5/1/13

New User? Register

I have this Wscript.exe problem......? - Yahoo! Answers India

Sign In

Help

Get new Yahoo! Mail apps

Search

Mail

My Y!

Yahoo!

Search Web

Home > All Categories > Computers & Internet > Softw are > Resolved Question

I have this Wscript.exe problem......?

when i start my system, wscript.exe runs and 'my Documents' opens... there isn't any other problem though. please can anyone tell me what is wrong with my pc
and how to resolve it.
4 years ago ( 2009-08-28 17:27:36 +0000 ) Report Abuse

Sajeesh K

Best Answer - Chosen by Voters

Here's what i found:
"wscript.exe is a process relating to Microsoft Windows operating system which allows additional functions to scripting. "This program is a non-essential system
process, but should not be terminated unless suspected to be causing problems."
So since it is causing problems, it can be removed. This also appears to be some kinda spyware infection. the spyware literally is manipulating wscript.exe. . .
here's how:
"This threat copies its file(s) to your hard disk. Its typical file name is YPSAN.F. Then it creates new startup key with name YPSAN.F and value wscript.exe
WINLOGON.vbs. You can also find it in your processes list with name wscript.exe WINLOGON.vbs or YPSAN.F."
This problem can be solved manually by deleting all registry keys and files connected with this software, removing it from starup list and unregistering all
corresponding DLLs. To fix this threat, you should:
Step 1: Use Windows File Search Tool to Find wscript.exe Path
1.
2.
3.
4.

Go to Start > Search > All Files or Folders.

In the "All or part of the the file name" section, type in "wscript.exe" file name(s).
To get better results, select "Look in: Local Hard Drives" or "Look in: My Computer" and then click "Search" button.
When Windows finishes your search,the results for wscript.exe will be displayed. . .right click on wscript.exe and delete it. . .

Step 2: Use Windows Task Manager to Remove wscript.exe Processes

1. To open the Windows Task Manager, use the combination of CTRL+ALT+DEL or CTRL+SHIFT+ESC.
2. Click on the "Image Name" button to search for "wscript.exe" process by name.
3. Select the "wscript.exe" process and click on the "End Process" button to kill it.
Step 3: Delete Registry key values corresponding to wscript.exe, WINLOGON.vbs or YPSAN.F.
1. Open the registry editor by pressing (win key+R) and typing in "regedit" without the quotes.
2.When the registry editor opens up, press (Ctrl+F) and type in wscript.exe.
3. The search results will be displayed. . . remove only the values inside the key, and click on 'Find Next'.
4. repeat Step 2-3 for WINLOGON.vbs or YPSAN.F
5. Restart the system.
Warning: If value is listed for some registry entries, you should only clear these values and leave keys with such values untouched.
For added safety, Remove the entry that opens mscript.exe from startup programs. For this press 'winkey +R', type 'msconfig' , From the startup tab, remove the
tick mark from the entry that corresponds to wscript.exe.
And also use antivirus software like NOD32 v4 and update it to prevent further infections like this. . .

Hope this solves ur Problem. . .

Regards,
JeFi.

Source(s):
http://www.processlibrary.com/directory/
http://www.securitystronghold.com/gates/
http://www.spywareremove.com/removewscri
4 years ago ( 2009-08-28 18:12:24 +0000 ) Report Abuse

100% 1 Vote
JeFi
Search Yahoo! for wscript.exe

Other Answers (0)

in.answers.yahoo.com/question/index?qid=20090828102736AAdsIGR

1/2

5/1/13

I have this Wscript.exe problem......? - Yahoo! Answers India

No other answers.

in.answers.yahoo.com/question/index?qid=20090828102736AAdsIGR

2/2