Malwarebytes blocking Powershell Commands

[CrystalEdits]

Hey today i started my Computer and malwarebytes was blocking a bunch of Powershell commands like 20 or more i was googling it and didnt find good answers and im a newbie with powershell commands i hope u can help me out with this one. My thinking is that some kind of software i use like: Steelseries for my Keyboard and Logitech for my headset wants to get Informations about my system with thes commands but im not 100% sure hope u can help me with it, Thank you!

Greetz

Kai1.txt

[CrystalEdits]

Its commands like , C:\WINDOWS\System32\WindowsPowerShell\v1.0\powershell.exe powershell Get-PhysicalDisk | Format-List -Property Size and many more

[MKDB]

Hello @CrystalEdits  and 

 

My name is MKDB and I will assist you.

 

 

Let's keep these principles as we proceed. Make sure to read the entire post below first.

• Please follow the steps in the given order and post back the log files.
• Please copy and paste all log files into your post.
• Before we start, please make sure that you have an external backup, not connected to this system, of all private data.
• Only run the tools I guide you to. Please don't run any other scans, download, install or uninstall any programs while I'm working with you.
• As English is not my native language, please do not use slang or idioms. It may be hard for me to understand.
• If you do not respond within 4 days, your topic will be closed.
• Cracked or hacked or pirated programs are not only illegal, but also will make a computer a malware victim. Having such programs installed, is the easiest way to get infected. It is the leading cause of ransomware encryptions. It is at times also a big source of current trojan infections. If you are running any kin of illegal software on your system, please uninstall them now, before we start the cleaning procedure.

 

 

Step 1

• Please download the Malwarebytes Support Tool (MBST).
• Run MBST and accept license agreement.
• In the left navigation pane of MBST, click Advanced.
• In the Advanced Options, click Gather Logs. A status diagram displays the tool is Getting logs from your machine.
• A zip file named mbst-grab-results.zip will be saved to your desktop, please upload that file on your next reply.

[Porthos]

@CrystalEdits I think this is related to the false positive that we are seeing with exploit protection.

The fix is going through internal testing and we should see it in a couple of weeks.

I have moved the post to the exploit FP section.

Edited September 23, 2023 by Porthos

[MKDB]

3 hours ago, Porthos said:

@CrystalEdits I think this is related to the false positive that we are seeing with exploit protection.

The fix is going through internal testing and we should see it in a couple of weeks.

I have moved the post to the exploit FP section.

I suspected something like that too, but wanted to be on the safe side and give the system a quick inspection. 😁

[Porthos]

6 minutes ago, MKDB said:

I suspected something like that too, but wanted to be on the safe side and give the system a quick inspection.

If you notice all of the recent topics in this section and try to inspect them all you would not sleep for a month.😂

[MKDB]

11 hours ago, Porthos said:

If you notice all of the recent topics in this section and try to inspect them all you would not sleep for a month.😂

I've noticed these topics, indeed, but have not inspected on of them. 😉

 

Thank you @Porthos.  😊

[Porthos]

The beta that was released today has the anti-exploit fix included.

You may get the beta by enabling BETA updates and checking for updates.

This is the version with the fix.