Everytime I start Powershell two files with obfuscated names get created in %TEMP%: tfe35ysm.js0.ps1 and beszrelf.f0h.psm1
I have Comodo Internet Security Premium 10. It immediately finds the files suspicious and prompts me to clean them as it identifies them as Malware@#1xbv8ct7cwdhe.
It found these infections in WinampPortable.exe, a bunch of random LICENSE.txt files and the first one Sublime Text Portable\Data\Index\index_version
But these files are usually 1KB. When I tried to look at the .ps1 & .psm1 they appear as just 1KB, just have 1 character, 1 or M.
Several other files are now reported by Comodo as infected with variants. .dll, .exe, .dic, .ilg
While doing a full scan in Comodo the mouse started moving in slo-mo over the anti-virus windows, but fine in the rest of the screen. Then it stopped.
MalwareBytes AntiMalware doesn't find anything.
It may have started from SublimeLinter, a plugin for Sublime Text that updates frequently.
I also found that while using Chrome it would sometimes not respond to clicks for a few moments, then it got better.
What should I do?