Reply to thread

Message

<blockquote data-quote="BIC1" data-source="post: 1117858" data-attributes="member: 120529">Windows 11 HP Desktop.&nbsp; A few months ago, I clicked on something and got some scareware.&nbsp; I didn&#039;t click on anything else as demanded.&nbsp; I had a little difficulty closing the tab, but eventually closed it and things seemed OK.I ran multiple full scans using Windows Defender and a few other free online scanners, I don&#039;t remember which ones.&nbsp; All pronounced the PC clean.&nbsp; I tried to run Defender&#039;s offline root scanner as well as another free online root scanner.&nbsp; For both, Windows seemed to crash.&nbsp; I tried both multiple times a few months ago with the crash happening well into the scans.My PC seems to be OK these last few months, doing quick &amp; full scans with Defender.&nbsp; I tried the Defender offline root scan a few days ago.&nbsp;&nbsp; Finally, success in completing the scan.&nbsp; I checked the Event Viewer for results.&nbsp; Maybe about 100 log entries.&nbsp; Many entries seem routine but some are similar to the two examples below:Microsoft Defender Antivirus Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware.Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\CoreService\WdConfigHash = 0x1B094E8ENew value: HKLM\SOFTWARE\Microsoft\Windows Defender\CoreService\WdConfigHash = 0x10D09909Microsoft Defender Antivirus Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware.Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\CoreService\WdConfigHash = 0x50C86BA8New value: HKLM\SOFTWARE\Microsoft\Windows Defender\CoreService\WdConfigHash = 0x4A31BE0DWhat does &quot;may&quot; mean?&nbsp; I don&#039;t know how to interpret the settings.&nbsp; Am I good?&nbsp; Any suggestions for online root scanners?&nbsp; What should I do?&nbsp; Thanks.</blockquote>

[QUOTE="BIC1, post: 1117858, member: 120529"] Windows 11 HP Desktop. A few months ago, I clicked on something and got some scareware. I didn't click on anything else as demanded. I had a little difficulty closing the tab, but eventually closed it and things seemed OK. I ran multiple full scans using Windows Defender and a few other free online scanners, I don't remember which ones. All pronounced the PC clean. I tried to run Defender's offline root scanner as well as another free online root scanner. For both, Windows seemed to crash. I tried both multiple times a few months ago with the crash happening well into the scans. My PC seems to be OK these last few months, doing quick & full scans with Defender. I tried the Defender offline root scan a few days ago. Finally, success in completing the scan. I checked the Event Viewer for results. Maybe about 100 log entries. Many entries seem routine but some are similar to the two examples below: Microsoft Defender Antivirus Configuration has changed. If this is an unexpected event you should review the settings as this [U][I][B]may[/B][/I][/U] be the result of malware. Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\CoreService\WdConfigHash = 0x1B094E8E New value: HKLM\SOFTWARE\Microsoft\Windows Defender\CoreService\WdConfigHash = 0x10D09909 Microsoft Defender Antivirus Configuration has changed. If this is an unexpected event you should review the settings as this [B][I][U]may[/U][/I][/B] be the result of malware. Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\CoreService\WdConfigHash = 0x50C86BA8 New value: HKLM\SOFTWARE\Microsoft\Windows Defender\CoreService\WdConfigHash = 0x4A31BE0D What does "[B]may[/B]" mean? I don't know how to interpret the settings. Am I good? Any suggestions for online root scanners? What should I do? Thanks. [/QUOTE]

Verification