Here is the story: Most likely your registry setting
was replaced with something else. Check this out by WIN+R – REGEDIT – and navigate to that thread.
But you cannot simply edit this thread and change it back, because by default it is owned and can be edited by TRUSTEDINSTALLER user in Windows. Short guide (same for Visa and 7):
Run file in the attachment from user with Administrative rights. Answer positively on all following questions. In case of doubts: here are VIRUSTOTAL check results VirusTotal - Free Online Virus, Malware and URL Scanner Long guide (same for Visa and 7):
Press Win+R combination, Run window will appear. Type regedit and hit enter. Answer positively on all following questions. When Registry editor window will appear navigate to the following root
Then right click InprocServer32
– Permissions – Advanced – ADD.
Now in the field Enter object names to select
type your windows user name – OK. In next window select your user and in the field Permission select FULL CONTROL.
After obtaining FULL control of that registry thread you can easily edit the default value as it should be: parameter (Default) right click Modify
, then change the Value data: "C:\\Windows\\system32\\vbscript.dll"
OK – close Registry editor.