[DR M]

xilogo, if the file is clean, I recommend you to add it in the Defender's exclusions.


1. Ensure that the file is clean

• Go to VirusTotal:
  • Open your browser and visit: https://www.virustotal.com
• Click "Choose file":
  • On the homepage, click the "Choose file" button under the File tab.
• Browse to your file:
  • Navigate to the file being flagged: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
  • Note: Windows may block access to this system file directly. In that case, copy the suspicious script or related executable to your Desktop first.
• Select the file and click "Open".
• Click "Confirm upload" to submit the file for scanning.
• Let me know the results. We will continue from there. 

[Advertisements]

Hi DR M.

Here are the results https://www.virustot...7c7a3/detection

[xilogo1202]

Hi DR M.

Here are the results https://www.virustot...7c7a3/detection

[xilogo1202]

Hi DR M

 

I will be unable to reply for a while starting in a few days. So since the file didn't seem to be bad and appears to be a false positive, I added the file to Windows Security Exclusion list. I hope this is correct. Please let me know if I should not have done that or should do something else. Thanks.

[DR M]

Hi, xilogo.

 

Apologies for the delayed reply. I had no access to a computer since Wednesday. I'll review the link above and let you know what to do next.