Tech Support Forum - View Single Post - windows script hosting keeps popping up! [Moved From General Security}

FIFI · 11-29-2007, 10:31 PM

Short scan resulted in no virus found.

Complete scan resulted in one virus found--it is the removable media that I use to transfer file from the affected comp to my friend's--

What is shocking is that the scripting is now gone, i don't know how or why, do u?
However there is one new thing that i find quite disturbing: after booting and loading desktop icons, my pc takes around 1-2 minutes to be able to access files, which used to be only 20-30 seconds loading. is there a new problem here?

Here is the Dr.Web report:
killVBS.vbs F:\ VBS.Generic.553

report from the new batch (peek.bat) file:
REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
"ParseAutoexec"="1"
"ExcludeProfileDirs"="Local Settings;Temporary Internet Files;History;Temp"
"BuildNumber"=dword:00000a28

Was it because of the removable media that I got the scripting pops up?
I do have a real time antivirus and spyware doctor...how could it be not detected by them then?

anyway, what to do next? is it done?

11-29-2007, 10:31 PM	#9 (permalink)
FIFI Registered User Join Date: Sep 2007 Posts: 37 OS: Win XP	Re: windows script hosting keeps popping up! [Moved From General Security} Short scan resulted in no virus found. Complete scan resulted in one virus found--it is the removable media that I use to transfer file from the affected comp to my friend's-- What is shocking is that the scripting is now gone, i don't know how or why, do u? However there is one new thing that i find quite disturbing: after booting and loading desktop icons, my pc takes around 1-2 minutes to be able to access files, which used to be only 20-30 seconds loading. is there a new problem here? Here is the Dr.Web report: killVBS.vbs F:\ VBS.Generic.553 report from the new batch (peek.bat) file: REGEDIT4 [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] "ParseAutoexec"="1" "ExcludeProfileDirs"="Local Settings;Temporary Internet Files;History;Temp" "BuildNumber"=dword:00000a28 Was it because of the removable media that I got the scripting pops up? I do have a real time antivirus and spyware doctor...how could it be not detected by them then? anyway, what to do next? is it done?