8 Responses for "ProtectFile.vbs"

1. webmaster November 26th, 2008 at 8:46 am 1

   1. Download the free tool MoveOnBoot
   2. Open MoveOnBoot
   3. Go to Rename Action -> Rename File
   4. A dialog box will open, select the file. Since these virus files are hidden files , you won’t be able to browse and see it. Please enter enter “C:\protectfile.vbs” in select-file section.
   5. Enter “C:\protectfile.html” in the destination file section. Enter OK.
   6. Similarly repeat steps 2 to 4 for the file “C:\autorun.inf” and rename it to “C:\autorun.html”
   7. Don’t restart your computer. We have set moveonboot to rename the ProtectFile.vbs in just one of the drives.
   8. Repeat step 2 to 5 for each of the drives. For example if you have 4 drives in your computer(C, D, E, F), then you will have to rename “C:\protectfile.vbs”, “D:\protectfile.vbs”, “E:\protectfile.vbs” and “F:\protectfile.vbs” to “C:\protectfile.html”, “D:\protectfile.html”, “E:\protectfile.html” and “F:\protectfile.html” respectively. Similarly rename “autorun.inf” files in all the drives to corresponding “autorun.html” files.
   9. Restart your computer. Voila! We have disabled the visus.
   10. Now we will remove them completely.
   12. Open MoveOnBoot again.
   13. Go to Delete Actions -> Delete Files
   14. You won’t be able to browse and reach the files. So click browse and enter “C:\protectfile.html”, “D:\protectfile.html”, “E:\protectfile.html” ,”F:\protectfile.html”, “C:\autorun.html”, “D:\autorun.html”, “E:\autorun.html” and “F:\autorun.html”
   15. Restart your computer.

2. Rakesh Behera December 3rd, 2008 at 4:58 pm 2

   Dear Sir,
   I have removed “protectfile.vbs” & “autorun.inf”.But when i Switch On my Laptop It Shows “can not find Windows Script File C:\WINDOWS\sytem32\SecureGuard.vbs

3. Vallinath December 4th, 2008 at 1:12 am 3

   Thanks for the support
   my system is infected with protectfile.vbs
   and i am unable to work on my system.
   I have followed the webmaster,s response
   and it has worked successfully
   thanks

4. Geezer December 7th, 2008 at 6:11 pm 4

   You also need to run ‘regedit.exe’ and then search for ‘protectfile.vbs’ and ’secureguard.vbs’, and delete all entries you find with it in.

5. chumpy December 11th, 2008 at 2:59 am 5

   thanks for the support

6. Nirjhar December 16th, 2008 at 2:51 pm 6

   “I have removed “protectfile.vbs” & “autorun.inf”.But when i Switch On my Laptop It Shows “can not find Windows Script File C:\WINDOWS\sytem32\SecureGuard.vbs”
   Then you may need to do one one think create a text file using Notepad —–>rename it ProtectFile.vbs.
   After that put this file into System32 folder.
   Now Restart your computer
   Also you follow this:
   “You also need to run ‘regedit.exe’ and then search for ‘protectfile.vbs’ and ’secureguard.vbs’, and delete all entries you find with it in.”

7. Dibyendu April 19th, 2009 at 5:46 am 7

   Sir, when i open my P.C, i find the message ” C\WINDOWS\System 32\secure guard. vbs ” Failed to access is denied…Please send me its solution.

8. srichandar June 6th, 2009 at 10:55 am 8

   go to task manager kill the processes explorer and wscript.exe(if available)
   now go to applications tab and press new task
   enter cmd in the cmd go to the drive c:\
   enter del /f/q/a protectfile.vbs
   and del /f/q/a autorun.inf
   and now go to c:\windows\system32
   and enter del /f/q/a secureguard.vbs
   now u have deleted all the infected files in ur system
   and now goto
   regedit and search for protectfile.vbs and delete all the files with this name
   and again search for the secureguard.vbs
   and u have to modify it as in the path del only”c:\windows\system32\secureguard.vbs… and let the other part of the path be there alive..
   and restart ur system
   thats all u r done…!!!!!!!!
   Source(s):
   self, i tried it when it occurred in my system