Share via

Windows Based Script Host, possible malware from "\AppData\Local\ypsx_cloud_v2"

Anonymous
2023-08-09T09:18:20+00:00

https://answers.microsoft.com/fr-fr/windows/forum/all/bonjour-jai-toutes-les-10-minutes-ce-message/4c1011a7-9889-478a-bd43-22456163e4a7

hello.

from the link provided above, this has been answered (i believe?) already, unfortunately its in french and even if i use google translate, i dont think im willing to go through the same process because as it said, it might brick up my computer.

C:\Users\Yman\AppData\Local\ypsx_cloud_v2

still the same problem. every 10 minutes or so, a pop-up that asks me if i want to allow an app to make changes to my device appears. checking the file path, i found the folder and tried deleting it. Nada, message pops up still.

Windows for home | Windows 11 | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

Answer accepted by question author

  1. _AW_ 67,216 Reputation points Volunteer Moderator
    2023-08-09T23:16:55+00:00

    ReasonLabs seems be a common factor in these infections. I suggest you uninstall VPN by RAV before proceeding.

    
- Download [Fixlist.txt](https://1drv.ms/t/s!AqQnVFhmcB_wnBV_U7FODGFiKjly?e=OYAknp "1drv.ms") to the same folder FRST is in
- Run EnglishFRST64.exe and press Fix
- Upload the resulting Fixlog

If there are any problems, let me know.

    2 people found this answer helpful.
    0 comments

6 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2023-08-10T05:21:27+00:00

    Fixlog.txt

    It seems like the problem has been resolved. Thanks a bunch!

    0 comments
  2. Anonymous
    2023-08-09T14:45:53+00:00

    Hello, thanks for noticing the help. i have provided the frst logs in a folder on onedrive.

    FRST Logs

    0 comments
  3. _AW_ 67,216 Reputation points Volunteer Moderator
    2023-08-09T09:33:15+00:00

    I've helped someone with that infection here.

    If you need further help, upload and share FRST logs.

    https://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/

    0 comments
  4. Anonymous
    2023-08-09T09:18:57+00:00

    image wont load, here you go

    0 comments