form1.frm

Antivirus Description: It s a working antivirus or worm remover for most common virus. It dosen t

End
Attribute VB_Name = "frmmain"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
'#------------------------------------------------------------------------#############
'##-----------Written By     : Ratul Ahmed----------------------------------###########
'###----------Description    : A Simple Autorun Virus Remover.----------------#########
'#####--------Copyright      : Ratul Ahmed--------------------------------------#######
'#######------Thanx to       : Those gays who had supplied their valuable---------#####
'#########---------------------resources.-------------------------------------------###
'###########--Written in     : 2008--------------------------------------------------##
'#############-------------------------------------I Love My Bangladesh---------------#


Option Explicit
'Private Declare Function InitCommonControls Lib "comctl32.dll" () As Long
'Dim IngSuccess As Long
Dim reg As CRegistry
Dim env As CEnvironment
Dim hKey As Long, LCount As Long, i As Long
Private success%
Sub SaveText(Lst As TextBox, File As String)
'Call SaveText (Text1,"C:\Windows\System\Saved.txt")
On Error GoTo error
Dim mystr As String
Open File For Output As #1
Print #1, Lst
Close 1
Exit Sub
error:
MsgBox ("Can't write in startup!, please start Epsita Manually After reboot.")
End Sub



'-------------------------------------------------------------------------------------
'=======================================================#### [ System Load Events ] ##
'-------------------------------------------------------------------------------------
Private Sub Form_Load()                                                            '##
Ofull.Value = True
Dim souchk As String
Dim mypath2 As String
'==================================#####[ GUI Activating ]###                      '##
Dim WindowRegion As Long                                  '##
picMainSkin.ScaleMode = vbPixels                          '##                      '##
picMainSkin.AutoRedraw = True                             '##
picMainSkin.AutoSize = True                               '##                      '##
picMainSkin.BorderStyle = vbBSNone                        '##
Me.BorderStyle = vbBSNone                                 '##                      '##
Me.Width = picMainSkin.Width                              '##
Me.Height = picMainSkin.Height                            '##                      '##
WindowRegion = MakeRegion(picMainSkin)                    '##
SetWindowRgn Me.hwnd, WindowRegion, True                  '##                      '##
'============================================================
ExtractSampleImages                                                                '##

'Unload frmkiller                                                                  '##
'Unload frmregwriter
souchk = Right(App.Path, 1)
                                                                                   '##
    If souchk = "\" Then
        mypath2 = App.Path & "EpsitaCFG.ini"                                       '##
    Else
        mypath2 = App.Path & "\EpsitaCFG.ini"                                      '##
    End If
thefpath = mypath2                                                                 '##

'HKLM_RUN
ining_Read                                                                         '##

If PIDRES = "1" Then frmmain.Visible = False                                       '##
If PIDRES = "1" Then frmkiller.Visible = True
If PIDRES = "1" Then frmkiller.Enabled = True                                      '##

'Unload frmregwriter                                                               '##
                                                        
                                                                                   '##
                                                                                    
End Sub                                                                            '##
'Private Sub Form_Initialize()
'InitCommonControls                                                                '##
'End Sub
'===================================================================================##





'-------------------------------------------------------------------------------------
'=====================================================#### [ Mouse Move Functions ] ##
'-------------------------------------------------------------------------------------
Private Sub lblExit_MouseMove(Button As Integer, Shift As Integer, _
x As Single, Y As Single)                                                          '##
lblExit.FontUnderline = True
End Sub                                                                            '##

Private Sub lblHelp_Click()
frmhelp.Visible = True

End Sub

Private Sub lblHelp_MouseMove(Button As Integer, Shift As Integer, _
x As Single, Y As Single)                                                          '##
lblHelp.FontUnderline = True
End Sub                                                                            '##
Private Sub lblOptions_MouseMove(Button As Integer, Shift As Integer, _
x As Single, Y As Single)                                                          '##
lblOptions.FontUnderline = True
End Sub                                                                            '##
Private Sub lblStart_MouseMove(Button As Integer, Shift As Integer, _
x As Single, Y As Single)                                                          '##
lblStart.FontUnderline = True
End Sub                                                                            '##
Private Sub Main_GUI_MouseMove(Button As Integer, Shift As Integer, _
x As Single, Y As Single)                                                          '##
lblOptions.FontUnderline = False
lblHelp.FontUnderline = False                                                      '##
lblExit.FontUnderline = False
lblStart.FontUnderline = False                                                     '##
End Sub
'=================================================================================='##





'-------------------------------------------------------------------------------------
'====================================================#### [ Mouse Click Functions ] ##
'-------------------------------------------------------------------------------------
Private Sub lblOptions_Click()
PopupMenu frmpopup.Options                                                         '##
End Sub
Private Sub lblExit_Click()                                                        '##
killall
End
End Sub                                                                            '##
Private Sub lblStart_Click() '-------------------[[[ Main Click Function]]]------------
Dim ask As String
'Main_GUI.Picture = gui_pic
'
'Ohalf.Visible = False
'lblStart.Visible = False
Unload frmkiller
If Ofull.Value = True Then
ask = MsgBox("This Program was written for Windpws XP, if you try to" & vbNewLine & "run it in other Plartforms then some of its function" & vbNewLine & "may not work properly." & vbNewLine & vbNewLine & vbNewLine & vbNewLine & "This Process Will make your computer unstable for a " & vbNewLine & "little time, Do You Want to Continue?", vbYesNo, "Warning")
    If ask = vbYes Then
        Main_GUI.Picture = gui_pic
        Ofull.Visible = False
        Ohalf.Visible = False
        lblStart.Visible = False
        lblwhat.Visible = True
        Picture1.Visible = True
        Timer2.Enabled = True
        wit2l.Enabled = True
    Else
        Exit Sub
    End If
Else
'If Ofull.Value = True Then HKLM_RUN
frmkiller.Visible = True
frmmain.Visible = False
End If

End Sub
'===================================================================================##
Private Sub wit2l_Timer()
HKLM_RUN
wit2l.Enabled = False

End Sub
Private Sub ExtractSampleImages() ' =========================Extract Addons From *.res
Dim sPath As String               ' ===========Something from LaVolpe [ thanx ]
Dim sFile As String
Dim sResSection As Variant
Dim x As Long, fnr As Integer
Dim imgArray() As Byte, tPic As StdPicture

On Error Resume Next
    
    sPath = App.Path
    If Right$(sPath, 1) <> "\" Then sPath = sPath & "\"
    For x = 1 To 12
        Select Case x
        Case 1
            'None
        Case 2
            sFile = "taskkill.exe" ' Exract TaskKilling app
            sResSection = "Custom"
        Case 3
            'None
        Case 4
            'None
        Case 5
            'None
        Case 6
            'None
        Case 7
            'None
        Case 8
            'None
        Case 9
            'None
        Case 10
            sFile = "sd.exe"      ' Exract Shutdown app
            sResSection = "Custom"
        Case 11
            sFile = "dels.exe"    ' Exract File Delete app
            sResSection = "Custom"
        Case 12
            'None
        End Select
       
        
        sFile = sPath & sFile
        If Len(Dir(sFile, vbArchive Or vbHidden Or vbReadOnly Or vbSystem)) = 0 Then
           Select Case sResSection
           Case vbResBitmap, vbResIcon, vbResCursor
                Set tPic = LoadResPicture((x + 100) & "LaVolpe", sResSection)
                SavePicture tPic, sFile
            Case "Custom"
                imgArray = LoadResData((x + 100) & "LaVolpe", sResSection)
                fnr = FreeFile()
                Open sFile For Binary As #fnr
                Put #fnr, , imgArray()
                Close #fnr
            End Select
        End If
    Next

End Sub



Public Sub RemoveString(Entire As String, Word As String) '========TEXT Wraping Script
    Dim i As Integer
    i = 1
    Dim LeftPart
    Do While True
        i = InStr(1, Entire, Word)
        If i = 0 Then
            Exit Do
        Else
            LeftPart = Left(Entire, i - 1)
            Entire = LeftPart & Right(Entire, Len(Entire) - Len(Word) - Len(LeftPart))
        End If
    Loop
    tempexenm = Entire '========================================================Result
End Sub

Private Sub ining_Write() '------------------------[[[[ INI Writing Here ]]]]---
Dim mypath As String      '=====================================================
Dim souchk As String
souchk = Right(App.Path, 1)

    If souchk = "\" Then
        mypath = App.Path & "EpsitaCFG.ini"
    Else
        mypath = App.Path & "\EpsitaCFG.ini"
    End If

success% = WritePrivateProfileString("STEP", "ID", PID.Text, mypath)
End Sub
Private Sub ining_Read() '------------------------[[[[ INI reading Here ]]]]---
                         '=====================================================
Dim mypath As String
Dim readi As String
Dim souchk As String
souchk = Right(App.Path, 1)

    If souchk = "\" Then
        mypath = App.Path & "EpsitaCFG.ini"
    Else
        mypath = App.Path & "\EpsitaCFG.ini"
    End If
                         

PIDRES = ReadWriteINI("GET", "STEP", "ID")


End Sub


'-------------------------------------------------------------------------------------
'========================================================#### [Registry Functions ] ##
'-------------------------------------------------------------------------------------
Private Sub HKLM_RUN() '----------------[[[ HKLM Run ]]]--
                       '==================================
Dim exename As String
Dim exepath As String
Dim x As String
Dim Y As String
Dim z As String
Dim LeftPart
Dim ename As String
Dim wordcut As String
On Error Resume Next

hKey = OpenKey(HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows\CurrentVersion\Run")
LCount = GetCount(hKey, Values)

For i = 0 To LCount - 1
    
exename = EnumValue(hKey, i) '===========================Srting Of Startup program
exepath = GetKeyValue(hKey, EnumValue(hKey, i)) '==========Path Of Startup Program
tempexenm = exepath


        
    '=====================================[Get EXE Name From Path]
    RemoveString exepath, rtext                                '==
    ename = Left(tempexenm, 3)                                 '==
    x = Mid(tempexenm.Text, InStrRev(tempexenm.Text, "\") + 1) '==
    z = InStrRev(x, ".") - 1                                   '==
    Y = Mid(x, InStrRev(x, ".") - z)                           '==
    wordcut = z + 4                                            '==
    LeftPart = Left(Y, wordcut)                                '==
    regname.AddItem LeftPart                                   '==
    '=============================================================
    
    '====================================[Remove |"| from EXE path]
    RemoveString exepath, rtext                                 '==
    regapppath.AddItem tempexenm                                '==
    '==============================================================

Next i
HKLM_RUNONCE
End Sub


Private Sub HKLM_RUNONCE() '----------------[[[ HKLM RunOnce ]]]--
                           '======================================
Dim exename As String
Dim exepath As String
Dim x As String
Dim Y As String
Dim z As String
Dim LeftPart
Dim ename As String
Dim wordcut As String
On Error Resume Next

hKey = OpenKey(HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows\CurrentVersion\RunOnce")
LCount = GetCount(hKey, Values)

For i = 0 To LCount - 1
    
exename = EnumValue(hKey, i) '===========================Srting Of Startup program
exepath = GetKeyValue(hKey, EnumValue(hKey, i)) '==========Path Of Startup Program
tempexenm = exepath


        
    '=====================================[Get EXE Name From Path]
    RemoveString exepath, rtext                                '==
    ename = Left(tempexenm, 3)                                 '==
    x = Mid(tempexenm.Text, InStrRev(tempexenm.Text, "\") + 1) '==
    z = InStrRev(x, ".") - 1                                   '==
    Y = Mid(x, InStrRev(x, ".") - z)                           '==
    wordcut = z + 4                                            '==
    LeftPart = Left(Y, wordcut)                                '==
    regname.AddItem LeftPart                                   '==
    '=============================================================
    
    '====================================[Remove |"| from EXE path]