On-Premise Endpoint

Sophos Enterprise Console powershell virus

On-Premise Endpoint requires membership for participation - click to join

Thread Info

State Not Answered
Locked Locked
Replies 21 replies
Subscribers 6 subscribers
Views 1368975 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

powershell virus

ChuckYu over 6 years ago

Dear All,

Virus detect by Symantec that use powershell and spend almost 100% CPU. Nothing detect by Sophos.

I am stop process of powershell and it will back again later.

Anything I can do to clean this virus?

Thanks a lot!

Chuck

This thread was automatically locked due to age.

Parents

0 Gowtham Mani over 6 years ago

Hi ,

Powershell related threats are being detected by Sophos as HPmal/WMIPOW-A, HPmal/HPWMIJS-A, HPmal/mPShl32-A & HPmal/mPShl64-A

As jak mentioned Using Process Explorer, identify which exe is spawning Powershell.exe to see if we are dealing with any new variant of the known/ Unknown threats. You can contact our support for assistance in this regards so that if it is found to be a new variant, we will be able to have the definitions in place.

Regards,

Gowtham Mani
Community Support Engineer | Sophos Technical Support
Knowledge Base | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'This helped me' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 ChuckYu over 6 years ago in reply to Gowtham Mani

Hi Gowtham,

Thanks for help, I will contact to support for this.

Thanks a lot!

Chuck
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 ChuckYu over 6 years ago in reply to Gowtham Mani

Hi Gowtham,

Thanks for help, I will contact to support for this.

Thanks a lot!

Chuck
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data