Skip to content

Defender Alert 'ClickFix' malware when using the Tool IntuneDeviceDetailsGUI #10

@Zeromatterhorn

Description

@Zeromatterhorn

Today as i open the Toolbox i got an Defender Alarm:

An active 'ClickFix' malware in a command line was prevented from executing

Defender prevented execution of 'Trojan:Win32/ClickFix.R!ml' in command line 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe C:\Windows\System32\WindowsPowerShell\v1.0\Powershell.exe -ExecutionPolicy ByPass -WindowStyle Maximized -Command Invoke-Command -ScriptBlock { C:\ProgramData\MSEndpointMgr_IntuneDebugTools\IntuneDeviceDetailsGUI_3.00.ps1 -verbose '

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions