The SecurityHelper.dll Trojan Show-up Episode
Recently, SecurityHelper.dll Trojan is very active. Many antivirus programs like Malwarebytes have detected it. ( The alarm is not a false. Victims have to take it seriously.) It hides itself in C disk; the location is C:\ProgramData\Microsoft\Security\Client\SecurityHelper.dll. It's the variant of Win64/Sathurbot.A trojan. The infection of Win64/Sathurbot.A trojan creats a subfolder called 'cache' with at least two temporary files in it at the each reboot. It also download 2 new ones after every reboot and the mentioned ones were the last ones.
