Jump to content

cmd.exe blocked and marked as a trojan


Go to solution Solved by Berny,

Recommended Posts

Posted

Hi

I realised that for the past month or so whenever I start my PC, System Watcher detects and blocks CMD under behaviour analysis and marks it as a Trojan. I scanned the system with Kaspersky, Hitman Pro and Malwarebytes but nothing shows up, also checked Autoruns and Task Scheduler as well as Process Explorer for a malicious batch file and I don't see anything out of the ordinary. Is there a way to find out what it could be? Kaspersky isn't giving me much information. Thank you for any help.

Windows 10 Version 22H2 (OS Build 19045.5737)

Kaspersky Application Version: 21.20.8.505

Event: Blocked
Application: Windows Command Processor
User: *
User type: Initiator
Component: System Watcher
Result description: Blocked
Type: Trojan
Name: PDM:Exploit.Win32.Generic
Threat level: High
Object type: Process
Object path: C:\Windows\SysWOW64
Object name: cmd.exe
Databases release date: Today, 20/04/2025 07:25:00
MD5: D966DBA31D7B62CAD2DECAE92C5A8D12

Please sign in to comment

You will be able to leave a comment after signing in



Sign In Now


×
×
  • Create New...