- HEUR:Trojan.Multi.StartPageTask.b -> c:windowssystem32tasksfornews2017orgqaq
- not-a-virus:HEUR:RiskTool.MSIL.HackKMS.gen -> c:programdatakmsautoskmsauto net.exe
- not-a-virus:HEUR:RiskTool.MSIL.HackKMS.gen -> c:programdatakmsautoskmsauto net.exe
- not-a-virus:RiskTool.Win64.BitCoinMiner.dca -> c:windowssvchost.exe