0

Discussion topic: Should SkyGo be trying to run a powershell script after installation

Reply
This message was authored by: dm24

Should SkyGo be trying to run a powershell script after installation

Recently installed SkyGo on a laptop which has Defender installed as its AV.

Defener blocked the SkyGoInstaller.exe as malware. Im investigationg further and can see that it tried to run a Powershell session with specific parameters:

powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command

Reply