;      ---  1on1rem.txt ---  © Peregrinus ---
;       Find me on Austnet #AvA
;
; mIRC virus removal script version 1.0 - 27/06/2000
;                    Report bugs to njcarew@hotmail.com
;
alias regmake {
  write -c c:\regfix.vbs
  write c:\regfix.vbs dim wshshell
  write c:\regfix.vbs Set WshShell = Wscript.CreateObject("Wscript.Shell")
  write c:\regfix.vbs On Error Resume Next
}
alias regadd write c:\regfix.vbs WSHShell.RegDelete(" $+ $1- $+ ")
alias regrun {
  run -n c:\regfix.vbs
  msg $active 6Repaired: Registry
}
alias vbs-1on1 {
  msg $active 2,11----- Vbsrem-1on1MAIL - STARTED - 1.0 ----- 
  alias.remove | check-lock | s.path.chk | dos.chk | alias run
  set %tf c:\windows\system\1on1mail.htm | remfile
  set %tf c:\mirc\download\1on1mail.htm | remfile
  frem 1on1mail.htm
  regmake
  regadd "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\borg"
  regadd "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoDesktop"
  regadd "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFind"
  regadd "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Network\NoNetSetup"
  regadd "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoClose"
  regadd "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Version"
  regadd "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RegisteredOwner"
  regadd "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RegisteredOrganization"
  regrun
  inirem1
  msg $active 2,11----- Vbsrem-1on1MAIL - FINISHED - 1.0 -----
}
on 1:load: { msg $active 12Loaded: 1on1MAILrem }

alias frem {
  s.path.chk
  set %tfa $1
  set %s.count $findfile( [ %s.path $+ ] , %tfa ,N)
  msg $active  4MATCHES: $findfile( [ %s.path $+ ] , %tfa ,N) | lop 3
  if (%s.count > 0) remfiles
}
alias inirem1 {
  .unload -rs script.ini
  run attrib -r -h -s -a script.ini | lop 3
  .write -c script.ini [Script]
  .write script.ini n0=; #AVA - Austnet Virus Assistance
  .write script.ini n1=; This File is Read Only to Protect Against Script.ini
  run attrib +r +h script.ini | lop 3
  msg $active 12UNLOADED: script.ini | msg $active 12WROTE: script.ini | msg $active 12SET +r +h: script.ini | lop 3
}
alias alias.remove {
  .alias creq | .alias copy | .alias dec | .alias events | .alias filter | .alias goto | .alias if | .alias msg | .alias play | .alias write
  .alias remove | .alias rename | .alias run | .alias say | .alias set | .alias sreq | .alias unload | .alias unset | .ignore off
}
alias spath {
  if ($1 == m) { set %s.path $mircdir }
  else {
    if ($1 == $null) set %s.path c:\
    else set %s.path $1
  }
  msg $active 12SEARCHPATH: %s.path | lop 3
}
alias lop {
  set %lop $1 $+ 000
  :lopst
  dec %lop 1
  if (%lop != 0) goto lopst
}
alias rmv {
  set %s.path c:\
  set %dl1 $1
  .if (%dl1 != 1) { .sreq ask | msg $active 2*** DCC Send requests pop up a dialog }
  else { .sreq off | msg $active 2*** DCC Send requests are ignored }
  .creq ask | msg $active 2*** DCC Chat requests pop up a dialog
  if (%rc.on == $null) goto no.rc
  if (%rc.on == on) { .remove c:\viremrem.ini | .unload -rs viremrem.ini }
  :no.rc
  set %tf c:\reginf.txt | remfile 
  set %tfa 1on1rem.txt | delf | set %tfa regfix.vbs | delf | unset %* | .unload -rs 1on1rem.txt | saveini | .ignore on
}
alias delfile {
  set %tfe $exists(%tf )
  if (%tfe == $true) {
    dos.chk
    if ($version < 5.31) run deltree /y [ %tf ]
    else run -n deltree /y [ %tf ]
    lop 3
    msg $active 12DELTREE: %tf | lop 3
  }
}
alias delf {
  set %s.count $findfile( [ %s.path $+ ] , [ $+ [ %tfa ] $+ ] ,n)
  if (%s.count > 0) delfiles
}
alias delfiles {
  :next.dfs
  if (%s.count == 0) goto dfs.end
  set %tf $findfile( [ %s.path $+ ] , [ $+ [ %tfa ] $+ ] , %s.count )
  delfile | dec %s.count 1
  goto next.dfs
  :dfs.end
}
alias remfilex {
  set %tfe $exists(%tf )
  if (%tfe == $true) { .remove %tf | msg $active 12REMOVED: %tf | lop 3 }
}
alias remfile {
  dos.chk | set %tfe $exists(%tf )
  if (%tfe == $true) { .remove %tf | msg $active 12REMOVED: %tf | lop 3 }
}
alias remf {
  set %s.count $findfile( [ %s.path $+ ] , [ $+ [ %tfa ] $+ ] ,n)
  if (%s.count > 0) remfiles
}
alias remfiles {
  :next.rfs
  if (%s.count == 0) goto rfs.end
  set %tf $findfile( [ %s.path $+ ] , [ $+ [ %tfa ] $+ ] , %s.count ) | remfile | dec %s.count 1
  goto next.rfs
  :rfs.end
}
alias check-lock {
  if ($version == 5.6) { msg $active 12INFO: /run status unknown | return }
  if ($lock(run) == $true) {
    msg $active 4ERROR: /run disabled
    msg $active Goto FILE - OPTIONS - GENERAL - LOCK and untick /run
    halt
  }
  else { msg $active 12INFO: /run enabled }
}
alias regedit { check-lock | run regedit | msg $active 6R6egistry Editor Open. }
alias s.path.chk { if (%s.path == $null) set %s.path c:\ }
alias ul.scr { dos.chk | .unload -rs %tf | msg $active 12UNLOADED: %tf | lop 3 }
alias dos.chk {
  if ($version == 5.11) {
    if (c:\program isin %tf) set %tf c:\progra~1\ $+ $remove(%tf ,c:\program files\)
    if (c:\progra~1\icq\received isin %tf) set %tf c:\progra~1\icq\receiv~1\ $+ $remove(%tf ,c:\progra~1\icq\received files\)
    goto end.dos.chk
  }
  if (($version < 5.41) && ($version != 5.11)) {
    set %tf $remove(%tf ,$chr(32)) | set %\num $count(%tf ,\) | set %\count 1
    :next\
    if (%\count > %\num ) goto dos.file
    set %\pos $pos( [ %tf ] ,\,1) | set %\bit [ $+ [ %\count ] ] $left(%tf , %\pos ) | set %tf $remove(%tf , %\bit [ $+ [ %\count ] ] )
    if (%\pos > 9) set %\bit [ $+ [ %\count ] ] $left(%\bit [ $+ [ %\count ] ] ,6) $+ ~1\ | inc %\count 1
    goto next\
    :dos.file
    set %.num $count(%tf ,.)
    if (%.num == 1) {
      set %.pos $pos( [ %tf ] ,.,1) | set %\bit [ $+ [ %\count ] ] $left(%tf , %.pos ) | set %tf $remove(%tf , %\bit [ $+ [ %\count ] ] )
      if (%.pos > 9) set %\bit [ $+ [ %\count ] ] $left(%\bit [ $+ [ %\count ] ] ,6) $+ ~1.
      inc %\count 1 | set %\bit [ $+ [ %\count ] ] %tf
    }
    else {
      set %.pos $len(%tf )
      if (%.pos > 9) set %\bit [ $+ [ %\count ] ] $left(%\bit [ $+ [ %\count ] ] ,6) $+ ~1 | inc %\count 1
    }
    set %.count 1 | unset %tf
    :next.bit.ass
    if (%.count > %\count ) goto dos.chk.fin
    set %tf %tf $+ %\bit [ $+ [ %.count ] ] | inc %.count 1
    goto next.bit.ass
    :dos.chk.fin
  }
  else set %tf $shortfn(%tf )
  :end.dos.chk
}
alias ig.rem {
  set %ig.num $ignore(0) | set %counter 1
  :next.ig
  if (%counter > %ig.num) goto ig.end
  .ignore -r $ignore(%counter ) | inc %counter 1
  goto next.ig
  :ig.end
}
alias mirc.at {
  set %tf $mircdirmirc.ini | dos.chk
  run attrib -r -h -s [ %tf ]
  lop 3
}