Aug 26, 2008
Aug 20, 2008
Virus problem - Virus removal. vbs
When you restart your computer, do u get an error message saying "VirusRemoval.vbs" missing. Wondering how can i remove this one.
Ok this is a solution suggested by phoenixrisefromtheash@yahoo.com use it and this works.....
First Open task manager and kill process wscript.exe.
Second Delete VirusRemoval.vbs and Autorun.inf files from all usb drives if u have the virus in them.
Third Go to c:\Windows\System32 and delete the file VirusRemoval.vbs. It is super hidden so first go to Folder Options and check show hidden and check boxes. Also required for the above files.
Forth go to start>run and type regedit and enter Go to HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon On the right side look for Shell which should have value of just explorer.exe. delete anything at right side of explorer.exe if there is anything.
Under same key Winlogon also look for Userinit which should have value of c:\WINDOWS\system32\userinit.exe, Delete all the crap after the comma.
Fifth Go to HKCU\Software\Microsoft\Internet Explorer\Main On the right side locate Window Title and delete its value i.e. Sujin.com.np
Under the same key locate Start Page and delete its value i.e. http://sujin.com.np/
Use this five step process and I'm sure it will help. If not better to take backup and format the drive......
For second thoughts..
start > run > msconfig > startup tab > uncheck all .vbs files
Ok this is a solution suggested by phoenixrisefromtheash@yahoo.com use it and this works.....
First Open task manager and kill process wscript.exe.
Second Delete VirusRemoval.vbs and Autorun.inf files from all usb drives if u have the virus in them.
Third Go to c:\Windows\System32 and delete the file VirusRemoval.vbs. It is super hidden so first go to Folder Options and check show hidden and check boxes. Also required for the above files.
Forth go to start>run and type regedit and enter Go to HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon On the right side look for Shell which should have value of just explorer.exe. delete anything at right side of explorer.exe if there is anything.
Under same key Winlogon also look for Userinit which should have value of c:\WINDOWS\system32\userinit.exe, Delete all the crap after the comma.
Fifth Go to HKCU\Software\Microsoft\Internet Explorer\Main On the right side locate Window Title and delete its value i.e. Sujin.com.np
Under the same key locate Start Page and delete its value i.e. http://sujin.com.np/
Use this five step process and I'm sure it will help. If not better to take backup and format the drive......
For second thoughts..
start > run > msconfig > startup tab > uncheck all .vbs files
Subscribe to:
Posts (Atom)