Jump to content

Powershell - Sporadically blocked by Anti-Malware


Recommended Posts

I wrote a Powershell script that uploads and downloads files through FTP.

The script is located on a server, and 5 computers have shortcuts that point to the script. Anti-Exploit is running on all computers and managed through the Management console on the server.

One of the computers occasionally blocks this file and identifies it as an exploit. ("Exploit Payload process blocked"). Once the computer is restarted or anti-exploit is restarted, we don't have issues for days at a time.  The issue ONLY occurs on this specific computer, and only sporadically.

Link to post
Share on other sites
  • Staff

Hey Dgar,

 

Just wanted to confirm something based on what I was seeing in the log. Is this powershell script using Vbscript to launch the intended file? If so, you may just need to disable the vbscript protection in the advanced settings (the one under application behavior protection) and you shouldn't see this issue. 

Link to post
Share on other sites

Nope; not using Vbscript. Everything is handled in the Powershell script (using Powershell commands). The shortcut on each computer points to the powershell script on the server.

What were you seeing that made you think Vbscript? 

Link to post
Share on other sites
  • Staff

Hi dgar,

It looks like you are on a very old version of the product. Can you please update to the latest version 1.09.2.1413. You can simply turn on auto-upgrade as in the below screenshot and all your machines will get updated to the latest version. If you want to manually install the latest, the links below have the latest installers. Let us know if you still face this issue after upgrade. Thank you.

https://malwarebytes.box.com/s/pwqe77dca702haxz3ni0z744f8ydwtjd  (EXE)

https://malwarebytes.box.com/s/v47819ud1loenw1ffgb6nasi4vjvy3bi  (MSI)

 

screenshot.png

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    No registered users viewing this page.

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.