To stay updated on your favorite discussions, please create an account or log in. Then, click the Bookmark icon to subscribe and receive notifications.

DeLorean with flux capacitor kit spotted in the PSB portal.

etomcat
etomcat W/ Alumni Posts: 1,172 Firewall Master

Dear F-Secure,

Is it possible to ban impossible entries from appearing in PSB portal or re-normalize them before display?

In the following case for example, the CMOS calendar/clock of a workstation computer is obviously mis-adjusted, so it is "time-travelling" and submitted a malware alert with a future dating for 20th November 2018:

Date and time: 2018.11.20. 23:05:41

Customer: Banki Donat Muszaki Kozepiskola es Kollegium (c254503)

Device: 056-pc  (computer no. 1683794)

User: 056-PC\056

Threat: Application.Hacktool.KMSActivator

Category: Spyware

Object:C:\Program Files\KMSpico\KMSELDI.exe

Action: Blocked, needs user action

Thanks in advance, Yours Sincerely:
Tamas Feher, 2F 2000 Kft., Budapest, Hungary.

Comments

  • Laksh
    Laksh W/ Alumni Posts: 237 Cybercrime Crusader

    Hi Tamas,

     

    Just to keep you informed, I have shared your post to our PSB team.

This discussion has been closed.