Posted by Cruzinit
Henagon

Gen:HackTool.WinCred.1 - On 2 of our computers - Keeps coming back

Malware name: Gen:HackTool.WinCred.1
Malware file path: c:\windows\system32\lsasrv.dll
Detection time: 29-Jun-2017 22:33:07 UTC
Additional information / action: File infected

On a users compuiter and our 2012 Remote access server

When went to check the registery found regedit already had some keys open that I never played wuth before.

Concerned IM being hacked

Thanks in advanced

John PC.PNGdan reg.PNG

 

Who Me Too'd this topic