Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Failure to Install due to Virus/Malware #335

Closed
jwittner opened this issue Jan 28, 2018 · 4 comments
Closed

Failure to Install due to Virus/Malware #335

jwittner opened this issue Jan 28, 2018 · 4 comments

Comments

@jwittner
Copy link
Contributor

jwittner commented Jan 28, 2018

When trying in install the latest version via the PSGallery I receive this error:

PackageManagement\Install-Package : Package 'PackageManagement' failed to be installed because: Operation did not complete successfully because the file contains a virus or potentially 
unwanted software.

At C:\Program Files\WindowsPowerShell\Modules\PowerShellGet\1.0.0.1\PSModule.psm1:1809 char:21
+ ...          $null = PackageManagement\Install-Package @PSBoundParameters
+                      ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : InvalidResult: (PackageManagement:String) [Install-Package], Exception
    + FullyQualifiedErrorId : Package '{0}' failed to be installed because: {1},Microsoft.PowerShell.PackageManagement.Cmdlets.InstallPackage

Specifically, windows defender finds this Trojan: https://www.microsoft.com/en-us/wdsi/threats/malware-encyclopedia-description?Name=Trojan:PowerShell/Peasecto.A

$PSVersionTable -

Name                           Value
----                           -----
PSVersion                      5.1.16299.98
PSEdition                      Desktop
PSCompatibleVersions           {1.0, 2.0, 3.0, 4.0...}
BuildVersion                   10.0.16299.98
CLRVersion                     4.0.30319.42000
WSManStackVersion              3.0
PSRemotingProtocolVersion      2.3
SerializationVersion           1.1.0.1

[System.Environment]::OSVersion -

Platform ServicePack Version      VersionString
-------- ----------- -------      -------------
 Win32NT             10.0.16299.0 Microsoft Windows NT 10.0.16299.0

Get-MpComputerStatus relevant items -

AMEngineVersion                 : 1.1.14500.5
AMProductVersion                : 4.12.17007.18011
AMServiceEnabled                : True
AMServiceVersion                : 4.12.17007.18011
AntispywareEnabled              : True
AntispywareSignatureAge         : 0
AntispywareSignatureLastUpdated : 2018-01-28 09:22:07
AntispywareSignatureVersion     : 1.261.416.0
AntivirusEnabled                : True
AntivirusSignatureAge           : 0
AntivirusSignatureLastUpdated   : 2018-01-28 09:22:08
AntivirusSignatureVersion       : 1.261.416.0
@jwittner
Copy link
Contributor Author

I'm starting to think this may be an issue with the new virus definitions. I get the same error when trying to install the PSScriptAnalyzer module from PSGallery. I don't get it for every module from the gallery however.

@KevinMarquette
Copy link

The Windows Defender issue is resolved in definition update 1.261.424.0

PS:> Get-MpComputerStatus | Select AntivirusSignature*

AntivirusSignatureLastUpdated   : 1/28/2018 8:28:37 PM
AntivirusSignatureVersion       : 1.261.424.0

@jwittner
Copy link
Contributor Author

As of this morning I'm on 1.261.449.0 and still seeing it:

AntivirusSignatureAge AntivirusSignatureLastUpdated AntivirusSignatureVersion
--------------------- ----------------------------- -------------------------
                    0 2018-01-29 10:13:55           1.261.449.0

@jwittner
Copy link
Contributor Author

Alright, got another update and the issue has gone away:

AntivirusSignatureAge AntivirusSignatureLastUpdated AntivirusSignatureVersion
--------------------- ----------------------------- -------------------------
                    0 2018-01-29 18:40:04           1.261.473.0

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants