Windows 10: Malware popup ypsx_cloud_v2 on my pc

I am currently facing an identical issue to that of a user mentioned in this link: https://answers.microsoft.com/en-us/windows/forum/all/malware-popup-frst-logs-attached/845b808e-4257-434d-8cc7-60cee3eafdc3A popup appears every 15-20 minutes on my system attempting to open a file named "agile2.vbs" located here: C:\Users[username]\AppData\Roaming\ypsx_cloud_v2\agile2.vbsLog Files:https://drive.google.com/file/d/1utlHyY6aa2o6nkMFTcCIEalFNCH6B5Q-/viewhttps://drive.google.com/file/d/1q78xGwJjzqFDR7FRv3qtNIESehllMOkC/view

:)

 

Malware popup ypsx_cloud_v2

Hello everyone.

I'm having the same problem as this user : Redirecting

One of my user have a pop up opening every 15-20 minutes trying to open "agile2.vbs" in this location : C:\Users\[username]\AppData\Roaming\ypsx_cloud_v2\agile2.vbs

Screenshot of the popup :https://ibb.co/RCww3t7

However, if i delete the ypsx_cloud_v2 file, it comeback when the pop up come again.

I tryed to check every programs, files, scheduled task, start up programs, scan all process and service in the task manager, scan with malwerbytes (nothing detected) but unfortunatly, it keep coming back.

I saw a few people who encounter the same issue this week so i assume this is a recent malware.

Do anybody have a permanent solution for that so i can avoid a full reset of his laptop ?

Thank you and have a good day !

 

Malware popup ypsx_cloud_v2 on my pc

I am currently facing an identical issue to that of a user mentioned in this link: Redirecting

A popup appears every 15-20 minutes on my system attempting to open a file named "agile2.vbs" located here: C:\Users[username]\AppData\Roaming\ypsx_cloud_v2\agile2.vbs

However, I've noticed that even if I remove the ypsx_cloud_v2 folder, it reappears when the popup shows up again.

I have diligently checked all installed programs, files, scheduled tasks, startup applications, scanned all running processes and services in the task manager, and performed scans with Malwarebytes (which detected nothing). Unfortunately, despite these efforts, the issue persists.

I've come across several individuals who've encountered the same problem this week, leading me to believe that this could be a recent form of malware.

Would anyone happen to possess a lasting solution to this problem? I would greatly appreciate it, as I'd like to avoid performing a complete reset of my PC.

Thank you, and I wish you all a pleasant day!

attached here are the first logs:

frst – Google Drive

 

Malware popup ypsx_cloud_v2

I think i have found the solution . Try to delete the folder wupdater_cloud in appdata. It seems the vbs reinstallation didnt popup anymore.

What i did too is putting no access (no write , no modify...) to the ypsx_cloud_v2 in security options but i dont know if it participates to the fact that i dont have the problem anymore