0
Discussion topic: Should SkyGo be trying to run a powershell script after installation
Reply
Options
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
This message was authored by: dm24
Message posted on 21 Dec 2024 10:28 AM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report post
Should SkyGo be trying to run a powershell script after installation
Recently installed SkyGo on a laptop which has Defender installed as its AV.
Defener blocked the SkyGoInstaller.exe as malware. Im investigationg further and can see that it tried to run a Powershell session with specific parameters:
powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command
Reply
Options
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page