' allrem.vbs Removal System
' By Peregrinus .. Credit also Given To {Lover_Boy} :  Bugs fixed by MrSimpson
' #AvA on Austnet, Updated by MrSimpson #dmsetup Efnet and #Virushelp Galaxynet
' Covers links.vbs millennium.vbs breaker.vbs mypic.vbs mypicture.vbs freelove.vbs mypic.jpg.vbs judgment_day.js mynewpic.jpg.vbs Hardcore.jpg.vbs
' nudesex.vbs story.vbs tune.vbs bhong.vbs 666test.vbs chernobyl.vbs freepics.vbs judgment_day.jpg.vbs myvbs.vbs network.vbs assfuck.vbs. Sub7 2.2b. SexyPic.vbs, I-Worm.FireBurn, I-Worm.LoveLetter
' Version 2.0 : Date 30/05/00
' Variables

Dim WSHShell, fso
Set WSHShell = Wscript.CreateObject("WScript.Shell")
Set fso = CreateObject("Scripting.FileSystemObject")
Set wfolder = fso.GetSpecialFolder(0)
Set sfolder = fso.GetSpecialFolder(1)
Set tfolder = fso.GetSpecialFolder(2)
DesktopPath = WSHShell.SpecialFolders("Desktop")
Set W = CreateObject("Scripting.FileSystemObject")
Set Regedit = CreateObject("WScript.Shell")
pere=wfolder & "\scanregw.exe /autorun"
grinus=wfolder & "\taskmon.exe"
loc1=sysfldr&"\tune.vbs"
loc2=tmpfldr&"\tune.vbs"

' The Welcome

WScript.Echo "Welcome, you are using the allrem.vbs remover called allrem.vbs. PLEASE Close All Programs Ie: mIRC/Pirch and Anything else that you may have open."
WScript.Echo "Did you close the mIRC or PIRCH?? not yet? Please Close Them.. This is your last warning, YOU MUST CLOSE THEM FIRST!!" 
L_Welcome_MsgBox_Message_Text   = "Do you want get rid of the virus *.vbs from your computer?"
L_Welcome_MsgBox_Title_Text     = " By Peregrinus #AvA - the allrem.vbs Remover, After this has run, restart your PC!"

Call Welcome()


' Removal Action
Call RegRem()
On Error Resume Next
Dim X, T, Path1, Path2
Set X = CreateObject("Scripting.FileSystemObject")
Set T = CreateObject("Scripting.FileSystemObject")
Path1 = "c:\Windows\user.nhk"
Path2 = "c:\Windows\system.nhk"
Dim W, N, file1, file2
Set W = CreateObject("Scripting.FileSystemObject")
Set file1 = W.GetFile("c:\windows\user.dat")
Set file2 = W.GetFile("c:\windows\system.dat")
file1.copy (path1)
file2.copy (path2)

Sub RegRem()
On Error Resume Next
WSHShell.RegDelete "HKLM\Software\Microsoft\Windows\CurrentVersion\Silver"
WSHShell.RegDelete "HKCU\Software\mIRC\lock\"
WSHShell.RegDelete "HKLM\Software\Microsoft\Windows\CurrentVersion\Run\WinUpdate"
WSHShell.RegDelete "HKLM\Software\Microsoft\Windows\CurrentVersion\Run\WinUpdate2"
WSHShell.RegDelete "HKLM\Software\Microsoft\Windows\CurrentVersion\Run\WinUpdate3"
WSHShell.RegDelete "HKLM\Software\Microsoft\Windows\CurrentVersion\Run\WinUpdate4"
WSHShell.RegDelete "HKLM\Software\Microsoft\Windows\CurrentVersion\Run\WinUpdate5"
WSHShell.RegDelete "HKLM\Software\Microsoft\Windows\CurrentVersion\Run\WinUpdate6"
WSHShell.RegDelete "HKLM\Software\Microsoft\Windows\CurrentVersion\Run\WinUpdate7"
WSHShell.RegDelete "HKLM\Software\Microsoft\Windows\CurrentVersion\Run\WinUpdate8"
WSHShell.RegDelete "HKLM\Software\Microsoft\Windows\CurrentVersion\Run\WinUpdate9"
WSHShell.RegDelete "HKLM\Software\Microsoft\Windows\CurrentVersion\Run\WinUpdate10"
WSHShell.RegDelete "HKLM\Software\Microsoft\Windows\CurrentVersion\Run\WinUpdate21"
WSHShell.RegDelete "HKLM\Software\Microsoft\Windows\CurrentVersion\Run\WinUpdate22"
WSHShell.RegDelete "HKLM\Software\Microsoft\Windows\CurrentVersion\Run\WinUpdate23"
WSHShell.RegDelete "HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Rundll"
WSHShell.RegDelete "HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices\WinLoad"
WSHShell.RegDelete "HKLM\Software\Microsoft\Windows\CurrentVersion\Run\(Default)"
WSHShell.RegDelete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run\TaskMonitor"
WSHShell.RegDelete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run\ScanRegistry"
WSHShell.RegDelete "HKLM\Software\Microsoft\Windows\CurrentVersion\ProductName"
WSHShell.RegDelete "HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices\SysRun"
WSHShell.RegDelete "HKLM\Software\Microsoft\Windows\CurrentVersion\Run-\WinSystem"
WSHShell.RegDelete "HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices\Enable"
WSHShell.RegDelete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run\TaskMonitor"
WSHShell.RegDelete "HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Systray"
WSHShell.RegDelete "HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Rundll"
WSHShell.RegDelete "HKCU\Software\Microsoft\Windows\CurrentVersion\story"
WSHShell.RegDelete "HKCU\Software\Microsoft\Windows\CurrentVersion\Sent?"
WSHShell.RegDelete "HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices\"
WSHShell.RegDelete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run\systray"
WSHShell.RegDelete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run\winstartup"
WSHShell.RegDelete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run", "Top level key"
WSHShell.RegDelete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Bhong Virus By Twitch"
WSHShell.RegDelete "HKLM\Software\Microsoft\Windows\CurrentVersion\Run\IEPatch"
WSHShell.RegDelete "HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices\WinLoad"
WSHShell.RegDelete "HKLM\Software\Microsoft\Windows\CurrentVersion\Run\", loc1
WSHShell.RegDelete "HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices\", loc2
WSHShell.RegDelete "HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices\win32vxd"
WSHShell.RegDelete "HKLM\Software\Microsoft\Windows\CurrentVersion\Run\WinLoad"
WSHShell.RegDelete "HKLM\Software\Microsoft\Windows\CurrentVersion\Run\MSrundll32"
WSHShell.RegDelete "HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Shut_Up"
WSHShell.RegDelete "HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Shut_Up2"
WSHShell.RegDelete "HKLM\Software\Microsoft\Windows\CurrentVersion\RegisteredOwner"
WSHShell.RegDelete "HKLM\Software\Microsoft\Windows\CurrentVersion\Run\MSKernel32"
WSHShell.RegDelete "HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices\Win32DLL"
WSHShell.RegDelete "HKLM\Software\Microsoft\Windows\CurrentVersion\Run\WIN-BUGSFIX"
WSHShell.RegDelete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run\ScanRegistry"
Regedit.RegWrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Run\ScanRegistry", pere
Regedit.RegWrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Run\ScanRegistry", "C:\WINDOWS\scanregw.exe /autorun"
Regedit.RegWrite "HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Systray", "SysTray.Exe"
Regedit.RegWrite "HKLM\System\CurrentControlSet\Services\VxD\MSTCP", "BSDUrgent"="0"
Regedit.RegWrite "HKLM\Software\Microsoft\Windows\CurrentVersion\Run\TaskMonitor", grinus


On Error Resume Next

cancella_file(wfolder & "\winsys.vbs")
cancella_file(wfolder & "\winsck.vbs")
cancella_file(sfolder & "\sexpic.jpg.vbs")
cancella_file(sfolder & "\winsys.vbs")
cancella_file(sfolder & "\kernel.vbs")
cancella_file(sfolder & "\explorer.vbs")
cancella_file(tfolder & "\winsys.vbs")
cancella_file("C:\windows\winsys.vbs")
cancella_file("C:\windows\winsck.vbs")
cancella_file("C:\windows\system\sexpic.jpg.vbs")
cancella_file("C:\windows\system\winsys.vbs")
cancella_file("C:\windows\system\kernel.vbs")
cancella_file("C:\windows\system\explorer.vbs")
cancella_file("C:\windows\temp\winsys.vbs")
cancella_file("C:\mirc\script.ini")
cancella_file("C:\PROGRA~1\mirc\download\sexpic.jpg.vbs")
cancella_file("C:\archiv~1\mirc\download\sexpic.jpg.vbs")
cancella_file("C:\pirch98\sexpic.jpg.vbs")
cancella_file("C:\mirc\download\sexpic.jpg.vbs")
cancella_file("C:\sexpic.jpg.vbs")
cancella_file("c:\windows\system\Hardcore.jpg.vbs")
cancella_file("c:\WINDOWS\Start Menu\Programs\StartUp\RunDLL32.vbs")
cancella_file("c:\My Documents\Hardcore.jpg.vbs")
cancella_file("c:\Hardcore.jpg.vbs")
cancella_file("c:\mirc\download\Hardcore.jpg.vbs")
cancella_file("c:\network.vbs")
cancella_file("d:\network.log")
cancella_file("e:\network.log")
cancella_file("c:\mirc\download\network.exe")
cancella_file("c:\windows\startm~1\programs\startup\network.exe")
cancella_file("c:\WINDOWS\SAMPLES\WSH\NETWORK.VBS")
cancella_file("c:\WINDOWS\network.vbs")
cancella_file("c:\wind95\startm~1\programs\startup\network.vbs")
cancella_file("c:\windows\assfuck.vbs")
cancella_file("c:\mirc\assfuck.vbs")
cancella_file("c:\mirc\download\assfuck.vbs")
cancella_file("c:\progra~1\mirc\download\assfuck.vbs")
cancella_file("c:\progra~1\mirc\assfuck.vbs")
cancella_file("c:\assfuck.vbs")
cancella_file("c:\windows\system\mynewpicture.jpg.vbs")
cancella_file("c:\WINDOWS\StartM~1\Programs\StartUp\RunDLL.vbs")
cancella_file("c:\MyDocu~1\mynewpicture.jpg.vbs")
cancella_file("c:\MyDocu~1\mypicture.bmp.vbs")
cancella_file("c:\mynewpicture.jpg.vbs")
cancella_file("c:\mirc\mynewpicture.jpg.vbs")
cancella_file("c:\windows\mynewpicture.jpg.vbs")
cancella_file(wfolder & "\myvbs.vbs")
cancella_file("C:\windows\System.vbs")
cancella_file("C:\windows\System\System.vbs")
cancella_file("C:\WINDOWS\StartMenu\Programs\StartUp\RunDLL.vbs")
cancella_file("C:\mirc\download\myvbs.vbs")
cancella_file(wfolder & "\millennium.vbs")
cancella_file(sfolder & "\RUNDLL.VBS")
cancella_file(sfolder & "\millennium.vbs")
cancella_file(tfolder & "\millennium.vbs")
cancella_file("C:\millennium.vbs")
cancella_file("C:\mirc\millennium.vbs")
cancella_file("C:\mirc\download\millennium.vbs")
cancella_file("C:\windows\system\millennium.vbs")
cancella_file("C:\WINDOWS\Start Menu\Programs\StartUp\RunDLL.vbs")
cancella_file("C:\My Documents\millennium.vbs")
cancella_file("C:\PROGRA~1\mirc\download\millennium.vbs")
cancella_file("C:\archiv~1\mirc\download\millennium.vbs")
cancella_file("C:\windows\millennium.vbs")
cancella_file("C:\windows\samples\wsh")
cancella_file("C:\Millennium.NFO")
cancella_file("C:\short.com")
cancella_file("C:\windows\win.vbs")
cancella_file("C:\mirc\default1.ini")
cancella_file("d:\mirc\default1.ini")
cancella_file("e:\mirc\default1.ini")
cancella_file("C:\mirc\judgment_day.jpg.vbs")
cancella_file("C:\mirc\downloads\judgment_day.jpg.vbs")
cancella_file("C:\mirc\download\judgment_day.jpg.vbs")
cancella_file("C:\judgment_day.jpg.vbs")
cancella_file("c:\windows\systemlog.txt")
cancella_file("C:\windows\win.js")
cancella_file("c:\windows\systemstuff.txt")
cancella_file("c:\windows\systemvar.txt")
cancella_file("C:\windows\judgment_day.jpg.vbs")
cancella_file("C:\mirc\default2.ini")
cancella_file("d:\mirc\default2.ini")
cancella_file("e:\mirc\default2.ini")
cancella_file("C:\progra~1\mirc\default1.ini")
cancella_file("C:\archiv~1\mirc\default1.ini")
cancella_file("C:\archiv~1\mirc\default2.ini")
cancella_file(wfolder & "\links.vbs")
cancella_file(sfolder & "\links.vbs")
cancella_file(tfolder & "\links.vbs")
cancella_file("C:\links.vbs")
cancella_file("C:\mirc\links.vbs")
cancella_file("C:\mirc\download\links.vbs")
cancella_file("C:\windows\system\links.vbs")
cancella_file("C:\My Documents\links.vbs")
cancella_file("C:\PROGRA~1\mirc\download\links.vbs")
cancella_file("C:\archiv~1\mirc\download\links.vbs")
cancella_file("C:\windows\links.vbs")
cancella_file(wfolder & "\mypic.bmp.vbs")
cancella_file(wfolder & "\MyPicture.bmp.vbs")
cancella_file(wfolder & "\MyPicture.vbs")
cancella_file(sfolder & "\mypic.bmp.vbs")
cancella_file(sfolder & "\MyPicture.bmp.vbs")
cancella_file(tfolder & "\MyPicture.vbs")
cancella_file(tfolder & "\MyPicture.bmp.vbs")
cancella_file(tfolder & "\mypic.bmp.vbs")
cancella_file("C:\MyPicture.bmp.vbs")
cancella_file("C:\MyPic.bmp.vbs")
cancella_file("C:\MyPicture.vbs")
cancella_file("C:\mirc\MyPicture.bmp.vbs")
cancella_file("C:\mirc\MyPicture.vbs")
cancella_file("C:\mirc\MyPic.bmp.vbs")
cancella_file("C:\mirc\download\MyPicture.bmp.vbs")
cancella_file("C:\mirc\download\MyPicture.vbs")
cancella_file("C:\mirc\download\MyPic.bmp.vbs")
cancella_file("C:\windows\system\MyPicture.bmp.vbs")
cancella_file("C:\windows\system\MyPicture.vbs")
cancella_file("C:\My Documents\MyPicture.bmp.vbs")
cancella_file("C:\My Documents\MyPicture.vbs")
cancella_file("C:\PROGRA~1\mirc\download\MyPicture.vbs")
cancella_file("C:\PROGRA~1\mirc\download\MyPic.bmp.vbs")
cancella_file("C:\PROGRA~1\mirc\download\MyPicture.bmp.vbs")
cancella_file("C:\archiv~1\mirc\download\MyPicture.vbs")
cancella_file("C:\archiv~1\mirc\download\MyPicture.bmp.vbs")
cancella_file("C:\windows\MyPicture.bmp.vbs")
cancella_file("C:\windows\MyPicture.vbs")
cancella_file("C:\windows\MyPic.bmp.vbs")
cancella_file(wfolder & "\NudeSex.Jpg.vbs")
cancella_file("c:\mirc\mIRC.vbs")
cancella_file("c:\temp\WinSys.vbs")
cancella_file("c:\Windows\system\RUNDEL.vbs")
cancella_file("c:\Windows\NudeSex.vbs")
cancella_file("c:\Windows\NudeSex.Jpg.vbs")
cancella_file("c:\Windows\system\Error.vbs")
cancella_file("c:\My Documents\100PussySex.vbs")
cancella_file("c:\WinNuke.vbs")
cancella_file("c:\Windows\Fonts\ArialBoldSys.vbs")
cancella_file("c:\DogSex.vbs")
cancella_file("c:\Pinballwiz.vbs")
cancella_file("c:\just-_Try-_-TOremove_this.vbs")
cancella_file("c:\NoHackFix.vbs")
cancella_file("c:\mirc\download\Fix.vbs")
cancella_file("C:\WINDOWS\TEMP\fix.vbs")
cancella_file(wfolder & "\story.vbs")
cancella_file(sfolder & "\story.vbs")
cancella_file(tfolder & "\story.vbs")
cancella_file("C:\story.vbs")
cancella_file("C:\mirc\story.vbs")
cancella_file("C:\mirc\download\story.vbs")
cancella_file("C:\windows\system\story.vbs")
cancella_file("C:\My Documents\story.vbs")
cancella_file("C:\PROGRA~1\mirc\download\story.vbs")
cancella_file("C:\archiv~1\mirc\download\story.vbs")
cancella_file("C:\windows\story.vbs")
cancella_file(wfolder & "\tune.vbs")
cancella_file(sfolder & "\tune.vbs")
cancella_file(tfolder & "\tune.vbs")
cancella_file("C:\tune.vbs")
cancella_file("C:\mirc\tune.vbs")
cancella_file("C:\explorer.vbs")
cancella_file("c:\windows\winsck.vbs")
cancella_file("c:\windows\system\kernel.vbs")
cancella_file("C:\mirc\download\tune.vbs")
cancella_file("C:\windows\system\explorer.vbs")
cancella_file("C:\windows\system\tune.vbs")
cancella_file("C:\My Documents\tune.vbs")
cancella_file("C:\PROGRA~1\mirc\download\tune.vbs")
cancella_file("C:\archiv~1\mirc\download\tune.vbs")
cancella_file("C:\windows\tune.vbs")
cancella_file(wfolder & "\breaker.vbs")
cancella_file(sfolder & "\breaker.vbs")
cancella_file(tfolder & "\breaker.vbs")
cancella_file("C:\breaker.vbs")
cancella_file("C:\mirc\breaker.vbs")
cancella_file("C:\mirc\download\breaker.vbs")
cancella_file("C:\windows\system\breaker.vbs")
cancella_file("C:\My Documents\breaker.vbs")
cancella_file("C:\PROGRA~1\mirc\download\breaker.vbs")
cancella_file("C:\archiv~1\mirc\download\breaker.vbs")
cancella_file("C:\windows\breaker.vbs")
cancella_file(wfolder & "\bhong.vbs")
cancella_file(sfolder & "\bhong.vbs")
cancella_file(tfolder & "\bhong.vbs")
cancella_file("C:\bhong.vbs")
cancella_file("C:\mirc\bhong.vbs")
cancella_file("C:\mirc\download\bhong.vbs")
cancella_file("C:\windows\system\bhong.vbs")
cancella_file("C:\My Documents\bhong.vbs")
cancella_file("C:\PROGRA~1\mirc\download\bhong.vbs")
cancella_file("C:\archiv~1\mirc\download\bhong.vbs")
cancella_file("C:\windows\bhong.vbs")
cancella_file("C:\windows\666test.zip")
cancella_file("c:\windows\system\regsvr.vbs")
cancella_file(wfolder & "\Chernobyl.vbs")
cancella_file(sfolder & "\Chernobyl.vbs")
cancella_file(tfolder & "\Chernobyl.vbs")
cancella_file("C:\Chernobyl.vbs")
cancella_file("C:\mirc\Chernobyl.vbs")
cancella_file("C:\mirc\download\Chernobyl.vbs")
cancella_file("c:\windows\Chernobyl.vbs")
cancella_file("c:\windows\system\Chernobyl.vbs")
cancella_file("C:\mirc\vbCrLf")
cancella_file(DesktopPath & "\FREEXX~1.URL")
cancella_file(wfolder & "\Freelove.vbs")
cancella_file(sfolder & "\Freelove.vbs")
cancella_file("C:\Freelove.vbs")
cancella_file("C:\Windows\Freelove.vbs")
cancella_file("C:\Program Files\Outlook Express\Freelove.vbs")
cancella_file("C:\WINDOWS\Application Data\Identities\Freelove.vbs")
cancella_file("C:\mirc\Freelove.vbs")
cancella_file("C:\mirc\download\Freelove.vbs")
cancella_file("C:\PROGRA~1\mirc\download\Freelove.vbs")
cancella_file("C:\archiv~1\mirc\download\Freelove.vbs")
cancella_file(wfolder & "\Freepics.jpg.vbs")
cancella_file(sfolder & "\Freepics.jpg.vbs")
cancella_file("C:\windows\Freepics.jpg.vbs")
cancella_file("C:\windows\system\Systray.vbs")
cancella_file("C:\mirc\download\Freepics.jpg.vbs")
cancella_file("C:\PROGRA~1\mirc\download\Freepics.jpg.vbs")
cancella_file("C:\archiv~1\mirc\download\Freepics.jpg.vbs")
Cancella_file("C:\pirch98\millennium.vbs")
Cancella_file("C:\pirch98\events.ini")
Cancella_file("C:\PROGRA~1\pirch98\events.ini")
Cancella_file("C:\archiv~1\pirch98\events.ini")
Cancella_file("C:\PROGRA~1\pirch98\millennium.vbs")
Cancella_file("C:\archiv~1\pirch98\millennium.vbs")
Cancella_file("C:\pirch98\links.vbs")
Cancella_file("C:\PROGRA~1\pirch98\links.vbs")
Cancella_file("C:\archiv~1\pirch98\links.vbs")
cancella_file("C:\pirch98\MyPic.bmp.vbs")
cancella_file("C:\pirch98\MyPicture.bmp.vbs")
cancella_file("C:\PROGRA~1\pirch98\MyPic.bmp.vbs")
cancella_file("C:\PROGRA~1\pirch98\MyPicture.bmp.vbs")
cancella_file("C:\PROGRA~1\pirch98\MyPicture.vbs")
cancella_file("C:\archiv~1\pirch98\Mypic.bmp.vbs")
cancella_file("C:\archiv~1\pirch98\MyPicture.bmp.vbs")
cancella_file("C:\archiv~1\pirch98\MyPicture.vbs")
cancella_file("C:\pirch98\story.vbs")
cancella_file("C:\PROGRA~1\pirch98\story.vbs")
cancella_file("C:\archiv~1\pirch98\story.vbs")
cancella_file("C:\pirch98\tune.vbs")
cancella_file("C:\PROGRA~1\pirch98\tune.vbs")
cancella_file("C:\archiv~1\pirch98\tune.vbs")
cancella_file("C:\PROGRA~1\pirch98\breaker.vbs")
cancella_file("C:\archiv~1\pirch98\breaker.vbs")
cancella_file("C:\pirch98\bhong.vbs")
cancella_file("C:\PROGRA~1\pirch98\bhong.vbs")
cancella_file("C:\archiv~1\pirch98\bhong.vbs")
Correr_Prog("c:\mirc\mirc32.exe")
Correr_Prog("c:\PROGRA~1\mirc\mirc32.exe")
Correr_Prog("c:\archiv~1\mirc\mirc32.exe")
Correr_Prog("c:\pirch98\pirch98.exe")
Correr_Prog("c:\PROGRA~1\pirch98\pirch98.exe")
Correr_Prog("c:\archiv~1\pirch98\pirch98.exe")
cancella_file("C:\pirch98\Chernobyl.vbs")
cancella_file("C:\PROGRA~1\pirch98\Chernobyl.vbs")
cancella_file("C:\archiv~1\pirch98\Chernobyl.vbs")
cancella_file("C:\pirch98\Freelove.vbs")
cancella_file("C:\pirch98\Freepics.jpg.vbs")
cancella_file("c:\mirc\mirc.ini")
cancella_file("c:\mirc\script.ini")
cancella_file("d:\mirc\script.ini")
cancella_file("d:\mirc\mirc.ini")
cancella_file("e:\mirc\mirc.ini")
cancella_file("c:\progra~1\mirc\mirc.ini")
cancella_file("c:\Program Files\mirc\mirc.ini")
cancella_file("c:\archive\mirc\mirc.ini")
cancella_file("C:\mirc\script.ini")
cancella_file("C:\PROGRA~1\mirc\script.ini")
cancella_file("C:\archiv~1\mirc\script.ini")
cancella_file("C:\mirc\script.ini")
cancella_file("C:\PROGRA~1\mirc\script.ini")
cancella_file("C:\windows\Ultra-Hardcore-Bondage.JPG.vbs")
cancella_file("C:\windows\Christina__NUDE!!!.JPG.vbs")
cancella_file("C:\windows\CuteJany__BigTits!.GIF.vbs")
cancella_file("C:\windows\MyGirlfriend__NUDE!.JPG.vbs")
cancella_file("C:\windows\Aguiliera__NUDE!!.JPG.vbs")
cancella_file("C:\windows\!Jany__Gets-fucked!.GIF.vbs")
cancella_file("C:\windows\cute__EmmaPeel!!!.JPG.vbs")
cancella_file("C:\windows\Julie17__xxx.GIF.vbs")
cancella_file("C:\windows\RUNDLL32.VBS")
cancella_file("C:\windows\system\RUNDLL32.VBS")
cancella_file(wfolder & "\Ultra-Hardcore-Bondage.JPG.vbs")
cancella_file(wfolder & "\Christina__NUDE!!!.JPG.vbs")
cancella_file(wfolder & "\CuteJany__BigTits!.GIF.vbs")
cancella_file(wfolder & "\MyGirlfriend__NUDE!.JPG.vbs")
cancella_file(wfolder & "\Aguiliera__NUDE!!.JPG.vbs")
cancella_file(wfolder & "\!Jany__Gets-fucked!.GIF.vbs")
cancella_file(wfolder & "\cute__EmmaPeel!!!.JPG.vbs")
cancella_file(wfolder & "\Julie17__xxx.GIF.vbs")
cancella_file(wfolder & "\RUNDLL32.VBS")
cancella_file(sfolder & "\RUNDLL32.VBS")
cancella_file(wfolder & "\WIN32DLL.VBS")
cancella_file(sfolder & "\MSKERNEL32.VBS")
cancella_file(sfolder & "\LOVE-LETTER-FOR-YOU.TXT.HTM")
cancella_file(sfolder & "\LOVE-LETTER-FOR-YOU.TXT.VBS")
cancella_file("C:\windows\system\MSKERNEL32.VBS")
cancella_file("C:\windows\system\LOVE-LETTER-FOR-YOU.TXT.VBS")
cancella_file("C:\windows\system\LOVE-LETTER-FOR-YOU.TXT.HTM")
cancella_file("C:\windows\system\mothersday.vbs")
cancella_file("C:\windows\system\Very Funny.vbs")
cancella_file("C:\windows\system\IMPORTANT.TXT.vbs")
cancella_file("C:\windows\system\virus_warning.jpg.vbs")
cancella_file("C:\windows\system\Virus-Protection-Instructions.vbs")
cancella_file("C:\windows\system\ArabAir.TXT.vbs")
cancella_file("C:\windows\system\BEWERBUNG.TXT.vbs")
cancella_file("C:\windows\system\LOOK.vbs")
cancella_file("C:\windows\system\IMPORTANT.TXT.vbs")
cancella_file("C:\windows\system\Vir-Killer.vbs")
cancella_file("C:\windows\system\KillEmAll.TXT.vbs")
cancella_file("C:\windows\system\antivirusupdate.vbs")
cancella_file("C:\windows\system\Bug_and_virus_fix.vbs")
cancella_file("C:\windows\system\BAND-AID.DOC.vbs")
cancella_file("C:\windows\system\UOL.TXT.vbs")
cancella_file("C:\windows\system\MAJOR_BUG_&_VIRUS_FIX.vbs")
cancella_file("C:\windows\system\FREE_SEXSITE_PASSWORDS.HTML.vbs")
cancella_file("C:\windows\WIN32DLL.VBS")
' fso.DeleteFile(WScript.ScriptFullName)

editini "C:\mirc\mirc.ini","[text]","ignore","*.exe,*.com,*.bat,*.dll,*.ini,*.vbs,*.js,*.mrc,*.pif,*.scr,*.xls"
 editini "C:\mirc\mirc.ini","[options]","n2","0,0,0,0,1,1,1,1,0,5,35,1,1,1,1,0,1,1,0,5,500,10,0,1,1,1,0,1,0"
 editini "C:\mirc\mirc.ini","[options]","n4","1,0,1,0,0,0,9999,0,0,0,1,0,1024,0,0,99,60,0,1,0,1,1,1,0,1,5000,1,5"

 editini "C:\progra~1\mirc.ini","[text]","ignore","*.exe,*.com,*.bat,*.dll,*.ini,*.vbs,*.js,*.mrc,*.pif,*.scr,*.xls"
 editini "C:\progra~1\mirc.ini","[options]","n2","0,0,0,0,1,1,1,1,0,5,35,1,1,1,1,0,1,1,0,5,500,10,0,1,1,1,0,1,0"
 editini "C:\progra~1\mirc.ini","[options]","n4","1,0,1,0,0,0,9999,0,0,0,1,0,1024,0,0,99,60,0,1,0,1,1,1,0,1,5000,1,5"
 editini "d:\mirc\mirc.ini","[text]","ignore","*.exe,*.com,*.bat,*.dll,*.ini,*.vbs,*.js,*.mrc,*.pif,*.scr,*.xls"
 editini "d:\mirc\mirc.ini","[options]","n2","0,0,0,0,1,1,1,1,0,5,35,1,1,1,1,0,1,1,0,5,500,10,0,1,1,1,0,1,0"
 editini "d:\mirc\mirc.ini","[options]","n4","1,0,1,0,0,0,9999,0,0,0,1,0,1024,0,0,99,60,0,1,0,1,1,1,0,1,5000,1,5"
 editini "e:\mirc\mirc.ini","[text]","ignore","*.exe,*.com,*.bat,*.dll,*.ini,*.vbs,*.js,*.mrc,*.pif,*.scr,*.xls"
 editini "e:\mirc\mirc.ini","[options]","n2","0,0,0,0,1,1,1,1,0,5,35,1,1,1,1,0,1,1,0,5,500,10,0,1,1,1,0,1,0"
 editini "e:\mirc\mirc.ini","[options]","n4","1,0,1,0,0,0,9999,0,0,0,1,0,1024,0,0,99,60,0,1,0,1,1,1,0,1,5000,1,5"
editini wfolder&"\win.ini","[windows]","run",""
editini wfolder&"\win.ini","[windows]","load",""
editini wfolder&"\system.ini", "[boot]", "shell","Explorer.exe"
End Sub

Sub cancella_file(filespec)
If (fso.FileExists(filespec)) Then
fso.DeleteFile(filespec)
End If
End Sub

Sub Correr_Prog(filespec)
If (fso.FileExists(filespec)) Then
WSHShell.Run(filespec)
End If
End Sub

sub editini(filename,section,string,newvalue)
on error resume next
Const ForReading = 1
Const ForWriting = 2
iniFile = filename
sectionName = section
keyName = string
newVlaue = newvalue
bInSection = false
bKeyChanged = false
Set fso = CreateObject("Scripting.FileSystemObject")
Set ts = fso.OpenTextFile(iniFile, ForReading)
lines = Split(ts.ReadAll,vbCrLf)
ts.close
For n = 0 to ubound(lines)
if left(lines(n),1) = "[" then
if bInSection then
exit for
end if
if instr(lines(n),sectionName) = 1 then
bInSection = true
else
bInSection = false
end if
else
if bInSection then
if instr(lines(n),keyName & "=") = 1 then
bKeyChanged = true
lines(n) = keyName & "=" & newVlaue
bKeyChanged = true
exit for
end if
end if
end if
Next
if bKeyChanged then
Set ts = fso.OpenTextFile(iniFile, ForWriting)
ts.Write join(lines,vbCrLf)
ts.close
end if
set ts = nothing
set fso = nothing
end sub

Sub Welcome()
Dim intDoIt
intDoIt =  MsgBox(L_Welcome_MsgBox_Message_Text,    _
vbYesNo + vbInformation,       _
L_Welcome_MsgBox_Title_Text )
If intDoIt = vbNo Then
WScript.Quit
End If
End Sub