DeLorean with flux capacitor kit spotted in the PSB portal.
Dear F-Secure,
Is it possible to ban impossible entries from appearing in PSB portal or re-normalize them before display?
In the following case for example, the CMOS calendar/clock of a workstation computer is obviously mis-adjusted, so it is "time-travelling" and submitted a malware alert with a future dating for 20th November 2018:
Date and time: 2018.11.20. 23:05:41
Customer: Banki Donat Muszaki Kozepiskola es Kollegium (c254503)
Device: 056-pc (computer no. 1683794)
User: 056-PC\056
Threat: Application.Hacktool.KMSActivator
Category: Spyware
Object:C:\Program Files\KMSpico\KMSELDI.exe
Action: Blocked, needs user action
Thanks in advance, Yours Sincerely:
Tamas Feher, 2F 2000 Kft., Budapest, Hungary.
Comments
-
Hi Tamas,
Just to keep you informed, I have shared your post to our PSB team.
1
