ScriptLogic.com: Windows Management…Point, Click, Done

Custom Script: C0015

Overview:

Has your company been infected by the Happy99.exe virus? This custom script is a "seek and destroy" script that will search your System Drive for any files called Happy99.exe and delete them automatically. 

Add these line(s) to your Custom Script:

; * Seek and destroy the Happy99 virus executable *
if ingroup('Domain Users')
  $VirusFile='happy99.exe'
  $ResultFile='%temp%\H99list.ini'  
  $cmdline='%comspec% /c dir '+$SystemDrive+'\'+$VirusFile+' /s/b >'+$ResultFile
  $result=messagebox('Your hard drive will be scanned for special virus. This may take a while so please be patient. You will be notified when the scan is complete.','Special virus search',4160,15)
  shell $cmdline
  $found=0
  if Open(2,$ResultFile)=0
    $file=readline(2)
    while len($file)>2
      del $file
      $found=$found+1
      $file=readline(2)
    loop
    $result=close(2)
  endif ; open file successful
  if $found>0
    $addtext=', and has removed them all'
    $mbstyle=4112 ;[x]
  else
    $found='no'
    $mbstyle=4160 ;[i]
  endif
endif ; ingroup
del $ResultFile
$result=messagebox('Scanning found '+$found+' occurrences of the virus'+$addtext+'.','Special virus search results',$mbstyle,30)

Created: 24 August, 1999
Last Revised: 22 July, 2004