Windows powershell running on task manager on its own

Question

Hello,

This has been happening for over a week now, whenever I turn on my Pc within 30mins powershell quickly flashes on the desktop and then it appears on task manager as 2-4 process. over time both processes would be using up to 4000mb of memory each. my antivirus scan reported clean, same with windows defender.

Nothing pops up on task scheduler too.

All these process points to the same location in system32 folder.

I placed the powershell file on virus total and it also came out clean.

I also just disabled cmd and powershell in computer management but that didn't help.

Do i uninstall powershell?

Answer 1

Please try a clean boot and see if PS will appear. https://support.microsoft.com/en-us/topic/how-t...

Maybe some third-party service starts it.

Answer 2

Download Fixlist to your downloads directory, then run FRST and press Fix.

Your computer will restart to finish the cleaning process.

Please upload the Fixlog and let me know how things are running.

Fixlist

Answer 3

Hi,

My name is Igor, it's a pleasure for me to help others and I'll do all my best to help you.

Seems some tool planned this task to run from Task scheduler. Please check the list of scheduled tasks. https://learn.microsoft.com/en-us/windows/win32...

Answer 4

If you could scan with Farbar Recovery Scan Tool (FRST), and share the logs it creates, I'll help you fix the issue.

https://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/

Run FRST as administrator, use default settings and press Scan. Two logs are created in the folder that FRST is run from, FRST.txt and Addition.txt. Zip the logs and share on OneDrive, Google Drive or any file sharing service, then post the share link.

* Note: If you are downloading FRST with Edge, smartscreen will initially block it.

Click on the 3 dots next to the warning and select Keep -> Show more -> Keep anyway.

Answer 5

Did you check the list of scheduled tasks?