Threats found2
Quarantined2
Startup entries14
Last scan3m ago
Recent detections
Trojan:Win32/Phonzy.A!mlStartup · QuarantinedRemoved
Trojan:Win32/MalgentScheduled task · QuarantinedRemoved
Detections — everything Defender caught
Trojan:Win32/Phonzy.A!mlDetected 03:47 AM · Real-time protectionRemoved
Trojan:Win32/MalgentDetected 03:52 AM · Scheduled scanRemoved
PUA:Win32/InstallCoreDetected 6 days ago · Real-time protectionResolved
Startup & persistence entries
RunOnce: updater32.exeRegistry · not in original install manifestFlagged
Scheduled task: SystemCheckSvcTask Scheduler · created after infection windowFlagged
OneDrive.exeStartup folder · signed, known-goodNormal
Network artifacts
Outbound connection — 185.220.x.xBlocked by Defender Firewall · loggedFlagged
Proxy setting changedSystem-wide, set outside normal configFlagged
Hosts fileNo unauthorized entries foundClean
Since last baseline — 3 changes
New scheduled taskSystemCheckSvc, created 04:12 AMNew
Modified run keyHKCU\...\Run — value changedChanged
New browser extensionChrome — "PDF Helper" installedNew
Quarantine — restorable
updater32.exeQuarantined 10:41 AMRestore available
SystemCheckSvc.taskQuarantined 10:42 AMRestore available
PDF Helper (extension)Quarantined 10:43 AMRestore available
Host list — 5 machines
FRONTDESK-PCTriage complete · no findingsClean
BACKOFFICE-01Triage complete · 1 flagged entryFlagged
WAREHOUSE-03Triage in progressRunning