Windows 10: TrojanDropper:PowerShell/Cobacis.B

hello, i wanna ask for this probelmi got this virus on my laptop, and i manually delete the file from my laptop, but windows defender always detect the file, can u guys help me?Detected: TrojanDropperowerShell/Cobacis.BStatus: Activecontainerfile: C:\Users\62823\Downloads\Compressed\kali-linux-2022.4-installer-amd64.isofile: C:\Users\62823\Downloads\Compressed\kali-linux-2022.4-installer-amd64.iso->pool\main\m\metasploit-framework\metasploit-framework_6.2.26-0kali1_amd64.deb->data.tar.xz->xz->./usr/share/metasploit-framework/vendor/bundle/ruby/3.0.0/cache/rex-powershell-0.1.97.

:)

 

PowerShell randomly poping-up in tool bar

Hello,

Just to verify, do you have any scheduled tasks that uses Powershell? Scheduled tasks makes Powershell window appear periodically on your computer, therefore we suggest that you check the Task Scheduler. Here are the steps:

• Click on Start.
• In the search bar, type Task Scheduler and click on
  
  Task Scheduler in the results.
• Under Active Tasks, check for any tasks that use Powershell and the scheduled time.

If the issue still persist, we suggest that you run a Windows Defender scan to see if it will pick up any malware that the first scan missed.

Let us know the outcome.

 

PowerShell instead of Commandline in Creators Update

Interestingly enough my personal laptop just got the update...and still has Command Prompt listed, not PowerShell...

Edit: Not that it matters...I use both regularly. *Toast :toast:

 

Windows Powershell auto opens when booting up

Hi Victor,

To stop Windows Powershell to start whenever you boot up your laptop, we suggest you to follow the steps listed below for selecting the services you want to run at startup:

• Search System Configurationfrom the taskbar.
  
• Select the top result, System Configuration desktop app.
• Go to the Startup tab on the System Configuration main window.
• Uncheck the box next to Windows Powershell program.
• Click OK.
• Click Restart to restart your computer.

Let us know how it goes.

Regards.