Today my antivirus (NOD32 Security Suite) was creating troubles for me. After every five minutes, a request to debug the application would appear because the some module of NOD32 would crash and then reload. It has been a long time that I have been using NOD32. So I decided to test some other antivirus. There were two good choices for me. One Bitdefender and then second Kaspersky. The problem was that I didn’t want to buy any one of those. So I decided to use a 6 months trial of Kaspersky Internet Security which will be more than enough for me to test it. Here is my previous article about how to get Kaspersky Internet Secutiry trial of 6 months.

I downloaded it and installed it. It began scanning my PC. And to my amazement, it detected a threat that NOD32 was unaware of!! It was the boot.vbs virus. I thought it would be better to remove the virus manually rather than relying on Kaspersky. That way I would learn more. So here are the steps which I did to remove the boot.vbs virus:

  1. Go to Task Manager –> Processes and End the following processes in order:
    1. dxdlg.exe
    2. wscript.exe
  2. Go to Start –> Run –> regedit –> Open the following key:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
  3. In the right hand pane, select Userinit and delete everything except “C:\windows\system32\userinit.exe”
  4. How To Remove Boot.vbs Virus
  5. Make sure the processes wscript.exe and dxdlg.exe are not running.
  6. Delete the following files
    1. C:\Windows\System32\dxdlg.exe
    2. C:\Windows\System32\boot.vbs
    3. In your Windows drive, search for boot.vbs and delete all of them.
    4. In your Windows drive, search for kinza.exe and delete all of them.
  7. Disable System Restore and then Enable it again.
  8. Restart your computer.

Hopefully everything will be cleaner now and your computer will be free from boot.vbs virus :-) . Please share your experiences.

More Interesting Articles

Tags: , , , , , , , , , , , ,

36 Responses to “How To Remove Boot.vbs Virus”

  1. Thank you very much technize.com for helping me to get rid of boot.vbs virus.

    You saved my time and money.

  2. dear sir, i ve the same problem, as a result i hd deleted the boot vbs file from windows/system32.. now i m getting a problem in starting the windows. it strucks on the login window, as i click ok, it says loading window, and soon says saving your setting and strucks to login screen. kindly help me sir, i m unable to open the window.

  3. Please download tools from by blog in my website and remove virus

    have fun!!!!
    balram

  4. I am thankful, I can remove the boot.vbs virus with the given procediour.

  5. Hi, am using AVG anti-virus a long time…it detected and deleted boot.vbs. but every time my PC startup. it shows cannot find script file”…system32\boot.vbs”.in my task manager there is no dxdlg.exe wscript.exe file. what can i do/ plz help me….my mail id is-vinoth.su@yahoo.com.
    thanks…

  6. Hi guys!… now am happy because boot.vbs problem is overcomed.try this tool to recover from any kind of threads,malicious,etc.
    goto->www.strongsecurityhold.com, then choose “true sword” then click try now(trial version but cure our problem).only 10 threads can clean.after complete re-install and try again…
    —try it.
    Thanks
    keep in touch-Vinoth

  7. Thanks everybody :-) . Please tell us about your experiences of how you were able to remove this virus.

  8. Really good help, seems to work at least 4 me
    thanks a lot

  9. this procedure worked a charm the first time… i was soo happy… before u know it, its back…. dunno what else to…

  10. how can i restore folderoption

  11. Problem solved, thanks for removing virus

  12. Hi thanks a lot, it worked for me. I am recommending this site to others.
    regards

  13. thanks alot vijay. Keep in touch with us and tell us about your experience in computers whether it be problems or solutions. We’ll be happy to publish anything that you find interesting relating to computer technology.

  14. I have the boot.vbs in my pendrive, and with the avast antivirus i can erase it, but now when i want to access to it a message appear, “can`t find boot.vbs” and i cant access to the pendrive. I dont have the problem in my system it’s in my pendrive
    Any ideas?

  15. Thanks a lot!
    That waz really helpful!

  16. Hi both the trials are failing in my attemp…

    1. by technize… cant find both the files

    2. by strongsecurityhold.com… webpage not opening

  17. IS THERE ANY ANTIVIRUS AVAILABLE FOR THIS PROBLEM….

    ANYTHING AT ALL???

    IT LITERALLY MADE MY LAPTOP COMMIT SUICIDE….!!!!!

    PLS HELP AND SUGGEST

  18. An error “wproxp.exe” comes on my desktop whenever i start my computer. I don’t see it more so that please guide me to resolve or remove this error. Thanks

  19. hi any body can help how can i remove boot.vbs virus in xp ??

  20. how can i remove it when i restar my pc every time apparence it msg(can not find script file”c:\Documents and Settings\test\boot.vbs”)

  21. how can i remove it when i restar my pc every time got it msg(can not find script file”c:\Documents and Settings\test\boot.vbs”)

  22. I have changed the setting to access task manager (not configured) but still this message is comming that “task manager is disabled by the administrator” pl help to resolve the problem.

  23. thamks for ur valuble data and for ur help

  24. thanx this is working . Is the any solution for
    Memscan:Application.Actmon.keylogger.E

  25. Everytime i start my system , two files, system32.vbs & calculator.bat open and clog each every folder of my hard drive. Please suggest what can be done?

  26. Nitesh if you have an antivirus, please update it and run a full system scan. If you don’t have an antivirus software, please install a good antivirus software. You can have a look at some of the free antivirus softwares here:
    Top 5 Free Antivirus Software

  27. @ Sanix

    I have got kaspersky 2009 trial edition which is fully updated. I have also scanned the entire system but the problem is not yet resolved.
    Thanks for ur help anyway…

  28. Can you send me your hijackthis report so that I may be able to understand your system better. For getting the hijackthis report, see the following article:
    How to use Hijackthis

  29. where is task manager

  30. arber you can press Ctrl-Shift-Esc to access the task manager.

  31. problem solved. Thanks a ton :-)

  32. Hello Balaram,
    ur blog is very nice. Good Work! My boot.vbs problem solved with ur blog.Thanks a lot!

  33. Hey, very informative blog….:-)

    Try Norman Security Suite 7. Its awesome…

  34. Hi, i had vbs in my pc, everytime i opened (by double clicking) my hard drive partitions, those opened in new windows and by right click there appeared some unreadable characters,i tried kaspersky but was not able to remove those files then i didn’t care about it and left it. A few days back my hard drive partitions did not open on double clicking and there appeared a message [windows script host, can not find script file "partition name:\ltus.vbs".]. i scanned with kaspersky 2009 and there appeared some viruses named “vulnerability”, kaspersky is not doing anything against it and partitions are still not opening normally, so plz tell me what to do for these probs????plz help me!

  35. Hi, A few weeks ago i discovered vbs in my pc, everytime i opened (by double clicking) my hard drive partitions, those opened in new windows and by right click there appeared some unreadable characters,i tried kaspersky but unable to remove those files then i didn’t care about it and left it. A few days back my hard drive partitions did not open on double clicking and there appeared a message [windows script host, can not find script file "partition name:\ltus.vbs".]. I scanned with kaspersky 2009 and there appeared some viruses named “vulnerability”, kaspersky is not doing anything against it and partitions are still not opening normally, so plz tell me what to do for these probs????plz help me!

  36. Hai, everybody, I success remove the Boot.vbs and wproxp.exe file from my PC. I remove use simple way. I install Ubuntu (Linux OS) at my Hard Disk ‘partition D’. I scan the virus from window and copy all the file directory. After that, I reboot my PC by using Ubuntu. I mounted my partition C Windows systems file. I check the directory of the virus. I remove directly the virus from Linux. so easy job.

    But after I remove all the virus file; I face some problem—–> every time when I boot Windows systems, my PC cannot run ‘regedit’ and show a message :”Windows cannot find wproxp.exe”. and every time when I boot Windows OS, the systems still find the Boot.vbs file even my Windows don’t have the virus.

    Hai; everybody, any Idea ???

Leave a Reply

You can use these tags: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

Incoming Searches For This Article: