Windows Script Host Autorun.js processing method _ Common Tools

Source: Internet
Author: User

description of problem failure】:

Double-click the C, D, e disk and a Windows Script Host cannot find the script file, and here's the script: D:\autorun.vbs

Line: 25

Character: 4

Error: Wrong ' Next '

Code: 800A041F

Source: Microsoft VBScript compiler Error


Virus Information Description】:

When you double-click the letter, the root directory Autorun.inf file is loaded, the Autorun.bat file is called, and the Autorun.reg writes the key value to the registry, based on Autorun.bat writing. A virus may modify the following key values:

Code:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

Userinit=userinit.exe,autorun.exe


To ensure that virus files can be loaded when the system is started.

Then autorun.bat this file to invoke Wscript.exe to run successfully autorun.vbs


Processing Process】:

Antivirus software detects that "Autorun.vbs" is a tainted file and is therefore deleted. However, because other files (autorun.*) and Registry Reference key values point to Autorun.vbs, but the file is no longer in use, the error occurs when you double-click a letter.

Solving Method】:
Pull up the Resource Manager (Ctrl+alt+del)


End the Wscript.exe process (as appropriate, it is possible that the process does not exist);

To end the Explorer.exe process;

Open cmd with the "File-New task" of the resource manager;

Enter the following sequence:

Code:
Del c:\autorun.*/f/s/q/a

Del d:\autorun.*/f/s/q/a

Del e:\autorun.*/f/s/q/a


... (C,d,e represents three characters, if any other letter continues to command
Use the Resource Manager's file-new task again to open regedit, and then view whether the following registry key values have been changed and, if changed, correct:

Code:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

UserInit=userinit.exe,




(The figure is the correct Userinit key value.) Note that the comma behind the EXE also wants)


At this point, all the process operation completed (remember from the operation of the system), but the operation of the relatively complex procedures, if the user can not see how to understand the computer's friends in accordance with this process operation, should be able to solve.

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.