I've noticed that PowerShell is using a lot of CPU resources on my system, and the command it's running is: "powershell -NoProfile -WindowsStyle Hidden -c iex([System.Environment]::GetEnvironmentVariable('GDCA'))". Can anyone explain why this process starts automatically?
2 Answers
This is definitely malware. You should check your environment variables for anything named "GDCA" – that could give you some clues about what’s going on. Honestly, I'd say it might be best to wipe your OS and do a clean reinstall.
That sounds sketchy! It’s likely that you’re dealing with a virus. I recommend formatting your machine and changing all your passwords right away.
I’m planning to wipe Windows too, but I looked into the environment variables and found some strange code that looks really fishy. The whole thing seems like a scam, as it includes complex decryption functions and hidden commands!