Fix: The Default Icon for .VBS Files Changed by Virus/Worm

If the VBScript icon suddenly changed to application or image icon, it’s highly likely that your system is infected by a Worm (written in VBScript). Many worms change the default icon of .VBS file into an application icon or image icon to mislead users.


Worm-laden file with double-extensions. InfoTip shows it’s a VBScript file.

Here is how to fix the default icon for VBScript files in the aftermath of Malware removal.

1. Launch Regedit.exe and navigate to:

HKEY_CLASSES_ROOT \ VBSFile \ DefaultIcon

2. Double-click (default) and set its Value data to:

C:\Windows\System32\WScript.exe,2

3. Exit the Registry Editor.

Alternately, you can apply the .VBS file association fixes available at:

Also, make sure that the setting Hide extensions for known file types is disabled in Folder Options. (REF Show or hide file name extensions.)


Copyright © 2008 Ramesh Srinivasan. All rights reserved.

RELATED POSTS


Add to Google

Leave a Reply