Friday, August 1, 2014

How to Remove VBS Worm Using System Explorer 


1. Launch System Explorer. Go to the Processes Tab and end all Wscript.exe processes.

2. Next go to the Autoruns Tab. Right click on the wscript.exe entry and select Open Item Key in Regedit.

3. At regedit, take note of the location of the vbs file and delete it with Explorer.

4. Back at System Explorer and Delete Item.

5. Delete all autorun.inf and vbs file located at the root directory of all drives.

6. Do a scan of your hard drive as well as your external drives. I suggest Malwarebytes.

No comments:

Post a Comment