ViperSoftX malware covertly runs PowerShell using AutoIT scripting

Jeffrey Snover and the Making of PowerShell

Fake IT support sites push malicious PowerShell scripts as Windows fixes

That PowerShell 'fix' for your root cert 'problem' is a malware loader in disguise