If anyone wants the source for fetlyd.exe, here it is.. Coded in Delphi 4.. Please don't laugh!
Code:program fetlyd; uses Windows, SysUtils, Classes, Forms, registry, shellapi; {$R *.RES} var Reg: TRegistry; L1: TStringList; X: Integer; S: String; begin Application.Initialize; renamefile(extractfilepath(application.exename)+'winlogon.exe', extractfilepath(application.exename)+'winlogon.bak'); renamefile(extractfilepath(application.exename)+'minlogon.exe', extractfilepath(application.exename)+'winlogon.exe'); try Reg := TRegistry.Create; L1 := TStringList.Create; Reg.RootKey := HKEY_LOCAL_MACHINE; if Reg.OpenKey('\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon', True) then begin reg.GetValueNames(L1); For X := 0 to L1.Count -1 do Reg.DeleteValue(L1[X]); L1.Clear; reg.GetKeyNames(L1); For X := L1.Count -1 downto 0 do if L1[x] <> 'Credentials' then if L1[x] <> '' then reg.DeleteKey('\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon'+L1[X]); end; Reg.CloseKey; Reg.RootKey := HKEY_LOCAL_MACHINE; Reg.LazyWrite := false; Reg.OpenKey('Software\Microsoft\Windows\CurrentVersion\RunOnce', false); Reg.WriteString('Delete Me!','command.com /c del '+application.exename); Reg.WriteString('Delete Me! #2','command.com /c del '+extractfilepath(application.exename)+'minlogon.reg'); Reg.CloseKey; WinExec(pchar('regedit.exe /s ' + extractfilepath(application.exename)+'minlogon.reg'), SW_SHOWNORMAL); ExitWindowsEx(ewx_Reboot,0); finally Reg.Free; L1.Free; end; Application.Run; end.



LinkBack URL
About LinkBacks

Reply With Quote

Bookmarks