I keep getting Malicious command line detected and it wont stop

GabrielPhoto

Today I started my computer and this keeps showing up nonstop

Malicious command line detected

Feature:Antivirus

The app C:\Windows\SysWOW64\wbem\WMIC.exe was passed a malicious command line and has been blocked. Your device is now safe.

Command line: "C:\Windows\SysWOW64\wbem\WMIC.exe" wmic PROCESS where "ProcessId=29228 or ProcessId=32812 or ProcessId=32820 or ProcessId=32892 or ProcessId=21436" get CreationDate,KernelModeTime,ParentProcessId,ProcessId,UserModeTime,WorkingSetSize

I was using my computer all night yesterday and didnot install any new programs so not sure what suddenly this started overnight and I cannot tell what is causing it exactly or how to stop it.
From my research that WMIC is a legit part of windows that could be getting hijacked.

Any ideas please?

PS I am on 27.0.54.272
Windows 11 up to date.

Gjoksi

Hello.

It seems that some users are experiencing the same issue, which i believe is a false positive.

Anyway, as a workaround open your Bitdefender program, go to Protection → Antivirus → Advanced and disable / toggle off "Scan command line".

Next, exclude the file and/or the folder from Bitdefender Antivirus scan, by following the steps from this article:

https://www.bitdefender.com/consumer/support/answer/13427/

Finally, do the steps below.

First, take screenshot(s) of the issue,

create a log file on your Windows device using Bitdefender Support Tool, by following these steps:

https://www.bitdefender.com/consumer/support/answer/1733/

and

create a log file on your Windows device using BDsysLog, by following these steps:

https://www.bitdefender.com/consumer/support/answer/1922/

Next, contact Bitdefender Consumer Support by e-mail:

https://www.bitdefender.com/consumer/support/help/

with short description of the issue.

After that, you will get an automated reply by the Bitdefender Customer Care Team, with your ticket number.

Now, in reply to that automated reply, you can send the screenshot(s) you already took and the log files you already created in the first step.

Since you are all done, just wait for the support engineers to investigate your issue and find a solution to fix the issue.

Remember that the screenshot(s) and the log files will help a lot to the support engineers for better and faster investigation on your issue and finding a solution.

NOTE: If any of the log file is larger than 25MB, you can upload the log file here:

https://upload.bitdefender.net/

After the upload is done, you will get a notification with the file's URL and then you can share the file's URL with the Bitdefender Consumer Support.

Regards.

@camarie @Alexandru_BD @dvsls