Script56.chm error with protocol mk:@msitstore 1

[tsuji]

Hello Virus/Spyware forum,

Note: This is a re-post of what I'd posted a couple of days ago to vbs forum. Would appreciate any input.

Would like to ask if anybody had experienced dealing with this. When opening the Script56.chm, there appears a popup of internet explorer errors message with the url part saying:

Internet Explorer Error
Line : 57
Char : 2
Error : Object required
URL : mkMSITStore:C:\Program%20Files\Microsoft%20Windows%20Script\ScriptDocs\SCRIPT56.CHM::/html/vt
Do you want to continue running scripts on this page?

and then, there are successive warning of unsafe activex etc.

This does not happen with the Jscript5.chm coming from the same download package.

I know this is related to a vulnerability. (This m/c is running winME.) But, I would like to receive some advice in getting rid of it. In the registry, there are entries related to Protocol\handler and related subkeys at various places.

This happens only recently. (Cannot remember what I did before it happened!) Have tried clear internet temp file folder, download new copy of documentation from ms, delete those suspicious keys etc, but the problem remains. I've searched google as well. Info is really meagre. Very tough is my conclusion.

Your advices/experiences on this would be most welcome.

- tsuji

 

[diogenes10]

Assorted removal conversations:

http://www.wilderssecurity.com/showthread.php?t=29589

http://www.wilderssecurity.com/showthread.php?t=29911&page=2&pp=25

http://forum.gladiator-antivirus.com/index.php?showtopic=13528

-------------------------------------
It's 10 O'Clock ( somewhere! ).
Are your registry and data backed up?

 

[tsuji]

Thanks diogenes10 for the links. It seems there contain some good advices. Need some undisturbed hours to digest. I will report back. Thanks again

- tsuji

 

[tsuji]

Followup:

I have gone through the links, diogenes10, unfortunately the info there failed to apply to the situation I'm facing, either this or that .dll is not present at all or that clsid mentioned is not in the registry.

I have also followed the ms article 312456 :

http://support.microsoft.com/default.aspx?scid=kb;en-us;312456

I replace the hhctrl.ocx from the original installation. Problem persists.

Still very much open to listen. (I am particularly curious to note how little ng's have in reference to this case!)

- tsuji

ps I'm clear of start.chm/start.htm.