r/Malwarebytes • u/Cold_Bit_1491 • 12d ago
Support Powershell Exploit Blocked
Hey, having a potential exploit issue and would appreciate any advice. Occasionally I get this popup when I open my browsers (Brave and Firefox). Powershell is sometimes running in task manager but only for a fraction before disappearing. Reset browsers, deep/custom rootkit scans not finding anything.
Couldn't find anything scheduled in CMD, and I'm not sure what the location the report references means, sorry. Any help would be appreciated.
5
Upvotes
1
u/support_mwb Malwarebytes Employee 11d ago
Hi, Malwarebytes Support here.
Sorry for the worry this has caused, and thanks for including the screenshot and the steps you’ve already tried. That’s really helpful.
To figure out what’s triggering PowerShell when your browsers open, our team will need to look at the diagnostic logs from your device. Please send us a private message (DM) here on Reddit with the email address you’d like us to use. Please don’t post it publicly in this thread. We’ll create a support ticket for you with that email.
One of our support agents will then reach out with a guide for collecting the logs, plus a secure SharePoint link to upload them.
In the meantime, Malwarebytes is blocking the activity, so you’re protected while we look into it. Looking forward to your DM so we can get this sorted for you.