Jump to content

Exploit blocked cmd powershell process trying to get appx package for OMEN


tmstani23
Go to solution Solved by Porthos,

Recommended Posts

A process is trying to communicate with OMENCommandCenter which is the gaming center for my laptop.  It is continually pinging and has been for almost 30 minutes now.  Here is the exploit blocked report:

Malwarebytes
www.malwarebytes.com

-Log Details-
Protection Event Date: 10/3/23
Protection Event Time: 2:47 PM
Log File: af376b04-6225-11ee-bcd8-3024a99c4e5c.json

-Software Information-
Version: 4.6.2.281
Components Version: 1.0.2131
Update Package Version: 1.0.75925
License: Trial

-System Information-
OS: Windows 11 (Build 22621.2283)
CPU: x64
File System: NTFS
User: System

-Exploit Details-
File: 0
(No malicious items detected)

Exploit: 1
Exploit.PayloadProcessBlock, C:\windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -command Get-AppxPackage -name AD2F1837.OMENCommandCenter, Blocked, 701, 392684, 0.0.0, ,

-Exploit Data-
Affected Application: cmd
Protection Layer: Application Behavior Protection
Protection Technique: Exploit payload process blocked
File Name: C:\windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -command Get-AppxPackage -name AD2F1837.OMENCommandCenter
URL:

 

(end)

What should I do next!  Is this a safe and natural OMEN gaming process?  Thank you for your help.

Link to post
Share on other sites

  • Solution

@tmstani23

Please download the following installer and run it. Install over the top of your current installation.

https://downloads.malwarebytes.com/file/mb-windows

Then restart the computer and open Malwarebytes and go to Settings by clicking the small gear icon and go to the General tab, scroll down and enable Beta updates 

You may need to wait up to about 5 minutes or so, but then check for updates on that same General tab or the About tab and let it update to the latest Beta version

Once it has updated, RESTART the computer again and let us know if you're still having an exploit block

  • Like 1
Link to post
Share on other sites

1 hour ago, Porthos said:

@tmstani23

Please download the following installer and run it. Install over the top of your current installation.

 

https://downloads.malwarebytes.com/file/mb-windows

 

Then restart the computer and open Malwarebytes and go to Settings by clicking the small gear icon and go to the General tab, scroll down and enable Beta updates 

 

You may need to wait up to about 5 minutes or so, but then check for updates on that same General tab or the About tab and let it update to the latest Beta version

 

Once it has updated, RESTART the computer again and let us know if you're still having an exploit block

 

 

 

That worked.  Thank you so much for the help.

  • Like 2
Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.