New Notepad
Copy the following (in-line)
Copy Code code as follows:
@echo off
C:
CD \
Attrib-s-h-r Copy.exe
Del copy.exe/f
Attrib-s-h-r Host.exe
Del host.exe/f
Attrib-s-h-r *.inf
Del autorun.inf/f
D:
CD \
Attrib-s-h-r Copy.exe
Del copy.exe/f
Attrib-s-h-r Host.exe
Del host.exe/f
Attrib-s-h-r *.inf
Del autorun.inf/f
E:
CD \
Attrib-s-h-r Copy.exe
Del copy.exe/f
Attrib-s-h-r Host.exe
Del host.exe/f
Attrib-s-h-r *.inf
Del autorun.inf/f
F:
CD \
Attrib-s-h-r Copy.exe
Del copy.exe/f
Attrib-s-h-r Host.exe
Del host.exe/f
Attrib-s-h-r *.inf
Del autorun.inf/f
G:
CD \
Attrib-s-h-r Copy.exe
Del copy.exe/f
Attrib-s-h-r Host.exe
Del host.exe/f
Attrib-s-h-r *.inf
Del autorun.inf/f
H:
CD \
Attrib-s-h-r Copy.exe
Del copy.exe/f
Attrib-s-h-r Host.exe
Del host.exe/f
Attrib-s-h-r *.inf
Del autorun.inf/f
I
CD \
Attrib-s-h-r Copy.exe
Del copy.exe/f
Attrib-s-h-r Host.exe
Del host.exe/f
Attrib-s-h-r *.inf
Del autorun.inf/f
@echo Repair completed. Press any key to continue ... Remember to restart the computer manually!!
Pause
－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－
Save, file name is S.bat save type is all files
Double-click to open any key to continue the manual reboot
The following is the Copy.exe upgrade version of the virus specifically killed
Copy.bat *******************
Copy Code code as follows:
taskkill/f/im Copy.exe
taskkill/f/im Svchost1.exe
taskkill/f/im Svchost2.exe
Del/f/a:s C:\AUTORUN. Inf
Del/f/a:s C:\copy.exe
Del/f/a:s C:\host.exe
Del/f/a:s D:\AUTORUN. Inf
Del/f/a:s D:\copy.exe
Del/f/a:s D:\host.exe
Del/f/a:s E:\AUTORUN. Inf
Del/f/a:s E:\copy.exe
Del/f/a:s E:\host.exe
Del/f/a:s F:\AUTORUN. Inf
Del/f/a:s F:\copy.exe
Del/f/a:s F:\host.exe
Del/f/a:s G:\AUTORUN. Inf
Del/f/a:s G:\copy.exe
Del/f/a:s G:\host.exe
Del/f/a:s H:\AUTORUN. Inf
Del/f/a:s H:\copy.exe
Del/f/a:s H:\host.exe
Del/f/a:s I:\AUTORUN. Inf
Del/f/a:s I:\copy.exe
Del/f/a:s I:\host.exe
Del/f/a:s J:\AUTORUN. Inf
Del/f/a:s J:\copy.exe
Del/f/a:s J:\host.exe
Del/f/a:s K:\AUTORUN. Inf
Del/f/a:s K:\copy.exe
Del/f/a:s K:\host.exe
Del/f/a:s L:\AUTORUN. Inf
Del/f/a:s L:\copy.exe
Del/f/a:s L:\host.exe
Del/f/a:s M:\AUTORUN. Inf
Del/f/a:s M:\copy.exe
Del/f/a:s M:\host.exe
Del/f/a:s N:\AUTORUN. Inf
Del/f/a:s N:\copy.exe
Del/f/a:s N:\host.exe
Del/f/a:s O:\AUTORUN. Inf
Del/f/a:s O:\copy.exe
Del/f/a:s O:\host.exe
Del/f/a:s C:\system32\copy.exe
Del/f/a:s C:\windows\copy.exe
Del/f/a:s C:\windows\svshost.exe
Del/f/a:s C:\system.sys
Del/f/a:s C:\windows\system32\run.reg
Del/f/a:s C:\windows\system32\temp1.exe
Del/f/a:s C:\windows\system32\temp2.exe
Del/f/a:s C:\windows\system32\systemdate.ini
Del/f/a:s D:\systemdate.ini
Del/f/a:s d:\systemfile.com
Regedit copy.reg
Copy.reg *****************
Copy Code code as follows:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DLL" =-
