PowerShell Windows 11

Wayne Basnett 20 Reputation points
2026-09-02T14:03:51.52+00:00

To stop a rouge script of app from activating PowerShell every hour.

I have tried purring a key in the registry with a value 0 as found on the internet but this dose not work unless I have not

implemented it correctly .

Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Script Host\Settings

Enabled REG_DWORD 0x00000000 (0)

Pleas help

with thanks

Wayne

Windows for home | Windows 11 | Security and privacy
0 comments
Answer accepted by question author
DaveM121 928.6K Reputation points Independent Advisor
2026-09-03T15:57:19.4266667+00:00

Thank you for the screenshots, I do not see any indication of malware on your PC.

On the 'Scheduled Tasks' tab, one at a time, uncheck each of the entries indicated below, then restart your PC and wait to see if that stops the PowerShell popup appearing.

If not, re-check that item and uncheck the next entry and repeat the process to try to find the entry causing the problem.

2026-09-03_165235

Was this answer helpful?

1 person found this answer helpful.
0 comments

4 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Wayne Basnett 20 Reputation points
    2026-09-09T10:48:04.0333333+00:00

    In my case it turned out to be the 4tn red arrow in the list.

    Thanks to

    DaveM121

    Wayne

    Was this answer helpful?

    0 comments
  2. Wayne Basnett 20 Reputation points
    2026-09-03T15:37:19.6+00:00

    Was this answer helpful?

    0 comments
  3. Wayne Basnett 20 Reputation points
    2026-09-03T15:36:38.9266667+00:00

    Was this answer helpful?

    0 comments
  4. DaveM121 928.6K Reputation points Independent Advisor
    2026-09-02T14:37:37.3166667+00:00

    That registry tweak will not stop a PowerShell script executing, just the Windows script host.

    If you have a rogue script executing in PowerShell, click the link below to download a small free utility that does not require installation.

    https://download.sysinternals.com/files/Autoruns.zip

    When the file downloads, unzip it.

    Run Autoruns64 as Administrator

    1

    Select the 'Logon' tab at the top of Autoruns.

    Please provide a screenshot of all entries on that tab.

    2

    Select the 'Scheduled Tasks' tab at the top of Autoruns.

    Please provide a screenshot of all entries on that tab.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.