Question about possible infection?

[ThisIsDan]

Currently I am using Bitdefender AntiVirus plus and every time I restart my computer, BitDefender notifies me that it has a blocked something. I look into further details and it specifies that PowerShell is trying to communicate with an external IP. It will keep popping up until I end both of PowerShell's processes with task manager. The IP has a format of xx.xx.xx.xx/assassin, which seems a little suspicious to me. I've run many virus scans with different programs and am still having the same problem.

Does anyone have any insight into this?

 

[Ambular]

Have you opened any downloaded MS Word documents lately? https/lifars.com/2016/03/cybercriminals-using-microsoft-powershell-create-ransomware/

 

[ThisIsDan]

Thanks for your reply.

The only documents I have opened are ones from school, although I guess that doesn't rule out the fact of a virus. I do have the same symptoms except for the ransomware part. I will runhitmanpro and see if that finds anything

 

[Tradesman1]

Try running MalwareBytes (they have a free version)