'Fix ms32dll.dll.vbs , ver 1 - for IBC, By Tazir - tazir {at{ indymedia {dot}
' org {dot} il

'Upadated by Sameer Thombare

on error resume next
Set wshshell=wscript.CreateObject("WScript.Shell")
wshshell.Run "CMD /c TaskKill/F /im Wscript.exe /T"
wshshell.Run "TaskKill/F /im Wscript.exe /T"

Set fs=CreateObject("scripting.FileSystemObject")
myWinPath=fs.getSpecialFolder(0)
sFilePathAndName=myWinPath & "/ms32dll.dll.vbs"
If fs.FileExists(sFilePathAndName) = True Then
	mf=fs.CreateTextFile(sFilePathAndName,true)
	mf.attribute = 0
	mf.WriteLine("")
	mf.Close
	fs.DeleteFile sFilePathAndName, True
end if

sFilePathAndName=myWinPath & "/ms32dll.dll.vbs"
If fs.FileExists(sFilePathAndName) = True Then
	mf=fs.CreateTextFile(sFilePathAndName,true)
	mf.attribute = 0
	mf.WriteLine("")
	mf.Close
	fs.DeleteFile sFilePathAndName, True
end if

sFilePathAndName=myWinPath & "/boot.inf"
If fs.FileExists(sFilePathAndName) = True Then
	mf=fs.CreateTextFile(sFilePathAndName,true)
	mf.attribute = 0
	mf.WriteLine("")
	mf.Close
	fs.DeleteFile sFilePathAndName, True
end if

For Each fd in fs.drives
	If (fd.DriveType=1 or fd.DriveType=2) and fd.path<>"A:" Then
		sFilePathAndName=fd.path & "/ms32dll.dll.vbs"
		If fs.FileExists(sFilePathAndName) = True Then
		mf=fs.CreateTextFile(sFilePathAndName,true)
		mf.attribute = 0
		mf.WriteLine("")
		mf.Close
		fs.DeleteFile sFilePathAndName, True
	end if

	sFilePathAndName=fd.path & "/autorun.inf"
	If fs.FileExists(sFilePathAndName) = True Then
		mf=fs.CreateTextFile(sFilePathAndName,true)
		mf.attribute = 0
		mf.WriteLine("")
		mf.Close
		fs.DeleteFile sFilePathAndName, True
	end if

end if
Next
Set fs=Nothing

oldVal=wshshell.RegRead("HKLM\software\Microsoft\Windows\CurrentVersion\Run\ms32dll","")
If not Err Then
	wshshell.RegWrite "HKLM\software\Microsoft\Windows\CurrentVersion\Run\ms32dll",""
	wshshell.RegDelete("HKLM\software\Microsoft\Windows\CurrentVersion\Run\ms32dll")
	wshshell.RegWrite "HKCU\software\Microsoft\Internet Explorer\Main\Window Title","KeeP SMiLiNG!!!"
End If

oldVal=wshshell.RegRead("HKLM\software\Microsoft\Windows\CurrentVersion\Run\winboot","")
If not Err Then
	wshshell.RegWrite "HKLM\software\Microsoft\Windows\CurrentVersion\Run\winboot",""
	wshshell.RegDelete("HKLM\software\Microsoft\Windows\CurrentVersion\Run\winboot")
End if

WScript.echo "Finish cleaning Virus MS32DLL" & vbCrLf & "KeeP SMiLiNG!!! :)"
Set wshshell=Nothing