Jump to content
Microsoft Windows Bulletin Board

Recommended Posts

Posted
Hello! I recently (roughly a month ago) ran an info stealer on accident, i ran FRST, KVRT, RKill and Malwarebytes and got rid of it however i have been noticing some strange Powershell events. Maybe i'm just paranoid and i don't usually check event viewer but you never know.Provider "Registry" is Started. Details:  ProviderName=Registry NewProviderState=Started SequenceNumber=1 HostName=ConsoleHost HostVersion=5.1.22621.4391 HostId=c23e0db0-fe15-4aef-91f7-02433d5450d7 HostApplication=powershell Get-CimInstance Win32_Processor | Format-List -Pro

View the full article

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
×
  • Create New...