Windows 10: Microsoft script host keeps popping up showing "F"

Split from this thread. Microsoft script host keeps popping up showing "F"I already run the FRST now got these Files 3 Items Please help me with Fixlist.txt

:)

 

microsoft windows based script host keeps popping up

LOGS
Sir can you help me here are the logs
i have same issue with zouzouplayer, microsoft windows based script host keeps popping up.
Thank you so much

 

Windows Script Host Keeps Popping Out

Windows Script Host which shows "Can not find script file "C:\Users\Public\Libraries\Checks.vbs"." keeps popping out.

Is there any way to stop it?

Thanks.

 

Microsoft script host keeps popping up showing "F"

Here's an alternative way to delete that wdcloud_v.2/Tempermonkey virus, it helped me a lot:

1. I downloaded FRST (Farbar Recovery Scan Tool) on Bleeping Computer's website. I highly recommend to get the x64 version.

2. When the download finishes, I opened the application by right click and selecting "Run as Administrator".

3. You need to click the "Scan" button and wait for it to finish.

4. Once it's finished, the FRST.txt file will pop up on any word processor such as Notepad.

5. I used the "Find" tool (for Notepad, Edit>Find or Ctrl+F) and typing "wdcloud". Here you will find the exact file location on the FRST.txt file.



Like for example, my Microsoft Edge browser has Tempermonkey extension installed (actually I used the Task Manager to end their tasks and found out there's an extension that is NOT I don't have). Every few minutes, that browser pops up and plays random Youtube videos especially from a Vietnamese Youtuber named Toan Hoc 4.0 and randomly closes. Here's the file location:

(C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe ->) () [File not signed] C:\Users\(USER)\AppData\Local\ypsx_cloud_v2\wdcloud_v2.exe



6. Then I copied the file location on Windows Search and opened its exact file location.

7. Open Task Manager then find wdcloud_v2 listed, then click "End Task". I also recommend to close any browser listed on the Task Manager such as Microsoft Edge or Google Chrome.

8. On the file location, delete ypsx_cloud folders (and even on Recycle Bin). If you can't delete the file, either wdcloud_v2 or an internet browser are active on Task Manager but you need to follow Step 7.

9. I restarted the computer, checked my task manager and my internet browser is not popping up randomly anymore. The wdcloud_v2 is just what it caused my computer to have them.

If you have any issues, just reach me out.