PowerShell Windows 11

Wayne Basnett 20 Reputation points
2026-09-02T14:03:51.52+00:00

To stop a rouge script of app from activating PowerShell every hour.

I have tried purring a key in the registry with a value 0 as found on the internet but this dose not work unless I have not

implemented it correctly .

Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Script Host\Settings

Enabled REG_DWORD 0x00000000 (0)

Pleas help

with thanks

Wayne

Windows for home | Windows 11 | Security and privacy
0 comments
Answer accepted by question author
DaveM121 928.6K Reputation points Independent Advisor
2026-09-03T15:57:19.4266667+00:00

Thank you for the screenshots, I do not see any indication of malware on your PC.

On the 'Scheduled Tasks' tab, one at a time, uncheck each of the entries indicated below, then restart your PC and wait to see if that stops the PowerShell popup appearing.

If not, re-check that item and uncheck the next entry and repeat the process to try to find the entry causing the problem.

2026-09-03_165235

Was this answer helpful?

1 person found this answer helpful.
0 comments

4 additional answers

Sort by: Oldest
Most helpful Newest Oldest
  1. DaveM121 928.6K Reputation points Independent Advisor
    2026-09-02T14:37:37.3166667+00:00

    That registry tweak will not stop a PowerShell script executing, just the Windows script host.

    If you have a rogue script executing in PowerShell, click the link below to download a small free utility that does not require installation.

    https://download.sysinternals.com/files/Autoruns.zip

    When the file downloads, unzip it.

    Run Autoruns64 as Administrator

    1

    Select the 'Logon' tab at the top of Autoruns.

    Please provide a screenshot of all entries on that tab.

    2

    Select the 'Scheduled Tasks' tab at the top of Autoruns.

    Please provide a screenshot of all entries on that tab.

    Was this answer helpful?

  2. Wayne Basnett 20 Reputation points
    2026-09-03T15:36:38.9266667+00:00

    Was this answer helpful?

    0 comments
  3. Wayne Basnett 20 Reputation points
    2026-09-03T15:37:19.6+00:00

    Was this answer helpful?

    0 comments
  4. Wayne Basnett 20 Reputation points
    2026-09-09T10:48:04.0333333+00:00

    In my case it turned out to be the 4tn red arrow in the list.

    Thanks to

    DaveM121

    Wayne

    Was this answer helpful?

    0 comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.