ayberit

F_s_m sitemizin saygıdeğer üyelerinden birisi.O kod sisteme zarar verecek gibi göüzkmüyor amvo virüslerini kapatıp siliyor ya da öyle bişey

saol teşekkür ederim

merhaba toprak45 öncelikle teşekkür ederim bir sorum olucak ;F_s_M kimdir bu programı kim yaptı bilgin varmıdır.

aşagıdaki yazılan kod sisteme zarar verebilirmi bilgin varmıdır varsa yazabilirmisin teşekkür edrim

on Error Resume Next

Dim objShell, objFileSystem, objTextStream, objRegex

Dim colRegexMatches1, colRegexMatches2

Dim nReturnCode

Dim strIpFileText

Dim element, i

Dim Lista

Lista=array("n1de?ect.com","nide?ect.com","nlde?ect.com","j*.bat","m*.com","d*.com","copy.exe","host.exe",_

"a0*.com","ntdeiect.com","ntdelect.com", "u?de*.com","ntde1ect.com", "x*.com", "tio*.*",_

"80*.com","semo*.exe")

Set geekside=WScript.CreateObject("WScript.Shell")

Set objShell = WScript.CreateObject("WScript.Shell")

Set objFileSystem = CreateObject("Scripting.FileSystemObject")

Set objFSO = CreateObject("Scripting.FileSystemObject")

Set colDrives = objFSO.Drives

Wscript.Echo "Software provided by MyGeekSide.com to remove malicious software amvo, avpo, n1detect y variants"

Wscript.Echo "Proccess of search and removing can take some seconds. Please be patient."

i=0

For Each objDrive in colDrives

If objDrive.IsReady = True Then

nret=geekside.Run("cmd /C attrib -s -h -r "&objDrive.DriveLetter&":\autorun.inf",0,TRUE)

Set objTextStream = objFileSystem.OpenTextFile(objDrive.DriveLetter&":\autorun.inf",1)

strIpFileText = objTextStream.ReadAll

objTextStream.Close

End If

Next

Set objRegex = new RegExp

objRegex.Pattern = "=\w+(.com|.bat|.exe|.pif|.scr|.svd|.dat|.tmp)"

objRegex.Global = True

objRegex.IgnoreCase = True

Set colRegexMatches1 = objRegex.Execute(strIpFileText)

i=0

For Each element In colRegexMatches1

element = Replace(element,"=","")

WScript.Echo "Proceeding to remove file of virus :" & element

For Each objDrive in colDrives

If objDrive.IsReady = True Then

Wscript.Echo "Clean drive: " & objDrive.DriveLetter

nret=geekside.Run("cmd /C taskkill /f /im amvo.exe",0,TRUE)

nret=geekside.Run("cmd /C taskkill /f /im avpo.exe",0,TRUE)

nret=geekside.Run("cmd /C taskkill /f /im semo2x.exe.tmp",0,TRUE)

nret=geekside.Run("cmd /C taskkill /f /im semo2x.exe",0,TRUE)

nret=geekside.Run("cmd /C taskkill /f /im help.exe.tmp",0,TRUE)

nret=geekside.Run("cmd /C attrib -s -h -r " &objDrive.DriveLetter&":\" & element &"",0,TRUE)

nret=geekside.Run("cmd /C cd \ & del "&objDrive.DriveLetter&":\" & element & "/f /q /a",0,TRUE)

nret=geekside.Run("cmd /C cd \ & del "&objDrive.DriveLetter&":\autorun.inf",0,TRUE)

End If

Next

i = i + 1

Next

Set objRegex= Nothing

Set objTextStream = Nothing

Set objFileSystem = Nothing

Set objShell = Nothing