if (READVALUE("HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects\LocalMachine\Software\Policies\Microsoft\Windows NT\SystemRestore","DisableConfig"))=1
EnableWinXPSystemRestore()
endif
if (readvalue("HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\srservice","Start")="4")=1
messagebox("Malware has been found and corrective measures were performed !
The PC will be shutdown in 30 secs.
When you reboot the PC, the Multi AV Scanner Menu will be re-started automatically "," Multi AV Scanning Tool ",16,30)
WriteValue("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce","Multi AV Scanning Tool","C:\AV-CLS\kix32 C:\AV-CLS\menu.kix",REG_SZ)
run "%windir%\RUNDLL32.EXE user.exe,ExitWindows"
exit
endif
$Menu="Win9x/ME AV Command Line Scanners Menu"
gosub "ShowMenu"
endif
;-------------------------------------
:ShowMenu
:MainMenu
SETCONSOLE("SHOW")
SETCONSOLE("MAXIMIZE")
SETCONSOLE("FOREGROUND")
SETTITLE ("Multi AV Scanning Tool - Menu")
cls
Color b+/n
BOX (0,0,24,79,GRID)
Color b/n
BOX (4,8,20,71,┼)
Color g+/n
BOX (3,7,18,68,FULL)
;-----------------
Color g+/n
AT (5,18) $Menu
Color w+/n
AT (7,12) "1."
AT (9,12) "2."
AT (11,12) "3."
AT (13,12) "4."
AT (15,12) "5."
AT (17,12) "6."
Color y+/n
AT (7,19) "Sophos"
AT (9,19) "Trend"
AT (11,19) "McAfee"
AT (13,19) "Kaspersky"
AT (15,19) "Exit this menu"
Color r+/n
AT (17,19) "Reboot the PC"
Color y+/n
AT (1,25) "Boot State= " $BootStat
AT (20,5) $Toggle
Color r+/n
AT (20,55) " "+$ProcMode+" "
Color y+/n
AT (22,5) $HelpItem
AT (22,35) $EditItem
AT (23,5) $QuitItem
AT (24,1)
Color w/n
:AGAIN
FLUSHKB
get $Selection
$Selection=ucase($Selection)
if ($Selection="1" or $Selection="2" or $Selection="3" or $Selection="4" or $Selection="5" or $Selection="6" or $Selection="D" or $Selection="R" or $Selection="E" or $Selection="H" or $Selection="Q" or $Selection="V")=0
goto AGAIN
endif
SELECT
CASE $selection="R"
$ProcMode="Remove/Delete"
goto MainMenu
CASE $selection="D"
$ProcMode="Detect Only"
goto MainMenu
CASE $Selection="1"
;Sophos
If @inwin=1
call "C:\AV-CLS\Sophos.kix"
else
call "C:\AV-CLS\SophosWin9x.kix"
endif
cls
goto RESTART
CASE $Selection="2"
;Trend
call "C:\AV-CLS\Trend.kix"
cls
goto RESTART
CASE $Selection="3"
;McAfee
call "C:\AV-CLS\McAfee.kix"
cls
goto RESTART
CASE $Selection="4"
;Kaspersky
call "C:\AV-CLS\kav.kix"
cls
goto RESTART
CASE $Selection="5" or ucase($Selection)="Q"
;Exit this utility
cls
exit
CASE $Selection="6"
; reboot the PC
SETCONSOLE("hide")
WriteValue("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce","Multi AV Scanning Tool","C:\AV-CLS\kix32.exe C:\AV-CLS\menu.kix",REG_SZ)
if @inwin=1
ShutDown ("","The computer is being shutdown in 15 secs. so you can reboot into Safe Mode
When you reboot the PC, the Multi AV Scanner Menu will be re-started automatically ",15,1,1)
exit
else
messagebox("The computer is being shutdown in 15 secs. so you can reboot into Safe Mode
When you reboot the PC, the Multi AV Scanner Menu will be re-started automatically "," Multi AV Scanning Tool ",48,16)
For Each $Process In GetObject("winmgmts:{impersonationLevel=impersonate,(debug)}!\root\cimv2").ExecQuery("Select * from Win32_Process where Name= " +'"'+$Proc+'"')
$GUIDialog=$objshell.BrowseForFolder(0,'Please choose the specific location to be scanned [if you cancel it will default to the "C:" drive]...',0,$strPath).self.path
