Previous Topic Next Topic

Windows Host Script error

Closed
Re Alms - Jan 28, 2016 at 04:17 AM
dannyds Posts 204 Registration date Thursday January 28, 2016 Status Contributor Last seen November 22, 2020 - Feb 15, 2016 at 03:27 PM
Hello,

I have upgraded my laptop HP Envy Touch Smart to Windows 10 from Windows 8.1, for how many months of used suddenly appear on the screen the error message on a "Windows Script Host" icon - "Can not find script file "C:\ProgramData\{80E66825-D064-B9A3-61A2-C921B1601AAF}\2.0.1.9\rire.text". Please help! Thanks!

Related:

6 responses

Answer 1 / 6
dannyds Posts 204 Registration date Thursday January 28, 2016 Status Contributor Last seen November 22, 2020 67
Jan 28, 2016 at 07:15 PM
Hi Re Alms,

It has been hard to gauge into each and every windows host script errors, however here already a thread related to window host script error you can check that out here https://ccm.net/forum/affich-715116-windows-script-host-error-message Well it is not exactly the same error but you can get an idea on how to fix yours.



Thanks & Regards,
Danny 
0
Re Alms
Jan 29, 2016 at 03:33 AM
i have tried it but not yet fix... maybe you have some other option to resolve this error? thanks but I really need to fix this with your help...
0
Answer 2 / 6
Ambucias Posts 47310 Registration date Monday February 1, 2010 Status Moderator Last seen February 15, 2023 11,162
Jan 29, 2016 at 05:23 PM
Hello,

What you are looking for is just a text file which probably came with a virus.

Right click on start left on run

Type regedit press enter

On edit click on find and type or paste and copy rire.text

Once it is found, ensure you have:
C:\ProgramData\{80E66825-D064-B9A3-61A2-C921B1601AAF}\2.0.1.9\rire.text

Delete the key

Good luck
0
dannyds Posts 204 Registration date Thursday January 28, 2016 Status Contributor Last seen November 22, 2020 67
Jan 29, 2016 at 05:29 PM
Actually he tried the steps which is given in the link I had shared there which have the same steps you have listed is to find the file in the registry and then delete it.
0
Ambucias Posts 47310 Registration date Monday February 1, 2010 Status Moderator Last seen February 15, 2023 11,162 > dannyds Posts 204 Registration date Thursday January 28, 2016 Status Contributor Last seen November 22, 2020
Jan 29, 2016 at 06:11 PM
Hi Danny

Thanks you for your comment and you were wise in directing to the thread which you mentioned. I thought to give a better hint on how to search in the registry editor.

It is just a text file, rire.text, "rire" mean laugh in French.

To which Windows program data such a text is attached to? Your guess is as good as mine, but it has to be found in the registry.

Perhaps that CCleaner' registry cleaning utility will find...now that I think of it, it's a good idea.

It can be downloaded here:

https://ccm.net/downloads/security-and-maintenance/4555-ccleaner/

Cheers Danny
0
Re Alms
Jan 30, 2016 at 03:52 AM
Actually I have follow step by step of what you have email to me, on regedit can't find the rire.text, I've it try many times, on ccleaner also I've try it but can't find the rire.text, what I shall do now that this error always appeared on my screen... thanks

Re Alms
0
Answer 3 / 6
Ambucias Posts 47310 Registration date Monday February 1, 2010 Status Moderator Last seen February 15, 2023 11,162
Jan 30, 2016 at 07:04 AM
The problem is the program asking for the file can't find it, therefore the Script Host throws out the error. Occasionally, you can simply create a blank .txt file, with the name "rire.text", place it in a folder at "C:\ProgramData\{80E66825-D064-B9A3-61A2-C921B1601AAF}\2.0.1.9 (If all those folders aren't there, you'll need to create them as well), then see if the error goes away. The program may have exactly what it needs to run.
0
Re Alms
Feb 1, 2016 at 03:21 AM
yes I do it but the still exist upon creating a blank txt file with the name "rire.text" and added some additional error, like data not recognized..

Thank you...
0
Answer 4 / 6
Ambucias Posts 47310 Registration date Monday February 1, 2010 Status Moderator Last seen February 15, 2023 11,162
Feb 1, 2016 at 05:27 AM
To help you and prescribe the remedy, I must make a diagnostic and to do so, I require a report.

1. Open this link and download ZHPDiag3 :
https://nicolascoolman.eu
(Don't be alarmed is the site is in French, it sometimes happens, the tool will take your system language and allow the download if you get a warning message, ignore it.) Click on the download button

2. Save the file on your Desktop.

3. Double click on ZHPDiag.exe and follow the installation instructions.

(For Vista, Win 7 and 8 users, click right to ensure you execute with admin right)

4. Double click on the short cut ZHPDiag on your Destktop.

5. Click on Full.

Wait for the tool to finished (maybe a long time)

6. Close ZHPDiag.

7. To transmit the report, click on this link :

https://authentification.site

8. Search the directory where you installed ZHPDiag (usually C:\desktop\zhpdiag.txt).
9. Copy the url link obtained from Speedyshare and paste it here in your reply.
Ambucias
Moderator and Virus/Security Contributor
0
Re Alms
Feb 2, 2016 at 03:23 AM
ok I already made the zhpdiag.txt and send to speedshare.com

i hope you can find the solution for my pc

thanks
0
Ambucias Posts 47310 Registration date Monday February 1, 2010 Status Moderator Last seen February 15, 2023 11,162 > Re Alms
Feb 2, 2016 at 04:42 AM
Copy the url link obtained from Speedyshare and paste it here in your reply.
0

Didn't find the answer you are looking for?

Ask a question
Answer 5 / 6
Ambucias Posts 47310 Registration date Monday February 1, 2010 Status Moderator Last seen February 15, 2023 11,162
Feb 2, 2016 at 05:41 AM
No wonder you have a problem and not a small one at that!

Your machine is infested with all kinds of malware

If you really wish to fix the issue, here are the steps to follow:

1. Download Script ZHPFix here

https://nicolascoolman.eu

2. Select and copy all of the following bold lines.

Script ZHPFix
FirewallRaz
EmptyPrefetch
EmptyTemp
EmptyFlash
[MD5.2BBEF214E3D3D82C500286E7A62F7E10] [APT] [DLL-Files.Com Fixer_MONTHLY] (.Dll-FIles.Com.) -- C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe [10279872]
[MD5.2BBEF214E3D3D82C500286E7A62F7E10] [APT] [DLL-Files.Com Fixer_Updates] (.Dll-FIles.Com.) -- C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe [10279872]
[MD5.9923164D9401ABBB5191CF7A8434DB27] [APT] [Go_Palikan] (...) -- C:\Users\admin\AppData\Local\{69335F6F-4D9B-33D7-2003-163F046BEAA7}\uninstall.exe [440832]
[MD5.3830959339B1D051FECF269CB90DA6F7] [APT] [Reimage Reminder] (.Reimage ltd..) -- C:\Program Files\Reimage\Reimage Repair\ReimageReminder.exe [4441576] {42FA252C0EAB138AB118D98A1931718A}
O39 - APT: DLL-Files.Com Fixer_MONTHLY - (.Dll-FIles.Com.) -- C:\WINDOWS\Tasks\DLL-Files.Com Fixer_MONTHLY.job [288]
O39 - APT: DLL-Files.Com Fixer_Updates - (.Dll-FIles.Com.) -- C:\WINDOWS\Tasks\DLL-Files.Com Fixer_Updates.job [304]
O39 - APT: Go_Palikan - (...) -- C:\WINDOWS\Tasks\Go_Palikan.job [344]
O39 - APT: DLL-Files.Com Fixer_MONTHLY - (.Dll-FIles.Com.) -- C:\WINDOWS\System32\Tasks\DLL-Files.Com Fixer_MONTHLY [3094]
O39 - APT: DLL-Files.Com Fixer_Updates - (.Dll-FIles.Com.) -- C:\WINDOWS\System32\Tasks\DLL-Files.Com Fixer_Updates [3108]
O39 - APT: Go_Palikan - (...) -- C:\WINDOWS\System32\Tasks\Go_Palikan [2828]
O39 - APT: Reimage Reminder - (.Reimage ltd..) -- C:\WINDOWS\System32\Tasks\Reimage Reminder [3508]
G0 - GCSP: Secure Preferences [User Data\Default][HomePage] http://www.palikan.com/
G2 - GCE: Preference [User Data\Default] [ljibkigjccbegnbeojkoafejpoiachej] Palikan New Tab
O4 - GS\Quicklaunch [admin]: Dll-Files Fixer.lnk . (.Dll-FIles.Com - DLL-Files Fixer.) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
O4 - GS\Quicklaunch [Administrator]: Dll-Files Fixer.lnk . (.Dll-FIles.Com - DLL-Files Fixer.) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
O4 - GS\Quicklaunch [Guest]: Dll-Files Fixer.lnk . (.Dll-FIles.Com - DLL-Files Fixer.) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
O42 - Logiciel: Dll-Files Fixer - (.Dll-Files.com.) [HKLM][64Bits] -- Dll-Files Fixer_is1
O42 - Logiciel: Reimage Repair - (.Reimage.) [HKLM][64Bits] -- Reimage Repair {42FA252C0EAB138AB118D98A1931718A}
HKLM\SOFTWARE\Wow6432Node\dll-files.com
HKCU\SOFTWARE\dll-files.com
HKCU\SOFTWARE\palikan
HKCU\SOFTWARE\ProductSetup
HKCU\SOFTWARE\Reimage
3 - CFD: 29/11/2015 - [] D -- C:\Program Files (x86)\Dll-Files.com Fixer
3 - CFD: 29/11/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dll-Files Fixer
3 - CFD: 31/12/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Reimage Repair
3 - CFD: 31/12/2015 - [] D -- C:\ProgramData\Reimage Protector
3 - CFD: 04/11/2015 - [] D -- C:\Users\admin\AppData\Roaming\0I0M0D1F2W1G1I1F1T1Q1P1C
3 - CFD: 29/11/2015 - [] D -- C:\Users\admin\AppData\Roaming\dll-files.com
O69 - SBI: SearchScopes [HKCU] {994A8FA4-CFB2-4B36-BA91-B63240B07548} [DefaultScope] - (Palikan) - http://www.palikan.com/
C:\Users\admin\AppData\Local\{69335F6F-4D9B-33D7-2003-163F046BEAA7}\uninstall.exe
C:\Program Files\Reimage\Reimage Repair\ReimageReminder.exe
C:\WINDOWS\Tasks\DLL-Files.Com Fixer_MONTHLY.job
C:\WINDOWS\Tasks\DLL-Files.Com Fixer_Updates.job
C:\WINDOWS\Tasks\Go_Palikan.job
C:\WINDOWS\System32\Tasks\DLL-Files.Com Fixer_MONTHLY
C:\WINDOWS\System32\Tasks\DLL-Files.Com Fixer_Updates
C:\WINDOWS\System32\Tasks\Go_Palikan
C:\WINDOWS\System32\Tasks\Reimage Reminder
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ljibkigjccbegnbeojkoafejpoiachej
HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Reimage Repair
C:\Program Files (x86)\Dll-Files.com Fixer
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dll-Files Fixer
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Reimage Repair
C:\ProgramData\Reimage Protector
C:\Users\admin\AppData\Roaming\0I0M0D1F2W1G1I1F1T1Q1P1C
C:\Users\admin\AppData\Roaming\dll-files.com
HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{994A8FA4-CFB2-4B36-BA91-B63240B07548}
[MD5.00000000000000000000000000000000] [APT] [Trezaa Scheduler] (...) -- C:\Program Files s (.not file.) [0]
O43 - CFD: 31/01/2016 - [] D -- C:\ProgramData\boost_interprocess
O43 - CFD: 31/07/2015 - [0] D -- C:\Users\admin\AppData\Local\NetworkTiles



3 Close all applications and open ZHP Fix

4. Click on the Import button and the lines will automatically paste themselves.

5. Click on the Go button to clean

6. Confirm by clicking OK

7. ZHP Fix will ask if you wish to empty the bin, click on your choice...it may take time

8. A report will appear on your desktop and on C:\ZHP\ZHPFix[R1].txt which you can copy and paste in your reply.
0
Re Alms
Feb 2, 2016 at 06:08 AM
Rapport de ZHPFix 2015.10.19.9 par Nicolas Coolman, Update du 19/10/2015
Fichier d'export Registre :
Run by admin at 2/2/2016 7:01:53 PM
High Elevated Privileges : OK
Windows 8 Home Premium Edition, 64-bit Service Pack 1 (10240)

Recycle Bin emptied (07mn AMs)
Prefetcher emptied

========== Software ==========
REMOVES: Dll-Files Fixer

========== Process memory ==========
REMOVES: Memory Process: C:\Users\admin\AppData\Local\{69335F6F-4D9B-33D7-2003-163F046BEAA7}\uninstall.exe
REMOVES: Memory Process: C:\Program Files\Reimage\Reimage Repair\ReimageReminder.exe

========== Registry keys ==========
REMOVES: HKCU\SOFTWARE\palikan
REMOVES: HKCU\SOFTWARE\ProductSetup
REMOVES: HKCU\SOFTWARE\Reimage
REMOVES: SearchScopes :{994A8FA4-CFB2-4B36-BA91-B63240B07548}

========== Registry values ==========
ABSENT value Standard Profile: FirewallRaz :
ABSENT value Domain Profile: FirewallRaz :
REMOVES: FirewallRaz (Public) : {39A61A54-04DB-4D06-A1FD-EA734F0C14BC}
REMOVES: FirewallRaz (Public) : {64FE4A33-7331-4DE4-AB5A-CBE4937A0B25}
REMOVES: FirewallRaz (Domain) : {548DCF8C-BFF2-4BA4-AA88-FBAF9AC8BCC6}
REMOVES: FirewallRaz (None) : {9E3D57FC-7C37-4424-9352-4831E97D029D}
REMOVES: FirewallRaz (Public) : {A1F44B48-D7C0-4D19-B421-0306AA06D957}
REMOVES: FirewallRaz (Public) : {827E4AC9-4705-40BB-8211-72B6AA75469D}
REMOVES: FirewallRaz (Public) : {BEB95086-F21E-4AFB-9021-DC2F4E13CF70}
REMOVES: FirewallRaz (Public) : {41325E0E-6EE5-437C-B152-B33EFEFF5D2D}
REMOVES: FirewallRaz (Public) : {C9522B86-FF77-47B5-864B-29E61DC990BF}
REMOVES: FirewallRaz (Public) : {C920E0B5-8204-4AD9-989E-861E27571501}

========== Preferences browser ==========
NOW Chrome File: C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
REMOVES Chrome Site: http://www.palikan.com/
REMOVES Chrome Site: http://www.palikan.com/
REMOVES Folder Chrome: C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ljibkigjccbegnbeojkoafejpoiachej

========== Folders ==========
Deletes temporary Windows (24)
REMOVES Flash Cookies (0)
REMOVES: C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ljibkigjccbegnbeojkoafejpoiachej
REMOVES: c:\programdata\microsoft\windows\start menu\programs\reimage repair
REMOVES: c:\programdata\reimage protector
REMOVES: c:\users\admin\appdata\roaming\0i0m0d1f2w1g1i1f1t1q1p1c
REMOVES: C:\ProgramData\boost_interprocess
REMOVES: C:\Users\admin\AppData\Local\NetworkTiles

========== Files ==========
Deletes temporary Windows (214) (26,622,377 octets)
REMOVES Flash Cookies (0) (0 octets)

========== Scheduled task ==========
REMOVES: DLL-Files.Com Fixer_MONTHLY
REMOVES: DLL-Files.Com Fixer_Updates
REMOVES: Go_Palikan
REMOVES: Reimage Reminder
REMOVES: Trezaa Scheduler
REMOVES: Trezaa Scheduler
REMOVES: Trezaa Scheduler
REMOVES: Trezaa Scheduler

========== Other ==========
NON-TREATY 3 - CFD: 29/11/2015 - [] D -- C:\Program Files (x86)\Dll-Files.com Fixer
NON-TREATY 3 - CFD: 29/11/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dll-Files Fixer
NON-TREATY 3 - CFD: 31/12/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Reimage Repair
NON-TREATY 3 - CFD: 31/12/2015 - [] D -- C:\ProgramData\Reimage Protector
NON-TREATY 3 - CFD: 04/11/2015 - [] D -- C:\Users\admin\AppData\Roaming\0I0M0D1F2W1G1I1F1T1Q1P1C
NON-TREATY 3 - CFD: 29/11/2015 - [] D -- C:\Users\admin\AppData\Roaming\dll-files.com
NON-TREATY [HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Reimage Repair]


========== Summary ==========
2 : Process memory
4 : Registry keys
12 : Registry values
8 : Folders
2 : Files
1 : Software
4 : Preferences browser
8 : Scheduled task
7 : Other


End of clean in 31mn AMs

========== Path to file report ==========
C:\Users\admin\AppData\Roaming\ZHP\ZHPFix[R1].txt - 2/2/2016 7:02:01 PM [3835]


This is the result...
0
Ambucias Posts 47310 Registration date Monday February 1, 2010 Status Moderator Last seen February 15, 2023 11,162 > Re Alms
Feb 2, 2016 at 04:35 PM
Thanks for the report.

You machine must feel relieved after this disinfection!

Do you still get the script error?
0
Re Alms
Feb 3, 2016 at 06:16 AM
yes, windows script host error still appeared on the screen.... looking for the "rire.text" file... what I do now..... ?
Thanks.....
0
Answer 6 / 6
Ambucias Posts 47310 Registration date Monday February 1, 2010 Status Moderator Last seen February 15, 2023 11,162
Feb 3, 2016 at 04:53 PM
Hi

I have reanalyzed your ZHP Diag report.

At this time I can't pinpoint the programme which created the script error.

In my view it could be a programme which was partially deleted, it could be be these continued action processes:

O43 - CFD: 30/01/2016 - [] D -- C:\ProgramData\ProductData
O43 - CFD: 31/12/2015 - [] D -- C:\Users\admin\AppData\Roaming\ProductData

On which I have no information.

Sorry

P.S. I suggest your remove:

C:\ProgramData\McAfee
HKCU\SOFTWARE\McAfee
-1
Re Alms
Feb 4, 2016 at 06:58 AM
yes I already remove
C:\ProgramData\McAfee
HKCU\SOFTWARE\McAfee
but windows script host error still exist....

windows script host error still appeared on my screen...

thanks......
0
Ambucias Posts 47310 Registration date Monday February 1, 2010 Status Moderator Last seen February 15, 2023 11,162 > Re Alms
Feb 4, 2016 at 04:38 PM
As I mentioned, At this time I can't pinpoint the programme which created the script error.

In my view it could be a programme which was partially deleted, it could be be these continued action processes:

O43 - CFD: 30/01/2016 - [] D -- C:\ProgramData\ProductData
O43 - CFD: 31/12/2015 - [] D -- C:\Users\admin\AppData\Roaming\ProductData

On which I have no information.
0
dannyds Posts 204 Registration date Thursday January 28, 2016 Status Contributor Last seen November 22, 2020 67
Feb 15, 2016 at 03:27 PM
@Ambucias I think you deserved point here :P so I did, hope he (re alms) has resolved his issue.
0