AnnaKlean is a Console Application To Wipe Out Anna Kournikova Worm From Registry.
522ec8bac3d8dfb030025065881e023fb6d2300bd4835c00911457dba60cddf0
/*
* AnnaKlean.c : Console Application To Wipe Out Anna Kournikova Worm From Registry
* 27/02/2001 - By Wanderley J. Abreu Jr.
* storm@stormdev.net
*/
#include <stdio.h>
#include <conio.h>
#include <windows.h>
#include <winbase.h>
#define PATH 256
int main(void)
{
LONG lnResult;
HKEY hKey;
CHAR bfWindows[PATH];
/* Open the Registry key the worm created... */
if ( ERROR_SUCCESS != RegOpenKeyEx(HKEY_CURRENT_USER,"Software\\",
0, KEY_ALL_ACCESS,
&hKey) ) {
// If already clean, notify user...
printf("Error opening key, use RegEdit\n");
printf("Press Any Key To Continue...");
_getch();
return 0;
}
/* Delete The Registry Entry...*/
lnResult = RegDeleteKey(hKey,"OnTheFly\\");
if ( ERROR_SUCCESS != lnResult ) {
// Some error, so notify user...
if ( lnResult == ERROR_FILE_NOT_FOUND ) {
// Key has already been deleted...
RegCloseKey(hKey);
printf("You Don't Have Any Traces of Anna Kournikova Worm...\n");
printf("Press Any Key To Continue...");
_getch();
return 0;
} // if
// Some other error...
printf("Error deleting key, use RegEdit\n");
RegCloseKey(hKey);
return 0;
} // if
printf("All Traces of The Anna Kournikova Worm Were Deleted from your Windows System...\n");
printf("You Must Check your Windows Directory for the file 'Annakournikova.jpg.vbs'...\n");
printf("Press Any Key To Continue...");
_getch();
return 0;
}