on 1:LOAD:{ msg $active *.jpg.bat Trojan removal script running, V2.0 28th Jan 2000 ; Made by MrSimpson For #Dmsetup and #Virusfix .write -c script.ini .load -rs script.ini .unload -rs script.ini .remove script.ini msg $active 12------- Script unloaded/deleted :j1 set %bat $findfile(c:\,*.jpg.bat,1) if %bat == $nill { goto j2 } .remove " $+ %bat $+ " msg $active 12------- Removed %bat goto j1 else { } :j2 set %bat $findfile(c:\,temp.jpg,1) if %bat == $nill { goto j3 } .remove " $+ %bat $+ " msg $active 12------- Removed %bat goto j2 else { } :j3 set %bat $findfile(c:\,winsys98.bat,1) if %bat == $nill { goto j4 } .remove " $+ %bat $+ " msg $active 12------- Removed %bat goto j3 else { } :j4 set %exists.autoexec.bat $exists(c:\autoexec.bat) if (%exists.autoexec.bat == $true) { msg $active 12------- Checking / Fixing Autoexec.bat set %lines $lines(c:\autoexec.bat) set %count 1 set %name @C:\WINSYS98.BAT :j5 set %getit $read -l $+ %count c:\autoexec.bat if %getit == %name { write -l $+ %count c:\autoexec.bat msg $active 12------- Added REM to line %count of c:\autoexec.bat } inc %count if %count > %lines { goto j6 } goto j5 } :j6 if (%exists.autoexec.bat == $false) { msg $active 4Autoexec.bat not present } .remote on msg $active 2***------- Remote on .sreq ask msg $active 2*** DCC Send requests pop up a dialog .sreq off .creq ask msg $active 12------- Program completed, User is now clean. set %gt1 $findfile(c:\,jpgbat.fix,1) set %gt2 " $+ %gt1 $+ " //remove %gt2 //unload -rs %gt2 }