Skip to main content

A Tech Blog to Help in Comp Management

My today’s blog gonna be a technical sort of blog concern to a painful problem caused by virus and Trojans in computer. One can not open the drives on double click… you need to click right key of mouse and than you get open the desired disk. I got this very useful resource at MyDigitalLife.Info for such problem, and it is extremely helpful to solve this problem.

It happen when anti-virus program has cleaned, disinfected or removed a worm, trojan horse or virus from computer, there may be error happening whenever users try to open or access the drive by double clicking on the disk drive icon in Explorer or My Computer window to try to enter the drive’s folder. The problem or symptom happens in hard disk drive, portable hard disk drive or USB flash drive, and Windows will prompt a dialog box with the following message:

Windows Script Host

Can not find script file autorun.vbs.

Sometimes you will be asked to debug the VBScript with error code of 800A041F - Unexpected ‘Next’.

or

Choose the program you want to use to open this file with:

In this case, the “Always use the selected program to open this kind of file” option is grayed out.

The symptom occurs because when autorun.vbs is created by trojan horse or virus. The virus normally loads autorun.inf file to root folder of all hard drive or USB drive, and then execute autorun.bat file which contains script to apply and merge autorun.reg into the registry, with possible change to the following registry key to ensure that virus is loaded when system starts:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
Userinit=userinit.exe,autorun.exe

Finally, autorun.bat will call wscript.exe to run autorun.vbs.

When antivirus or security software detected the autorun.vbs file as infected, the file will be deleted or removed or quarantined. However, other files (autorun.* and registry value still referring to autorun.vbs, and this document no longer exists, hence the error when users double click to open a drive folder.

To correct and solve this error, follow this steps:

1. Run Task Manager (Ctrl-Alt-Del or right click on Taskbar)

2. Stop wscript.exe process if available by highlighting the process name and clicking End Process.

3. Then terminate explorer.exe process.

4. In Task Manager, click on File -> New Task (Run…).

5. Type “cmd” (without quotes) into the Open text box and click OK.

6. Type the following command one by one followed by hitting Enter key:

del c:\autorun.* /f /s /q /a
del d:\autorun.* /f /s /q /a
del e:\autorun.* /f /s /q /a

c, d, e each represents drive letters on Windows system. If there are more drives or partitions available, continue to command by altering to other drive letter. Note that you must also clean the autorun files from USB flash drive or portable hard disk as the external drive may also be infected.

7. In Task Manager, click on File -> New Task (Run…).

8. Type “regedit” (without quotes) into the Open text box and click OK.

9. Navigate to the following registry key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

10. Check if the value name and value data for the key is correct (the value data of userint.exe include the path which may be different than C drive, which is also valid, note also the comma which is also needed):

“Userinit”=”C:\WINDOWS\system32\userinit.exe,”

If the value is incorrent, modify it to the valid value data.

Now you can open your disk with same freedom!

:-)


Comments

Anonymous said…
i'm gonna make my own site about it

Popular posts from this blog

Lathi-charge and tear gas on JNU students, 18 are seriously injured!

Minutes ago thousands of police forces freely lathi-charged and shot tear gas bombs on JNU students. Eighteen students including six girls are seriously injured and four others are detained by police. The issue was lame response from police on the vandalism by four goons where eve-teasing and abusing students and flashing firearms on watchmen. Students were protesting against the lukewarm response from Delhi Police. In afternoon, some four persons in a care entered into campus, they were drinking and passing lewd comments on girls. They also misbehaved with on girl. After complaints watchmen stopped them at gate at 3.30 pm, when they were trying to escape. Incidentally I was passing by from the gate, I found those goons were fighting with watchmen, pushing them and abusing them. They also threat for dire consequences to watchmen as they told that they are relative of some ‘commissioner’. A PCR of Delhi police was parked beside but policemen present that time were mere suspect of whole...

Sorry Anna!

Anna, we are the youths who have great hope from your satyagrah, Who went on vigils at Tihar, Ramlila Maidan, India Gate and Jantar Mantar. We still have our support for you... However, we are deeply hurt by your team being accommodating political tricks of reservations and secularism. And I think you must clear it first, if you differentiate corruption charges based on caste and religion. If you don't differentiate, why there is a need to caste quota and ullema quota in your team. I have great respect for Arvind Bhai, have been detained by Delhi police on several accounts together... Be it RTI movement or 'cash-for-vote' issue. However, the recent development withing the protest team to be explained.      Four years ago, when 40-50 thousand youths gathered in Delhi demanding equal treatment in education, they were treated with water cannon and tear gas bombs. No one from 'civil' society or political parties raised their issue... Not even you Anna! The p...

Let it be, imperfect me with myself

On 29th June, 2012 One more year passed by,  while I remained the one... Staying and counting by. Life has been a space in time.. Where people come and go,  They have to go and they do so. While being me, most of the time, into the thoughts and reality...  I Seldom forgot,  when to dim, when to shine.  It was only me,  lived in dark age and waited for the renaissance..  held on ups and stood through down, Lived through guilt,  Survived thorough innocence  who am I? the dream chaser? or own record breaker... Let it be, imperfect me with myself,  (just like this poem) Incomplete yet total in run, Let life be "coming soon" with fun...