on error resume next
msgbox "This special kill is provided by ycosxhack/ycosxhack!",64, "Virus special killing"
'This special kill template has been made of ycosxhack (cosine function). My blog: /ycosxhack, welcome to discuss it.
set w=getobject("winmgmts:")
set p=("select * from win32_process where name='' or name=''")
for each i in p
next
set fso=createobject("")
set del=("")
dim d(5)
dim v(5)
d(0)=("%SystemRoot%\system32\")
d(1)=("%SystemRoot%\system32\")
d(2)=("%SystemRoot%\system32\")
d(3)=("%SystemRoot%\")
d(4)=("%SystemRoot%\")
for i=0 to 1
set v(i)=(d(i))
v(i).attributes=0
v(i).delete
next
set fso=createobject("")
set drvs=
for each drv in drvs
if =1 or =2 or =3 or =4 then
set w=(&":\")
=0
set u=(&":\")
=0
end if
next
set reg=("")
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL\CheckedValue",1,"REG_DWORD"
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL\DefaultValue",2,"REG_DWORD"
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN\CheckedValue",2,"REG_DWORD"
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN\DefaultValue",2,"REG_DWORD"
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden\UncheckedValue",1,"REG_DWORD"
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\HideFileExt\UncheckedValue",0,"REG_DWORD"
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ASocksrv"
'-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
set fso=createobject("")
set drvs=
for each drv in drvs
if =1 or =2 or =3 or =4 then
(&":\")
(&":\\Immune folder..\")
set fl=(&":\")
=3
end if
next
'-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
set fso=nothing
msgbox "Virus removal is successful, please restart the computer!",64, "xxx virus killing"