Irritating pop up

[emilymat]

I wonder if anyone canpoint me in the right direction to removea 'pop up' which I have no idea where it came from.

I get

"Windows Script Host"

X cannot find script file c/.........(varies with loads of letters and numbers).

OK or delete.

It comes up about every 15 minutes and I have tried to locate what it is, but cannot.

Silver surfer here, not to savvy with the intricacies of the computer.

Thank you very much.

[MJCM]

It could be a task in Task Scheduler

Maybe this helps

http://www.groovypost.com/howto/cancel-delete-windows-7-scheduled-task/

Ps: Did you check for Viruses / Malware ?

If not, use programs like HitmanPro, Malwarebytes, SuperantiSpyware

[emilymat]

It could be a task in Task Scheduler

Maybe this helps

http://www.groovypost.com/howto/cancel-delete-windows-7-scheduled-task/

Ps: Did you check for Viruses / Malware ?

If not, use programs like HitmanPro, Malwarebytes, SuperantiSpyware

Thank you. Very useful that link. I have also downloaded Superspyware.

I'll see what happens, as I can't tell if successful until the pop up dosen't appear - if you follow me. Let you know. Once again, thanks.

[KhunBENQ]

Can you supply a screenshot of such a popup?

I searched around for this kind of error messages.

There are so many different cases and no easy scheme.

From the appearance it is clear that some program/service (could be legit or could be malicious) is running periodically trying to start a script which is not there.

Could be the result of an erroneous de-installation or an erroneous "cleanup" tool been run.

OR: the script has been detected as malicious by antivirus SW and moved/deleted.

What you could do.

Start event viewer:

http://windows.microsoft.com/en-us/windows/open-event-viewer#1TC=windows-7

Navigate to "Windows Logs" / "System Logs" and clear the log: right click in the left pane on the "System Logs" and select "Clear Log".

Leave the event viewer open and wait for the popup.

When popup appeared check the log and see whether there are useful/more details.

Can also be copy/pasted.

Edited March 20, 2016 by KhunBENQ

[emilymat]

Can you supply a screenshot of such a popup?

I searched around for this kind of error messages.

There are so many different cases and no easy scheme.

From the appearance it is clear that some program/service (could be legit or could be malicious) is running periodically trying to start a script which is not there.

Could be the result of an erroneous de-installation or an erroneous "cleanup" tool been run.

OR: the script has been detected as malicious by antivirus SW and moved/deleted.

What you could do.

Start event viewer:

http://windows.microsoft.com/en-us/windows/open-event-viewer#1TC=windows-7

Navigate to "Windows Logs" / "System Logs" and clear the log: right click in the left pane on the "System Logs" and select "Clear Log".

Leave the event viewer open and wait for the popup.

When popup appeared check the log and see whether there are useful/more details.

Can also be copy/pasted.

Thanks very much.

I think this thing is maybe malicious as you suggest. It's interesting that System Restore fails as it says 'something is blocking it from performing.' I'll have a crack at sceenshot and get back to the thread.

[emilymat]

Not familiar with screenshot. So, took photo. Here's the little bugger!

[KhunBENQ]

Do you have AVG antivirus SW running?

Some findings on the net indicate that it might result from a problem with this?

Some SW installed with version nr. 2.0.1.9?

Maybe previously?

Go through your list of installed SW.

Did you use any "registry cleaner" or other "cleaner" programs?

Sometimes they do more harm than good.

The "magic number" (class registration?) did not bring a result:

64F68C35-3474-5DB3-85F2-2D315570FEBF

All in all: to me it does not look like a malicious SW.

More like a mishap.

Some suggest to create an empty file with the shown name/location.

But don't be surprised if then another file comes up , care for some?:

https://www.google.de/search?q=script+can+not+find+2.0.1.9&oq=script+can+not+find+2.0.1.9&gs_l=serp.3...797538.808855.0.809202.38.32.6.0.0.0.200.3248.15j14j1.30.0....0...1c.1.64.serp..6.10.867.J28UPrLB_6I

(many similar messages but no good answer found so far)

Edited March 20, 2016 by KhunBENQ

[Broken Record]

Probably malware, try this site for the solution.

https://malwaretips.com/blogs/remove-fiber-js-windows-script-host/

Edited March 20, 2016 by Broken Record

[happynthailand]

I see that you are using FireFox

go into firefox add on's

look for any script add on and remove it or disable it

should take care of the pop up

[Lannig]

Since this comes from Windows Scripting Host I'd be surprised it has anything to do with Firefox.

Looks very much to me like a leftover of some VBScript malware that was once automatically launched by some mechanism (could be a scheduled task like MJCM suggested). The script file (fofa.txt) is gone, probably eaten by your a/v software but the startup link subsists. Hence the error popup.

If it comes at regular intervals, a scheduled task is the likely culprit. Have you checked them ?

You may want to install this Microsoft utility (autoruns): https://technet.microsoft.com/en-us/sysinternals/bb963902.aspx

Then run it and browse through all tabs (particulary "Scheduled Tasks") until you find a reference to something that includes the lengthy hex string (64F68C35-...), then uncheck the box next it to.

I wouldn't hope much for a malware detector to automagically find this leftover because it's not malignant per se and it probably doesn't carry a recognizable signature.

Edited March 20, 2016 by Lannig

[emilymat]

Firstly I would like to thank all of you who replied with suggestions. It's been a 'mini' education for me using some of the suggestions.

Secondly we have success!! No pop up for several hours, whereas before I would have had to delete it about 10 times.

The solution finally came when I downloaded the Broken Record link in post 9.

I ran thorough the suggestions but could not find anything in the 'delete programme' through the control panel.

So I went on to the various 'downloads' suggested. Firstly I tried ADW Cleaner but this was not successful so I moved on to the "Junkware Removal Tool'

After I ran the programme it buzzed around and finally identified a load of things it had deleted. It also specifically asked me if I wished to remove this particular pop up. Not quite sure why that was considered specific but I don't care. Hit the key and it had gone.

So once again thanks all and particularly Borken Record (I've saved that link), You have been very helpful as I've never been on a specific forum before, just the general ones.

[emilymat]

Just a footnote. My computer has also a beeter performance after that clean up. Now watching cricket uninterrupted in lovely HD. Ta

[emilymat]

Here it is.