Virus: Harmful Fine-Tuning Attack for LLMs Bypassing Guardrail Moderation