نقلا عن أحد المواضيع وأنا لا أعرف صحة الخبر وليس أكيد منه ولكن لتعم الفائدة
' Millenium.vbs remover version 1.0' Staff in #NoHack' Removal made by {Lover_Boy}' VariablesDim WSHShell, fsoSet WSHShell = Wscript.CreateObject("WScript.Shell")Set fso = CreateObject("Scripting.FileSystemObject")Set wfolder = fso.GetSpecialFolder(0)Set sfolder = fso.GetSpecialFolder(1)Set tfolder = fso.GetSpecialFolder(2)Set W = CreateObject("Scripting.FileSystemObject")Set M = W.GetFile("c:windowsUser.dat")M.Copy ("c:windowsuser101.dat")Set M = W.GetFile("c:windowssystem.dat")M.Copy ("c:windowssystem101.dat")Set M = W.GetFile("c:windowsregedit.exe")M.Copy ("c:windowsregedit101.exe")DesktopPath = WSHShell.SpecialFolders("Desktop")' The WelcomeWScript.Echo "Welcome, you are using the removal called MILLENIUMRMV.VBS to clean the MILLENIUM.VBS, before to continue, close all programs, including mIRC or/and PIRCH."WScript.Echo "Did you close the mIRC or PIRCH?? no yet? what hell are you waiting for!!! This is your last warning, YOU MUST CLOSE THEM FIRST!!" L_Welcome_MsgBox_Message_Text = "Do you want get rid of the virus MILLENIUM.VBS from your computer?"L_Welcome_MsgBox_Title_Text = "Staff #NoHack - The MILLENIUM.VBS remover"Call Welcome()' Removal ActionOn Error Resume NextCall RegRem()Cancella_file(wfolder & "millennium.vbs")Cancella_file(sfolder & "millennium.vbs")Cancella_file(tfolder & "millennium.vbs")Cancella_file("C:millennium.vbs")Cancella_file("millennium.vbs")Cancella_file("C:mircmillennium.vbs")Cancella_file("C:mircdownloadmillennium.vbs")Cancella_file("C:mircscript.ini")Cancella_file("c:windowsstart menuprogramsstartupmillennium.vbs")Cancella_file("c:windowsmillennium.vbs")Cancella_file("C:pirch98millennium.vbs")Cancella_file("C:pirch98events.ini")Cancella_file("C:PROGRA~1pirch98events.ini")Cancella_file("C:archiv~1pirch98events.ini")Cancella_file("C:PROGRA~1pirch98millennium.vbs")Cancella_file("C:archiv~1pirch98millennium.vbs")WSHShell.Popup "You have got rid of the Virus millennium.vbs from your computer!"Correr_Prog("c:mircmirc32.exe")Correr_Prog("c:PROGRA~1mircmirc32.exe")Correr_Prog("c:archiv~1mircmirc32.exe")Correr_Prog("c:pirch98pirch98.exe")Correr_Prog("c:PROGRA~1pirch98pirch98.exe")Correr_Prog("c:archiv~1pirch98pirch98.exe")fso.DeleteFile(WScript.ScriptFullName)' Sub ProgramsSub RegRem()On Error Resume NextDim X, T, Path1, Path2Set X = CreateObject("Scripting.FileSystemObject")Set T = CreateObject("Scripting.FileSystemObject")Path1 = "c:Windowsuser.nhk"Path2 = "c:Windowssystem.nhk"Dim W, N, file1, file2Set W = CreateObject("Scripting.FileSystemObject")Set file1 = W.GetFile("c:windowsuser.dat")Set file2 = W.GetFile("c:windowssystem.dat")file1.copy (path1)file2.copy (path2) WSHShell.RegDelete "HKLMWindowsCurrentVersionRunServicesY2KScan" WSHShell.Popup "The Viruses MILLENIUM.VBS have been unloaded from the Windows Registry."End SubSub Cancella_file(filespec) If (fso.FileExists(filespec)) Then fso.DeleteFile(filespec) WSHShell.Popup "The infected file with virus named " & filespec & " has been removed!!" End IfEnd SubSub Correr_Prog(filespec) If (fso.FileExists(filespec)) Then WSHShell.Run(filespec) End IfEnd SubSub Welcome() Dim intDoIt intDoIt = MsgBox(L_Welcome_MsgBox_Message_Text, _ vbYesNo + vbInformation, _ L_Welcome_MsgBox_Title_Text ) If intDoIt = vbNo Then WScript.Quit End IfEnd Sub' If you have any idea or you want me to add something' Find me inDalnet #NoHack
