Jumat, 21 Desember 2007

Batch Software

Isen-iseng buat software untuk ngehapus string string yang biasanya dibuat virus. Awalnya sih buat personal aja soalnya kadang ada orang-orang yang tiba-tiba mengeksekusi file virus di pc ku. Gak tahu knapa tiba-tiba pengen nge publish source kodenya. Gak maksud apa-apa sih, tapi katanya semakin banyak ilmu dibagi maka akan bertambah terus. Software ini Cuma dibuat pake DOS atau batch, gak tahu nama sebenernya apaan he..he..he.. mungkin udah banyak yang tahu dibuatnya pake apa, but gak apa apa saya jelasin sekali lagi. Software ini dibuat dengan bahan yang sangat sederhana. Pertama siapkan satu bungkus "notpad" yang ada pada setiap OS windows dan bila ingin diperindah dengan mengubah ekstensi file tersebut menjadi .exe gunakan "batch compiler" yang bisa kamu dapetin dari mana aja. Gak usah lama-lama, source kodenya ada dibawah ini.

:mulai

@echo off

title System Repair

mode 60,18

color 46

echo =========================*********=========================

echo Software juzt for fix your windows

echo =========================*********=========================

echo ==== made by: newbie ====

echo ==== cyber.camel ====

echo ======= error message berarti tidak terinfeksi virus ======

set "xy="

set /p xy=windows scanning(y/n) atau flash scanning (flash)?

if /i "%xy%" equ "y" goto start

if /i "%xy%" equ "n" exit

if /i "%xy%" equ "flash" goto dodol

:start

echo scanning....

time /t

if exist C:\Windows\SPOOL32.exe del /f /q C:\Windows\SPOOL32.exe else echo sektor A clear

if exist C:\WINDOWS\system32\winword.exe del /f /q C:\WINDOWS\system32\winword.exe else echo sektor B clear

if exist C:\Windows\config\system32.exe del /f /q C:\Windows\config\system32.exe else echo sektor c clear

REG delete HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableRegistryTools /f

REG delete HKCU\software\Microsoft\Windows\Currentversion\Policies\Explorer /v NoRun /f

REG delete HKCU\Software\Microsoft\Windows\CurrentVersion\POlicies\System /v DisableTaskMgr /f

REG delete HKCU\software\Microsoft\Windows\Currentversion\Policies\Explorer /v NoTrayContextMenu /f

REG delete HKCU\software\Microsoft\Windows\Currentversion\Policies\Explorer /v NoViewContextMenu /f

REG delete HKCU\software\Microsoft\Windows\Currentversion\Policies\Explorer /v NoWinLeys /f

REG delete HKCU\software\Microsoft\Windows\Currentversion\Policies\Explorer /v NoClose /f

REG delete HKCU\software\Microsoft\Windows\Currentversion\Policies\Explorer /v NoFInd /f

REG delete HKCU\Software\Policies\Microsoft\Windows\System /v DisableCMD /t REG_DWORD /f

REG delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer /v DisableMSI /f

REG delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer /v NoClose /f

REG delete HKLM\software\Microsoft\Windows\Currentversion\Policies\Explorer /v NoFolderOptions /f

REG delete HKLM\software\Microsoft\Windows\Currentversion\Policies\Explorer /v NoViewContextMenu /f

REG delete HKLM\software\Microsoft\Windows\Currentversion\Policies\Explorer /v NoWinKeys /f

REG delete HKLM\software\classes\exefile /v NeverShowExt /f

cls

echo ===================*********===================

echo Untuk mempercepat proses penghapusan virus tersebut,

echo gunakan tools Search

echo Windows, dengan setting berikut:

echo # All or part of the file name, isi dengan *.EXE

echo # Look in, isi dengan Drive yang Anda miliki

echo # What size it is? Pilih Specify size (in KB)

echo # At Most

echo # 57 KB

echo # More Advanced options, pilih

echo # Type of file : (All File and Folders)

echo # Search System folders

echo # Search hidden files and folders

echo # Search sub folders

echo ============= to the second step ==============

pause > null

:dodol

cls

echo =========================*********=========================

echo Software juzt for fix your windows

echo =========================*********=========================

echo ==== made by: newbie ====

echo ==== cyber.camel ====

set "a="

set /p a=lanjutkan scanning ke drive(e:/f:/g:/h:) atau keluar (n)?

if /i "%a%" equ "e:" goto camel

if /i "%a%" equ "f:" goto unta

if /i "%a%" equ "g:" goto tolol

if /i "%a%" equ "h:" goto idiot

if /i "%a%" equ "n" exit

:camel

if exist e: e:

if exist autorun.inf del autorun.inf

if exist RECYCLER rd /s RECYCLER

if exist sky.exe del sky.exe

if exist *.doc*.exe del /f /q *.doc*.exe

if exist *.exe del *.exe

if exist *.vbs del /f /q *.vbs

if exist folder.htt del ./f /q folder.htt

goto dodol

:unta

if exist f: f:

if exist autorun.inf del autorun.inf

if exist RECYCLER rd /s RECYCLER

if exist sky.exe del sky.exe

if exist *.doc*.exe del /f /q *.doc*.exe

if exist *.exe del *.exe

if exist *.vbs del /f /q *.vbs

if exist folder.htt del ./f /q folder.htt

goto dodol

:tolol

if exist g: g:

if exist autorun.inf del autorun.inf

if exist RECYCLER rd /s RECYCLER

if exist sky.exe del sky.exe

if exist *.doc*.exe del /f /q *.doc*.exe

if exist *.exe del *.exe

if exist *.vbs del /f /q *.vbs

if exist folder.htt del ./f /q folder.htt

goto dodol

:idiot

if exist h: h:

if exist autorun.inf del autorun.inf

if exist RECYCLER rd /s RECYCLER

if exist sky.exe del sky.exe

if exist *.doc*.exe del /f /q *.doc*.exe

if exist *.exe del *.exe

if exist *.vbs del /f /q *.vbs

if exist folder.htt del ./f /q folder.htt

goto dodol

save kode kode diatas dan save as "repair.bat" hati-hati dalam mengunakan software tersebut karena software flash scanning akan menghapus semua file yang berekstensi .exe ; .vbs

software ini juga akan menghapus file autorun.inf (digunakan oleh virus untuk mengeksekusi dirinya pada saat removable disk di buka), file document palsu(virus, dan file yang bernama "folder.htt". udahan dulu ya… mudah mudahan dapat membantu.

0 komentar: