eScan - Antivirus & Content Security Forum

HOW TO REMOVE VBS.Runauto

Below are the steps
1. Please Disable System Restore (Windows Me/XP).
2. Update the virus definitions.
3. Reboot computer in SafeMode
4. Run a full system scan and clean/delete all infected files
5. Delete any values added to the registry.

Remove invalid Entry
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
\"Userinit" = "userinit.exe,virusremoval.vbs"

Correct Entry is:

KEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

\"Userinit" = "userinit.exe,

C:\WINDOWS\system32\userinit.exe,

6. Exit registry editor and restart the computer.