That just put a shell on the file that has the security warning.
See if this turns it off:
Open task manager with ctl alt del
Click on wscrit > right click > end task
Then run the DM collector:
BSOD - Posting Instructions - Windows 10 Forums
Went to task manager but couldn't find wscrit listed in any category. Len
What do you have installed on your computer that is converting the files to vbs?
Are you able to reply now?
The information that you had posted for your computer indicates Lenovo.
Please update the computer information with the one in this thread:
CPU, GPU, Drives (SSD vs HD), PSU, RAM, cooling, case, windows operating system with version and build,
The always on antivirus that you use and the manual antivirus.
Waited 33 minutes for reply > no reply
Last edited by zbook; 09 Aug 2017 at 02:31.
The _zipIt.vbs script is used to zip the folder containing the files after the collection is finished.
Please wait until the DM Log Collector prompt finishes, after the DM Log Collector prompt is gone, upload the zip.
That is exactly what I did, the DM Log Collector has no options and my only input is hitting "any Key" twice to start and finish the collection. It automatically makes two files on my desktop. A "Temp" file and a scripts file called _zipIt. I have attached a screen snip.
Attachment 147993
I just ran the tool using a fresh download.
On my desktop there are in total 4 new items
- TFdebugFiles, folder containing all files
- _zipIt.vbs, script used for zipping
- temp.txt, not exactly sure what it's used for
- zip file of TFdebugFiles folder
After the command prompt closes, only the folder is deleted.
Alternatively, please run following commands in an admin command prompt
It may take some time to finish, msinfo32 takes tike.
If there are any problems with it, please let me know.Code:copy %SystemRoot%\minidump\*.dmp "%USERPROFILE%\Desktop\"&dxdiag /t %Temp%\dxdiag.txt copy %Temp%\dxdiag.txt "%USERPROFILE%\Desktop\"&type %SystemRoot%\System32\drivers\etc\hosts >> "%USERPROFILE%\Desktop\hosts.txt"&systeminfo > "%USERPROFILE%\Desktop\systeminfo.tmp"findstr /v "Owner." "%USERPROFILE%\Desktop\systeminfo.tmp" > "%USERPROFILE%\Desktop\systeminfo.txt" del "%USERPROFILE%\Desktop\systeminfo.tmp"&tasklist > "%USERPROFILE%\Desktop\tasklist.txt"&driverquery /v > "%USERPROFILE%\Desktop\drivers.txt"&type %windir%\Windowsupdate.log >> "%USERPROFILE%\Desktop\updatelog.txt"&msinfo32 /nfo "%USERPROFILE%\Desktop\msinfo32.nfo"&WMIC /OUTPUT:"%USERPROFILE%\Desktop\ProcessList.txt" PROCESS get Caption,Commandline,Processid&ipconfig /all > "%USERPROFILE%\Desktop\ipconfig.txt"&wevtutil qe System /f:text > "%USERPROFILE%\Desktop\eventlog.txt"® export HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall "%USERPROFILE%\Desktop\uninstall.txt"® export "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components" "%USERPROFILE%\Desktop\installed.txt"&net start > "%USERPROFILE%\Desktop\services.txt"&sc query type= driver state= all > "%USERPROFILE%\Desktop\driver_status.txt"&sc query type= service state= inactive > "%USERPROFILE%\Desktop\inactive_services_status.txt"&sc query type= service state= all > "%USERPROFILE%\Desktop\all_services_status.txt"&REM wmic service list full /format:htable >%USERPROFILE%\Desktop\service.html&wmic /output:"%USERPROFILE%\Desktop\hotfix.txt" qfe list full /format:table&REM wmic /output:%USERPROFILE%\Desktop\nics.html nicconfig list /format:hform REM wmic startup list full /format:htable >"%USERPROFILE%\Desktop\startup.html"&wmic STARTUP GET Caption, Command, User >"%USERPROFILE%\Desktop\startup.txt"&
I have re-downloaded the DM tool, ran it and it makes only the two files I mentioned earlier. I will run it again (later today) in safe mode to see if that makes a difference.
Len
Quote