Windows Script Host Autorun.js processing method _ Common Tools

【 description of problem failure】：

Double-click the C, D, e disk and a Windows Script Host cannot find the script file, and here's the script: D:\autorun.vbs

Line: 25

Character: 4

Error: Wrong ' Next '

Code: 800A041F

Source: Microsoft VBScript compiler Error


【 Virus Information Description】：

When you double-click the letter, the root directory Autorun.inf file is loaded, the Autorun.bat file is called, and the Autorun.reg writes the key value to the registry, based on Autorun.bat writing. A virus may modify the following key values:

Code:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

Userinit=userinit.exe,autorun.exe

To ensure that virus files can be loaded when the system is started.

Then autorun.bat this file to invoke Wscript.exe to run successfully autorun.vbs


【 Processing Process】：

Antivirus software detects that "Autorun.vbs" is a tainted file and is therefore deleted. However, because other files (autorun.*) and Registry Reference key values point to Autorun.vbs, but the file is no longer in use, the error occurs when you double-click a letter.

【 Solving Method】：
Pull up the Resource Manager (Ctrl+alt+del)


End the Wscript.exe process (as appropriate, it is possible that the process does not exist);

To end the Explorer.exe process;

Open cmd with the "File-New task" of the resource manager;

Enter the following sequence:

Code:

Del c:\autorun.*/f/s/q/a

Del d:\autorun.*/f/s/q/a

Del e:\autorun.*/f/s/q/a

... (C,d,e represents three characters, if any other letter continues to command
Use the Resource Manager's file-new task again to open regedit, and then view whether the following registry key values have been changed and, if changed, correct:

Code:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

UserInit=userinit.exe,

(The figure is the correct Userinit key value.) Note that the comma behind the EXE also wants)


At this point, all the process operation completed (remember from the operation of the system), but the operation of the relatively complex procedures, if the user can not see how to understand the computer's friends in accordance with this process operation, should be able to solve.