Hi there, I need your help to identify on this filename which scanned by Norton Anti-virus. It founds under runtimebroker.exe of the windows so it says that we have detected a program acting abnormally on your computer . This program was blocked.
runtimebroker.exe
Threat name: SONAR.DIIHijack@gen10
Many thanks
Norton Security/360 v22 or v24?
Issue:
Detailed description:
Product & version number:
OS details:
Error message:
Supporting screenshots: Show details
Security History: related events
Note: Do not post Personally Identifiable Information like email address, personal phone number, physical home address, product key etc.
fwiw ~
Runtimebroker.exe: What It Is & Should I Remove It? here
Remove RuntimeBroker.exe Malware [Virus Removal Guide] here
fwiw ~
DLL hijacking is a method of injecting malicious code into an application by exploiting the way some Windows applications search and load Dynamic Link Libraries (DLL).
========================================
Did you clear browser cookies n cache?
Do you run browser sync?
Did you recently install any program / browser extension?
Did you recently allow push notifications?
Did you recently change site permissions?
Did you run Norton Full Scan?
Did you run Malwarebytes Scan?
==============================================
@Sopheak Download and run Rkill so we can determine if there are any malicious processes loading from the system registry and other areas. Please post what your finding are so we can assist further.
SA
Hello @Sopheak
Please post progress
Hello @Sopheak
Please post progress