auto.exe,kavo.exe 批處理文件

下載地址

@ [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL]
"RegPath"="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced"
"Text"="@shell32.dll,-30500"
"Type"="radio"
"CheckedValue"=dword:00000001
"ValueName"="Hidden"
"DefaultValue"=dword:00000002
"HKeyRoot"=dword:80000001
"HelpID"="shell.hlp#51105"

@ ECHO OFF
@ ECHO.
@ ECHO.
@ ECHO.                              說  明
@ ECHO -----------------------------------------------------------------------
@ ECHO  添加了刪除KAVO.EXE的命令
@ ECHO  清楚AUTO.EXE病毒 以補丁
@ ECHO  attrib -h -r c:\auto.exe     清除文件AUTO.EXE的隱藏屬性和只讀屬性
@ ECHO  ERASE c:\auto.exe /q         安靜模式。刪除全局通配符時，不要求確認
@ ECHO  mkdir c:\auto.exe            創建一個目錄（類似MSDOS下的md命令）
@ ECHO  運行了該筆處理后。會在每一個盤符下創建一個AUTO.EXE和AUTORUN.EXE命名
@ ECHO  的文件夾，它們都是隱藏的
@ ECHO -----------------------------------------------------------------------
PAUSE
@ ECHO  添加了刪除KAVO.EXE的命令
PAUSE
attrib -A -S -H -R c:\windows\system32\kavo*.*
del c:\windows\system32\kavo.exe
attrib -A -S -H -R d:\autorun.inf
attrib -A -S -H -R d:\ntdelect.com
attrib -h -r c:\ek.com
attrib -h -r c:\ek.com
del C:\ek.com
del D:\ek.com
mkdir c:\ek.com
mkdir d:\ek.com
attrib +h +r c:\ek.com
attrib +h +r d:\ek.com
attrib -h -r c:\auto.exe
attrib -h -r c:\autorun.inf
ERASE c:\auto.exe /q
ERASE c:\autorun.inf /q
mkdir c:\auto.exe
mkdir c:\autorun.inf
attrib +h +r c:\auto.exe
attrib +h +r c:\autorun.inf
@ ECHO.
attrib -h -r d:\auto.exe
attrib -h -r d:\autorun.inf
ERASE d:\auto.exe /q
ERASE d:\autorun.inf /q
mkdir d:\auto.exe
mkdir d:\autorun.inf
attrib +h +r d:\auto.exe
attrib +h +r d:\autorun.inf
@ ECHO.
attrib -h -r e:\auto.exe
attrib -h -r e:\autorun.inf
ERASE e:\auto.exe /q
ERASE e:\autorun.inf /q
mkdir e:\auto.exe
mkdir e:\autorun.inf
attrib +h +r e:\auto.exe
attrib +h +r e:\autorun.inf
@ ECHO.
attrib -h -r f:\auto.exe
attrib -h -r f:\autorun.inf
ERASE f:\auto.exe /q
ERASE f:\autorun.inf /q
mkdir f:\auto.exe
mkdir f:\autorun.inf
attrib +h +r f:\auto.exe
attrib +h +r f:\autorun.inf
@ ECHO.
attrib -h -r g:\auto.exe
attrib -h -r g:\autorun.inf
ERASE g:\auto.exe /q
ERASE g:\autorun.inf /q
mkdir g:\auto.exe
mkdir g:\autorun.inf
attrib +h +r g:\auto.exe
attrib +h +r g:\autorun.inf
@ ECHO.
attrib -h -r h:\auto.exe
attrib -h -r h:\autorun.inf
ERASE h:\auto.exe /q
ERASE h:\autorun.inf /q
mkdir h:\auto.exe
mkdir h:\autorun.inf
attrib +h +r h:\auto.exe
attrib +h +r h:\autorun.inf
@ ECHO.
taskkill /im explorer.exe /f
taskkill /im wscript.exe
start reg add HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\EXplorer\Advanced /v ShowSuperHidden /t REG_DWORD /d 1 /f
start reg import 破曉之陽.reg
ERASE c:\autorun.* /f /q /as
ERASE %SYSTEMROOT%\system32\autorun.* /f /q /as
start explorer.exe