Window keeps popping up for a split second every few minutes, unable to identify

Hi Stas, This is Ramesh.

When the window pops up and closes, please open PowerShell admin and run this command:

Get-ScheduledTask | Get-ScheduledTaskInfo | select TaskName, TaskPath, LastRunTime | sort LastrunTime -descending | ogv

This shows the list of scheduled tasks, reverse sorted by the last run time.

Note the tasks that ran most recently. Match the last run time with the mm:ss the window popped up.

Alternatively, use TaskSchedulerView from Nirsoft.net.

https://www.nirsoft.net/utils/task_scheduler_vi...

This link can also help:

https://www.winhelponline.com/blog/find-unknown...

(If it's not a scheduled task, we must use other methods to trace the process.)

Standard Disclaimer: There is a link to a non-Microsoft website. The page appears to provide accurate, safe information. Watch out for ads on the site that may advertise products frequently classified as PUPs (Potentially Unwanted Products). Thoroughly research any product advertised on the site before you decide to download and install it.

Miners can evade detection. Please run the Farbar Scanner and share your logs.

1. Download Farbar Recovery Scan Tool 64-bit (FRST64.exe)

https://www.bleepingcomputer.com/download/farba...

Note: If Microsoft Edge or Chrome mislabels the Farbar Scanner executable as PUA/malware, choose to keep it by tapping … in the bottom bar, choosing Keep, and then choosing Keep anyway in the dialog that appears.

2. If the OS language is non-English, rename FRST64.exe to FRST64English.exe.
3. Run the program. Don't check or uncheck any options. Click "Scan".
4. Zip the two logs, FRST.txt and Addition.txt, upload them to your OneDrive and share the link here.

How-To: Share OneDrive files and folders - Microsoft Support

https://support.microsoft.com/en-us/office/shar...

Hello,

I ran Malewarbytes with a full scan twice and then also used another program (HitmanPro) to confirm and all of them did not yield any threats unfortunately.

Hi Stas,

I think the system is infected. It's a fake Mozilla task. Please look at the spelling. It's "Moziila" (instead of "Mozilla"), which indicates it's malware.

Please download Malwarebytes Antimalware, run a scan, and eliminate every malware it finds.

https://www.malwarebytes.com/mwb-download/thankyou

Note: the Malwarebytes setup may activate the Premium trial (15-day) version. After 15 days, it switches to the free version automatically.

Let me know if that fixes the issue. If not, we need to manually inspect your startup entry points and tasks.

Hello,

Thank you for the reply. I followed your instructions and believe I captured the event. I am attaching a screenshot of the list of tasks with the first two at the top being the ones that occurred when the window popped up and disappeared.