今天不小心中了个U盘病毒,比较顽固,花了我几个小时才搞定,网上虽然有一些现成的批处理文件来删除病毒文件,但是一运行注册表,病毒又会死灰复燃,我现在写的这个脚本不会出现这种情况! 把一下内容保存文bat文件运行就可以了,不过前提是要结束掉病毒进程,可以用360同时结束掉 相互保护的多个病毒进程,然后运行下面的批处理就可以了
attrib -h -s -r %systemroot%/cursors/boom.vbs attrib -h -s -r %systemroot%/system/keyboard.exe attrib -h -s -r %systemroot%/system32/dllcache/
default.exe attrib -h -s -r %systemroot%/fonts/fonts.exeattrib -h -s -r %systemroot%/system32/drivers/drivers.cab.exe attrib -h -s -r %systemroot%/system32/regeditattrib -h -s -r %systemroot%/fonts/fonts.exe attrib -h -s -r %systemroot%/media/rndll32.pif attrib -h -s -r %systemroot%/pchealth/helpctr/binaries/helphost.com attrib -h -s -r %systemroot%/fonts/tskmgr.exeattrib -h -s -r %systemroot%/pchealth/Global.exe attrib -h -s -r %systemroot%/system32/dllcache/autorun.inf attrib -h -s -r %systemroot%/system32/dllcache/system.exe attrib -h -s -r %systemroot%/system32/dllcache/svchost.exe attrib -h -s -r %systemroot%/system32/dllcache/Global.exe attrib -h -s -r %systemroot%/system32/dllcache/recycler.{645ff040-5081-101b-9f08-00aa002f954e}/system.exe attrib -h -s -r %systemroot%/system32/dllcache/recycler.{645ff040-5081-101b-9f08-00aa002f954e}/svchost.exe attrib -h -s -r %systemroot%/system32/dllcache/recycler.{645ff040-5081-101b-9f08-00aa002f954e}/Global.exe attrib -h -s -r C:autorun.infattrib -h -s -r C:MS-DOS.comattrib -h -s -r d:autorun.infattrib -h -s -r d:MS-DOS.comattrib -h -s -r e:autorun.infattrib -h -s -r e:MS-DOS.comattrib -h -s -r f:autorun.infattrib -h -s -r f:MS-DOS.comattrib -h -s -r g:autorun.infattrib -h -s -r g:MS-DOS.comattrib -h -s -r h:autorun.infattrib -h -s -r h:MS-DOS.comattrib -h -s -r i:autorun.infattrib -h -s -r i:MS-DOS.comattrib -h -s -r j:autorun.infattrib -h -s -r j:MS-DOS.comattrib -h -s -r k:autorun.infattrib -h -s -r k:MS-DOS.comdel %systemroot%/cursors/boom.vbs del %systemroot%/system/keyboard.exe del %systemroot%/system32/dllcache/
default.exe del %systemroot%/fonts/fonts.exedel %systemroot%/system32/drivers/drivers.cab.exe del %systemroot%/system32/regeditdel %systemroot%/fonts/fonts.exe del %systemroot%/media/rndll32.pif del %systemroot%/pchealth/helpctr/binaries/helphost.com del %systemroot%/fonts/tskmgr.exedel %systemroot%/pchealth/Global.exe del %systemroot%/system32/dllcache/autorun.inf del %systemroot%/system32/dllcache/system.exe del %systemroot%/system32/dllcache/svchost.exe del %systemroot%/system32/dllcache/Global.exe del %systemroot%/system32/dllcache/recycler.{645ff040-5081-101b-9f08-00aa002f954e}/system.exe del %systemroot%/system32/dllcache/recycler.{645ff040-5081-101b-9f08-00aa002f954e}/svchost.exe del %systemroot%/system32/dllcache/recycler.{645ff040-5081-101b-9f08-00aa002f954e}/Global.exe del C:autorun.infdel C:MS-DOS.comdel d:autorun.infdel d:MS-DOS.comdel e:autorun.infdel e:MS-DOS.comdel f:autorun.infdel f:MS-DOS.comdel g:autorun.infdel g:MS-DOS.comdel h:autorun.infdel h:MS-DOS.comdel i:autorun.infdel i:MS-DOS.comdel j:autorun.infdel j:MS-DOS.comdel k:autorun.infdel k:MS-DOS.com
