Anti-malware scan started at: 04.06.

2018 10:00:21
04.06.2018 10:01:45 Running Processes
Probably Malicious: chrome.exe = C:\PROGRAM FILES
(X86)\GOOGLE\CHROME\APPLICATION\CHROME.EXE
04.06.2018 10:01:45 Running Processes
Suspicious: chrome.exe = C:\PROGRAM FILES
(X86)\GOOGLE\CHROME\APPLICATION\CHROME.EXE
04.06.2018 10:01:45 Running Processes
Suspicious: chrome.exe = C:\PROGRAM FILES
(X86)\GOOGLE\CHROME\APPLICATION\CHROME.EXE
04.06.2018 10:02:11 Unwanted Software Files
Probably Malicious: C:\windows\SYSWOW64\SSL\ = C:\windows\SYSWOW64\SSL\
04.06.2018 10:02:24 Registry Run
Probably Malicious: chrome = C:\PROGRAM FILES
(X86)\GOOGLE\CHROME\APPLICATION\CHROME.EXE
04.06.2018 10:02:24 Scheduled Tasks 2
Unknown: C:\WINDOWS\SYSNATIVE\TASKS\McAfee\McAfee Auto Maintenance Task Agent =
04.06.2018 10:02:24 Scheduled Tasks 2
Unknown: C:\WINDOWS\SYSNATIVE\TASKS\McAfee\McAfee Idle Detection Task =
04.06.2018 10:02:24 Scheduled Tasks 2
Unknown: C:\WINDOWS\SYSNATIVE\TASKS\OneDrive Standalone Update Task v2 =
%localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe
04.06.2018 10:02:24 Scheduled Tasks 2
Unknown: C:\WINDOWS\SYSNATIVE\TASKS\OneDrive Standalone Update Task-S-1-5-21-
1204794195-3306160545-2612707582-1001 = %localappdata
%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe
04.06.2018 10:02:24 Scheduled Tasks 2
Probably Malicious: C:\WINDOWS\SYSNATIVE\TASKS\{761E2A0E-3176-6668-0D8D-
8B91DFE3C90E} = C:\WINDOWS\SYSWOW64\MFJCEJ.EXE
04.06.2018 10:02:24 Scheduled Tasks 2
Probably Malicious: C:\WINDOWS\SYSNATIVE\TASKS\{8FB816DC-EE6D-BD31-B308-
846A45B72EB2} = C:\WINDOWS\ZXLIQXY.EXE
04.06.2018 10:02:24 Scheduled Tasks 2.0 Cached
Unknown: OneDrive Standalone Update Task v2 = %localappdata
%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe
04.06.2018 10:02:24 Scheduled Tasks 2.0 Cached
Unknown: OneDrive Standalone Update Task-S-1-5-21-1204794195-3306160545-2612707582-
1001 = %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe
04.06.2018 10:02:24 Scheduled Tasks 2.0 Cached
Probably Malicious: {761E2A0E-3176-6668-0D8D-8B91DFE3C90E} =
C:\WINDOWS\SYSWOW64\MFJCEJ.EXE
04.06.2018 10:02:24 Scheduled Tasks 2.0 Cached
Probably Malicious: {8FB816DC-EE6D-BD31-B308-846A45B72EB2} = C:\WINDOWS\ZXLIQXY.EXE
04.06.2018 10:04:06 Auto Services
Probably Malicious: 31cecd423ba2da995d2fb5a982d990ef = C:\PROGRAM
FILES\31CECD423BA2DA995D2FB5A982D990EF\47C21071E0186EB34491E5E250B2C8A7.EXE
04.06.2018 10:04:06 Auto Services
Probably Malicious: f8cca49840411317a49ed03c487c2abc =
C:\WINDOWS\GVKMKZICFOFUARMA.GVL
04.06.2018 10:04:06 Auto Services
Unknown: HP Comm Recover = C:\PROGRAM FILES\HPCOMMRECOVERY\HPCOMMRECOVERY.EXE
04.06.2018 10:04:06 Drivers
Probably Malicious: 1e85a5555927e3685ea83b4cf5a2002c =
C:\WINDOWS\SYSTEM32\DRIVERS\1E85A5555927E3685EA83B4CF5A2002C.SYS
04.06.2018 10:04:11 IE Extensions - All Users
Unknown: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} =
04.06.2018 10:04:11 Google Chrome Addons
Unknown: jkfpchpiljkaemlpmpebnglgkomamfeo =
C:\Users\TEMP\AppData\Local\Google\Chrome\User
Data\Default\Extensions\jkfpchpiljkaemlpmpebnglgkomamfeo\1.5_0
04.06.2018 10:04:11 Pre-installed extensions
Unknown: jkfpchpiljkaemlpmpebnglgkomamfeo =
https://clients2.google.com/service/update2/crx
04.06.2018 10:04:13 Current Home Page
Unknown: Start Page = http://hp17win10.msn.com/?pc=HCTE
04.06.2018 10:04:14 Current Home Page
Unknown: Default_Page_URL = http://hp17win10.msn.com/?pc=HCTE
Anti-malware scan finished at: 04.06.2018 10:04:15
Anti-malware scan started at: 04.06.2018 18:29:03
04.06.2018 18:29:11 Running Processes
Probably Malicious: chrome.exe = C:\PROGRAM FILES
(X86)\GOOGLE\CHROME\APPLICATION\CHROME.EXE
04.06.2018 18:29:11 Running Processes
Suspicious: chrome.exe = C:\PROGRAM FILES
(X86)\GOOGLE\CHROME\APPLICATION\CHROME.EXE
04.06.2018 18:29:11 Running Processes
Suspicious: chrome.exe = C:\PROGRAM FILES
(X86)\GOOGLE\CHROME\APPLICATION\CHROME.EXE
04.06.2018 18:29:18 Unwanted Software Files
Probably Malicious: C:\windows\SYSWOW64\SSL\ = C:\windows\SYSWOW64\SSL\
04.06.2018 18:29:18 Unwanted Software Files
Probably Malicious: PRISAFE.SYS = C:\WINDOWS\SYSNATIVE\DRIVERS\PRISAFE.SYS
04.06.2018 18:29:21 Registry Run
Probably Malicious: chrome = C:\PROGRAM FILES
(X86)\GOOGLE\CHROME\APPLICATION\CHROME.EXE
04.06.2018 18:29:21 Scheduled Tasks 2
Unknown: C:\WINDOWS\SYSNATIVE\TASKS\McAfee\McAfee Auto Maintenance Task Agent =
04.06.2018 18:29:21 Scheduled Tasks 2
Unknown: C:\WINDOWS\SYSNATIVE\TASKS\McAfee\McAfee Idle Detection Task =
04.06.2018 18:29:21 Scheduled Tasks 2
Probably Malicious: C:\WINDOWS\SYSNATIVE\TASKS\{761E2A0E-3176-6668-0D8D-
8B91DFE3C90E} = C:\WINDOWS\SYSWOW64\MFJCEJ.EXE
04.06.2018 18:29:21 Scheduled Tasks 2
Probably Malicious: C:\WINDOWS\SYSNATIVE\TASKS\{8FB816DC-EE6D-BD31-B308-
846A45B72EB2} = C:\WINDOWS\ZXLIQXY.EXE
04.06.2018 18:29:21 Scheduled Tasks 2.0 Cached
Probably Malicious: {761E2A0E-3176-6668-0D8D-8B91DFE3C90E} =
C:\WINDOWS\SYSWOW64\MFJCEJ.EXE
04.06.2018 18:29:21 Scheduled Tasks 2.0 Cached
Probably Malicious: {8FB816DC-EE6D-BD31-B308-846A45B72EB2} = C:\WINDOWS\ZXLIQXY.EXE
04.06.2018 18:29:46 Auto Services
Probably Malicious: 31cecd423ba2da995d2fb5a982d990ef = C:\PROGRAM
FILES\31CECD423BA2DA995D2FB5A982D990EF\47C21071E0186EB34491E5E250B2C8A7.EXE
04.06.2018 18:29:47 Auto Services
Probably Malicious: f8cca49840411317a49ed03c487c2abc =
C:\WINDOWS\GVKMKZICFOFUARMA.GVL
04.06.2018 18:29:47 Auto Services
Unknown: HP Comm Recover = C:\PROGRAM FILES\HPCOMMRECOVERY\HPCOMMRECOVERY.EXE
04.06.2018 18:29:47 Drivers
Probably Malicious: 1e85a5555927e3685ea83b4cf5a2002c =
C:\WINDOWS\SYSTEM32\DRIVERS\1E85A5555927E3685EA83B4CF5A2002C.SYS
04.06.2018 18:29:47 Drivers
Probably Malicious: prisafe = C:\WINDOWS\SYSTEM32\DRIVERS\PRISAFE.SYS
04.06.2018 18:29:48 IE Extensions - All Users
Unknown: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} =
04.06.2018 18:29:48 Google Chrome Addons
Unknown: jkfpchpiljkaemlpmpebnglgkomamfeo =
C:\Users\TEMP\AppData\Local\Google\Chrome\User
Data\Default\Extensions\jkfpchpiljkaemlpmpebnglgkomamfeo\1.5_0
04.06.2018 18:29:48 Pre-installed extensions
Unknown: jkfpchpiljkaemlpmpebnglgkomamfeo =
https://clients2.google.com/service/update2/crx
04.06.2018 18:29:48 Current Home Page
Unknown: Start Page = http://hp17win10.msn.com/?pc=HCTE
04.06.2018 18:29:48 Current Home Page
Unknown: Default_Page_URL = http://hp17win10.msn.com/?pc=HCTE
Anti-malware scan finished at: 04.06.2018 18:29:49