Powershell task keeps opening and consumes memory after every startup

Question

This annoying powershell task starts about an hour or so from opening the PC and eats up this much memory, I tried disabling powershell from Local Group Policy Editor and Registry editor but it keeps starting nontheless, I even tried doing a full malware scan using windows defender and malwarebytes but no malware was found.

Answer 1

As I replied to your first question back in September, you need to look at the command line to get the file name of the script being executed. That should help you trace the activity back to something.

Here's that command.

Get-WmiObject Win32_Process -Filter "name = 'powershell.exe'" | select commandline

Another user had a problem with Powershell activity and I wrote a little monitor script for him. Run that and post back what it finds.

https://learn.microsoft.com/en-us/answers/questions/1418287/powershell-storage-scriptblock-events-on-startup-n

I do not recommend disabling Powershell.