DeLorean with flux capacitor kit spotted in the PSB portal.

etomcat

Dear F-Secure,

Is it possible to ban impossible entries from appearing in PSB portal or re-normalize them before display?

In the following case for example, the CMOS calendar/clock of a workstation computer is obviously mis-adjusted, so it is "time-travelling" and submitted a malware alert with a future dating for 20th November 2018:

Date and time: 2018.11.20. 23:05:41

Customer: Banki Donat Muszaki Kozepiskola es Kollegium (c254503)

Device: 056-pc  (computer no. 1683794)

User: 056-PC\056

Threat: Application.Hacktool.KMSActivator

Category: Spyware

Object:C:\Program Files\KMSpico\KMSELDI.exe

Action: Blocked, needs user action

Thanks in advance, Yours Sincerely:
Tamas Feher, 2F 2000 Kft., Budapest, Hungary.

Laksh

Hi Tamas,

 

Just to keep you informed, I have shared your post to our PSB team.