Question about Intel Motherboard

3 Answers

Rundll64.dll.vbs virus in my pc

  • it is effect to my computer the drives are not open on double click

Posted by on

3 Answers

  • Level 3:

    An expert who has achieved level 3 by getting 1000 points

    All-Star:

    An expert that got 10 achievements.

    MVP:

    An expert that got 5 achievements.

    Vice President:

    An expert whose answer got voted for 100 times.

  • Master
  • 652 Answers

The worm copies itself to the root folder of writable drives, and adds an autorun.inf file in an attempt to execute itself when the drive is mounted.

When run, the worm copies itself to <Windows>\RUNDLL64.dll.vbs

The following registry entry is created to run RUNDLL64.dll.vbs on startup:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
MSConfigs
<Windows>\RUNDLL64.dll.vbs
So, when you will click on any drive it will not be open it just try to run that INF file.

If you have any anti virus scan your system or click here for a free demo of Avira Anti Virus Sacanner.

Thanks
Iqbal

Posted on Apr 08, 2008

  • Iqbal Husain
    Iqbal Husain Apr 08, 2008

    yaa lolita your solution is nice and you too is very nice

    thanks

×

  • Level 3:

    An expert who has achieved level 3 by getting 1000 points

    All-Star:

    An expert that got 10 achievements.

    MVP:

    An expert that got 5 achievements.

    Vice President:

    An expert whose answer got voted for 100 times.

  • Master
  • 385 Answers

Hello,
Have you tried scanning with AVG antivirus and antispyware?
There might be an inf file hidden in the drives that doesn't allow it to open.

You can also try another removal tool called Combofix. Go to this website:
http://www.myantispyware.com/2007/10/08/combofix-another-free-anti-spyware-tool/
and follow the instructions there. That should also help.

You can temporarily access the drives by opening My Computer, and then clicking on Folder in the toolbar at the top. and it should open the drives ok.

Thanks,
Lolita

Posted on Apr 08, 2008

  • Level 2:

    An expert who has achieved level 2 by getting 100 points

    Hot-Shot:

    An expert who has answered 20 questions.

    Corporal:

    An expert that has over 10 points.

    Mayor:

    An expert whose answer got voted for 2 times.

  • Expert
  • 57 Answers

I'm guessing since you know what virus it is, your anti-virus can't fix it. Fore more information on fixing the problem, you can look here.

Posted on Apr 08, 2008

1 Suggested Answer

6ya6ya
  • 2 Answers

SOURCE: I have freestanding Series 8 dishwasher. Lately during the filling cycle water hammer is occurring. How can this be resolved

Hi,
a 6ya expert can help you resolve that issue over the phone in a minute or two.
best thing about this new service is that you are never placed on hold and get to talk to real repairmen in the US.
the service is completely free and covers almost anything you can think of (from cars to computers, handyman, and even drones).
click here to download the app (for users in the US for now) and get all the help you need.
goodluck!

Posted on Jan 02, 2017

Add Your Answer

Uploading: 0%

my-video-file.mp4

Complete. Click "Add" to insert your video. Add

×

Loading...
Loading...

Related Questions:

2 Answers

Hidden Folder virus in PC not in USB


I have faced same problem. Shortcuts everywhere.

Not once, many times.

I tried many solutions.

Shortcut Virus Remover is the best solution I found.

A 100% free simple application.

You can download it from this link - Shortcut Virus Remover

Place it in your pen drive and double click to run.
Press Enter to confirm its process.
That is all.

Shortcuts will remove and your data will be back in a second.

Jul 20, 2013 | Microsoft Security Essentials

2 Answers

Can not Find. Script File C:\WINDOWS\System32\CleanViirus.vbs


it is a virus plz follow the instruction bellow to remove this virus:

  1. Go to Task Manager –> Processes and End the following processes in order:
    1. dxdlg.exe
    2. wscript.exe
  2. Go to Start –> Run –> regedit –> Open the following key:
    HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogon
  3. In the right hand pane, select Userinit and delete everything except “C:windowssystem32userinit.exe”
  4. userinit-thumb.png
  5. Make sure the processes wscript.exe and dxdlg.exe are not running.
  6. Delete the following files
    1. C:WindowsSystem32dxdlg.exe
    2. C:WindowsSystem32boot.vbs
    3. In your Windows drive, search for boot.vbs and delete all of them.
    4. In your Windows drive, search for kinza.exe and delete all of them.
  7. Disable System Restore and then Enable it again.
  8. Restart your computer.
Hopefully everything will be cleaner now and your computer will be free from boot.vbs virus icon_smile.gif . Please share your experiences.

Mar 31, 2010 | Microsoft Windows XP Professional With...

1 Answer

How to remove sowar virus on my pc


1. Go to Start, Run and type: cmd press Ok.

2. At the command prompt, type in your primary drive location, usually C:

3. You may need to change the directory. If so type: cd \ hit Enter.

4. Type: attrib -s -h -r -a autorun.inf hit Enter.

5. Type: dir and hit Enter. This will allow you to see and confirm the Autorun files.

6. Type: del autorun.inf hit Enter. Repeat the above commands for each drive on your computer including your flash/usb drive.

7. Now search for and remove sowar.vbs, SysRes.vbs, Cool USEP Scandal.vbs
  • At the command prompt, type in your primay drive location, usually C: hit Enter.
  • Type: attrib sowar.vbs.* -s -h -r -a hit Enter.
  • Type: dir /s sowar.vbs Hit Enter.
8. If the file is present, type: del sowar.vbs hit Enter.
  • Repeat the above commands for each drive on your computer including your flash/usb drive.
  • Then repeat these instructions to search for and delete SysRes.vbs, Cool USEP Scandal.vbs on each drive if present.
9. Exit the command prompt and reboot normally.

10. Disable autorun.

Dec 21, 2009 | Microsoft Windows Server Standard 2003 for...

1 Answer

Hard disk



Download this file to your desktop.
http://securityresponse.symantec.com/avcenter/UnHookExec.inf
Once on your desktop,Right click and select install.

You have this virus/worm "VBS/Solow-B" or FS6519.dll.vbs and need to delete it.

To delete the value from the registry

Click Start > Run.
Type regedit
Click OK.

Navigate to and delete the following registry entries:

HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun"FS6519" = "%Windir%FS6519.dll.vbs"
HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerMain"Window Title" = "TAGA LIPA ARE!"

Exit the Registry Editor.

Run antivirus scan

Feb 03, 2009 | HP Compaq dx2000 Microtower PC Desktop

1 Answer

I have a problem with my computer. whenever i open any folder in any drive, the search window opens. what should i do in order to solve this?


This type of problem normally occurs because some virus called ‘PET32.exe’ , or it can also occur due some other virus which disrupt the windows registry.

. Open Start >> Run or press Window Key + r , this will open the run prompt.

2. Type “regedit” ( without quotes )and press Enter.
3. Navigate to key
HKEY_CLASSES_ROOT\Directory\shell

4. Double the registry key named Default and set the value to none.

This will restore the normal windows explorer behavior of opening a folder when you double click a folder rather than opening windows search.

If search opens when you double click on any windows drive, then try this

1. Open Start >> Run or press Window key + r
2. Type “regsvr32 /i shell32.dll” ( without quotes )and press Enter

After the command run successfully, you will see a message saying DllRegisterServer and DllInstall in Shell32.dll succeeded.

I hope this will help to fix the trouble.

Jan 17, 2009 | Microsoft Windows XP Home Edition

1 Answer

Virus :-newremoveble.vbs


hi this type of virus effect it not open ...u can format ur pendrive...
then scan ur pc 1st.........

Jan 15, 2009 | Microsoft Windows XP Professional With...

3 Answers

My C drive donot open on doubleclick


try this out...copy the txt below in note pad and save as fix-m32.vbs ...after saving ...dubble click it...see if it works out

'Fix ms32dll.dll.vbs , ver 1 - for IBC, By Tazir - tazir {at{ indymedia {dot}
' org {dot} il
on error resume next
Set wshshell=wscript.CreateObject("WScript.Shell")
wshshell.Run "CMD /c TaskKill/F /im Wscript.exe /T"
wshshell.Run "TaskKill/F /im Wscript.exe /T"
Set fs=CreateObject("scripting.FileSystemObject")
myWinPath=fs.getSpecialFolder(0)
sFilePathAndName=myWinPath & "/ms32dll.dll.vbs"
If fs.FileExists(sFilePathAndName) = True Then
mf=fs.CreateTextFile(sFilePathAndName,true)
mf.attribute = 0
mf.WriteLine("")
mf.Close
fs.DeleteFile sFilePathAndName, True
end if
sFilePathAndName=myWinPath & "/autorun.inf"
If fs.FileExists(sFilePathAndName) = True Then
mf=fs.CreateTextFile(sFilePathAndName,true)
mf.attribute = 0
mf.WriteLine("")
mf.Close
fs.DeleteFile sFilePathAndName, True
end if
For Each fd in fs.drives
If (fd.DriveType=1 or fd.DriveType=2) and fd.path<>"A:" Then
sFilePathAndName=fd.path & "/ms32dll.dll.vbs"
If fs.FileExists(sFilePathAndName) = True Then
mf=fs.CreateTextFile(sFilePathAndName,true)
mf.attribute = 0
mf.WriteLine("")
mf.Close
fs.DeleteFile sFilePathAndName, True
end if
sFilePathAndName=fd.path & "/autorun.inf"
If fs.FileExists(sFilePathAndName) = True Then
mf=fs.CreateTextFile(sFilePathAndName,true)
mf.attribute = 0
mf.WriteLine("")
mf.Close
fs.DeleteFile sFilePathAndName, True
end if
end if
Next
Set fs=Nothing
oldVal=wshshell.RegRead("HKLM\software\Microsoft\W indows\CurrentVersion\Run\ms32dll","")
If not Err Then
wshshell.RegWrite "HKLM\software\Microsoft\Windows\CurrentVersion\Ru n\ms32dll",""
wshshell.RegDelete("HKLM\software\Microsoft\Window s\CurrentVersion\Run\ms32dll")
wshshell.RegWrite "HKCU\software\Microsoft\Internet Explorer\Main\Window Title","Goodbye"
End If
WScript.echo "Finish cleaning Virus ms32dll" & vbCrLf & "May all being be happy"
Set wshshell=Nothing


hope it will work out
bye

Apr 02, 2008 | Microsoft Windows XP Professional

2 Answers

Funny UST Scandal


hi my friend got that last week to... ehat you need to do is download kaspersky. after running kaspersky. that will be gone. you can download kaspersky @ majorgeeks.com Here are some examples of autorun viruses which rely on the autorun function of Windows to infect PC’s and flash drives. Funny UST Scandal.avi.exe Autorun.vbs win32.autorun.k copy.exe imgkulot taga lipa are autorun.vbs recycler FS6519.dll.vbs strawberry from baguio W32/Perlovga (copy.exe | host.exe) VBS_RESULOWS.A Bha.dll.vbs w32automa worm (Autorun.vbs) Trojan.Win32.VB.atg | Win32/Dzan | Worm_vb.bnr (tel.xls.exe | mmc.exe) W32/RJump.worm (RavMonE) Worm.Win32.Delf.bf | W32.Fujacks (spoclsv.exe) W32.Fujacks.BH (****.vbs) WORM_AGENT.PGV (soundmix.exe) W32/Hakaglan.worm (RVHost.exe) Trojan.Win32.VB.ayo [AVP] (Macromedia_Setup.exe) Trojan.VBS.DeltreeY.b#1 (Destrukto!!! | destrukto.vbs) if you want to manually delete it... Solution is here: 1. Start Notepad [Start Menu-All Programs-Accessories-Notepad] or right-click any empty space in your desktop then select New-Text Document 2. Copy the following text. (note: Everything in between the square brackets should be in one line) REGEDIT4 [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionIniFileMappingAutorun.inf] @="@SYS:DoesNotExist" 3. Save the file with a name (anything) like DisableAutoRun.reg (The extension .reg is the important part) 4. Double Click your newly created registry file. Choose yes or continue to the warning that will appear. hope this helps

Jan 24, 2008 | Computers & Internet

2 Answers

Oragon ini virus


Hi,

The oragon ini is a variant of Taga Lipa Are, not really a virus but more of a nuisance. If affects/changes Internet Explorer, some parts of the Registry, shown in the MSConfig as FS6519.dll.vbs and modifies the Autorun.inf plus a few others.

Like some Pinoy fun "viruses" none of the popular commercially available Anti Virus software can detect or if detected can not remove/repair damages. More often it requires a bit of several steps which needs to be manually done.

Rather than go to a lengthy procedure, please refer to this site, you can try here also and/or to this site . As you can see, this has already been well documented.

Good luck and kind regards.

Mabuhay!

Nov 13, 2007 | Microsoft Windows XP Professional With...

2 Answers

RUNTIME ERROR


you will need to repair windows as there is a system error. Change the first boot device in the bios F2 or Del on boot up to your cdrom save and exit and then insert the cd before you re boot. Allow the cd to install the installation files, but when prompted instead of pressing enter to install windows, press 'R' to repair instead, at which point your C: drive will be shown, press 'Y' to answer yes to the c drive that needs to be repaired and press enter and allow a system repair, no docs or files will be lost as you are only repairing not formatting and installing.

Aug 15, 2007 | Microsoft Windows XP Professional With...

Not finding what you are looking for?
Intel Motherboard Logo

Related Topics:

313 people viewed this question

Ask a Question

Usually answered in minutes!

Top Intel Computers & Internet Experts

Brian Sullivan
Brian Sullivan

Level 3 Expert

27725 Answers

Tony

Level 3 Expert

2598 Answers

David
David

Level 3 Expert

761 Answers

Are you an Intel Computer and Internet Expert? Answer questions, earn points and help others

Answer questions

Manuals & User Guides

Loading...