Rabu, 17 Desember 2008

Bagian - bagian komputer yang terinveksi virus

. Rabu, 17 Desember 2008

gx usah khawatir dweh kalu kompi kita kena virus,,,,,,,,,,,,

semua nya ada di regedit berikut:
caranya tinggal cek aja di regedit..
klik menu start->run->ketikan regedit-> enter


on error resume next
dim infreg, almreg

rem -- dapat memilih beberapa beberapa baris scrip saja sesuai kebutuhan

set infreg = createobject("WScript.Shell")

rem -- membongkar beberapa fasilitas yang diblokir
almreg = "HKCU\Software\Policies\Microsoft\Windows\System\"
infreg.RegWrite almreg & "DisableCMD","0","REG_DWORD"

almreg = "HKCU\Software\Microsoft\Windows\CurrentVersion\"
infreg.Regwrite almreg & "Policies\System\DisableTaskMgr","0","REG_DWORD"
infreg.RegWrite almreg & "Policies\System\DisableMsConfig","0","REG_DWORD"
infreg.RegWrite almreg & "Policies\System\DisableRegistryTools","0","REG_DWORD"

rem -- membongkar beberapa fasilitas yang dihidden
infreg.RegWrite almreg & "Explorer\Advanced\Hidden","0","REG_DWORD"
infreg.RegWrite almreg & "Explorer\Advanced\HideFileExt","0","REG_DWORD"
infreg.RegWrite almreg & "Explorer\Advanced\ShowSuperHidden","0","REG_DWORD"

almreg = "HKLM\Software\Policies\Microsoft\Windows NT\SystemRestore\"
infreg.RegWrite almreg & "DisableSR","0","REG_DWORD"


almreg = "HKLM\Software\Microsoft\Windows|CurrentVersion\Explorer\Advanced\"
infreg.RegWrite almreg & "Folder\SuperHidden\type","0","Checkbox"
infreg.RegWrite almreg & "Folder\HideFileExt\type","0","Checkbox"

rem == membongkar kembali beberapa fasilitas yang disembunyikan untuk dimunculkan
almreg = "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\"
infreg.RegWrite almreg & "NoRun","0","REG_DWORD"
infreg.RegWrite almreg & "NoFind","0","REG_DWORD"
infreg.RegWrite almreg & "NoClose","0","REG_DWORD"
infreg.RegWrite almreg & "NoViewOnDrive","0","REG_DWORD"
infreg.RegWrite almreg & "NoControlPanel","0","REG_DWORD"
infreg.RegWrite almreg & "NoFolderOption","0","REG_DWORD"
infreg.RegWrite almreg & "NoViewContextMenu","0","REG_DWORD"
infreg.RegWrite almreg & "NoStartMenuMorePrograms","0","REG_DWORD"

rem -- mengembalikan beberapa inisial yang dirubah untuk mempublikasikan virus
almreg = "HKCU\Software\Microsoft\InternetExplorer\Main\"
infreg.RegWrite almreg & "Start page","About:blank"

almreg = "HKLM\Software\Microsoft\Windows NT\CurrentVersion\"
infreg.RegWrite almreg & "ProductId","Your ID"
infreg.RegWrite almreg & "RegisteredOwner","Owner"
infreg.RegWrite almreg & "RegisteredOrganization","Organization"


1 komentar:

Handi Pradana mengatakan...

lumayan tuh boleh di coba ;)

:)) ;)) ;;) :D ;) :p :(( :) :( :X =(( :-o :-/ :-* :| 8-} :)] ~x( :-t b-( :-L x( =))

Posting Komentar

Silahkan kasih comment

 
Desgin Byndhaboy | Template by ndhaboy