"Malware exploit agent" in Windows Powershell?

[Syluxdotcom]

Got an alert from Malwarebytes upon starting up my PC today, report attatched. I've tried looking up what exactly this means but haven't had any luck, though I did find similar posts with no responses. A direct scan of the powershell file and the windows folder as a whole detected nothing, what exactly is this and do I need to be concerned about it?

Report.txt

[Porthos]

12 minutes ago, Syluxdotcom said:

though I did find similar posts with no responses. A direct scan of the powershell file and the windows folder as a whole detected nothing, what exactly is this and do I need to be concerned about it?

Do you have the following setting turned on in advanced exploit settings?

[Syluxdotcom]

I do yes. I've had several recent attempts to breach my computer through open router ports (all blocked by malwarebytes as far as I'm aware) so I chucked it on to be safe. Does this mean it's just a false positive?

Edited February 5, 2022 by Syluxdotcom

[Porthos]

2 minutes ago, Syluxdotcom said:

Does this mean it's just a false positive?

That setting is supposed to stay OFF. It causes many programs to have blocks for no reason.

Turn it off and see if the issues go away.

[Porthos]

These are 2 other settings that many turn on that should be off. Changing DEFAULT settings can cause loads of FP's

[Syluxdotcom]

So to confirm, it is (most likely) a false positive? Sorry, I saw the notification, did some searching on the web and found no answers so here was the first place I could think of to find them.

Quote

These are 2 other settings that many turn on that should be off.

Damn, I've had those two settings on my other PC for several years 😅 Had very few alerts though, and none that I'd consider false positives. Thank you for responding so quickly!