Here is the story: Most likely your registry setting
Code:
[HKEY_CLASSES_ROOT\CLSID\{B54F3741-5B07-11cf-A4B0-00AA004A55E8}\InprocServer32]
@="C:\\Windows\\system32\\vbscript.dll" was replaced with something else. Check this out by WIN+R – REGEDIT – and navigate to that thread.
But you cannot simply edit this thread and change it back, because by default it is owned and can be edited by TRUSTEDINSTALLER user in Windows.
Short guide (same for Visa and 7):
Run file in the attachment from user with Administrative rights. Answer positively on all following questions. In case of doubts: here are VIRUSTOTAL check results
VirusTotal - Free Online Virus, Malware and URL Scanner Long guide (same for Visa and 7):
Press Win+R combination, Run window will appear. Type regedit and hit enter. Answer positively on all following questions. When Registry editor window will appear navigate to the following root
Code:
HKEY_CLASSES_ROOT\CLSID\{B54F3741-5B07-11cf-A4B0-00AA004A55E8}\InprocServer32 Then right click
InprocServer32 – Permissions – Advanced – ADD.
Now in the field
Enter object names to select type your windows user name – OK. In next window select your user and in the field Permission select FULL CONTROL.
After obtaining FULL control of that registry thread you can easily edit the default value as it should be: parameter (Default) right click
Modify , then change the Value data: "C:\\Windows\\system32\\vbscript.dll"
OK – close Registry editor.