How to stop a script that's running automatically on every startup. I'm unable to locate it.

Question

Hello community, I'd be really glad if someone helped me out with this.

Every time I turn on my computer, a PowerShell window pops up.

Now the first time this happened, it happened within the blink of an eye, So i researched it a bit and found out that it was a virus (as per bitdefender). So i deleted that folder from the location visible in that small window. Ever since i deleted that folder, this window pops up every time i start the computer and then i have to manually close it. its a startup script and i am unable to find it anywhere. I checked for it in the following locations.

1. run: shell:startup "C:\Users\rushi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup"
2. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
3. regedit: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
4. regedit: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
5. Task scheduler library.
6. GPedit: "Computer configuration>Administrative templates>System>Logon>run these programs at user login.
7. GPedit: "User configuration>Administrative templates>System>Logon>run these programs at user login.

Below are the screeshots of all the above locations. I am unable to find that script.

Please, if possible, someone guide me to stop this script.

Thank you in advance.

Answer 1

You can safely delete that entry you have found in Autoruns and that will resolve the problem.

If you do not use Google Drive for automatic syncing, then it is safe to delete those other entries you have marked

.

Answer 2

Hi RushGM-8863,

I am Dave, I will help you with this.

Click the link below to download a small free utility that does not require installation.

https://download.sysinternals.com/files/Autorun...

When the file downloads, unzip it.

Run Autoruns64 as Administrator

In the filter box in Autoruns, type WDF

Please provide a screenshot of that Autoruns window.

Answer 3

daym cool cool.
Why didn't anybody tell me about this utility.

should i just delete it (right click> delete). or is ther any other process.

also i want to delete these following entries too, Now that i have found them. They're all useless.

I don't use google drive frequently, do i have disabled it from autostarting. Can i disable these other components too? Once in a fortnight or so, i run it manually to sync.

Thank you so much for reaching out and helping me.

Answer 4

Thank you so much once again.

I'm truly grateful to you for helping me out.

A salute to all you guys out there who help out other people all while asking absolutely nothing in return and out of pure selfless service.

Answer 5

Hey RushGM-8863,

This is unrelated to your present question, but related to the one you asked a few months ago here: https://answers.microsoft.com/en-us/windows/forum/all/how-to-replace-windows-terminal-with-powershell-in/3e504b16-565a-4d49-a46c-0839f8fcbe16

You probable want to look into the software "Win+X Menu Editor" at https://winaero.com/winx-menu-editor-for-windows-10-and-windows-8/

I dunno if it'll work for Windows 11, but it's worth a shot.