help can't open my drives

[murpius]

---

the error when i open my drive c: is that can't find pooh.vbs. gi delete man nako pooh.vbs and autorun.inf. naka basa man ko sa other thread kay pareha mi ug virus. did i miss some steps? help naman tanx.

[vladmire]

run kaspersky antivirus or NOD32 then format gyud ang imong HDD.

[ryan22]

run kaspersky antivirus or NOD32 then format gyud ang imong HDD.

not so fast bro, had this aikelyu a few weeks ago & removed it with the following steps down below

you can still open the drives by right clicking but it doesn't work with double click, to resolve it follow these easy steps...

del x:\autorun.* /f/s/q/a

where x is the drive letter
apply it to all affected drives

and viola you can double click the drives again!

you encountered that aikelyu thingi ayt? also include your usb flash drive when you do these steps coz i'm pretty sure it came from your flash drive & reformatting the drive doesn't remove it, these aikelyu seems to be pretty rampant for the past couple of months....

[warhorse]

bitaw bro virus na. search na unsaon pag tang tang. naa man jud soln ana. bsan rigght click nemu then explore dli jud ma open?

[murpius]

bro ryan tanx for that simple instruction. it works well.

[ryan22]

bro ryan tanx for that simple instruction. it works well.

way sapayan bai.. :mrgreen:

[jouho]

imgkulot.vbs
pooh.vbs.
etc....

kanang .vbs buhat n xa
sa mga studnts s iloilo.

visual basic script na xa.

HIS IS THE MANUAL PROCEDURE.[which leaves the registry unedited]

Kill the process wscript.exe in the task manager.

open command prompt
then type the ff:
cd\
cd windows/system32
attrib imgkulot.* -s -h -r -a
attrib autorun.inf -s -h -r -a
del imgkulot.*
del autorun.inf


for the individual drives.
go to the root drive.
d: <---example only cd\ attrib imgkulot.* -s -h -r -a attrib autorun.inf -s -h -r -a del imgkulot.* del autorun.inf restart PC


thnx.

[taga_ipil]

When you double click your driver letter. You get this message
"cannot find the file pooh.vbs"

Follow these solutions Step-by-Step

The symptom occurs because when autorun.vbs is created by trojan horse or virus. The virus normally loads autorun.inf file to root folder of all hard drive or USB drive, and then execute autorun.bat file which contains script to apply and merge autorun.reg into the registry, with possible change to the following registry key to ensure that virus is loaded when system starts:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft... NT\CurrentVersion\Winlogon]
Userinit=userinit.exe,autorun.exe

Finally, autorun.bat will call wscript.exe to run autorun.vbs.

When antivirus or security software detected the autorun.vbs file as infected, the file will be deleted or removed or quarantined. However, other files (autorun.*） and registry value still referring to autorun.vbs, and this document no longer exists, hence the error when users double click to open a drive folder.

To correct and solve this error, follow this steps:

1. Run Task Manager (Ctrl-Alt-Del or right click on Taskbar)
2. Stop wscript.exe process if available by highlighting the process name and clicking End Process.
3. Then terminate explorer.exe process.
4. In Task Manager, click on File -> New Task (Run…).
5. Type “cmd” (without quotes) into the Open text box and click OK.
6. Type the following command one by one followed by hitting Enter key:

del c:\autorun.* /f /s /q /a
del d:\autorun.* /f /s /q /a
del e:\autorun.* /f /s /q /a

c, d, e each represents drive letters on Windows system. If there are more drives or partitions available, continue to command by altering to other drive letter. Note that you must also clean the autorun files from USB flash drive or portable hard disk as the external drive may also be infected.
7. In Task Manager, click on File -> New Task (Run…).
8. Type “regedit” (without quotes) into the Open text box and click OK.
9. Navigate to the following registry key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wi... NT\CurrentVersion\Winlogon
10. Check if the value name and value data for the key is correct (the value data of userint.exe include the path which may be different than C drive, which is also valid, note also the comma which is also needed):

“Userinit”=”C:\WINDOWS\system32\userinit,



After this. You need the taskbar to appear again. Follow this steps.
File -> New Task (Run…) *browse (C:\WINDOWS\explorer.exe) click OK

You will see your Taskbar again. Right Click on the driver letter
and you will notice that the AutoPlay is Gone.

Hope this will Help

[jonxzibit]

i also got this problem pero lahi cya...

[img width=500 height=375]http://i147.photobucket.com/albums/r297/jonxzibit/cant_open.jpg[/img]

pls help

[SHENGTON]

Here's how to remove pooh virus --> [b]HERE