PENDING Windows Defender - Malware - Produkey.exe

[Craiglee]

Team, I'm a little stumped on this on, Windows 10 Defender detected and subsequently deleted malware Produkey.exe, that's great, however, I'm a little confused as to how this tool got onto the machine in the first place, the tool was detected in a users profile on the machine(users AD account has been disabled for 18+ month) and defender detected the tool as malware a couple of days ago? the users profile hasn't been modified in like 18 months? Why would defender only detect this tool now?

 

[Prajwal Desai]

That's very weird. If the user account has been disabled then probably another user (logged in on same machine) could have downloaded it and saved it to user's profile.

 

[Craiglee]

That's very weird. If the user account has been disabled then probably another user (logged in on same machine) could have downloaded it and saved it to user's profile.

apologies for late response, thank you