Windows powershell running on task manager on its own

Question

Hello,

This has been happening for over a week now, whenever I turn on my Pc within 30mins powershell quickly flashes on the desktop and then it appears on task manager as 2-4 process. over time both processes would be using up to 4000mb of memory each. my antivirus scan reported clean, same with windows defender.

Nothing pops up on task scheduler too.

All these process points to the same location in system32 folder.

I placed the powershell file on virus total and it also came out clean.

I also just disabled cmd and powershell in computer management but that didn't help.

Do i uninstall powershell?

Answer 1

Please try a clean boot and see if PS will appear. https://support.microsoft.com/en-us/topic/how-t...

Maybe some third-party service starts it.

Answer 2

Download Fixlist to your downloads directory, then run FRST and press Fix.

Your computer will restart to finish the cleaning process.

Please upload the Fixlog and let me know how things are running.

Fixlist

Answer 3

here's the link https://mega.nz/folder/nXglGIYL#21K3cnp2SVfEz9dMMPrZjx

Answer 4

Yes i did

here's a screenshot of startup processes

As you can see these processes run as soon as the system is logged on

the powershell process runs much later and when i check scheduler to see what started it, nothing. No process ran at that instant.

Answer 5

Thank you all

found it cause after running the fixlist