I assumed a pdf as safe (dumb I know) and I opened it. Turns out it was a Trojan.

In the *Virus Total Observer/*Processes Terminated there is this line:

2128 - C:Windowssystem32schtasks.exe /delete /f /TN "MicrosoftWindowsCustomer Experience Improvement ProgramUploader"

Does this mean that it tries to delete schtasks.exe if triggered?

So, if I still have that file, can I consider myself safe?

Virus Total Link: https://www.virustotal.com/gui/file/7eac6a51a7113f614aa37b2bdc4dd71690d35ac3a599a23ddde153fe0ff18cd6/behavior/VirusTotal%20Observer

submitted by /u/neilpare
[link] [comments]

Go to Source of this post
Author Of this post: /u/neilpare

By admin