Powershell task keeps opening and consumes memory after every startup

Ahmed Ehab 20 Reputation points
2023-11-22T20:28:46.1966667+00:00

This annoying powershell task starts about an hour or so from opening the PC and eats up this much memory, I tried disabling powershell from Local Group Policy Editor and Registry editor but it keeps starting nontheless, I even tried doing a full malware scan using windows defender and malwarebytes but no malware was found.
Screenshot (481)

Screenshot (534)

PowerShell
PowerShell
A family of Microsoft task automation and configuration management frameworks consisting of a command-line shell and associated scripting language.
2,300 questions
0 comments No comments
{count} votes

Accepted answer
  1. MotoX80 32,726 Reputation points
    2023-11-23T00:03:54.35+00:00

    As I replied to your first question back in September, you need to look at the command line to get the file name of the script being executed. That should help you trace the activity back to something.

    Here's that command.

    Get-WmiObject Win32_Process -Filter "name = 'powershell.exe'" | select commandline
    
    
    

    Another user had a problem with Powershell activity and I wrote a little monitor script for him. Run that and post back what it finds.

    https://learn.microsoft.com/en-us/answers/questions/1418287/powershell-storage-scriptblock-events-on-startup-n

    I do not recommend disabling Powershell.

    1 person found this answer helpful.

0 additional answers

Sort by: Most helpful