Why is powershell trying to access "%system%\CatRoot", and %temp%/

M

mysticdragz

Every time I turn my computer on I get a notification that "unauthorized changes blocked", "powershell.exe". I did have a virus a few weeks ago and possibly still have one. I'm also getting a blocked app or "mscorsvw.exe" "%winddir%\assembly\NativeImages_v4.0.30319_64\Temp\4dd4-0". There is also like 10 different versions of the mscorsvw.exe, after Temp\ is another random 4 characters.Edition Windows 10 Pro Version 22H2 Installed on ‎4/‎23/‎2021 OS build 19045.3208 Experience Windows Feature Experience Pack 1000.19041.1000.0 App or process blocked: powershell.exeProtected folder: %system%\CatR

Continue reading...
 
Back
Top Bottom