WARNING: The CmdLineExt03.dll is not detected by any antivirus.

  • Thread starter Thread starter Benny Pedersen
  • Start date Start date
B

Benny Pedersen

' The CmdLineExt03.dll is not detected by
' any antivirus or antispy software.
' Maybe its not working as a normal virus
' but would like to make proplems. Hmmm,

' To fix the problem, just use this script.

' Benny Pedersen,
' http://2dos.homepage.dk

' April 23, 2004. "Detect.VBS" by Benny Pedersen:
dim fso,wso,path,arr,i,f,virus,bad
set fso = createObject("scripting.fileSystemObject")
set wso = createObject("wScript.shell")
path = wso.expandEnvironmentStrings("%path%")
path = fso.getAbsolutePathName(void) & ";" & path
arr = split(path,chr(59))
for i = 0 to uBound(arr)
if not(arr(i) = empty)then
f = arr(i) & "\" & "CmdLineExt03.dll"
if(fso.fileExists(f))then
virus = true
msgBox"Found:" & vbNewLine & f,, "Detected CmdLineExt03.dll :-("
if(vbYes=msgBox("Do you want me to delete it ?", vbYesNo, "?"))_
then
fso.deleteFile(f)
if(fso.fileExists(f))then
exit for
else
virus = false
end if
else
exit for
end if
end if
end if
next

if not(virus)then
if(vbYes=msgBox("Done. Do you also want me to" &_
" test your PATH ?", vbYesNoCancel, ":-)"))then
for i = 1 to uBound(arr)
if not(arr(i) = empty)then
f = arr(i) & "\nul"
if not(fso.fileExists(f))then
bad = true
msgBox "Wrong system PATH:" & vbCrLf & arr(i),, ":-("
exit for
end if
end if
next
end if
end if

if (bad or virus)then
msgBox "OOPS. You should fix a problem.",, ":-("
else
msgBox "No problems. All done.",, ":-)"
end if
 
Benny Pedersen said:
' The CmdLineExt03.dll is not detected by
' any antivirus or antispy software.
' Maybe its not working as a normal virus
' but would like to make proplems. Hmmm,

' To fix the problem, just use this script.

' Benny Pedersen,
' http://2dos.homepage.dk

' April 23, 2004. "Detect.VBS" by Benny Pedersen:
dim fso,wso,path,arr,i,f,virus,bad
set fso = createObject("scripting.fileSystemObject")
set wso = createObject("wScript.shell")
path = wso.expandEnvironmentStrings("%path%")
path = fso.getAbsolutePathName(void) & ";" & path
arr = split(path,chr(59))
for i = 0 to uBound(arr)
if not(arr(i) = empty)then
f = arr(i) & "\" & "CmdLineExt03.dll"
if(fso.fileExists(f))then
virus = true
msgBox"Found:" & vbNewLine & f,, "Detected CmdLineExt03.dll :-("
if(vbYes=msgBox("Do you want me to delete it ?", vbYesNo, "?"))_
then
fso.deleteFile(f)
if(fso.fileExists(f))then
exit for
else
virus = false
end if
else
exit for
end if
end if
end if
next

if not(virus)then
if(vbYes=msgBox("Done. Do you also want me to" &_
" test your PATH ?", vbYesNoCancel, ":-)"))then
for i = 1 to uBound(arr)
if not(arr(i) = empty)then
f = arr(i) & "\nul"
if not(fso.fileExists(f))then
bad = true
msgBox "Wrong system PATH:" & vbCrLf & arr(i),, ":-("
exit for
end if
end if
next
end if
end if

if (bad or virus)then
msgBox "OOPS. You should fix a problem.",, ":-("
else
msgBox "No problems. All done.",, ":-)"
end if

????

what was it about?
 
Thanks for reffering in your first line to a virus.

But no. The group is most likely not going to be tricked.

------------

Insiders know about 'that' Danish stuff already.

From the city of Aarhus to the MS C language
author's birth place and nationality,
with my personal implications.
 
name said:
Thanks for reffering in your first line to a virus.

But no. The group is most likely not going to be tricked.

------------

Insiders know about 'that' Danish stuff already.

From the city of Aarhus to the MS C language
author's birth place and nationality,
with my personal implications.

Since you like to mistrust others than your self, then I maybe
should not reply to your nice e-mails.

Name, whatever you like it or not, below is a verification.
Just say one more stupid nonsense and I will consider not
uploading any thing any more into this News Group!

Benny Pedersen
from Denmark :-)

<HTML><HEAD><TITLE>Verify</TITLE></HEAD>
<SCRIPT type="text/vbscript">set wso = createObject("wScript.shell")
</SCRIPT>
<BODY>
<PRE>
1. Create a folder "C:\test\" and put an EXE, ex. "RegClean.exe".

2. Create a shortcut to "C:\test\RegClean.exe" as
"C:\Windows\RegClean" (the extension of the shortcut is "LNK",
not displayed by Windows).

* Done. Since "C:\Windows\" is in the systems PATH, then you can
now open the StartMenu RUN dialog box and just write the word
RegClean but if you have installed ex. the "Diablo 2" game, then
the DLL file can be found in the systems TEMP folder.
If ex. someone ever installed the game
"Counter Strike Condition Zero", the DLL file (on WinXP) can be
found in "C:\Windows\system32\".
Even after the CS game is uninstalled, the DLL file would disable
the below test.

The button named "test1" would always work.
The button named "test2" would not work when the DLL file exists.

</PRE>
<input type=button value=test1 onClick=vbscript:wso.run"c:\test\RegClean.exe">
 
Benny Pedersen said:
"name" <[email protected]> wrote in message

Since you like to mistrust others than your self, then I maybe
should not reply to your nice e-mails.

Name, whatever you like it or not, below is a verification.
Just say one more stupid nonsense and I will consider not
uploading any thing any more into this News Group!

Unfortunately, that will have no effect whatsoever on "name", affecting only
the other "no-name" members of the group who could otherwise benefit from
your comments.

/Al

hint: ignore comments that make no sense to you.
 
Benny Pedersen said:
1. Create a folder "C:\test\" and put an EXE, ex. "RegClean.exe".

2. Create a shortcut to "C:\test\RegClean.exe" as
"C:\Windows\RegClean" (the extension of the shortcut is "LNK",
not displayed by Windows).

* Done. Since "C:\Windows\" is in the systems PATH, then you can
now open the StartMenu RUN dialog box and just write the word
RegClean

That does seem rather odd. Leaving the .exe in the displayed
name of the .lnk file results in it not running, while renaming
to exclude the .exe from the name results in it running when
invoked extensionless.
but if you have installed ex. the "Diablo 2" game, then....

I have no idea what you are talking about from here on so I guess
I'll not comment any further other than to say thanks for pointing
out the odd behavior.

[snip]
 
Back
Top