This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
So i found this virus Trojan:MSIL/Heracles.MBAR!MTB, and each time I restart I cannot remove it, and It seems each time i restart it also reintalls itself somehow, and the affected items is my windows powershell.amsi: \Device\HarddiskVolume3\Windows$sxr-powershell.exe.
So how do i get rid of this virus? it also messes with my windows defender and sometime even disables it.
Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.
sunny and burhanuddin,
im no pro but you should do a fresh install of windows if its doing this every time. either reinstall windows or run recovery mode and attempt to do a removal from there. it counts you as "offline" and (hopefully) will not boot.
Hi,
Sorry if it didn't help.
I will now recommend that you try to run a Windows Defender Offline Scan.
