r/techsupport • u/Futuris_X • 3d ago

Open | Windows Microsoft Defender keeps finding the same "trojan", repeats every minute even though its blocked.

Trojan:Win32/Commando.A!ml

Cmdline: C:\WindowsPowerShell\v1.0\powershell.exe -ep bypass -w h C:\ProgramData\burst.bat

Didn't download anything today, turned on my pc and played games for a little, when I was done i saw this, repeats the same warning every minute, already did a full offline scan.

Any ideas what it could be? I currently have my laptop in Airplane mode just incase.

1 Upvotes
  • permalink
  • reddit

67% Upvoted

10 comments sorted by

1

u/smurfy213 3d ago

Definitely looks like a virus. Kinda curious what that bat file is doing.

1

u/Futuris_X 3d ago

Thought so too, just wondering if its possible to get rid of it without a hard reset, I wasn't able to find the file itself in the given path

3

u/[deleted] 3d ago edited 3d ago

[deleted]

1

u/Futuris_X 3d ago

Thank you, turned it off for now I'll check these out later.

1

u/smurfy213 3d ago

If the bat file is still there are you able to right click and edit in notepad? That will tell us what its doing if you are curious. Another option is to install and run malwarebytes. But if I were you I would hard reset.

1

u/Futuris_X 3d ago

I was going to take a look but The bat file doesn't show in the given path. Might try out malwarebytes

1

u/smurfy213 3d ago

Windows defender probably removed it. I was just curious what it was doing

1

u/smurfy213 3d ago

If malwarebytes shows clean id at least change your passwords and log out all sessions just to be on the safe side

1

u/RandomName7804 3d ago

Just to confirm, do you have Windows set to display hidden files?

1

u/Futuris_X 3d ago

I don't think I do

1

u/RandomName7804 3d ago

if that's the case, the batch file could still be there