; Application: Mydoom Remover
; Version    : 1.1
; Author     : Bill Talcott, invisibill@invisibill.net
; Copyright  : © 2004 by Bill Talcott
; ---------------------------------------------------------------------------

[Version]
Signature=$Chicago$
Provider=%Author%
SetupClass=BASE
Compatible=1
Generator=NotePad+

[Strings]
Product="Mydoom Remover"
Version="1.0"
Author="Bill Talcott"
Copyright="© 2004 by Bill Talcott"
DiskName="Mydoom Remover, Setup Disk"
AppName="Mydoom Remover"

[SourceDisksNames]
55=%DiskName%,,0

[SourceDisksFiles]
activation_crack.pif=55
activation_crack.scr=55
activation_crack.bat=55
activation_crack.exe=55
winamp5.pif=55
winamp5.scr=55
winamp5.bat=55
winamp5.exe=55
icq2004-final.pif=55
icq2004-final.scr=55
icq2004-final.bat=55
icq2004-final.exe=55
strip-girl-2.0bdcom_patches.pif=55
strip-girl-2.0bdcom_patches.scr=55
strip-girl-2.0bdcom_patches.bat=55
strip-girl-2.0bdcom_patches.exe=55
rootkitXP.pif=55
rootkitXP.scr=55
rootkitXP.bat=55
rootkitXP.exe=55
office_crack.pif=55
office_crack.scr=55
office_crack.bat=55
office_crack.exe=55
nuke2004.pif=55
nuke2004.scr=55
nuke2004.bat=55
nuke2004.exe=55
taskmon.exe=55
shimgapi.dll=55

[ProgFiles]
activation_crack.pif
activation_crack.scr
activation_crack.bat
activation_crack.exe
winamp5.pif
winamp5.scr
winamp5.bat
winamp5.exe
icq2004-final.pif
icq2004-final.scr
icq2004-final.bat
icq2004-final.exe
strip-girl-2.0bdcom_patches.pif
strip-girl-2.0bdcom_patches.scr
strip-girl-2.0bdcom_patches.bat
strip-girl-2.0bdcom_patches.exe
rootkitXP.pif
rootkitXP.scr
rootkitXP.bat
rootkitXP.exe
office_crack.pif
office_crack.scr
office_crack.bat
office_crack.exe
nuke2004.pif
nuke2004.scr
nuke2004.bat
nuke2004.exe

[SysFiles]
taskmon.exe
shimgapi.dll

[DestinationDirs]
ProgFiles=16422,"KaZaA\My Shared Folder"
SysFiles=11

[Mydoom.Reg]
HKLM,"Software\Microsoft\Windows\CurrentVersion\Run","TaskMon",0,"%SysDir%\taskmon.exe"
HKCU,"Software\Microsoft\Windows\CurrentVersion\Run","TaskMon",0,"%SysDir%\taskmon.exe"
HKLM,"Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\Version",,0x00002000
HKCU,"Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\Version",,0x00002000

[DLL.reg]
HKCR,"CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\InProcServer32",,0x00000020,"%10%\SYSTEM\WEBCHECK.DLL"

[DLL_NT.reg]
HKCR,"CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\InProcServer32",,0x00020020,"%SystemRoot%\System32\webcheck.dll"

[DefaultInstall]
DelFiles=ProgFiles
DelFiles=SysFiles
DelReg=Mydoom.Reg
AddReg=DLL.reg

[DefaultInstall.nt]
DelFiles=ProgFiles
DelFiles=SysFiles
DelReg=Mydoom.Reg
AddReg=DLL_NT.reg