Virus scan completed but "Object corrupted"

[itcurves]

My Windows 10 endpoint protection (KAV) generated an alert for phishing victim. So I ran a full system scan yesterday and got many “Object corrupted” files.

 

What does this mean?

[MilanBortel]

Hi @itcurves,

can you share a list (screenshot) of the files found? This typically happens for temp files, e.g. logs and usually you don’t have to worry.. but still - if you share the list, we can help better 🤠

 

Cheers,
Milan

[itcurves]

Virus Scan: completed 14 minute(s) ago   (events: 9, objects: 1058255, threats: 0, time: 01:37:05) (9)    
3/4/2021 12:19:02 PM    Task started        Task started        ITC\Sbrewer    
3/4/2021 1:18:51 PM    Object corrupted    C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\DeliveryOptimization\Cache\660a64553ca74a64b62155dcba80cab6e26a0a1f\content.bin//PSExpress_3.4.8.0_x64.appx    Corrupted        xxx\xxwer    
3/4/2021 1:18:51 PM    Object corrupted    C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\DeliveryOptimization\Cache\660a64553ca74a64b62155dcba80cab6e26a0a1f\content.bin//PSExpress_3.4.8.0_x86.appx    Corrupted        xxx\xxwer    
3/4/2021 1:18:57 PM    Object corrupted    C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\DeliveryOptimization\Cache\9f68721266276641c9b08792e45ec95829de5cb8\content.bin//candycrushsaga_1.1960.2.0_Win32_RelWithDebInfo.appx//res_output/group_fonts/fonts/DroidSans.HappyRuika.ttf    Corrupted        xxx\xxwer    
3/4/2021 1:19:01 PM    Object corrupted    C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\DeliveryOptimization\Cache\37fd2c565357619bdfef333389c407971a2fe79d\content.bin//Assets/data/video/intro_video.mp4    Corrupted        xxx\xxwer    
3/4/2021 1:19:24 PM    Object corrupted    C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\DeliveryOptimization\Cache\9f68721266276641c9b08792e45ec95829de5cb8\content.bin//candycrushsaga_1.1960.2.0_Win32_RelWithDebInfo.appx    Corrupted        xxx\xxwer    
3/4/2021 1:36:26 PM    Object corrupted    C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.804.1.4\amd64_microsoft-windows-i..emsupport.resources_31bf3856ad364e35_10.0.19041.804_zh-cn_3d91f58d9563393c\f\imapi2fs.dll.mui//NCompress    Corrupted        xxx\xxwer    
3/4/2021 1:36:26 PM    Object corrupted    C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.804.1.4\amd64_microsoft-windows-i..emsupport.resources_31bf3856ad364e35_10.0.19041.804_zh-cn_3d91f58d9563393c\f\imapi2fs.dll.mui    Corrupted        xxx\xxwer    
3/4/2021 1:56:07 PM    Task completed        Task completed        NT AUTHORITY\SYSTEM    

 

[MilanBortel]

Hi @itcurves,

yes, just as I thought - whenever you see a folder path containing “Cache” I wouldn’t worry and remove content from that folder (keep the folder itself!). If files are held by OS, you’ll be prompted..

Cache folder

Last two items are located in servicing\LCU:

servicing folder

For more details on LCU folder please follow https://social.technet.microsoft.com/Forums/en-US/be35a9ee-a610-4fdc-bb6c-50b9f458d19a/huge-lcufolder-after-latest-cumulative-update-on-windows-10-1809?forum=win10itprosetup

 

Hope it helps 🤓

Cheers,
Milan

[itcurves]

Thank you