Lame malware downloader wrote in VB+PHP