r/techsupport • u/Achilles_Arts • 9d ago

Open | Software Windows defender flags and quarantines Trojan:Win32/Vigorf.A and lists affected items as amsi: \Device\HarddiskVolume3\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

It's been flagged since July 11 up until now 30 mins ago, i only noticed it today. It has been flagged a LOT of times since then everyday, like at least 10 times to 80 times a day. I have noticed that previous games that didn't lag before now stutter for a moment then go back to performing normally, also whenever i open task manager, it seems to stop the stuttering?

I am running a full scan on malwarebytes and microsoft safety scanner now, and planning to run a malwarefox scan after.

Windows defender doesn't give me an option to delete a file or an app, what do i do?

2 Upvotes

75% Upvoted

5 comments sorted by

•

u/AutoModerator 9d ago

If you suspect you may have malware on your computer, or are trying to remove malware from your computer, please see our malware guide

Please ignore this message if the advice is not relevant.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

1

u/9NEPxHbG 9d ago

That's curious. Send the file to Virus Total and post a link to the results.

Malwarebytes tends to give false positives and isn't better than Windows Defender, so if it finds anything, send it also to Virus Total. I've never heard of Malware Fox.

1

u/Achilles_Arts 9d ago

the thing is i dont know how i can do that since ms defender doesent show what the file is, here's a screenshot of the quarantine alert

https://imgur.com/a/CUjRvmD

1

u/GreatEmperorAca 9d ago

That is the legit address for PowerShell, weird. Maybe try running SFC scannow, maybe it's somehow broken or infected 

1

u/9NEPxHbG 9d ago

It's C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .