Powershell Virus

Question

I randomly keep getting an alert on my webroot anti virus of a virus. it says it's part of a malaware group called PS/EntryPointNull.A and it is located in C:windows\sysnative\WindowsPowershell...\powershel.exe anyone have an idea on how to fix. It happens often like every 2 minutes or so

Answer 1

Good day! I'm Raniel. I understand your frustration regarding this issue and I'll do my best to help.

Just to clarify, did you make any changes to your machine before encountering this issue (like installing third party apps, recent updates, etc..)?

I suggest that you also install the Microsoft Safety Scanner or Malwarebytes Free, then perform a scan to ensure that your machine is free from virus. Here are the links to download them:

Microsoft Safety Scanner: https://docs.microsoft.com/windows/security/thr...

Malwarebytes Free (select Free Download): https://www.malwarebytes.com/premium/

After the scan, perform a reboot and see if you'll encounter the issue.

Another option is to perform a repair install of your Windows which fixes the broken system files on your machine. Here is a guide: https://www.elevenforum.com/t/repair-install-wi...

There should be no worries in performing it since you will select the option to keep your files during the process.

I hope this helps. Good luck!

________________________________________________________

Standard Disclaimer: There are links to non-Microsoft websites. The pages appear to be providing accurate, safe information. Watch out for ads on the sites that may advertise products frequently classified as a PUP (Potentially Unwanted Products). Thoroughly research any product advertised on the sites before you decide to download and install it.

Answer 2

That helped, thank you so much, Malwarebytes and MSS solved the issue.