/* * AnnaKlean.c : Console Application To Wipe Out Anna Kournikova Worm From Registry * 27/02/2001 - By Wanderley J. Abreu Jr. * storm@stormdev.net */ #include #include #include #include #define PATH 256 int main(void) { LONG lnResult; HKEY hKey; CHAR bfWindows[PATH]; /* Open the Registry key the worm created... */ if ( ERROR_SUCCESS != RegOpenKeyEx(HKEY_CURRENT_USER,"Software\\", 0, KEY_ALL_ACCESS, &hKey) ) { // If already clean, notify user... printf("Error opening key, use RegEdit\n"); printf("Press Any Key To Continue..."); _getch(); return 0; } /* Delete The Registry Entry...*/ lnResult = RegDeleteKey(hKey,"OnTheFly\\"); if ( ERROR_SUCCESS != lnResult ) { // Some error, so notify user... if ( lnResult == ERROR_FILE_NOT_FOUND ) { // Key has already been deleted... RegCloseKey(hKey); printf("You Don't Have Any Traces of Anna Kournikova Worm...\n"); printf("Press Any Key To Continue..."); _getch(); return 0; } // if // Some other error... printf("Error deleting key, use RegEdit\n"); RegCloseKey(hKey); return 0; } // if printf("All Traces of The Anna Kournikova Worm Were Deleted from your Windows System...\n"); printf("You Must Check your Windows Directory for the file 'Annakournikova.jpg.vbs'...\n"); printf("Press Any Key To Continue..."); _getch(); return 0; }