Autoruns is displaying very odd Timestamps..

RHarding 1 Reputation point
2021-03-26T07:14:47.07+00:00

I have been getting some strange system behavior on my personal PC, along with odd activity via SMB and Terminal server& RDP, and immediately after I finished looking at all this in the logs, I literally watched my machine do an lsass dump, via process hacker and Wireshark, at which point I disconnected it from the network with a machete... Anyways, I opened autoruns to help with my search for any persistence, and it showed these timestamps ([1]: /api/attachments/81788-auto.png).?platform=QnA I loaded a clean copy from another machine after this occurred, same thing happened. I couldn't find but one other instance on the web of this, and the person was referred here by the mod. So, any ideas?

20H2 19042.867, 4770k, Kaspersky

Sysinternals
Sysinternals
Advanced system utilities to manage, troubleshoot, and diagnose Windows and Linux systems and applications.
1,095 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Peter2 6 Reputation points
    2021-04-15T09:20:12.757+00:00

    Should there be a screenshot? I see only the path ... ps ([1]: /api/attachments/81788-auto.png).?platform=QnA I ....

    0 comments