wscript blocked by Trend Micro

  • 1
  • Problem
  • Updated 8 months ago
  • In Progress
I recently purchased Micro Trend for Windows and so far so good. Yesterday when I logged into the computer a window popped up saying that wscript.exe "tried to open files protected by Folder Shield"and I had the option of stopping it. I was in a hurry and said yes. Today the window popped open again saying that it had stopped wscript.exe. I searched online and read that it was part of a Microsoft process and that usually does not pose a threat. Should I remove it, leave it and have Trend Micro stop it everytime or let it do whatever it does?
Photo of riehlc

riehlc

  • 70 Points

Posted 8 months ago

  • 1
Photo of TM_Shei

TM_Shei, Employee

  • 1,138 Points 1k badge 2x thumb
Hi riehlc, welcome to the community!

Yes, you are correct that wscript.exe is a Windows service that allows you to execute VBScript files. However, it may be manipulated by cyber criminals. You received the said notification because it opened files that are being protected by Folder Shield. It's not necessarily malicious but another possibility is that that your computer is infected with malware that attempts to execute malicious .vbs scripts. 

Just to give you a quick overview about Folder Shield, it is your last layer of protection against ransomware. Folder Shield prevents every process or service, unless whitelisted, from accessing the files inside the protected folder. 

I suggest that you run a full scan just to double check if there are malware infection on your computer, if no threats found, then there shouldn't be any problem. Also, try observing your computer if there will be unusual behavior.

Should you have other concerns, don't hesitate to reply.

Thank you and have a great day!

Trend Micro Home Users Community