PC Review Forums Newsgroups Hardware Anti-Virus What does "cannot find script file "H:\Bha.dll.vbs"" mean?

Reply

What does "cannot find script file "H:\Bha.dll.vbs"" mean?

 
Thread Tools Rate Thread
Old 31-03-2007, 07:22 PM   #1
Fei
Guest
 
Posts: n/a
Default What does "cannot find script file "H:\Bha.dll.vbs"" mean?


Hi all:

Now I cannot open my external hard disc from My Computer - once I
click my external hard disc (H drive), it is said "cannot find script
file "H:\Bha.dll.vbs""! I believe that "Bha.dll.vbs" is a virus! Could
you please tell how can I deal with it?

Thank you so much!

Fei

  Reply With Quote
Old 31-03-2007, 09:17 PM   #2
Art
Guest
 
Posts: n/a
Default Re: What does "cannot find script file "H:\Bha.dll.vbs"" mean?

On 31 Mar 2007 11:22:40 -0700, "Fei" <joey_qf@163.com> wrote:

>Hi all:
>
>Now I cannot open my external hard disc from My Computer - once I
>click my external hard disc (H drive), it is said "cannot find script
>file "H:\Bha.dll.vbs""! I believe that "Bha.dll.vbs" is a virus! Could
>you please tell how can I deal with it?


That file is likely to be a part of the ButSur-A worm (not a virus),
as is easily discovered by doing a quick Google search. If you have
Windows set to show all hidden files, you can do a search for the
file. You may then also find files with names MS32DLL and autorun.inf
which are also part of the worm.

Several registry entries are made by the worm. All the details are
readily available, if you just do some simple searching. You'll find
that if you disable wscript, the worm will be crippled since VBS
requires wscript. Press Ctrl-Alt-Delete and open Task manager,
then find wscript running and stop it.

What antivirus product do you use? Most should be able to
iidenify the worm, and at least remove portions of it. Have
you tried scanning your main drive in Safe Mode?

>Thank you so much!


Hope thayt helps

Art
  Reply With Quote
Old 01-04-2007, 07:06 AM   #3
Fei
Guest
 
Posts: n/a
Default Re: What does "cannot find script file "H:\Bha.dll.vbs"" mean?

Hi Art:

Thank you for your reply! I have checked my task manager, and cannot
find wscript.... I search, but i think most of them are for internal
hard disc....Is it the same with infected external disc? Will this
worm ruin my data in my external disc....

I use Norton! My external hard disc is infected by my classmate
laptop.... Now the three partitions of my external disc cannot be
opened....

Thank you again!

Fei

On Apr 1, 6:17 am, Art <n...@zilch.com> wrote:
> On 31 Mar 2007 11:22:40 -0700, "Fei" <joey...@163.com> wrote:
>
> >Hi all:

>
> >Now I cannot open my external hard disc from My Computer - once I
> >click my external hard disc (H drive), it is said "cannot find script
> >file "H:\Bha.dll.vbs""! I believe that "Bha.dll.vbs" is a virus! Could
> >you please tell how can I deal with it?

>
> That file is likely to be a part of the ButSur-A worm (not a virus),
> as is easily discovered by doing a quick Google search. If you have
> Windows set to show all hidden files, you can do a search for the
> file. You may then also find files with names MS32DLL and autorun.inf
> which are also part of the worm.
>
> Several registry entries are made by the worm. All the details are
> readily available, if you just do some simple searching. You'll find
> that if you disable wscript, the worm will be crippled since VBS
> requires wscript. Press Ctrl-Alt-Delete and open Task manager,
> then find wscript running and stop it.
>
> What antivirus product do you use? Most should be able to
> iidenify the worm, and at least remove portions of it. Have
> you tried scanning your main drive in Safe Mode?
>
> >Thank you so much!

>
> Hope thayt helps
>
> Art



  Reply With Quote
Old 01-04-2007, 01:06 PM   #4
Art
Guest
 
Posts: n/a
Default Re: What does "cannot find script file "H:\Bha.dll.vbs"" mean?

On 31 Mar 2007 23:06:24 -0700, "Fei" <joey_qf@163.com> wrote:

>Hi Art:
>
>Thank you for your reply! I have checked my task manager, and cannot
>find wscript.... I search, but i think most of them are for internal
>hard disc....Is it the same with infected external disc? Will this
>worm ruin my data in my external disc....
>
>I use Norton! My external hard disc is infected by my classmate
>laptop.... Now the three partitions of my external disc cannot be
>opened....


I presume you're booting to Windows on your internal drive C: ??
If so, the first thing to do is to fix that. You haven't said what the
result is of having NAV scan drive C: in safe mode, which I
suggested. You can also use a alternate antivirus scanner. I'd
also use a registry cleaner as a aid in cleaning up your registry.
The symptom you described in your first post suggests to me
that your registry is corrupted.

Once you fix Windows on your main boot partition C: you can
go on from there. It seems from what you described that Windows
Explorer does at least "see" your other partitions on the external
drive. So you should be able to scan them once Windows on your
main boot partition is fixed.

All I can do is suggest a general outline of a troubleshooting
procedure that I'd follow based on the little details you have
supplied so far. I'd proceed on the assumption that a number
of problems and malwares might be present.

Art

  Reply With Quote
Old 01-04-2007, 04:39 PM   #5
Colon Terminus
Guest
 
Posts: n/a
Default Re: What does "cannot find script file "H:\Bha.dll.vbs"" mean?


"Fei" <joey_qf@163.com> wrote in message
news:1175365360.747111.169850@e65g2000hsc.googlegroups.com...
> Hi all:
>
> Now I cannot open my external hard disc from My Computer - once I
> click my external hard disc (H drive), it is said "cannot find script
> file "H:\Bha.dll.vbs""! I believe that "Bha.dll.vbs" is a virus! Could
> you please tell how can I deal with it?
>
> Thank you so much!
>
> Fei
>


My first step would be to disable "AutoRun" and Scripting.

Google should easily lead you to the "How to" to accomplish both. Many sites
tell you how to disable "AutoRun", pick the one that suits you best. To
disable Scripting, Google for "nocript.exe".




--
Posted via NewsDemon.com - Premium Uncensored Newsgroup Service
------->>>>>>http://www.NewsDemon.com<<<<<<------
Unlimited Access, Anonymous Accounts, Uncensored Broadband Access
  Reply With Quote
Reply



Thread Tools
Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off