Previous Topic Next Topic

Windows script host error

Closed
vfreak - Jun 17, 2009 at 07:17 AM
griever09 Posts 7 Registration date Tuesday September 30, 2008 Status Member Last seen November 8, 2010 - Oct 27, 2010 at 02:44 AM
Hello,
every time i boot my system i get a warning
TITLED : "Windows Script Host"

message : can not find script file "c:\windows\system32\VirusCleaner.vbe".

I have checked run->msconfig there is nothing awry there.
I have also searched "c:\windows\system32\VirusCleaner.vbe" in registry editor
and got the following :-
name : "Userinit"
type : "REG_SZ"
data : "c:\windows\system32\userinit.exe,c:\windows\system32\VirusCleaner.vbe"
thanks in advance.
Related:

3 responses

Answer 1 / 3
k
Jul 26, 2009 at 12:40 PM
m also getting the same problem... its due to virus which has corrupted the registery in windows..
i run avg in my system.. which removed the virus but this prob still occuring..
second hint i got is from my computer--> folder option -> delete the vbs file type ..
but i think this might not be the best solution.. plz.. revert if someone has got the full proof solution...
1
Answer 2 / 3
Mister_B
Oct 26, 2010 at 09:09 AM
It is most likely being called from one of the "run" registry keys...

HKLM\Software\Microsoft\Windows\CurrentVersion\Run

-or-

HKCU\Software\Microsoft\Windows\CurrentVersion\Run
0
Answer 3 / 3
griever09 Posts 7 Registration date Tuesday September 30, 2008 Status Member Last seen November 8, 2010 1
Oct 27, 2010 at 02:44 AM
To address the problem

Open regedit by going to Start>Run type regedit and then press 'Enter'.

Navigate to the registry key below

HKLM\Software\Microsoft\Windows NT\Current Version\Winlogon

Look for Userinit on the right, double click on Userinit

Erase c:\windows\system32\VirusCleaner.vbe

it should now be just c:\windows\system32\userinit.exe,

Do NOT delete the comma.

Press 'Enter'. Close Registry Editor.

Finally Reboot the system.

The issue is that the VBE file is set to run at startup without actually setting it as a startup item. it's an infection by the way most likely.
0