Powershell Process at Startup

I have a desktop and laptop both running Windows 11. I've noticed that the laptop always has two Windows Powershell processes running at startup while the desktop does not. Is this normal? What would require the Powershell processes to run? I've run Microsoft Defender, including an offline scan, with no findings.

It wouldn’t be normal imo. I would run a scan with Malwarebytes free & also AdwCleaner.
I would check task manager>startup to see if there’s any disc cleaning software or even something unknown running at that time.

mccnavy said:

I have a desktop and laptop both running Windows 11. I've noticed that the laptop always has two Windows Powershell processes running at startup while the desktop does not. Is this normal? What would require the Powershell processes to run? I've run Microsoft Defender, including an offline scan, with no findings.

Click to expand...

Also check to see if your laptop manufacturer might have included proprietary apps that run at startup, such as MSI Center (for MSI laptops, not all laptops). One or more of those OEM apps may be doing some sort of checking for updates for the software installed on the system.

A couple of mins after startup are they still running? if not imo I guess it is part of the startup process and all is fine

Interesting...I will monitor but it looks like I did get infected. I recall reading something in the news about a Bitcoin scam that uses Windows Event Viewer and uses a log file. Malwarebytes found it and I quarantined (then deleted) it. As of last two Powershell isn't there...which is good. I also ran Adwcleaner and Defender, Malwarebytes, and Adwcleaner show nothing abnormal at this time.