Sabtu, 14 Agustus 2010

Antibody registry

 ini trik buat ngakalin virus2 ato program2 yg sering ngeblokir regedit, task manager, ato virus yg biasanya suka ngubah ekstensi .exe,.com,dsb

antibodi kali ini ketika dirun ada 2 pilihan, yg pertama looping yg kedua cuma sekali suntik..

kalo looping, mk antibodi ini terus2an (balapan, mungkin jauh lebih cpt dari timer virus buat ngeblokir registry) mulihin beberapa key penting diregistry.

AntiBody Registry Windows

dim rg,std,a,b,c,t
a = "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\"
b = "HKEY_LOCAL_MACHINE\Software\Microsoft\WIndows NT\Image File Execution Options\"
std = chr(34) & "%1" & chr(34) & " %*"
set rg=createobject("wscript.shell")

t=msgbox("Mau dilooping terus apa ngga?(lopping=balapan, mungkin jauh lebih cpt dari timer virus buat ngeblokir registry)",36,"Antibodi!Registry!")
if t = 6 then
do
sehat
loop until i = 1
else
sehat
end if

sub SEHAT()
// yang ini buat ngereset settingan windows

rg.regwrite a & "System\DisableRegistryTools",0,"REG_DWORD"
rg.regwrite a & "System\DisableTaskMgr",0,"REG_DWORD"
rg.regwrite a & "System\DisableCMD",0,"REG_DWORD"
rg.regwrite a & "Explorer\NoFolderOptions",0,"REG_DWORD"

// yang ini buat ngereset setingan debbuger program
rg.regwrite b & "msconfig.exe\Debugger",""
rg.regwrite b & "regedit.exe\Debugger",""
rg.regwrite b & "cmd.exe\Debugger",""


// yang ini buat benerin ekstensi biar tetep berjalan seperti semula
rg.regwrite "HKEY_CLASSES_ROOT\.exe\","exefile"
rg.regwrite "HKEY_CLASSES_ROOT\.com\","comfile"
rg.regwrite "HKEY_CLASSES_ROOT\.bat\","batfile"
rg.regwrite "HKEY_CLASSES_ROOT\.lnk\","lnkfile"
rg.regwrite "HKEY_CLASSES_ROOT\.pif\","piffile"
rg.regwrite "HKEY_CLASSES_ROOT\exefile\shell\open\command\",std
rg.regwrite "HKEY_CLASSES_ROOT\batfile\shell\open\command\",std
rg.regwrite "HKEY_CLASSES_ROOT\comfile\shell\open\command\",std
rg.regwrite "HKEY_CLASSES_ROOT\lnkfile\shell\open\command\",std
rg.regwrite "HKEY_CLASSES_ROOT\piffile\shell\open\command\",std
end sub

tulis aja di notepad lalu simpan dengan ekstensi .vbs

0 komentar:

Posting Komentar

Terima kasih sudah mengunjungi blog saya