Hi!
I having problem with pop up hxxp://api.backend-app.com:8880
I created new HIPS rule!
Looks like the pop-ups has been stopped.
I found:
C:\Users\xxx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\updatewins.lnk
updatewins.lnk - >Target: C:\WINDOWS\system32\wscript.exe /E:jscript "C:\Users\xxx\AppData\Roaming\updatewins" wscript.exe/e:key:przSlksUf6ucMA
Question.
Can updatewins.lnk file be deleted?
Thank you!