@echo off&title VirusCleaner V1.0
:start
cls
echo 請(qǐng)?jiān)谂幚砭庉嫚顟B(tài)下修改殺毒設(shè)置。
echo 并按任意鍵開(kāi)始?xì)⒍荆?br />pause>nul
set processname=IEXPLORE.EXE SuCH0ST.EXE down.EXE boot.EXE systen.EXE expl0rer.EXE fun.EXE
::結(jié)束進(jìn)程【將你獲得的病毒進(jìn)程名稱加入到以上設(shè)置，并以空格隔開(kāi)】
set filename=a.txt b.txt c.txt d.txt mailbody.txt ok.txt out.txt output.txt mail3.vbe Attusb.dll autousb.bat WIN.bat dd.bat SuCH0ST.exe down.exe boot.exe 1.RMVB fun.exe
::刪除文件【將你從根目錄 %SYSTEMROOT%\system32 中獲得的病毒文件名加入到以上設(shè)置，并以空格隔開(kāi)】
set findfilename=autorun.inf lpk.dll SuCH0ST.EXE down.EXE boot.EXE systen.EXE expl0rer.EXE fun.EXE
::全盤搜索并刪除文件【將病毒文件名加入到以上設(shè)置，并以空格隔開(kāi)】
set servicename=DNSSystem
::停用服務(wù)項(xiàng)【將病毒服務(wù)項(xiàng)名加入到以上設(shè)置，并以空格隔開(kāi)】
::-----------------------------------------------------------------------------
echo ——殺毒進(jìn)行中 . . .
echo 結(jié)束病毒進(jìn)程 . . .
taskkill /f /im explorer.exe
for %%a in (%processname%) do taskkill /f /t /im %%a
start explorer.exe
echo ——清除指定病毒文件 . . .
for %%a in (%filename%) do if exist %SYSTEMROOT%\system32\%%a (
ATTRIB %SYSTEMROOT%\system32\%%a -s -h -a -r
del /f /s /a /q %SYSTEMROOT%\system32\%%a
)
echo ——恢復(fù)D盤被隱藏的文件夾 . . .
setlocal EnableDelayedExpansion
call :hs d:\
echo ——恢復(fù)移動(dòng)盤被隱藏的文件夾 . . .
for /f "skip=1" %%i in ('wmic logicaldisk where "drivetype='2'" get caption') do (if exist %%i\ call :hs %%i\&call :rec %%i\)
echo ——停止病毒服務(wù)項(xiàng) . . .
for %%a in (%servicename%) do (
sc stop %%a
sc config %%a start= disabled
)
echo ——全盤清除指定病毒文件 . . .
for %%a in (%findfilename%) do (
for /f "skip=1" %%i in ('wmic logicaldisk where "drivetype='3'" get caption') do for /f "tokens=*" %%x in ('dir /b /s /a %%i\%%a') do if exist "%%~x" (
ATTRIB -s -h -a -r "%%~x"
del /f /s /a /q "%%~x"
)
)
echo ——清除所有計(jì)劃任務(wù) . . .
at /delete /yes
SCHTASKS /Delete /TN * /F
del /f /q /a C:\WINDOWS\Tasks
::for /f "tokens=*" %%a in ('dir /s /b /a %SYSTEMROOT%\Tasks\*.job') do if exist "%%~a" del /f /s /a /q "%%~a"</p> <p>echo ——清除任何隨機(jī)自啟動(dòng) . . .
reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v fun /f
echo;&echo ——殺毒結(jié)束！按任意鍵返回！&echo;
pause>nul&goto start</p> <p>:hs 恢復(fù)被隱藏的文件夾
for /f "delims=" %%q in ('dir %1 /a:d /b') do (
if exist "%1%%~q" ATTRIB "%1%%~q" -s -h -a -r
if exist "%1%%~q.exe" del /f /s /a /q "%1%%~q.exe"
)
goto :eof
:rec 清理常見(jiàn)U盤病毒
for /f "delims=" %%q in ('dir /a /b %1autorun.inf,%1recycle.*') do if exist "%1%%~q" (
ATTRIB "%1%%~q" -s -h -a -r
del /f /s /a /q "%1%%~q"
)
goto :eof
配合《一鍵清理三劍客》使用可能效果更好！~