Enable the exclusive killing function for WinXP and Vista systems

Nowadays, many malignant Viruses need to be scanned and killed using the exclusive killing tool, but some viruses will automatically prohibit the running of the exclusive killing tool. We often use other systems (such as DOS or PE) to scan and kill these stubborn viruses. Actually,Exclusive ToolIs a file that can delete viruses.Batch FileIt is not difficult to understand and write. This article provides you with an in-depth understanding and preparation of the exclusive killing tool.System StartupYou can directly go to the antivirus menu and specifically kill viruses.

　　1. For Windows XP users

For this type of system users, we can use virtual software such as Vfloppy to add DOS antivirus systems for Windows XP, and then use the automatic batch processing files (Autoexec. bat) under DOS to easily clear viruses. Here we will take automatic removal of the bot virus as an example.

Step 1: Go to the Internet to find the bot virus information, create a batch file based on virus characteristics, or directly download the batch file prepared by netizens. For example, a bot virus excludes a virus to a bot.

Step 2: Start notepad, enter the following code, save it as kill. bat, and place it in the root directory of drive D (the Rem statement is a comment without entering it ).

Rem removes the hidden, read-only, and system attributes of virus files.
Attrib-h-r-s C: WINDOWSIGM.exe
Rem deletes a specified Virus File
Del C: WINDOWSIGM.exe
Rem creates a directory with the same name as the virus file at the source location to prevent virus recurrence
Md C: WINDOWSIGM.exe
NOTE: For the sake of convenience, in batch processing, only delete one of the virus files C: WINDOWSIGM.exe is used as an example. To delete other virus files, add the commands in the preceding format.

Step 3: Download Vfloppy (http://www.mydown.com/desktop/gamedesk/manhuakatong/194/416194.shtml unzip, download the decompressed run vfloppy.exe, the image file select to extract the directory under the "bookdisk. img file, the text is displayed as "DOS Automatic Anti-Virus", others take the default settings, and finally click "application", the program prompts that the image file is successfully guided, do not restart and exit Vfloppy (1 ).

Figure 1

Step 4: Modify the batch file in Bootdisk. img to enable anti-virus. Download winimageat http://winimage.com/winima70g.exe. After running WinImage, click "File> open" to open C: ootootdisk. img, and then select "AUTOEXEC. BAT ", right-click it and select" Expand "to convert AUTOEXEC. release BAT to d :.

Step 5: use NotePad to open d: autoexec. bat, find "echo The diagnostic tools were successfully loaded to drive % RAMD %. "This line, and then in" echo. add the following line (2): call d: kill. bat

Tip: After DOS is fully started, kill. bat automatically deletes the virus by calling the prepared batch file.

Figure 2

Step 6: Run WinImage again to open C: ootootdisk. img, click "image> Add", and add the modified AUTOEXEC as prompted. BAT file. When the program prompts whether to overwrite, click "yes" and save the bootdisk. img and exit the program. Modify AUTOEXEC. BAT to automatically kill the virus in batch after DOS is started (Figure 3 ). If you encounter other viruses next time, you only need to modify the code in d: kill. bat to implement the new killing function.

Figure 3

　　Ii. Windows Vista users

Because Windows Vista uses NTFS partitions, it cannot be accessed in DOS, so we cannot use the above method to implement automatic anti-virus. However, we can also use Windows PE2.0 (hereinafter referred to as PE) for automatic anti-virus.

Step 1: Create an exclusive batch processing file and save it as d: kill. bat. Because the command line in Windows supports more parameters, our code is changed as follows:

Attrib-h-r-s C: WINDOWSIGM.exe
Rem does not need to confirm to directly Delete the Virus File
Del/f/q/s C: WINDOWSIGM.exe
Md C: WINDOWSIGM.exe
Automatically restarts after rem Antivirus is completed
Shutdown-r

Step 2: Go to http://www.downbank.cn/uploadimages/file_box/downbank070105 VistaPECN.rar and download PE. Decompress the file to obtain an ISO file, and then use WinRAR to decompress all the files to d: PE.

Step 3: Download The WimTool (http://www.mydown.com/soft/utilitie/systems/405/440405.shtml program, download the downloaded wimtoolruntime library .exe, run WimTool as administrator, Click Browse, select the Wim file d: pesourcesoot to undo. wim, select d: PE1 for the target folder to be unlocked (D Is NTFS partition ). Select all options under the image volume number and click "Mount image" (4 ).

Figure 4

Step 4: The system will automatically mount boot. wim file, open "d: pewindowssystem32peshell. ini file, add the following code at the end of the [AutoRun] field. The Code means to automatically run kill after loading the PE shell. bat automatically deletes files with viruses.

1 = d: kill. bat

Step 5: After completing the preceding operations, return to the Wimtool window and click "Uninstall image". When the program prompts whether to save the changed image, click "yes" to save the changed boot. wim file.

Step 6: Download Easybcd (http://www.mydown.com/game/demo/109/416109.shtml ). After running Easybcd, switch to "Add/Remove Entries", switch to "WinPE" under "Add a entry", and enter d: pesourcesoot in Path. wim, click "Add entry", and then insert the Vista installation disc copy file as prompted.

Step 7: After completing the preceding operations, if you want to disable the virus later, restart the system and select "NST winPE Image" from the multiple boot options. The system automatically restarts after the anti-virus process is completed.

　　Tip:For Windows XP single-system users, if the system partition uses the NTFS format. We can also install PE to NTFS partition to prevent viruses. Decompress all the downloaded PE files to c:. Use Wimtool to edit c: soucesoot. wim. Open drive c, change the XP Startup File ntldr to WINXP, and change c: ootmgr (file released from PE) to ntldr. Open "c: oot. ini" and add "C: winxp =" Windows XP "" after the text (excluding double quotation marks ). After the restart, select "Windows Setup [EMS Enabled]" to enter the PE Automatic Anti-Virus function.