PowerShell window opening at startup
Solved
honidale
-
MisteryBean Posted messages 8947 Registration date Status Modérateur Last intervention -
MisteryBean Posted messages 8947 Registration date Status Modérateur Last intervention -
Hello,
I have a powershell.exe window that opens very briefly when my PC starts. I'm worried that I've downloaded a corrupted file, especially since I've been experiencing random disconnections from my Google account.
Can someone help me figure out if my PC is infected?
I have a powershell.exe window that opens very briefly when my PC starts. I'm worried that I've downloaded a corrupted file, especially since I've been experiencing random disconnections from my Google account.
Can someone help me figure out if my PC is infected?
13 réponses
Hello,
We will start with a PC diagnosis:
Please read the entire procedure before posting the reports
The reports expected are FRST.txt and Addition.txt
All reports must be hosted on https://security-x.fr/up/ and you need to provide the links obtained in your response
---------------------------------------------------------------------------------------------
--> The SmartScreen filter may trigger an alert. Click on Actions or More Information and then on Run anyway
---------------------------------------------------------------------------------------------
--> Download the FRST version of Farbar, compatible with your system and save the file on your Desktop
--> For a 32-bit system
--> For a 64-bit system
How to find out which version 32-bit or 64-bit is running on my system?
--> Wait until your browser prompts you to download to save, without clicking anywhere, especially not on the sponsors of the page.
--> Close all applications, including your browser
--> Double-click on FRST.exe and click Yes to accept the Disclaimer
--> On Vista, Windows 7 / 8 and 10, you need to launch the file by right-clicking -> Run as administrator
--> Wait for it to indicate The tool is ready to use
--> On the main menu, click on Scan and wait for the analysis
--> At the end of the scan, the reports FRST.txt and Addition.txt are created. Post these reports in your next response.
--> The reports are saved in the same location as the tool and under C:\FRST\Logs
--
Security contributor.
We will start with a PC diagnosis:
Please read the entire procedure before posting the reports
Do not post them directly in the messages as they are unreadable and incomplete
The reports expected are FRST.txt and Addition.txt All reports must be hosted on https://security-x.fr/up/ and you need to provide the links obtained in your response
---------------------------------------------------------------------------------------------
--> The SmartScreen filter may trigger an alert. Click on Actions or More Information and then on Run anyway
---------------------------------------------------------------------------------------------
--> Download the FRST version of Farbar, compatible with your system and save the file on your Desktop
--> For a 32-bit system
--> For a 64-bit system
How to find out which version 32-bit or 64-bit is running on my system?
--> Wait until your browser prompts you to download to save, without clicking anywhere, especially not on the sponsors of the page.
--> Close all applications, including your browser
--> Double-click on FRST.exe and click Yes to accept the Disclaimer
--> On Vista, Windows 7 / 8 and 10, you need to launch the file by right-clicking -> Run as administrator
--> Wait for it to indicate The tool is ready to use
--> On the main menu, click on Scan and wait for the analysis
--> At the end of the scan, the reports FRST.txt and Addition.txt are created. Post these reports in your next response.
--> The reports are saved in the same location as the tool and under C:\FRST\Logs
--
Security contributor.
Thank you for your response. Here are the two links:
https://up.security-x.fr/file.php?h=Re1bdfebfc6aa3538c25f9e446c90bc01
https://up.security-x.fr/file.php?h=Rc7a1323d6b93b8c4bd6c7a984147f5ef
https://up.security-x.fr/file.php?h=Re1bdfebfc6aa3538c25f9e446c90bc01
https://up.security-x.fr/file.php?h=Rc7a1323d6b93b8c4bd6c7a984147f5ef
RE_
Update VLC
------------------------
-------------------------------------------------------
--> Copy what is here https://textup.fr/633462PL from start:: to end:: (without pasting it anywhere)
--> Open FRST (or FRST64) as administrator and click on Fix
If FRST seems to freeze or becomes unresponsive, let it run
--> The PC will restart
--> A fixlog file will be created in the same location as FRST, post it like the other reports
--> The fix will clean the firewall, programs you run afterwards will ask for access on the first launch
--> Let me know if you still have the problem.
--
Security contributor.
Update VLC
------------------------
-------------------------------------------------------
--> Copy what is here https://textup.fr/633462PL from start:: to end:: (without pasting it anywhere)
--> Open FRST (or FRST64) as administrator and click on Fix
If FRST seems to freeze or becomes unresponsive, let it run
--> The PC will restart
--> A fixlog file will be created in the same location as FRST, post it like the other reports
--> The fix will clean the firewall, programs you run afterwards will ask for access on the first launch
--> Let me know if you still have the problem.
--
Security contributor.
So at startup, the PowerShell window did not appear.
The fix link: https://up.security-x.fr/file.php?h=R275d16d15f2d4eb69567671c5ec169a9
The fix link: https://up.security-x.fr/file.php?h=R275d16d15f2d4eb69567671c5ec169a9
RE_
What exactly is happening? Can you no longer access the settings? Are you getting an error message?
--
Security contributor.
I can no longer launch Windows Update, for example.
What exactly is happening? Can you no longer access the settings? Are you getting an error message?
--
Security contributor.
The message when I want to start Windows Update is: Windows Update a problem occurred please try opening settings later.
I ran the troubleshooter which tells me that an item was missing and the problem has been fixed without actually fixing the issue ????
(I won't respond anymore tonight as I work early tomorrow, in any case, I thank you for your patience and especially for solving my previous problem.)
Looking forward to hearing from you tomorrow.
I ran the troubleshooter which tells me that an item was missing and the problem has been fixed without actually fixing the issue ????
(I won't respond anymore tonight as I work early tomorrow, in any case, I thank you for your patience and especially for solving my previous problem.)
Looking forward to hearing from you tomorrow.
RE_
OK, when you can, do this to see if it fixes the problem:
--> In Cortana, type CMD
--> Right-click on Command Prompt and run as administrator
--> In the prompt, type (or copy/paste) DISM /Online /Cleanup-image /Restorehealth and confirm
--> At the end of the scan, type sfc /scannow and confirm
--> At the end of the scan, press Ctrl + A (to select all, the prompt screen turns white)
--> Press Ctrl + C (to copy)
--> Press Windows + R, type notepad and confirm
--> In Notepad, press Ctrl + V (to paste the text)
--> Give a name to the file, then save it and post it in your next reply as you would for FRST reports.
--
Security contributor.
OK, when you can, do this to see if it fixes the problem:
--> In Cortana, type CMD
--> Right-click on Command Prompt and run as administrator
--> In the prompt, type (or copy/paste) DISM /Online /Cleanup-image /Restorehealth and confirm
--> At the end of the scan, type sfc /scannow and confirm
--> At the end of the scan, press Ctrl + A (to select all, the prompt screen turns white)
--> Press Ctrl + C (to copy)
--> Press Windows + R, type notepad and confirm
--> In Notepad, press Ctrl + V (to paste the text)
--> Give a name to the file, then save it and post it in your next reply as you would for FRST reports.
--
Security contributor.
Good evening, I'm back. I performed the actions from the last message, here is the link:
https://up.security-x.fr/file.php?h=Rc4b86367b579e0f21f4569f6984432a8
https://up.security-x.fr/file.php?h=Rc4b86367b579e0f21f4569f6984432a8
RE_
OK
What does that mean for the Update?
--
Security contributor.
OK
The Windows Resource Protection has detected corrupted files and has repaired them.
What does that mean for the Update?
--
Security contributor.
RE_
OK, we will try to repair Windows without losing data or applications
/!\ always remember to back up your important data before making any changes to the system, although data should be backed up permanently and regularly
--> Download the Windows 10 ISO corresponding to your PC
--> Once downloaded, double click to mount it in the virtual drive (or right click => Open with => Windows Explorer)
--> Right click and run as administrator on setup.exe
--> Click on Next
--> Click on Accept
--> Make sure that Keep files and applications is checked
--> Click on Install
Windows 10 will reinstall itself while keeping the data and programs.
--
Contributor Security.
OK, we will try to repair Windows without losing data or applications
/!\ always remember to back up your important data before making any changes to the system, although data should be backed up permanently and regularly
--> Download the Windows 10 ISO corresponding to your PC
--> Once downloaded, double click to mount it in the virtual drive (or right click => Open with => Windows Explorer)
--> Right click and run as administrator on setup.exe
--> Click on Next
--> Click on Accept
--> Make sure that Keep files and applications is checked
--> Click on Install
Windows 10 will reinstall itself while keeping the data and programs.
--
Contributor Security.