Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: J.Sage on November 12, 2021, 03:49:40 PM

Title: upgrade.ps1 quarantined
Post by: J.Sage on November 12, 2021, 03:49:40 PM

Hi, I have this error 7214d8f8765e/211112.1431+0100

I'm a complete noob in pc security, do I need to be worried about this?
It's about a "upgrade.ps1" file in my windows temp folder.
I keep getting this alert when I close it, and it keeps getting "quarantined".

What can I do to solve this?

Appreciate your help :)

John

Title: Re: upgrade.ps1 quarantined
Post by: Asyn on November 13, 2021, 09:21:10 AM

Test the file at VT (https://www.virustotal.com) and post the link to the result here.

Title: Re: upgrade.ps1 quarantined
Post by: J.Sage on November 13, 2021, 01:05:59 PM

Hi! thanks for your answer. Basically it all shows "undetected" and some "unable to process file type"

Here are the details:

Basic Properties
MD5   984932d863a5a564215417a157903e02
SHA-1   50696f0ed8dd02acaa55b3fe946b3b1344e4f762
SHA-256   5832b099084db4aeb5f64f0b755a093fdf6672dfd278e7eaa7f517def7f3f477
Vhash   8d3d009cc256738588a79c98bfe7e82c
SSDEEP   96:rqDwulBnQSwpwUw4Ow9SwZqmAnAVAVA30HyzbLuiYz:rqHOF03Aqq3PLKz
TLSH   T16D71011E7596813806B657699D0B906DFF27312B123920147BEEC1812FF7C2DE353AAD
File type   Powershell
Magic   ASCII English text, with CRLF line terminators
TrID   file seems to be plain text/ASCII (0%)
File size   3.40 KB (3485 bytes)
History
First Submission   2021-11-13 12:03:30
Last Submission   2021-11-13 12:03:30
Last Analysis   2021-11-13 12:03:30
Names
upgrade.ps1
Powershell Info
Cmdlets
convertfrom-json
get-service
get-wmiobject
invoke-webrequest
new-object
resolve-path
set-location
start-process
start-sleep
stop-process
stop-service
where-object
Cmdlets Aliases
sc
.NET Calls
System.IO.Path
Functions
Get-MsiDatabaseVersion
stop-service
Variables
$erroractionpreference
$lastexitcode
$null
$psscriptroot

Title: Re: upgrade.ps1 quarantined
Post by: J.Sage on November 13, 2021, 01:06:50 PM

Quote from: Asyn on November 13, 2021, 09:21:10 AM

Test the file at VT (https://www.virustotal.com) and post the link to the result here.

https://www.virustotal.com/gui/file/5832b099084db4aeb5f64f0b755a093fdf6672dfd278e7eaa7f517def7f3f477/details

Title: Re: upgrade.ps1 quarantined
Post by: Asyn on November 13, 2021, 02:21:27 PM

You can report a suspected FP (File/Website) here: https://www.avast.com/false-positive-file-form.php