Ever try to open a drive with double click and this error message pop up?

WINDOWS SCRIPT HOST, CANNOT FIND SCRIPT FILE “C:/Bha.dll.vbs

This “WINDOWS SCRIPT HOST, CANNOT FIND SCRIPT FILE “C:/Bha.dll.vbs” occur due to a worm infection known as VBS/ButSur-A . VBS/ButSur-A is a Visual Basic script worm for Microsoft Windows platform, and also known as

• VBS_BUTSUR.B
• VBS/Butsur.B

When active, VBS/ButSur-A:

1. Copies itself to C:\Windows\Bha.dll.vbs
2. Create the following registry entry:
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
   MS32DLL
   C:\Windows\Bha.dll.vbs
3. Add the following registry entry:
   HKCU\Software\Microsoft\Internet Explorer\Main\Window Title\
4. Copies itself to all removeable and shared drives as Bha.dll.vbs and creates the file autorun.inf.

This autorun.inf files will run the script Bha.dll.vbs everytime the removeable drive are open with double click. This VBS/ButSur-A, VBS_BUTSUR.B, VBS/Butsur.B can be easily remove by deleting the files and the registry entries that this VBS/ButSur-A, VBS_BUTSUR.B, VBS/Butsur.B worms created.

Alternatively you can download this nifty utility called the Flash Disinfector to enable you to disinfect and open your removable drive with double click.

Download Flash Disinfector

A popup message will appear, click “OK” to start the disinfection process. That’s all to it.

Tags: adware, autorun.inf, Bha.dll.vbs, spyware, VBS/ButSur-A, VBS/Butsur.B, VBS_BUTSUR.B, virus, virus disinfection, virus fix, virus removal, worm

See also:

• RoMeO A.K.A ILLS [CIXENT] (4)
• Trixcu.A worm (1)
• The Genealogy of Virus (8)
• The best antivirus program (2)
• RoMeO A.K.A ILLS [CIXENT] cleaner and remover (2)