File tree Expand file tree Collapse file tree 1 file changed +29
-13
lines changed Expand file tree Collapse file tree 1 file changed +29
-13
lines changed Original file line number Diff line number Diff line change @@ -125,11 +125,15 @@ Detected: Virus: Win32/MpTest!amsi
125
125
Status: Cleaned
126
126
127
127
This threat or app was cleaned or quarantined before it became active on your device.
128
+
128
129
Details: This program is dangerous and replicates by infecting other files.
129
130
130
131
Affected items:
132
+
131
133
amsi: \Device\HarddiskVolume3\Windows\System32\WindowsPowershell\v1. 0 \powershell.exe
134
+
132
135
or
136
+
133
137
amsi: C:\Users\Admin\Desktop\AMSI_vbscript.vbs
134
138
135
139
and / or you might see:
@@ -141,6 +145,7 @@ Detected: Virus: Win32/MpTest!amsi
141
145
Status: Cleaned
142
146
143
147
This threat or app was cleaned or quarantined before it became active on your device.
148
+
144
149
Details: This program is dangerous and replicates by infecting other files
145
150
```
146
151
@@ -195,19 +200,30 @@ Engine Version: AM: 1.1.24080.9, NIS: 1.1.24080.9
195
200
196
201
You might see the following results:
197
202
198
- ``` powershell
199
- CategoryID : 42
200
- DidThreatExecute : True
201
- IsActive : True
202
- Resources :
203
- RollupStatus : 97
204
- SchemaVersion : 1.0.0.0
205
- SeverityID : 5
206
- ThreatID : 2147694217
207
- ThreatName : Virus:Win32/MpTest!amsi
208
- TypeID : 0
209
- PSComputerName :
210
- ```
203
+ ``` powershell
204
+ CategoryID : 42
205
+
206
+ DidThreatExecute : True
207
+
208
+ IsActive : True
209
+
210
+ Resources :
211
+
212
+ RollupStatus : 97
213
+
214
+ SchemaVersion : 1.0.0.0
215
+
216
+ SeverityID : 5
217
+
218
+ ThreatID : 2147694217
219
+
220
+ ThreatName : Virus:Win32/MpTest!amsi
221
+
222
+ TypeID : 0
223
+
224
+ PSComputerName :
225
+ ```
226
+
211
227
212
228
## See also
213
229
You can’t perform that action at this time.
0 commit comments