ojava
Start free trial

All guides

A Windows tool was used to fetch or run code

What happened

A built-in Windows tool (PowerShell or similar) downloaded or ran code in a way typical of attacks. It often follows a malicious email attachment or link.

How serious

Serious: deal with it today.

Steps: Windows PC

  1. Take the PC off the network now: unplug the cable and turn off Wi-Fi. Don't switch it off: what's in memory helps your IT provider.

  2. Ask the person at that PC what they were doing at that time (installing something, a link in an email, a USB stick).

  3. Run a deep scan: Windows Security → Virus & threat protection → Scan options → Microsoft Defender Antivirus (offline scan) → Scan now. The PC restarts.

  4. Change the passwords used on that PC (Windows, Microsoft 365 or Google, banking) from ANOTHER, clean device.

How to check it’s fixed

Fixed when the deep scan finds nothing, protection is on again and Ojava shows the PC as healthy for 24 hours.

When to call your IT provider

Call your IT provider today, before using the PC again for work.