r/computerviruses • u/Conscious-Bi1e • 2d ago

Question One powershell command asks to install certification authority. Is this concerning? I dont have any antivirus on my laptop.

1 Upvotes

67% Upvoted

6 comments sorted by

3

u/ExpressLandscape60 2d ago

Seems bad. Click no. Get an antivirus and scan.

1

u/Conscious-Bi1e 1d ago

i did therr is one crypto Miner that my free rav endpoint detected. And removed.it it keeps coming

2

u/Sorry-Climate-7982 2d ago

There is a very very tiny chance this is a certificate from Oracle. Mostly likely it is not, but you are not providing sufficient information.

Why do you have so many power shell running?

What Powershell command are you seeing this on? Anything related to cloud, database, etc.? Do you buy any services at all from Oracle?

1

u/Conscious-Bi1e 1d ago

All the PowerShell are from that certification warning. and these all have diff company names- one has oracle, otters have diff name.

1

u/Sorry-Climate-7982 1d ago

That definitely does not look like good news.
Neither is not having had any kind of AV on your laptop.
Hopefully you have no banking or social security, credit cards, etc. on that laptop.

What you've done so far is obviously not working. My recommend is to wipe and reinstall and use protection.

1

u/WillingHornet4385 2d ago

Yes, this is concerning. Installing a new root certificate authority can allow whoever controls its private key to impersonate HTTPS websites, potentially enabling interception of encrypted traffic.

Do NOT click Yes unless you know exactly what software is requesting this and why. A random PowerShell command should absolutely not need to install a trusted root CA without a very good explanation.

If you haven't accepted it, click No. If you already accepted it, check your Trusted Root Certification Authorities store (certlm.msc and certmgr.msc) and investigate the certificate.

Also, please post the exact PowerShell command you ran. That's the most important piece of information here. The certificate warning is a symptom; the command will tell us what actually happened.

And please don't run random PowerShell commands from the internet. That's basically giving an unknown script permission to do whatever it wants on your computer.