Ma heli karo qaladka run.vbs faylka qoraalka ee lon in Windows 10

Boostada maanta, waxaan isku dayi doonaa inaan xallino arrinta sida ay ula xiriirto fariinta khaladka ah Can not find script file C:\WINDOWS\run.vbs marka la galo gudaha Windows 10 . Martigeliyaha Qoraalka Qoraalka(Script Host) Daaqadaha waxa lagu muujiyay, shaashad bannaan oo asal madow leh. Tani waxay dhacdaa haddii malware uu wax ka beddelay qiimaha diiwaanka Userinit , isagoo ku beddelaya xogta qiimaha caadiga ah ee Windows oo leh magaca faylka VBScript .

Userinit.exe waa faylka mas'uulka ka ah fulinta qoraallada logon-ka, dib u habeynta isku xirka shabakada ka dibna bilaabaya Explorer.exe , waana fayl badbaado u ah PC gaaga. Winlogon waa qayb muhiim ah oo ka mid ah nidaamyada Windows(Windows) ee taxanaha ah ee maamula rarida sugan ee astaanta isticmaalaha wakhtiga la soo galo.

Lama heli karo faylka script run vbs

 

Lama heli karo faylka qoraalka run.vbs

Waxaad la kulmi kartaa shaashad madow markaad isku dayeyso inaad gasho kombayutarka maadaama barnaamijka xaasidnimada leh uu maamulo qiimaha diiwaanka Userinit oo beddelo xogta qiimaha caadiga ah ee Windows oo leh magaca faylka (Windows)Vbscript . Maaddaama uu fayraskani tirtiro ama ka guuro faylka .vbs galka caadiga ah ee System32 , isticmaalayaashu waxay helayaan qaladka sida kor ku xusan.

Caadi ahaan, malware-ka keenaya arrinku wuxuu ku faafaa lifaaqyada iimaylka ee spamka ah, shabakadaha Peer-to-Peer (P2P)(Peer-to-Peer (P2P)) ama khalkhal(malvertising) – faafinta isticmaaleyaasha kombuyuutarrada kuwaas oo u janjeera inay soo dejiyaan muusig ama filimaan si sharci darro ah, guji xayeysiisyada internetka ee laga shakiyo, ama iimaylada spam furan.

Waxaa xusid mudan in malware-ka horseedaya “Ma Can not find script file C:\Windows\run.vbs € ….

  • Gashanaya furayaasha furaha
  • Soo galitaanka barnaamijyada suurtagalka ah ee aan la rabin ( PUPs )(potentially unwanted programs (PUPs)) ama malware
  • Abuuritaanka albaab dambe adiga oo ku xiraya PC-ga server-ka fog.

Waxaa jira laba siyaabood oo lagu hagaajin karo “Ma heli karo script file C:\Windows\run.vbs†qalad ku jira Windows 10 , sida:

1. Wax ka beddel qiimaha diiwaanka Userinit
2. Beddel qiimaha diiwaanka(Registry) furaha .vbs

Labadan hab ayaa kaa caawin kara inaad hagaajiso qaladka run.vbs oo aad dib u hesho macluumaadka isticmaalahaaga.

Kahor intaadan bilaabin, waxaa lagugula talinayaa, inaad ku rakibto iskaanka ka-hortagga buuxa ee Windows Defender ama wax kasta oo sumcad leh  oo dhinac saddexaad ah oo AV ah(third-party AV product) .

Hadda, si aad u sii waddo xallinta hagaajinta diiwaangelinta, waxaad marka hore u baahan doontaa inaad kaydiso  diiwaanka ama aad (backup the registry)abuurto barta soo celinta nidaamka haddii habsocodku u aado koonfurta.

Markaad sameyso mid ka mid ah ficillada, waxaad hadda ku bilaabi kartaa sidan soo socota;

1] Wax ka beddel qiimaha diiwaanka Userinit

Kadib markaad qorto aqoonsiga gelitaanka, nidaamku wuxuu istaagi karaa isku  diyaarinta gelitaanka(Preparing to log in) shaashadda. Press CTRL+ALT+DEL , oo dhagsii Maareeyaha Hawsha(Task Manager) (haddii Maamulaha Hawshu(Task Manager) aanu furmin sababo la xidhiidha DisableTaskMgr Policy oo uu karti u yeeshay malware-ku, waxaad u baahan doontaa inaad wax ka beddel ku samayso diiwaanka khadka tooska ah adigoo isticmaalaya jawiga soo kabashada Windows ).

Marka fariinta qaladka sare ay muuqato, ka saar wada hadalka oo u gudub daaqada Maareeyaha Hawsha . (Task Manager)Faylka lagu tixraacay qiimaha diiwaanka Userinit waa la maamulaa xitaa ka hor inta uusan xirin is dhexgalka isticmaalaha. Si aad u bilowdo qolofka Explorer , u gudub daaqada Maareeyaha Hawsha , dhagsii (Task Manager)File , oo dooro Run shaqo cusub(Run new task) . Ku qor explorer.ex e oo ku dhufo Gelida.

Bilaw Tifaftiraha Diiwaanka .

U gudub furaha diiwaangelinta:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\Current Version\Winlogon

Laba-guji shayga Userinit

Ka beddel xogta qiimaha

wscript C:WINDOWS\run.vbs

kuwan soo socda:

C:\Windows\system32\userinit.exe

Guji OK _

Si gaar ah u taxaddar markaad gelayso. Waxaad u baahan tahay inaad ka saarto qaybta wscript . Iyo sidoo kale ku dar hakadka daba socda ( , ) sida kor ka muuqata. Ku qorista magaca faylka ama dariiqa khaldan waxay kaa ilaalin doontaa inaad gasho akoon kasta oo isticmaale.

Ka bax oo mar kale soo gal

Hubi si aad u aragto in arinta run.vbs la xaliyay.

2] Beddel(Change) qiimaha Diiwaanka(Registry) ee furaha .vbs

Bilaw Tifaftiraha Diiwaanka

U gudub furaha diiwaangelinta:

Computer\HKEY_CLASSES_ROOT\.vbs

Laba jeer ku dhufo qiimaha caadiga(Default) ah.

U deji qiimaha  VSBFile.

Guji  OK.

Ka bax oo mar kale soo gal

Hubi haddii dhibka run.vbs la xaliyay.

That’s it, folks!

Akhriska la xidhiidha(Related read) : Lama heli karo faylka qoraalka HPAudioswitchLC.vbs bilowga(Cannot find script file HPAudioswitchLC.vbs at startup) .



About the author

Waxaan ahay injineer software ah oo khibrad u leh Xbox Explorer, Microsoft Excel, iyo Windows 8.1 Explorer. Waqtiga firaaqada, waxaan jeclahay inaan ciyaaro ciyaaraha fiidiyaha oo aan daawado TV-ga. Waxaan shahaadada ka qaatay Jaamacadda Utah, waxaanan hadda u shaqeynayaa sidii injineer software ah oo shirkad caalami ah.



Related posts