Powershell running in background

Anonymous
2024-03-30T16:36:50+00:00

I randomly noticed that powershell was running on it's own in background tasks. I don't know what any of this means and I'm very worried.

Windows for home | Windows 10 | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments No comments
{count} votes
Answer accepted by question author
  1. _AW_ 64,331 Reputation points Volunteer Moderator
    2024-04-01T12:35:02+00:00

    There's no malware. When Discord launches, just after the login it launches seven instances of Windows Powershell all with exactly the same command line:

    powershell.exe -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -

    Which does absolutely nothing but throw an error as "-" is not a valid command.

    1 person found this answer helpful.
    0 comments No comments

6 additional answers

Sort by: Most helpful
  1. _AW_ 64,331 Reputation points Volunteer Moderator
    2024-03-30T22:21:41+00:00

    Please share Farbar Recovery Scan Tool (FRST) logs.

    https://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/

    • If your computer language is not English, rename FRST64.exe to FRST64English.exe
    • Run FRST and press "Scan"
    • Two logs are created in the folder that FRST is run from, FRST.txt and Addition.txt
    • Upload the logs to OneDrive, Google Drive or any file sharing service and post the share link

    Note: If you are downloading FRST with Edge, smartscreen will initially block it.

    Click on the 3 dots next to the warning and select Keep-> Show more-> Keep anyway.

    Share OneDrive files and folders - Microsoft Support

    0 comments No comments
  2. Anonymous
    2024-04-01T11:09:42+00:00
    0 comments No comments
  3. _AW_ 64,331 Reputation points Volunteer Moderator
    2024-04-01T11:19:53+00:00

    Please change the share permissions to "Anyone with the link" or grant my access request. Thanks.

    0 comments No comments
  4. Anonymous
    2024-04-01T11:52:48+00:00

    I though I granted you access? Unless that was someone else. No matter, I changed permissions. You should be able to see it now.

    0 comments No comments