Powershell.sys

[cane3]

Please let's make this a thread where we can count all the people that got either an Antivirus notification or something similar.

[Ave]

Ursprünglich geschrieben von Change:

Ursprünglich geschrieben von Ave:

Powershell is just part of windows.

But an app having access to it can make sensitive changes to your system without your knowledge.

meh windows itself is already one giant piece of unstable american spyware so tbh it doesn't really matter that much

[Change]

Ursprünglich geschrieben von cane3:

Ursprünglich geschrieben von Ave:

no notification from Bitdefender.

Im using AVG and Windows Defender. Windows didnt catch it

Apps with powershell access can add exceptions in Windows Defender

[ccs99a030]

Got the notification from avast :(

[FentanylWallaby]

Yea avast is going off over this. Are the Chinese spying on us?
AI feedback:

The file "powershell.sys" is not a legitimate system file, and its location inside *C:\Windows\System32\WindowsPowerShell\v1.0* is highly suspicious. No official Microsoft or Windows installation includes a .sys driver in this directory.

Avast blocking it means it was likely flagged for:

Being a known vulnerability (or exploit)
A backdoor or rootkit
A potential hacker exploit


CCP wants my hentai folder! I KNEW IT.

[Ave]

Ursprünglich geschrieben von FentanylWallaby:

Yea avast is going off over this. Are the Chinese spying on us?
AI feedback:

The file "powershell.sys" is not a legitimate system file, and its location inside *C:\Windows\System32\WindowsPowerShell\v1.0* is highly suspicious. No official Microsoft or Windows installation includes a .sys driver in this directory.

Avast blocking it means it was likely flagged for:

Being a known vulnerability (or exploit)
A backdoor or rootkit
A potential hacker exploit


CCP wants my hentai folder! I KNEW IT.

its just AVG, it has been a very bad anti virus for many years now.

[[SC]]

yea, got powershell.sys

[Erec]

Ursprünglich geschrieben von Ave:

Ursprünglich geschrieben von FentanylWallaby:

Yea avast is going off over this. Are the Chinese spying on us?
AI feedback:

The file "powershell.sys" is not a legitimate system file, and its location inside *C:\Windows\System32\WindowsPowerShell\v1.0* is highly suspicious. No official Microsoft or Windows installation includes a .sys driver in this directory.

Avast blocking it means it was likely flagged for:

Being a known vulnerability (or exploit)
A backdoor or rootkit
A potential hacker exploit


CCP wants my hentai folder! I KNEW IT.

its just AVG, it has been a very bad anti virus for many years now.

malwarebytes flagged this too... and its probably not a virus but i dont wanna give an app access to make changes or snoop around my computer.

[Sokdeem]

Bump on powershell.sys

[JG2thend]

Ursprünglich geschrieben von Ave:

Ursprünglich geschrieben von Change:

But an app having access to it can make sensitive changes to your system without your knowledge.

meh windows itself is already one giant piece of unstable american spyware so tbh it doesn't really matter that much

Agree

[Bunny]

So my avast blocked this but it seems the game is opening anway ?

[Locura Sánchez]

Ursprünglich geschrieben von Bunny:

So my avast blocked this but it seems the game is opening anway ?

Same, im playing the game and good so far

[Bunny]

Ursprünglich geschrieben von Locura Sánchez:

Ursprünglich geschrieben von Bunny:

So my avast blocked this but it seems the game is opening anway ?

Same, im playing the game and good so far

well im leaving it blocked then

[Svevo]

Bump on powershell.sys

[Lion Bird Plate Plate Feather Fe]

Heard it pops up with norton too.

[Ave]

Ursprünglich geschrieben von Lion Bird Plate Plate Feather Fe:

Heard it pops up with norton too.

everything pops up on norton including norton.