everything-powershell.com
Windows Server 2012/2012 R2/2016 - Remove Malware embedded in WMI with PowerShell - Everything-PowerShell
With Malware getting smarter each time and out running the Anti-Virus and embedding itself in the Operating System that it thinks its Legit, there is a way to remove it when it writes an encrypted entry or multiple entries to the WMI database. To remove it you will need to run the following set of …