BD Antivirus Free: Infected Web Page Detected - Generic.PWSH.CoinStealer.A.A4C05045. Any Help?

imran7233

For some days my windows command prompt is popping up without any reason. It stays for some time and then goes off. Nothing is particularly shown in the command prompt. After watching this I install Bitdefender. After installing it gives about 100+ notifications saying that

"37 minutes ago

Feature:

Online Threat Prevention

We blocked this dangerous page for your protection: *** Accessed by: powershell.exe Threat name: Generic.PWSH.CoinStealer.A.A4C05045 Dangerous pages attempt to install software that can harm the device, gather personal information, or operate without your consent."

Meanwhile, the BitDefender ask me to restart it as it has been updated. I restart the laptop. Then when I open it shows no sign of the problem that I mention at first. What does it mean? Does the problem goes away or Bitdefender can't find it? 

EDITED: *** File(s) and/or URL(s) removed by @Gjoksi

"Posting malware samples and /or URLs is not allowed in the community! Do not post direct links to any executable files, malicious/suspicious software or websites in threads, comments or private messages, even if you think the software or site is clean and incorrectly detected by Bitdefender."

Flexx

As per virustotal, bitdefender and gdata is detecting the website as malicious, gdata using the bitdefender engine only.

https://www.virustotal.com/gui/url/81a6e09f9abdabd36d299c32fb950d44cd6ea7d7d6fc24c1d9836cb8780d9d98?nocache=1

Also, the website now is no more live and has been taken down, so you can just report it to bitdefender to remove the detection.

Kindly fill this online forum https://www.bitdefender.com/consumer/support/answer/40673/ .The forum will share the respective file/ url directly with the malware research team and if the file/url is indeed non malicious, detection will be removed in maximum of 72 hours. 

Regards

Gjoksi

Hello.

Do the following:

1) Start your PC in Safe Mode, by following these steps:

https://support.microsoft.com/en-us/windows/start-your-pc-in-safe-mode-in-windows-92c27cff-db89-8644-1ce4-b3e5e56fe234

2) Open the Run command:

https://www.makeuseof.com/windows-open-run-command-dialog-box/

and run the below commands one by one:

temp - delete all the folders/files in the folder

%temp% - delete all the folders/files in the folder

prefetch - delete all the folders/files in the folder

3) Restart your PC in General Mode, by following these steps:

https://www.techwalla.com/articles/how-to-restart-a-computer-in-normal-mode

4) Reset/Refresh your browsers:

Google Chrome - https://support.google.com/chrome/answer/3296214?hl=en

Mozilla Firefox - https://support.mozilla.org/en-US/kb/refresh-firefox-reset-add-ons-and-settings

Microsoft Edge - https://malwaretips.com/blogs/reset-microsoft-edge/

Opera - https://browsersolution.com/reset-opera-browser

Vivaldi - https://help.vivaldi.com/desktop/install-update/full-reset-of-vivaldi/

Brave - https://support.brave.com/hc/en-us/articles/360017903152-How-do-I-reset-Brave-settings-to-default-

5) Run a System Scan with your Bitdefender program.

6) Restart your PC

7) If the steps provided above didn't help, do the following steps:

Take screenshot(s) of the issue,

create a log file on your Windows device using Bitdefender Support Tool, by following these steps:

https://www.bitdefender.com/consumer/support/answer/1733/

and

create a log file on your Windows device using BDsysLog, by following these steps:

https://www.bitdefender.com/consumer/support/answer/1922/

Next, contact Bitdefender Consumer Support by e-mail:

https://www.bitdefender.com/consumer/support/help/

with short description of the issue.

After that, you will get an automated reply by the Bitdefender Customer Care Team, with your ticket number.

Now, in reply to that automated reply, you can send the screenshot(s) you already took and the log files you already created in the first step.

Since you are all done, just wait for the support engineers to investigate your issue and find a solution to fix the issue.

Remember that the screenshot(s) and the log files will help a lot to the support engineers for better and faster investigation on your issue and finding a solution.

Regards.