Im pretty sick of these automessages that arrive about "Pictures of me in vacation!" and a hyperlink and/or a file transfer starts up. Maybe a script can be written to both block these and/or remove them if a user has them.

Maybe a link to remove the virus itself....

Dane started something like that, but I'm not sure if he has kept it up to date.

PlusOne Security Alert Service

quote:

---

Originally posted by scott2010_h
Dane started something like that, but I'm not sure if he has kept it up to date.

PlusOne Security Alert Service

---

code:

---

////////////////////////////////////////////////////////////////////////////
///                                                                ///
///                        PlusOne Alert Service                         ///
///                         BY DANE AND DEMPSEY                         ///
////////////////////////////////////////////////////////////////////////////

var sScriptName = "PlusOne Alert Service Beta";
var sVer = "0.4c";
var sAlertMsg = "A vulnerability has been discovered!\n\nClick For Info";
var sAlertMsg0 = "No New Security Threats!";
var sAlertMsg1 = "A new virus has been discovered!\n\nClick for Info";
var sAlertMsg2 = "Update Available!\nClick for Important Information!";
var sCheckURL = "http://www.exoendo.net/security/V1b04c/Alert.txt";
var sAlertURL = "http://www.exoendo.net/security/transfer.php?id=SecAlertSvc01";
var sUpdateURL = "http://www.exoendo.net/security/update.php?version=" + sVer;

function OnEvent_Initialize(MessengerStart)
{
    Debug.Trace("Startup Check Called!");
    DoCheck();
}

function DoCheck()
{
    Debug.Trace("Getting Data");
    var bDl = MsgPlus.DownloadFile(sCheckURL);
}

function OnEvent_DownloadFileComplete(Url, OutFile, Success)
{
    if(Success)
    {
        Debug.Trace("Successfully Downloaded!");
        var FSO = new ActiveXObject("Scripting.FileSystemObject");
        var File = FSO.OpenTextFile(OutFile, 1);
          var sData = File.ReadAll();
          File.Close();
        FSO.DeleteFile(OutFile);
        if (sData == 0)
        {
            MsgPlus.DisplayToast(sScriptName, sAlertMsg0, "", "");
            Debug.Trace("Return Data 0");
        }
        if (sData == 1)
        {
            MsgPlus.DisplayToast(sScriptName, sAlertMsg, "", "ToastClick");
            Debug.Trace("Return Data 1");
        }
        if (sData == 2)
        {
            MsgPlus.DisplayToast(sScriptName, sAlertMsg1, "", "ToastClick");
            Debug.Trace("Return Data 2");
        }
        if (sData == 3)
        {
            MsgPlus.DisplayToast(sScriptName, sAlertMsg2, "", "ToastClick2");
            Debug.Trace("Return Data 3");
        }
    }
}

MsgPlus.AddTimer("Recheck", 28800000);

function OnEvent_Timer(id){
if(id == "Recheck"){
Debug.Trace("Recheck Complete");
MsgPlus.AddTimer("Recheck", 28800000);
DoCheck();
}

}

function ToastClick()
{
    Debug.Trace("ToastClick");
    new ActiveXObject("wscript.shell").run(sAlertURL);
}
function ToastClick2()
{
    Debug.Trace("UpdateToast Click");
    new ActiveXObject("wscript.shell").run(sUpdateURL);
}

---

Hello,

Indeed.  I have not updated the script in a very long time, as usage statistics were showing it wasnt being downloaded/used and I had higher priority things.  However, I will take a look at it again, perhaps adding some detection/removal features.

Thanks!

quote:

---

Originally posted by Dane
Hello,

Indeed.  I have not updated the script in a very long time, as usage statistics were showing it wasnt being downloaded/used and I had higher priority things.  However, I will take a look at it again, perhaps adding some detection/removal features.

Thanks!

---