Jump to content

PowerShell/TrojanDownloader.Agent.EQN trojan


Recommended Posts

Hello there,

I have several Windows Servers that consistently detect PowerShell/TrojanDownloader.Agent.EQN trojan.

I can't determine which file is impacted by this attack. Every time EFSW shows cleaned by blocking, but the same log appears again after a few hours. How to solve this problem?Capture.thumb.PNG.6fdf98f347d3c46583cc68e4729c4232.PNG

eis_logs.zip

Link to comment
Share on other sites

  • Administrators

Please run Task Scheduler and delete the tasks:

ViGEmBusUpdater1
MSI Task Host - Detect_Monitor

Also I'd recommend enabling:

  • Detection of potentially unsafe applications
  • LiveGrid - feedback system

Note: It is possible that the tasks have already been cleaned by ESET in the mean time.

Link to comment
Share on other sites

Guest
This topic is now closed to further replies.
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...