Instead it returns
"Get-MpComputerStatus : The extrinsic Method could not be executed. at line:1 char:1
+ Get-MpComputerStatus
+ ~~~~~~~~~~~~~~~~~~~~~~~~~
+ Categorylnfo : MetadataError: (MSFT_HpComputerStatus:ROOT\Microsoft\...pComputerStatus) [Get-MpComputer Status], CimException
+ FullyQualiFiedErrorId : MI RESULT 16,6et-MpComputerStatus.
Works fine for me:
I have Win 10 Pro X64 Ver 1809 Build 17763.134 (as reported by winver).Code:PS C:\Users\ztruk> Get-MpComputerStatus AMEngineVersion : 1.1.15400.5 AMProductVersion : 4.18.1810.5 AMServiceEnabled : True AMServiceVersion : 4.18.1810.5 AntispywareEnabled : True AntispywareSignatureAge : 0 AntispywareSignatureLastUpdated : 11/26/2018 4:10:03 PM AntispywareSignatureVersion : 1.281.893.0 AntivirusEnabled : True AntivirusSignatureAge : 0 AntivirusSignatureLastUpdated : 11/26/2018 4:10:04 PM AntivirusSignatureVersion : 1.281.893.0 BehaviorMonitorEnabled : True ComputerID : 148D0B73-2782-48B0-9841-C8B95255B416 ComputerState : 0 FullScanAge : 120 FullScanEndTime : 7/29/2018 8:32:04 PM FullScanStartTime : 7/29/2018 8:31:08 PM IoavProtectionEnabled : True LastFullScanSource : 1 LastQuickScanSource : 2 NISEnabled : True NISEngineVersion : 1.1.15400.5 NISSignatureAge : 0 NISSignatureLastUpdated : 11/26/2018 4:10:04 PM NISSignatureVersion : 1.281.893.0 OnAccessProtectionEnabled : True QuickScanAge : 0 QuickScanEndTime : 11/26/2018 2:31:39 AM QuickScanStartTime : 11/26/2018 2:29:27 AM RealTimeProtectionEnabled : True RealTimeScanDirection : 0 PSComputerName :
Good for Ztruker.
How can I also get that result ? It should not depend on the version - I am still running v1803, since there is NO sign of it updating to v1809. I have two systems - one 32bit and one 64bit - they BOTH return that error.
It looks like this depends on Defender being active. Do you have another anti-malware installed?
Yes, I have AVAST, but had disabled it.
On the x64 v1803, I had tried to disable Defender because it was attacking files I wanted to run. Hence my interest in Powershell. With both Avast & Defender disabled, PUPs are still being prevented from running.
In the v1803 x32, I have Avast running, which I believe disables Defender.
Works fine for me using PowerShell as Admin on latest Win10 with Windows Defender running.
Attachment 215394
Found this: How to use PowerShell to investigate Windows Defender's malware signature definitions database
That seems to indicate these are Defender specific Cmdlets.Code:The 12 Defender cmdlets are described in this table.
Cmdlet Description Add-MpPreference Modifies settings for Windows Defender. Get-MpComputerStatus Gets the status of anti-malware software on the computer. Get-MpPreference Gets preferences for the Windows Defender scans and updates. Get-MpThreat Gets the history of threats detected on the computer. Get-MpThreatCatalog Gets known threats from the definitions catalog. Get-MpThreatDetection Gets active and past malware threats that Windows Defender detected. Remove-MpPreference Removes exclusions or default actions. Remove-MpThreat Removes active threats from the computer. Set-MpPreference Configures preferences for Windows Defender scans and updates. Start-MpScan Starts a scan on the computer. Start-MpWDOScan Starts a Windows Defender offline scan. Update-MpSignature Updates the anti-malware definitions on the computer.
So Powershell should report the status of those cmdlets, rather than return an error message.
Quote