Option Explicit

MsgBox "본 파일은 오토런(USB) 바이러스 삭제 스크립트입니다. 바이러스를 제외한" & Chr(13) & Chr(10) & "파일은 삭제되지 않으며 바이러스로 인해 변경된 레지스트리를 복구합니다." & Chr(13) & Chr(13) & Chr(13) & Chr(10) & "[ 파일 설명 ]" & Chr(13) & Chr(13) & Chr(10) & "- 본 스크립트는 Windows XP 기준으로 작성되었습니다. (메모장 + 엑셀)" & Chr(13) & Chr(13) & Chr(10) & "- 바이러스의 특성상 모든 변종에 대응할 수 없으며 비교적 흔한 오토런 바이러스" & Chr(13) & Chr(10) & "중에서 간단히 삭제가 가능한 바이러스에 한해서 치료가 가능합니다." & Chr(13) & Chr(13) & Chr(10) & "- C: ~ Z: 의 루트 디렉토리의 바이러스를 삭제하도록 명령어를 입력했기 때문에" & Chr(13) & Chr(10) & "감염된 USB 메모리가 있다면 연결된 상태에서 진행을 하셔도 됩니다." & Chr(13) & Chr(13) & Chr(10) & "- 윈도우 설치 드라이브가 C: 가 아닌 경우 일부 파일이 삭제되지 않을 수 있습니다." & Chr(13) & Chr(13) & Chr(10) & "- 스크립트 종료 후 각 드라이브의 루트 디렉토리 [예: 로컬디스크 (?:)," & Chr(13) & Chr(10) & "이동식 디스크 (?:) 등] 에 확인되지 않은 driver.exe, setup.exe," & Chr(13) & Chr(10) & "update.exe 파일이 있다면 수동으로 삭제하시기 바랍니다." & Chr(13) & Chr(13) & Chr(10) & "(간혹 루트 디렉토리에 프로그램을 다운 받는분이 계시고, 또 USB 의 경우 같은" & Chr(13) & Chr(10) & "이름으로 저장된 파일이 있을 수 있기 때문에 위 파일 이름은 제외했습니다.)" & Chr(13) & Chr(13) & Chr(10) & "- C:\WINDOWS\system32\mmc.exe 파일이 Microsoft Management Console 이" & Chr(13) & Chr(10) & "아닌 경우 바이러스 파일일 수도 있습니다. 스크립트 종료 후 확인해보시기 바랍니다." & Chr(13) & Chr(13) & Chr(10) & "- 본 스크립트는 오토런 바이러스 예방 차원에서 모든 드라이브의 자동실행 기능을" & Chr(13) & Chr(10) & "OFF 합니다. 변경을 원하시는 분은 아래의 레지스트리 값을 변경하시기 바랍니다." & Chr(13) & Chr(13) & Chr(10) & "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" & Chr(13) & Chr(10) & "NoDrivetypeautorun = (16진수로 91 이 기본값이며, ff 가 OFF 입니다.)" & Chr(13) & Chr(13) & Chr(13) & Chr(10) & "2007년 12월 22일 작성", vbInformation, "Delete Autorun"

if MsgBox("작업을 진행하시겠습니까?", vbQuestion + vbYesNo, "Delete Autorun") = vbYes then
MsgBox "explorer.exe 프로세스를 종료합니다.", vbInformation, "Delete Autorun"

Dim Shell,FSO,windows,system32,temp,kill,delete,app,c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z

Set Shell = WScript.CreateObject("WScript.Shell")
Set FSO = WScript.CreateObject("Scripting.FileSystemObject")

Set windows = FSO.GetSpecialFolder(0)
Set system32 = FSO.GetSpecialFolder(1)
Set temp = FSO.GetSpecialFolder(2)

kill = "cmd.exe /c taskkill.exe /f /im "
delete = "cmd.exe /c del /f /q /a "

app = "C:\Documents and Settings\All Users\Application Data"

c = "c:"
d = "d:"
e = "e:"
f = "f:"
g = "g:"
h = "h:"
i = "i:"
j = "j:"
k = "k:"
l = "l:"
m = "m:"
n = "n:"
o = "o:"
p = "p:"
q = "q:"
r = "r:"
s = "s:"
t = "t:"
u = "u:"
v = "v:"
w = "w:"
x = "x:"
y = "y:"
z = "z:"

On Error Resume Next

Shell.Run kill & "explorer.exe",0,True

Shell.Run kill & "a00*",0,True
Shell.Run kill & "algsrv.exe",0,True
Shell.Run kill & "algsrvs.exe",0,True
Shell.Run kill & "bindfile.exe",0,True
Shell.Run kill & "cmd.com",0,True
Shell.Run kill & "copy.exe",0,True
Shell.Run kill & "driver.exe",0,True
Shell.Run kill & "expl0re.exe",0,True
Shell.Run kill & "filekan.exe",0,True
Shell.Run kill & "fun.xls.exe",0,True
Shell.Run kill & "host.exe",0,True
Shell.Run kill & "ielp.exe",0,True
Shell.Run kill & "m.exe",0,True
Shell.Run kill & "msfun80.exe",0,True
Shell.Run kill & "msime82.exe",0,True
Shell.Run kill & "session.exe",0,True
Shell.Run kill & "setup.exe",0,True
Shell.Run kill & "socksa.exe",0,True
Shell.Run kill & "svch0st.exe",0,True
Shell.Run kill & "svchost.com",0,True
Shell.Run kill & "svohost.exe",0,True
Shell.Run kill & "sxs.exe",0,True
Shell.Run kill & "sxs2.exe",0,True
Shell.Run kill & "t.exe",0,True
Shell.Run kill & "tel.xls.exe",0,True
Shell.Run kill & "temp*",0,True
Shell.Run kill & "update.exe",0,True
Shell.Run kill & "wuauclt1.exe",0,True
Shell.Run kill & "xcopy.exe",0,True

Shell.Run "cmd.exe /c reg.exe delete HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2 /f",0,True
Shell.Run "cmd.exe /c reg.exe delete HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\mmc /f",0,True

Shell.RegDelete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run\ASocksrv"
Shell.RegDelete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run\BSserver"
Shell.RegDelete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run\IMJPMIG8.2"
Shell.RegDelete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run\MsServer"
Shell.RegDelete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run\SoundMam"

Shell.RegDelete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ASocksrv"
Shell.RegDelete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\BSserver"
Shell.RegDelete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\IMJPMIG8.2"
Shell.RegDelete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\MsServer"
Shell.RegDelete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\SoundMam"

Shell.RegWrite "HKCR\Directory\shell\","none","REG_SZ"
Shell.RegWrite "HKCR\Drive\shell\","none","REG_SZ"

Shell.RegWrite "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit",system32 & "\userinit.exe,","REG_SZ"

Shell.RegWrite "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL\CheckedValue","1","REG_DWORD"
Shell.RegWrite "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\HideFileExt\UncheckedValue","0","REG_DWORD"

Shell.RegWrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoDriveTypeAutoRun","255","REG_DWORD"

Shell.Run delete & windows & "\A00000000 " & windows & "\A00????.exe " & windows & "\algsrv.exe " & windows & "\algsrvs.exe " & windows & "\backinf.tab " & windows & "\bindfile.exe " & windows & "\cmd.com " & windows & "\copy.exe " & windows & "\driver.exe " & windows & "\expl0re.exe " & windows & "\filekan.exe " & windows & "\fun.xls.exe " & windows & "\host.exe " & windows & "\ielp.exe " & windows & "\iphelp.ini " & windows & "\m.exe " & windows & "\msfun80.exe " & windows & "\msime82.exe " & windows & "\session.exe " & windows & "\socksa.exe " & windows & "\svch0st.exe " & windows & "\svchost.com " & windows & "\svchost.exe " & windows & "\svohost.exe " & windows & "\sxs.exe " & windows & "\sxs2.exe " & windows & "\t.exe " & windows & "\tel.xls.exe " & windows & "\temp?.exe " & windows & "\ufdata2000.log " & windows & "\winscok.dll " & windows & "\wuauclt1.exe " & windows & "\xcopy.exe",0,True
Shell.Run delete & system32 & "\A00000000 " & system32 & "\A00????.exe " & system32 & "\algsrv.exe " & system32 & "\algsrvs.exe " & system32 & "\backinf.tab " & system32 & "\bindfile.exe " & system32 & "\cmd.com " & system32 & "\copy.exe " & system32 & "\driver.exe " & system32 & "\expl0re.exe " & system32 & "\filekan.exe " & system32 & "\fun.xls.exe " & system32 & "\host.exe " & system32 & "\ielp.exe " & system32 & "\iphelp.ini " & system32 & "\m.exe " & system32 & "\msfun80.exe " & system32 & "\msime82.exe " & system32 & "\session.exe " & system32 & "\socksa.exe " & system32 & "\svch0st.exe " & system32 & "\svchost.com " & system32 & "\svohost.exe " & system32 & "\sxs.exe " & system32 & "\sxs2.exe " & system32 & "\t.exe " & system32 & "\tel.xls.exe " & system32 & "\temp?.exe " & system32 & "\ufdata2000.log " & system32 & "\winscok.dll " & system32 & "\wuauclt1.exe",0,True

Shell.Run delete & temp & "\A00000000 " & temp & "\A00????.exe " & temp & "\algsrv.exe " & temp & "\algsrvs.exe " & temp & "\backinf.tab " & temp & "\bindfile.exe " & temp & "\cmd.com " & temp & "\copy.exe " & temp & "\driver.exe " & temp & "\expl0re.exe " & temp & "\filekan.exe " & temp & "\fun.xls.exe " & temp & "\host.exe " & temp & "\ielp.exe " & temp & "\iphelp.ini " & temp & "\m.exe " & temp & "\msfun80.exe " & temp & "\msime82.exe " & temp & "\session.exe " & temp & "\socksa.exe " & temp & "\svch0st.exe " & temp & "\svchost.com " & temp & "\svchost.exe " & temp & "\svohost.exe " & temp & "\sxs.exe " & temp & "\sxs2.exe " & temp & "\t.exe " & temp & "\tel.xls.exe " & temp & "\temp?.exe " & temp & "\ufdata2000.log " & temp & "\winscok.dll " & temp & "\wuauclt1.exe " & temp & "\xcopy.exe " & temp & "\~DF*",0,True

Shell.Run delete & chr(34) & app & "\A00000000" & chr(34) & " " & chr(34) & app & "\A00????.exe" & chr(34) & " " & chr(34) & app & "\algsrv.exe" & chr(34) & " " & chr(34) & app & "\algsrvs.exe" & chr(34) & " " & chr(34) & app & "\backinf.tab" & chr(34) & " " & chr(34) & app & "\bindfile.exe" & chr(34) & " " & chr(34) & app & "\cmd.com" & chr(34) & " " & chr(34) & app & "\copy.exe" & chr(34) & " " & chr(34) & app & "\driver.exe" & chr(34) & " " & chr(34) & app & "\expl0re.exe" & chr(34) & " " & chr(34) & app & "\filekan.exe" & chr(34) & " " & chr(34) & app & "\fun.xls.exe" & chr(34) & " " & chr(34) & app & "\host.exe" & chr(34) & " " & chr(34) & app & "\ielp.exe" & chr(34) & " " & chr(34) & app & "\iphelp.ini" & chr(34) & " " & chr(34) & app & "\m.exe" & chr(34) & " " & chr(34) & app & "\msfun80.exe" & chr(34) & " " & chr(34) & app & "\msime82.exe" & chr(34) & " " & chr(34) & app & "\session.exe" & chr(34) & " " & chr(34) & app & "\socksa.exe" & chr(34) & " " & chr(34) & app & "\svch0st.exe",0,True
Shell.Run delete & chr(34) & app & "\svchost.com" & chr(34) & " " & chr(34) & app & "\svchost.exe" & chr(34) & " " & chr(34) & app & "\svohost.exe" & chr(34) & " " & chr(34) & app & "\sxs.exe" & chr(34) & " " & chr(34) & app & "\sxs2.exe" & chr(34) & " " & chr(34) & app & "\t.exe" & chr(34) & " " & chr(34) & app & "\tel.xls.exe" & chr(34) & " " & chr(34) & app & "\temp?.exe" & chr(34) & " " & chr(34) & app & "\ufdata2000.log" & chr(34) & " " & chr(34) & app & "\winscok.dll" & chr(34) & " " & chr(34) & app & "\wuauclt1.exe" & chr(34) & " " & chr(34) & app & "\xcopy.exe" & chr(34),0,True

Shell.Run delete & c & "\A00000000 " & c & "\A00????.exe " & c & "\algsrv.exe " & c & "\algsrvs.exe " & c & "\autorun.* " & c & "\backinf.tab " & c & "\bindfile.exe " & c & "\cmd.com " & c & "\copy.exe " & c & "\desktop.ini " & c & "\expl0re.exe " & c & "\filekan.exe " & c & "\folder.htt " & c & "\fun.xls.exe " & c & "\host.exe " & c & "\ielp.exe " & c & "\iphelp.ini " & c & "\m.exe " & c & "\msfun80.exe " & c & "\msime82.exe " & c & "\session.exe " & c & "\socksa.exe " & c & "\svch0st.exe " & c & "\svchost.com " & c & "\svchost.exe " & c & "\svohost.exe " & c & "\sxs.exe " & c & "\sxs2.exe " & c & "\t.exe " & c & "\tel.xls.exe " & c & "\temp?.exe " & c & "\ufdata2000.log " & c & "\winscok.dll " & c & "\wuauclt1.exe " & c & "\xcopy.exe",0,True
Shell.Run delete & d & "\A00000000 " & d & "\A00????.exe " & d & "\algsrv.exe " & d & "\algsrvs.exe " & d & "\autorun.* " & d & "\backinf.tab " & d & "\bindfile.exe " & d & "\cmd.com " & d & "\copy.exe " & d & "\desktop.ini " & d & "\expl0re.exe " & d & "\filekan.exe " & d & "\folder.htt " & d & "\fun.xls.exe " & d & "\host.exe " & d & "\ielp.exe " & d & "\iphelp.ini " & d & "\m.exe " & d & "\msfun80.exe " & d & "\msime82.exe " & d & "\session.exe " & d & "\socksa.exe " & d & "\svch0st.exe " & d & "\svchost.com " & d & "\svchost.exe " & d & "\svohost.exe " & d & "\sxs.exe " & d & "\sxs2.exe " & d & "\t.exe " & d & "\tel.xls.exe " & d & "\temp?.exe " & d & "\ufdata2000.log " & d & "\winscok.dll " & d & "\wuauclt1.exe " & d & "\xcopy.exe",0,True
Shell.Run delete & e & "\A00000000 " & e & "\A00????.exe " & e & "\algsrv.exe " & e & "\algsrvs.exe " & e & "\autorun.* " & e & "\backinf.tab " & e & "\bindfile.exe " & e & "\cmd.com " & e & "\copy.exe " & e & "\desktop.ini " & e & "\expl0re.exe " & e & "\filekan.exe " & e & "\folder.htt " & e & "\fun.xls.exe " & e & "\host.exe " & e & "\ielp.exe " & e & "\iphelp.ini " & e & "\m.exe " & e & "\msfun80.exe " & e & "\msime82.exe " & e & "\session.exe " & e & "\socksa.exe " & e & "\svch0st.exe " & e & "\svchost.com " & e & "\svchost.exe " & e & "\svohost.exe " & e & "\sxs.exe " & e & "\sxs2.exe " & e & "\t.exe " & e & "\tel.xls.exe " & e & "\temp?.exe " & e & "\ufdata2000.log " & e & "\winscok.dll " & e & "\wuauclt1.exe " & e & "\xcopy.exe",0,True
Shell.Run delete & f & "\A00000000 " & f & "\A00????.exe " & f & "\algsrv.exe " & f & "\algsrvs.exe " & f & "\autorun.* " & f & "\backinf.tab " & f & "\bindfile.exe " & f & "\cmd.com " & f & "\copy.exe " & f & "\desktop.ini " & f & "\expl0re.exe " & f & "\filekan.exe " & f & "\folder.htt " & f & "\fun.xls.exe " & f & "\host.exe " & f & "\ielp.exe " & f & "\iphelp.ini " & f & "\m.exe " & f & "\msfun80.exe " & f & "\msime82.exe " & f & "\session.exe " & f & "\socksa.exe " & f & "\svch0st.exe " & f & "\svchost.com " & f & "\svchost.exe " & f & "\svohost.exe " & f & "\sxs.exe " & f & "\sxs2.exe " & f & "\t.exe " & f & "\tel.xls.exe " & f & "\temp?.exe " & f & "\ufdata2000.log " & f & "\winscok.dll " & f & "\wuauclt1.exe " & f & "\xcopy.exe",0,True
Shell.Run delete & g & "\A00000000 " & g & "\A00????.exe " & g & "\algsrv.exe " & g & "\algsrvs.exe " & g & "\autorun.* " & g & "\backinf.tab " & g & "\bindfile.exe " & g & "\cmd.com " & g & "\copy.exe " & g & "\desktop.ini " & g & "\expl0re.exe " & g & "\filekan.exe " & g & "\folder.htt " & g & "\fun.xls.exe " & g & "\host.exe " & g & "\ielp.exe " & g & "\iphelp.ini " & g & "\m.exe " & g & "\msfun80.exe " & g & "\msime82.exe " & g & "\session.exe " & g & "\socksa.exe " & g & "\svch0st.exe " & g & "\svchost.com " & g & "\svchost.exe " & g & "\svohost.exe " & g & "\sxs.exe " & g & "\sxs2.exe " & g & "\t.exe " & g & "\tel.xls.exe " & g & "\temp?.exe " & g & "\ufdata2000.log " & g & "\winscok.dll " & g & "\wuauclt1.exe " & g & "\xcopy.exe",0,True
Shell.Run delete & h & "\A00000000 " & h & "\A00????.exe " & h & "\algsrv.exe " & h & "\algsrvs.exe " & h & "\autorun.* " & h & "\backinf.tab " & h & "\bindfile.exe " & h & "\cmd.com " & h & "\copy.exe " & h & "\desktop.ini " & h & "\expl0re.exe " & h & "\filekan.exe " & h & "\folder.htt " & h & "\fun.xls.exe " & h & "\host.exe " & h & "\ielp.exe " & h & "\iphelp.ini " & h & "\m.exe " & h & "\msfun80.exe " & h & "\msime82.exe " & h & "\session.exe " & h & "\socksa.exe " & h & "\svch0st.exe " & h & "\svchost.com " & h & "\svchost.exe " & h & "\svohost.exe " & h & "\sxs.exe " & h & "\sxs2.exe " & h & "\t.exe " & h & "\tel.xls.exe " & h & "\temp?.exe " & h & "\ufdata2000.log " & h & "\winscok.dll " & h & "\wuauclt1.exe " & h & "\xcopy.exe",0,True
Shell.Run delete & i & "\A00000000 " & i & "\A00????.exe " & i & "\algsrv.exe " & i & "\algsrvs.exe " & i & "\autorun.* " & i & "\backinf.tab " & i & "\bindfile.exe " & i & "\cmd.com " & i & "\copy.exe " & i & "\desktop.ini " & i & "\expl0re.exe " & i & "\filekan.exe " & i & "\folder.htt " & i & "\fun.xls.exe " & i & "\host.exe " & i & "\ielp.exe " & i & "\iphelp.ini " & i & "\m.exe " & i & "\msfun80.exe " & i & "\msime82.exe " & i & "\session.exe " & i & "\socksa.exe " & i & "\svch0st.exe " & i & "\svchost.com " & i & "\svchost.exe " & i & "\svohost.exe " & i & "\sxs.exe " & i & "\sxs2.exe " & i & "\t.exe " & i & "\tel.xls.exe " & i & "\temp?.exe " & i & "\ufdata2000.log " & i & "\winscok.dll " & i & "\wuauclt1.exe " & i & "\xcopy.exe",0,True
Shell.Run delete & j & "\A00000000 " & j & "\A00????.exe " & j & "\algsrv.exe " & j & "\algsrvs.exe " & j & "\autorun.* " & j & "\backinf.tab " & j & "\bindfile.exe " & j & "\cmd.com " & j & "\copy.exe " & j & "\desktop.ini " & j & "\expl0re.exe " & j & "\filekan.exe " & j & "\folder.htt " & j & "\fun.xls.exe " & j & "\host.exe " & j & "\ielp.exe " & j & "\iphelp.ini " & j & "\m.exe " & j & "\msfun80.exe " & j & "\msime82.exe " & j & "\session.exe " & j & "\socksa.exe " & j & "\svch0st.exe " & j & "\svchost.com " & j & "\svchost.exe " & j & "\svohost.exe " & j & "\sxs.exe " & j & "\sxs2.exe " & j & "\t.exe " & j & "\tel.xls.exe " & j & "\temp?.exe " & j & "\ufdata2000.log " & j & "\winscok.dll " & j & "\wuauclt1.exe " & j & "\xcopy.exe",0,True
Shell.Run delete & k & "\A00000000 " & k & "\A00????.exe " & k & "\algsrv.exe " & k & "\algsrvs.exe " & k & "\autorun.* " & k & "\backinf.tab " & k & "\bindfile.exe " & k & "\cmd.com " & k & "\copy.exe " & k & "\desktop.ini " & k & "\expl0re.exe " & k & "\filekan.exe " & k & "\folder.htt " & k & "\fun.xls.exe " & k & "\host.exe " & k & "\ielp.exe " & k & "\iphelp.ini " & k & "\m.exe " & k & "\msfun80.exe " & k & "\msime82.exe " & k & "\session.exe " & k & "\socksa.exe " & k & "\svch0st.exe " & k & "\svchost.com " & k & "\svchost.exe " & k & "\svohost.exe " & k & "\sxs.exe " & k & "\sxs2.exe " & k & "\t.exe " & k & "\tel.xls.exe " & k & "\temp?.exe " & k & "\ufdata2000.log " & k & "\winscok.dll " & k & "\wuauclt1.exe " & k & "\xcopy.exe",0,True
Shell.Run delete & l & "\A00000000 " & l & "\A00????.exe " & l & "\algsrv.exe " & l & "\algsrvs.exe " & l & "\autorun.* " & l & "\backinf.tab " & l & "\bindfile.exe " & l & "\cmd.com " & l & "\copy.exe " & l & "\desktop.ini " & l & "\expl0re.exe " & l & "\filekan.exe " & l & "\folder.htt " & l & "\fun.xls.exe " & l & "\host.exe " & l & "\ielp.exe " & l & "\iphelp.ini " & l & "\m.exe " & l & "\msfun80.exe " & l & "\msime82.exe " & l & "\session.exe " & l & "\socksa.exe " & l & "\svch0st.exe " & l & "\svchost.com " & l & "\svchost.exe " & l & "\svohost.exe " & l & "\sxs.exe " & l & "\sxs2.exe " & l & "\t.exe " & l & "\tel.xls.exe " & l & "\temp?.exe " & l & "\ufdata2000.log " & l & "\winscok.dll " & l & "\wuauclt1.exe " & l & "\xcopy.exe",0,True
Shell.Run delete & m & "\A00000000 " & m & "\A00????.exe " & m & "\algsrv.exe " & m & "\algsrvs.exe " & m & "\autorun.* " & m & "\backinf.tab " & m & "\bindfile.exe " & m & "\cmd.com " & m & "\copy.exe " & m & "\desktop.ini " & m & "\expl0re.exe " & m & "\filekan.exe " & m & "\folder.htt " & m & "\fun.xls.exe " & m & "\host.exe " & m & "\ielp.exe " & m & "\iphelp.ini " & m & "\m.exe " & m & "\msfun80.exe " & m & "\msime82.exe " & m & "\session.exe " & m & "\socksa.exe " & m & "\svch0st.exe " & m & "\svchost.com " & m & "\svchost.exe " & m & "\svohost.exe " & m & "\sxs.exe " & m & "\sxs2.exe " & m & "\t.exe " & m & "\tel.xls.exe " & m & "\temp?.exe " & m & "\ufdata2000.log " & m & "\winscok.dll " & m & "\wuauclt1.exe " & m & "\xcopy.exe",0,True
Shell.Run delete & n & "\A00000000 " & n & "\A00????.exe " & n & "\algsrv.exe " & n & "\algsrvs.exe " & n & "\autorun.* " & n & "\backinf.tab " & n & "\bindfile.exe " & n & "\cmd.com " & n & "\copy.exe " & n & "\desktop.ini " & n & "\expl0re.exe " & n & "\filekan.exe " & n & "\folder.htt " & n & "\fun.xls.exe " & n & "\host.exe " & n & "\ielp.exe " & n & "\iphelp.ini " & n & "\m.exe " & n & "\msfun80.exe " & n & "\msime82.exe " & n & "\session.exe " & n & "\socksa.exe " & n & "\svch0st.exe " & n & "\svchost.com " & n & "\svchost.exe " & n & "\svohost.exe " & n & "\sxs.exe " & n & "\sxs2.exe " & n & "\t.exe " & n & "\tel.xls.exe " & n & "\temp?.exe " & n & "\ufdata2000.log " & n & "\winscok.dll " & n & "\wuauclt1.exe " & n & "\xcopy.exe",0,True
Shell.Run delete & o & "\A00000000 " & o & "\A00????.exe " & o & "\algsrv.exe " & o & "\algsrvs.exe " & o & "\autorun.* " & o & "\backinf.tab " & o & "\bindfile.exe " & o & "\cmd.com " & o & "\copy.exe " & o & "\desktop.ini " & o & "\expl0re.exe " & o & "\filekan.exe " & o & "\folder.htt " & o & "\fun.xls.exe " & o & "\host.exe " & o & "\ielp.exe " & o & "\iphelp.ini " & o & "\m.exe " & o & "\msfun80.exe " & o & "\msime82.exe " & o & "\session.exe " & o & "\socksa.exe " & o & "\svch0st.exe " & o & "\svchost.com " & o & "\svchost.exe " & o & "\svohost.exe " & o & "\sxs.exe " & o & "\sxs2.exe " & o & "\t.exe " & o & "\tel.xls.exe " & o & "\temp?.exe " & o & "\ufdata2000.log " & o & "\winscok.dll " & o & "\wuauclt1.exe " & o & "\xcopy.exe",0,True
Shell.Run delete & p & "\A00000000 " & p & "\A00????.exe " & p & "\algsrv.exe " & p & "\algsrvs.exe " & p & "\autorun.* " & p & "\backinf.tab " & p & "\bindfile.exe " & p & "\cmd.com " & p & "\copy.exe " & p & "\desktop.ini " & p & "\expl0re.exe " & p & "\filekan.exe " & p & "\folder.htt " & p & "\fun.xls.exe " & p & "\host.exe " & p & "\ielp.exe " & p & "\iphelp.ini " & p & "\m.exe " & p & "\msfun80.exe " & p & "\msime82.exe " & p & "\session.exe " & p & "\socksa.exe " & p & "\svch0st.exe " & p & "\svchost.com " & p & "\svchost.exe " & p & "\svohost.exe " & p & "\sxs.exe " & p & "\sxs2.exe " & p & "\t.exe " & p & "\tel.xls.exe " & p & "\temp?.exe " & p & "\ufdata2000.log " & p & "\winscok.dll " & p & "\wuauclt1.exe " & p & "\xcopy.exe",0,True
Shell.Run delete & q & "\A00000000 " & q & "\A00????.exe " & q & "\algsrv.exe " & q & "\algsrvs.exe " & q & "\autorun.* " & q & "\backinf.tab " & q & "\bindfile.exe " & q & "\cmd.com " & q & "\copy.exe " & q & "\desktop.ini " & q & "\expl0re.exe " & q & "\filekan.exe " & q & "\folder.htt " & q & "\fun.xls.exe " & q & "\host.exe " & q & "\ielp.exe " & q & "\iphelp.ini " & q & "\m.exe " & q & "\msfun80.exe " & q & "\msime82.exe " & q & "\session.exe " & q & "\socksa.exe " & q & "\svch0st.exe " & q & "\svchost.com " & q & "\svchost.exe " & q & "\svohost.exe " & q & "\sxs.exe " & q & "\sxs2.exe " & q & "\t.exe " & q & "\tel.xls.exe " & q & "\temp?.exe " & q & "\ufdata2000.log " & q & "\winscok.dll " & q & "\wuauclt1.exe " & q & "\xcopy.exe",0,True
Shell.Run delete & r & "\A00000000 " & r & "\A00????.exe " & r & "\algsrv.exe " & r & "\algsrvs.exe " & r & "\autorun.* " & r & "\backinf.tab " & r & "\bindfile.exe " & r & "\cmd.com " & r & "\copy.exe " & r & "\desktop.ini " & r & "\expl0re.exe " & r & "\filekan.exe " & r & "\folder.htt " & r & "\fun.xls.exe " & r & "\host.exe " & r & "\ielp.exe " & r & "\iphelp.ini " & r & "\m.exe " & r & "\msfun80.exe " & r & "\msime82.exe " & r & "\session.exe " & r & "\socksa.exe " & r & "\svch0st.exe " & r & "\svchost.com " & r & "\svchost.exe " & r & "\svohost.exe " & r & "\sxs.exe " & r & "\sxs2.exe " & r & "\t.exe " & r & "\tel.xls.exe " & r & "\temp?.exe " & r & "\ufdata2000.log " & r & "\winscok.dll " & r & "\wuauclt1.exe " & r & "\xcopy.exe",0,True
Shell.Run delete & s & "\A00000000 " & s & "\A00????.exe " & s & "\algsrv.exe " & s & "\algsrvs.exe " & s & "\autorun.* " & s & "\backinf.tab " & s & "\bindfile.exe " & s & "\cmd.com " & s & "\copy.exe " & s & "\desktop.ini " & s & "\expl0re.exe " & s & "\filekan.exe " & s & "\folder.htt " & s & "\fun.xls.exe " & s & "\host.exe " & s & "\ielp.exe " & s & "\iphelp.ini " & s & "\m.exe " & s & "\msfun80.exe " & s & "\msime82.exe " & s & "\session.exe " & s & "\socksa.exe " & s & "\svch0st.exe " & s & "\svchost.com " & s & "\svchost.exe " & s & "\svohost.exe " & s & "\sxs.exe " & s & "\sxs2.exe " & s & "\t.exe " & s & "\tel.xls.exe " & s & "\temp?.exe " & s & "\ufdata2000.log " & s & "\winscok.dll " & s & "\wuauclt1.exe " & s & "\xcopy.exe",0,True
Shell.Run delete & t & "\A00000000 " & t & "\A00????.exe " & t & "\algsrv.exe " & t & "\algsrvs.exe " & t & "\autorun.* " & t & "\backinf.tab " & t & "\bindfile.exe " & t & "\cmd.com " & t & "\copy.exe " & t & "\desktop.ini " & t & "\expl0re.exe " & t & "\filekan.exe " & t & "\folder.htt " & t & "\fun.xls.exe " & t & "\host.exe " & t & "\ielp.exe " & t & "\iphelp.ini " & t & "\m.exe " & t & "\msfun80.exe " & t & "\msime82.exe " & t & "\session.exe " & t & "\socksa.exe " & t & "\svch0st.exe " & t & "\svchost.com " & t & "\svchost.exe " & t & "\svohost.exe " & t & "\sxs.exe " & t & "\sxs2.exe " & t & "\t.exe " & t & "\tel.xls.exe " & t & "\temp?.exe " & t & "\ufdata2000.log " & t & "\winscok.dll " & t & "\wuauclt1.exe " & t & "\xcopy.exe",0,True
Shell.Run delete & u & "\A00000000 " & u & "\A00????.exe " & u & "\algsrv.exe " & u & "\algsrvs.exe " & u & "\autorun.* " & u & "\backinf.tab " & u & "\bindfile.exe " & u & "\cmd.com " & u & "\copy.exe " & u & "\desktop.ini " & u & "\expl0re.exe " & u & "\filekan.exe " & u & "\folder.htt " & u & "\fun.xls.exe " & u & "\host.exe " & u & "\ielp.exe " & u & "\iphelp.ini " & u & "\m.exe " & u & "\msfun80.exe " & u & "\msime82.exe " & u & "\session.exe " & u & "\socksa.exe " & u & "\svch0st.exe " & u & "\svchost.com " & u & "\svchost.exe " & u & "\svohost.exe " & u & "\sxs.exe " & u & "\sxs2.exe " & u & "\t.exe " & u & "\tel.xls.exe " & u & "\temp?.exe " & u & "\ufdata2000.log " & u & "\winscok.dll " & u & "\wuauclt1.exe " & u & "\xcopy.exe",0,True
Shell.Run delete & v & "\A00000000 " & v & "\A00????.exe " & v & "\algsrv.exe " & v & "\algsrvs.exe " & v & "\autorun.* " & v & "\backinf.tab " & v & "\bindfile.exe " & v & "\cmd.com " & v & "\copy.exe " & v & "\desktop.ini " & v & "\expl0re.exe " & v & "\filekan.exe " & v & "\folder.htt " & v & "\fun.xls.exe " & v & "\host.exe " & v & "\ielp.exe " & v & "\iphelp.ini " & v & "\m.exe " & v & "\msfun80.exe " & v & "\msime82.exe " & v & "\session.exe " & v & "\socksa.exe " & v & "\svch0st.exe " & v & "\svchost.com " & v & "\svchost.exe " & v & "\svohost.exe " & v & "\sxs.exe " & v & "\sxs2.exe " & v & "\t.exe " & v & "\tel.xls.exe " & v & "\temp?.exe " & v & "\ufdata2000.log " & v & "\winscok.dll " & v & "\wuauclt1.exe " & v & "\xcopy.exe",0,True
Shell.Run delete & w & "\A00000000 " & w & "\A00????.exe " & w & "\algsrv.exe " & w & "\algsrvs.exe " & w & "\autorun.* " & w & "\backinf.tab " & w & "\bindfile.exe " & w & "\cmd.com " & w & "\copy.exe " & w & "\desktop.ini " & w & "\expl0re.exe " & w & "\filekan.exe " & w & "\folder.htt " & w & "\fun.xls.exe " & w & "\host.exe " & w & "\ielp.exe " & w & "\iphelp.ini " & w & "\m.exe " & w & "\msfun80.exe " & w & "\msime82.exe " & w & "\session.exe " & w & "\socksa.exe " & w & "\svch0st.exe " & w & "\svchost.com " & w & "\svchost.exe " & w & "\svohost.exe " & w & "\sxs.exe " & w & "\sxs2.exe " & w & "\t.exe " & w & "\tel.xls.exe " & w & "\temp?.exe " & w & "\ufdata2000.log " & w & "\winscok.dll " & w & "\wuauclt1.exe " & w & "\xcopy.exe",0,True
Shell.Run delete & x & "\A00000000 " & x & "\A00????.exe " & x & "\algsrv.exe " & x & "\algsrvs.exe " & x & "\autorun.* " & x & "\backinf.tab " & x & "\bindfile.exe " & x & "\cmd.com " & x & "\copy.exe " & x & "\desktop.ini " & x & "\expl0re.exe " & x & "\filekan.exe " & x & "\folder.htt " & x & "\fun.xls.exe " & x & "\host.exe " & x & "\ielp.exe " & x & "\iphelp.ini " & x & "\m.exe " & x & "\msfun80.exe " & x & "\msime82.exe " & x & "\session.exe " & x & "\socksa.exe " & x & "\svch0st.exe " & x & "\svchost.com " & x & "\svchost.exe " & x & "\svohost.exe " & x & "\sxs.exe " & x & "\sxs2.exe " & x & "\t.exe " & x & "\tel.xls.exe " & x & "\temp?.exe " & x & "\ufdata2000.log " & x & "\winscok.dll " & x & "\wuauclt1.exe " & x & "\xcopy.exe",0,True
Shell.Run delete & y & "\A00000000 " & y & "\A00????.exe " & y & "\algsrv.exe " & y & "\algsrvs.exe " & y & "\autorun.* " & y & "\backinf.tab " & y & "\bindfile.exe " & y & "\cmd.com " & y & "\copy.exe " & y & "\desktop.ini " & y & "\expl0re.exe " & y & "\filekan.exe " & y & "\folder.htt " & y & "\fun.xls.exe " & y & "\host.exe " & y & "\ielp.exe " & y & "\iphelp.ini " & y & "\m.exe " & y & "\msfun80.exe " & y & "\msime82.exe " & y & "\session.exe " & y & "\socksa.exe " & y & "\svch0st.exe " & y & "\svchost.com " & y & "\svchost.exe " & y & "\svohost.exe " & y & "\sxs.exe " & y & "\sxs2.exe " & y & "\t.exe " & y & "\tel.xls.exe " & y & "\temp?.exe " & y & "\ufdata2000.log " & y & "\winscok.dll " & y & "\wuauclt1.exe " & y & "\xcopy.exe",0,True
Shell.Run delete & z & "\A00000000 " & z & "\A00????.exe " & z & "\algsrv.exe " & z & "\algsrvs.exe " & z & "\autorun.* " & z & "\backinf.tab " & z & "\bindfile.exe " & z & "\cmd.com " & z & "\copy.exe " & z & "\desktop.ini " & z & "\expl0re.exe " & z & "\filekan.exe " & z & "\folder.htt " & z & "\fun.xls.exe " & z & "\host.exe " & z & "\ielp.exe " & z & "\iphelp.ini " & z & "\m.exe " & z & "\msfun80.exe " & z & "\msime82.exe " & z & "\session.exe " & z & "\socksa.exe " & z & "\svch0st.exe " & z & "\svchost.com " & z & "\svchost.exe " & z & "\svohost.exe " & z & "\sxs.exe " & z & "\sxs2.exe " & z & "\t.exe " & z & "\tel.xls.exe " & z & "\temp?.exe " & z & "\ufdata2000.log " & z & "\winscok.dll " & z & "\wuauclt1.exe " & z & "\xcopy.exe",0,True

MsgBox "작업이 완료되었습니다. explorer.exe 프로세스를 시작합니다.", vbInformation, "Delete Autorun"

Shell.Run "cmd.exe /c explorer.exe",0,True

else

MsgBox "스크립트를 종료합니다.", vbInformation, "Delete Autorun"

end if