: C:\Users\Windows\Desktop\f_000075\f_000075//
MD5 of an object: D3E3A4D751CFAEC313E8D20AB03782F5
Reason: Expert analysis
Databases release date: Today, 25/01/2025 1:48:00 AM

 

2025-01-25_072352.png

2025-01-25_072401.png

2025-01-25_072547.png

Berny

Berny

Posted
Posted

@Khalid-Here

9 hours ago, Khalid-Here said:

Application name: explorer.exe
Application path: C:\Windows

Please start CMD as ADMIN and run command 'CHKDSK'  (= running in read-only mode)
Also please check for any suspicious Startup item ?

Kaspersky Technical Support is available here → https://support.kaspersky.com/b2c/#contacts  ,
a Support collaborator will request Logs, Traces and more ...

Khalid-Here

Khalid-Here

Posted
  • Author
Posted

This is the CHKDSK

 

2025-01-25_172030.thumb.png.beb889f15cf52caab53d18f514753b89.png

 

Quote

Microsoft Windows [Version 10.0.19045.5371]
(c) Microsoft Corporation. All rights reserved.

C:\Windows\system32>CHKDSK
The type of the file system is NTFS.

WARNING!  /F parameter not specified.
Running CHKDSK in read-only mode.

Stage 1: Examining basic file system structure ...
  394752 file records processed.
File verification completed.
 Phase duration (File record verification): 4.41 seconds.
  19548 large file records processed.
 Phase duration (Orphan file record recovery): 0.00 milliseconds.
  0 bad file records processed.
 Phase duration (Bad file record checking): 0.70 milliseconds.

Stage 2: Examining file name linkage ...
  170 reparse records processed.
Index entry AM5C1C~1.MAN in index $I30 of file 53A8 is incorrect.
  576824 index entries processed.
Index verification completed.
 Phase duration (Index verification): 22.84 seconds.

Errors found.  CHKDSK cannot continue in read-only mode.

C:\Windows\system32>

 

about the Startup item:

 

 

2025-01-25_172327.png

2025-01-25_172408.png

2025-01-25_172514.png

2025-01-25_172655.png

harlan4096

harlan4096

Posted
Posted

Maybe it's a false positive, can You try the same with a different browser: FireFox, Edge?

  • Like 1
Berny

Berny

Posted
Posted

Also "Errors found " , it looks like CHKDSK is detecting system errors ...🤔

errors.thumb.jpg.d443eee48c82ef7d6a6e9c656c19c610.jpg

  • Like 1

Please sign in to comment

You will be able to leave a comment after signing in



Sign In Now
 Share
Go to topic listing


×
×
  • Create New...