[GH-ISSUE #1] System.IO.FileNotFoundException #1

Open
opened 2026-02-25 20:34:22 +03:00 by kerem · 2 comments
Owner

Originally created by @mbdawson on GitHub (Jul 12, 2019).
Original GitHub issue: https://github.com/ayeskatalas/Sophos-Removal-Tool/issues/1

Using your Removal Tool which is awesome but running into some snags on a lot of machines. I haven't found a rhyme or reason but seems to be on a lot of Win 7 machines. I'm seeing this error when I push it out:

Unhandled Exception: System.IO.FileNotFoundException: Could not load file or assembly 'System.Management.Automation, Version=3.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35' or one of its dependencies. The system cannot find the file specified.
at ik.PowerShell.PS2EXE.Main(String[] args)

When I run as admin on the computer I also see this message in command prompt and then command prompt crashes and windows steps in. Any ideas?

Originally created by @mbdawson on GitHub (Jul 12, 2019). Original GitHub issue: https://github.com/ayeskatalas/Sophos-Removal-Tool/issues/1 Using your Removal Tool which is awesome but running into some snags on a lot of machines. I haven't found a rhyme or reason but seems to be on a lot of Win 7 machines. I'm seeing this error when I push it out: Unhandled Exception: System.IO.FileNotFoundException: Could not load file or assembly 'System.Management.Automation, Version=3.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35' or one of its dependencies. The system cannot find the file specified. at ik.PowerShell.PS2EXE.Main(String[] args) When I run as admin on the computer I also see this message in command prompt and then command prompt crashes and windows steps in. Any ideas?
Author
Owner

@Mirotech04 commented on GitHub (Jul 31, 2019):

the Sophos Removal Tool.exe seems infected with Trojan, as per Bitdefender AV

<!-- gh-comment-id:516841240 --> @Mirotech04 commented on GitHub (Jul 31, 2019): the Sophos Removal Tool.exe seems infected with Trojan, as per Bitdefender AV
Author
Owner

@ayeskatalas commented on GitHub (Oct 7, 2019):

Mirotech, please see the .PS1 file that is also provided. There is NOTHING malicious within the EXE, and is a false positive.

MBdawson, try using the associated .PS1 file, as it is native to windows and does not require any additional pieces. The script can be used in Group Policy, or packaged and deployed via SCCM or Altiris.

<!-- gh-comment-id:539050586 --> @ayeskatalas commented on GitHub (Oct 7, 2019): Mirotech, please see the .PS1 file that is also provided. There is NOTHING malicious within the EXE, and is a false positive. MBdawson, try using the associated .PS1 file, as it is native to windows and does not require any additional pieces. The script can be used in Group Policy, or packaged and deployed via SCCM or Altiris.
Sign in to join this conversation.
No labels
pull-request
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/Sophos-Removal-Tool#1
No description provided.