Trojan:Script/Oneeva.a!ml is removed from quarantine every day at 3:17am

  • Thread starter Thread starter RussMonckton
  • Start date Start date
R

RussMonckton

Guest
Since April 4th Microsoft Defender reports that Oneeva is being removed or restored from Quarantine, multiple times per day as well as 3:17am.


I have run a complete scan, twice, and it finds nothing. I have even done Defender Offline, nothing.


Who or what is doing this?


Eventually, 5 copies of PowerShell are running consuming all my CPU time. I can't find what's doing that. A reboot clears that conditions for a few days.


I suspect I am under the control of a BOT.


I am up to date as far Windows Update goes.

More...
 
Back
Top