Ma heli karo qaladka run.vbs faylka qoraalka ee lon in Windows 10
Boostada maanta, waxaan isku dayi doonaa inaan xallino arrinta sida ay ula xiriirto fariinta khaladka ah Can not find script file C:\WINDOWS\run.vbs marka la galo gudaha Windows 10 . Martigeliyaha Qoraalka Qoraalka(Script Host) Daaqadaha waxa lagu muujiyay, shaashad bannaan oo asal madow leh. Tani waxay dhacdaa haddii malware uu wax ka beddelay qiimaha diiwaanka Userinit , isagoo ku beddelaya xogta qiimaha caadiga ah ee Windows oo leh magaca faylka VBScript .
Userinit.exe waa faylka mas'uulka ka ah fulinta qoraallada logon-ka, dib u habeynta isku xirka shabakada ka dibna bilaabaya Explorer.exe , waana fayl badbaado u ah PC gaaga. Winlogon waa qayb muhiim ah oo ka mid ah nidaamyada Windows(Windows) ee taxanaha ah ee maamula rarida sugan ee astaanta isticmaalaha wakhtiga la soo galo.
Â
Lama heli karo faylka qoraalka run.vbs
Waxaad la kulmi kartaa shaashad madow markaad isku dayeyso inaad gasho kombayutarka maadaama barnaamijka xaasidnimada leh uu maamulo qiimaha diiwaanka Userinit oo beddelo xogta qiimaha caadiga ah ee Windows oo leh magaca faylka (Windows)Vbscript . Maaddaama uu fayraskani tirtiro ama ka guuro faylka .vbs galka caadiga ah ee System32 , isticmaalayaashu waxay helayaan qaladka sida kor ku xusan.
Caadi ahaan, malware-ka keenaya arrinku wuxuu ku faafaa lifaaqyada iimaylka ee spamka ah, shabakadaha Peer-to-Peer (P2P)(Peer-to-Peer (P2P)) ama khalkhal(malvertising) – faafinta isticmaaleyaasha kombuyuutarrada kuwaas oo u janjeera inay soo dejiyaan muusig ama filimaan si sharci darro ah, guji xayeysiisyada internetka ee laga shakiyo, ama iimaylada spam furan.
Waxaa xusid mudan in malware-ka horseedaya “Ma Can not find script file C:\Windows\run.vbs € ….
- Gashanaya furayaasha furaha
- Soo galitaanka barnaamijyada suurtagalka ah ee aan la rabin ( PUPs )(potentially unwanted programs (PUPs)) ama malware
- Abuuritaanka albaab dambe adiga oo ku xiraya PC-ga server-ka fog.
Waxaa jira laba siyaabood oo lagu hagaajin karo “Ma heli karo script file C:\Windows\run.vbs†qalad ku jira Windows 10 , sida:
1. Wax ka beddel qiimaha diiwaanka Userinit
2. Beddel qiimaha diiwaanka(Registry) furaha .vbs
Labadan hab ayaa kaa caawin kara inaad hagaajiso qaladka run.vbs oo aad dib u hesho macluumaadka isticmaalahaaga.
Kahor intaadan bilaabin, waxaa lagugula talinayaa, inaad ku rakibto iskaanka ka-hortagga buuxa ee Windows Defender ama wax kasta oo sumcad leh oo dhinac saddexaad ah oo AV ah(third-party AV product) .
Hadda, si aad u sii waddo xallinta hagaajinta diiwaangelinta, waxaad marka hore u baahan doontaa inaad kaydiso diiwaanka ama aad (backup the registry)abuurto barta soo celinta nidaamka haddii habsocodku u aado koonfurta.
Markaad sameyso mid ka mid ah ficillada, waxaad hadda ku bilaabi kartaa sidan soo socota;
1] Wax ka beddel qiimaha diiwaanka Userinit
Kadib markaad qorto aqoonsiga gelitaanka, nidaamku wuxuu istaagi karaa isku diyaarinta gelitaanka(Preparing to log in) shaashadda. Press CTRL+ALT+DEL , oo dhagsii Maareeyaha Hawsha(Task Manager) (haddii Maamulaha Hawshu(Task Manager) aanu furmin sababo la xidhiidha DisableTaskMgr Policy oo uu karti u yeeshay malware-ku, waxaad u baahan doontaa inaad wax ka beddel ku samayso diiwaanka khadka tooska ah adigoo isticmaalaya jawiga soo kabashada Windows ).
Marka fariinta qaladka sare ay muuqato, ka saar wada hadalka oo u gudub daaqada Maareeyaha Hawsha . (Task Manager)Faylka lagu tixraacay qiimaha diiwaanka Userinit waa la maamulaa xitaa ka hor inta uusan xirin is dhexgalka isticmaalaha. Si aad u bilowdo qolofka Explorer , u gudub daaqada Maareeyaha Hawsha , dhagsii (Task Manager)File , oo dooro Run shaqo cusub(Run new task) . Ku qor explorer.ex e oo ku dhufo Gelida.
Bilaw Tifaftiraha Diiwaanka .
U gudub furaha diiwaangelinta:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\Current Version\Winlogon
Laba-guji shayga Userinit
Ka beddel xogta qiimaha
wscript C:WINDOWS\run.vbs
kuwan soo socda:
C:\Windows\system32\userinit.exe
Guji OK _
Si gaar ah u taxaddar markaad gelayso. Waxaad u baahan tahay inaad ka saarto qaybta wscript . Iyo sidoo kale ku dar hakadka daba socda ( , ) sida kor ka muuqata. Ku qorista magaca faylka ama dariiqa khaldan waxay kaa ilaalin doontaa inaad gasho akoon kasta oo isticmaale.
Ka bax oo mar kale soo gal
Hubi si aad u aragto in arinta run.vbs la xaliyay.
2] Beddel(Change) qiimaha Diiwaanka(Registry) ee furaha .vbs
Bilaw Tifaftiraha Diiwaanka
U gudub furaha diiwaangelinta:
Computer\HKEY_CLASSES_ROOT\.vbs
Laba jeer ku dhufo qiimaha caadiga(Default) ah.
U deji qiimaha VSBFile.
Guji OK.
Ka bax oo mar kale soo gal
Hubi haddii dhibka run.vbs la xaliyay.
That’s it, folks!
Akhriska la xidhiidha(Related read) : Lama heli karo faylka qoraalka HPAudioswitchLC.vbs bilowga(Cannot find script file HPAudioswitchLC.vbs at startup) .
Related posts
Aqoonsiga Dhacdada 158 qalad - Diskiga isku midka ah ee GUIDs ee ku jira Windows 10
Kumbuyuutarkan looma cusboonaysiin karo Windows 10 sababtoo ah Goobaha Kaydinta Lammaaniga ah
Ku rakib Realtek HD Audio Driver Failure, Cilad OxC0000374 Windows 10
Hagaaji aqoonsiga Event ID 7031 ama 7034 qalad marka isticmaaluhu uu baxo Windows 10 kumbuyuutarka
Hid.dll lagama helin ama khalad ka maqan Windows 10
Qaladka shaqada maktabadda XAALADDA DLL lagama helin gudaha Windows 10
Samee Gaaban Kiiboodhka si aad u furto Mareegta aad jeceshahay gudaha Windows 10
Waa maxay Ilaalinta socodka socodka ee Windows 10 - Sida loo damiyo ama loo damiyo
Waan ka xunnahay, waanu kari waynay in aan ku furto khaladka faylka khadka tooska ah Windows 10
Tilmaamo cusub oo ku jira Windows 10 nooca 20H2 Oktoobar 2020 Cusbooneysii
Dhibcaha isgoysyada maqan ee aan-en-US Windows 10 warbaahinta rakibaadda
Laguma xidhi karo Xbox Live; Hagaaji arrinta isku xirka Xbox Live gudaha Windows 10
Sida loo dhaqan geliyo Raadinta Badbaadada Google ee Microsoft Edge gudaha Windows 10
Ka yeel ka-hortagga-xumeynta gudaha Windows 10 Hello Wajiga Xaqiijinta
Sida loo furo .aspx files on Windows 10 computer
3-da barnaamij ee Reddit ee ugu sarreeya Windows 10 kuwaas oo laga heli karo Bakhaarka Windows
Hagaaji khaladaadka Spooler Printer Windows 10
Cillad shaxeedka wareejinta inta lagu jiro rakibaadda software-ka Windows 10
Qari ama ku tus badhanka goobta shaqada ee Windows ee shaqada gudaha Windows 10
Hagaaji Gelitaanka Kontroolka Helitaanka waa qalad kharriban gudaha Windows 10