Video Screencast Help
Search Video Help Close Back
to help
New in the Rewards Catalog: Vouchers for "Symantec Technical Specialist" and "Symantec Certified Specialist" exams.

can not find the script file "C:\Windows\UjBright_Antivirus.vbs"

Updated: 21 May 2010 | 10 comments
Sumit Bose's picture
0 0 Votes
Login to vote
This issue has been solved. See solution.

Dear All,

Very good morning,

I am using SAV 10.1.8.8000. and every time i Restart my system i Get this popup {can not find the script file "C:\Windows\UjBright_Antivirus.vbs"}
imagebrowser image

If i Remove it from the MSConfig Startup it doesn't come, but i wanted exactly what is it.

Can anyone help

Thanking you,

Warm Regards,
Sumit Bose

Comments

pete_4u2002's picture
15
Jun
2009
0 Votes 0
Login to vote

it is windows script file.

it is windows script file. may be malicious. Check the script if it calls for the malicious things.

im sure its not related to symantec

cheers
Pete

Sandeep Cheema's picture
16
Jun
2009
0 Votes 0
Login to vote

Either that or your AV admin

Either that or your AV admin might have used some scripts for deploying the clients, It's definately not a part of Symantec.

De facto when AV does something, it starts jumping up and down, waving its arms, and shouting "Hey!  I found a virus!  Look at me!  I'm soooo goooood!"

Abhishek Pradhan's picture
16
Jun
2009
0 Votes 0
Login to vote

Here's one way to remove that

Here's one way to remove that anoying pop-up.

Click Start | Run > Type in MSCONFIG an click on OK.

imagebrowser image

Click on the STARTUP Tab, and then uncheck the option where it shows that the script may be executed from, and click on APPLY and REBOOT the system to resolve the issue.

Abhishek Pradhan, PMP, MCT
Consultant | Microsoft Corp.
Blog: http://blog.abhishekpradhan.net | SIG Lead - Pune IT Pro (Microsoft Pune User Group) | http://www.puneusergroup.org

Daniel_Allen's picture
16
Jun
2009
0 Votes 0
Login to vote

Going by the name it sounds

Going by the name it sounds like rogue anti-virus that was partially removed but google is telling me very little. 

Vikram Kumar-SAV to SEP's picture
16
Jun
2009
0 Votes 0
Login to vote

 Is it just on one computer

 Is it just on one computer or on all th computers ?
Just if you have any login script configured that hasn't been removed.

mssym's picture
16
Jun
2009
0 Votes 0
Login to vote

log on with different account

Looks like some command file trying to launch that vbs script, which no longer exist. Try to logon with different account to see the message still pop up, if it does, then check all user startup and run key in the HKLM registry to see whether any command file trying to call that vbs, delete it, you should be fine. if you logon with different account, you do not see the message, you should check the previous user profile startup configuration and  run key in HKCU. if find that comanline file, delete it.

ajeet kumar's picture
22
Jun
2009
1 Vote +1
Login to vote

This ujbright_antivirus.vbs

This ujbright_antivirus.vbs is a variant of virus like the sowar.vbs, the script was edited by oxymoron from COTABATO CITY practicing to became a "kiddie-computer-wizard" . this asshole can be remove manually... Power on ur computer to safemode, using windows explorer, goto c:\windows then rename wscript.exe to wscriptures.exe , run regedit, delete the entry "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\autome". exit... restart ur computer... if you are using usb flash drive, maybe it is contaminated by ujBright, use TURBONAV to view files in your usb flashdrive then delete these files: ujbright_antivirus.vbs, autorun.inf, readme.txt...(coz these file's attribute is hidden, read-only, and as system files.) do not use windows explorer, you can't see these files.

Before deleting the registry key please take backup.

ajeet kumar's picture
30
Jun
2009
1 Vote +1
Login to vote

if this solution is worked

if this solution is worked please mark as solution or if you have any query please let us know.

Sumit Bose's picture
02
Jul
2009
0 Votes 0
Login to vote

Thank you for the solution

Thank you for the solution its working now...........

divyamenon's picture
08
Aug
2009
0 Votes 0
Login to vote

hiee.... Wat i wanna knw is "

hiee....
Wat i wanna knw is " will dis virus hav any othr effect on the sys?"
pls reply......