NEED HELP, Got Trojan:PowerShell/DownInfo.B frequently from Microsoft Defender

Question

Requesting help!!!!! I somehow receive a very annoying virus/trojan called Trojan:PowerShell/DownInfo.B Despite using all third-party antivirus softwares and even factory reset the PC, this issue is still there.

Answer 1

If Microsoft Defender Antivirus cannot remove the threat, try performing a scan with Microsoft Defender Offline which lets you run a scan from outside the normal operating system (Windows kernel) so it can target malware that attempts to bypass the Windows shell. Microsoft Defender Offline can be run automatically or you can manually ask to perform an offline scan with one click directly from Microsoft Defender Antivirus. This feature works identical to previous versions of Windows Defender Offline without having to download the stand-alone version.

• How to run and review the results of a Microsoft Defender Offline scan
• Run a Microsoft Defender Offline Scan in Windows 11
• How to Run Microsoft Defender Offline Scan on Windows 11

It’s normal if Microsoft Defender Offline closes and reboots the computer before the progress percentage reaches 100%.  

If the threat persists, there are various secondary opinion scanners which can be used to supplement your existing antivirus.

• Supplementing your Anti-Virus Program with Anti-Malware Tools (Post #4) includes a List of Free Scan & Disinfection Tools to supplement your anti-virus or get a second opinion with scan instructions near the bottom of that topic.

Answer 2

Please provide Farbar Recovery Scan Tool (FRST) logs for analysis and I'll script the removal and remediation.

https://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/

 

Note: If you are using Edge or Chrome, SmartScreen may initially block the download.

Click on the three dots next to the warning and select Keep => Show more => Keep anyway.

 

• If your computer's language is not English, rename FRST64.exe to FRST64English.exe
• Run the tool, leave the default settings, and press Scan.
• Zip the logs, FRST.txt and Addition.txt, then upload to a cloud storage service like OneDrive, Google Drive or gofile.io
• Post the share link.

 

Share OneDrive files and folders - Microsoft Support