মূলপাতা এন্টি ভাইরাস মাত্র ৩৬ কিলোবাইটের এন্টি-ভাইরাস…

মাত্র ৩৬ কিলোবাইটের এন্টি-ভাইরাস…

19
ভাগ
EaseUS Data Recovery Wizard

প্রথম যে ফাইলটি আপনাদের সাথে শেয়ার করব, তা অনেকটা সাধারণ ভার্সন, যা কিনা শুধুমাত্র আপনার পিসি থেকে সাময়িকভাবে ভাইরাস দূর করবে, কিন্তু কিছু কিছু ভাইরাস তারপরেরও সুপ্ত অবস্থায় থেকে যায়। যাক, প্রথম  viruskiller.bat  (৭.৩৯কিলোবাইট) ফাইলটি ডাউনলোড করে ডবল-ক্লিক করলেই হবে। কোডঃ

 

@ Echo off

COLOR 1b

echo.

echo.

echo This will scan: C: D: E: F: G: H: i: J: K:

echo.

echo.

PAUSE

del / f / s / q / ac: \ autorun.inf

del / f / s / q / ac: \ AdobeR.exe

del / f / s / q / ac: \ msi.exe

del / f / s / q / ac: \ bittorrent.exe

del / f / s / q / ac: \ copy.exe

del / f / s / q / ac: \ desktop.exe

del / f / s / q / ac: \ desktop2.exe

del / f / s / q / ac: \ folder.exe

del / f / s / q / ac: \ host.exe

del / f / s / q / ac: \ msinfmgr.exe

del / f / s / q / ac: \ msvcr71.dll

del / f / s / q / ac: \ RavMonE.exe

del / f / s / q / ac: \ RavMonLog

del / f / s / q / ac: \ RECYCLER \ *.*

del / f / s / q / ac: \ RECYCLER

del / f / s / q / ac: \ SHE.exe

del / f / s / q / ac: \ sxs.exe

del / f / s / q / ac: \ SYSTEM.VER

del / f / s / q / ac: \ toy.exe

del / f / s / q / ac: \ setup.pif

taskkill / F / im explorer.exe

@ Echo off

attrib-r-h-s-a D: \ *.*

del / f / s / q / ad: \ autorun.inf

del / f / s / q / ad: \ AdobeR.exe

del / f / s / q / ad: \ msi.exe

del / f / s / q / ad: \ bittorrent.exe

del / f / s / q / ad: \ copy.exe

del / f / s / q / ad: \ desktop.exe

del / f / s / q / ad: \ desktop2.exe

del / f / s / q / ad: \ folder.exe

del / f / s / q / ad: \ host.exe

del / f / s / q / ad: \ msinfmgr.exe

del / f / s / q / ad: \ msvcr71.dll

del / f / s / q / ad: \ RavMonE.exe

del / f / s / q / ad: \ RavMonLog

del / f / s / q / ad: \ RECYCLER \ *.*

del / f / s / q / ad: \ RECYCLER

del / f / s / q / ad: \ SHE.exe

del / f / s / q / ad: \ sxs.exe

del / f / s / q / ad: \ SYSTEM.VER

del / f / s / q / ad: \ toy.exe

del / f / s / q / ad: \ setup.pif

taskkill / F / im explorer.exe

@ Echo off

attrib-r-h-s-a E: \ *.*

del / f / s / q / ae: \ autorun.inf

del / f / s / q / ae: \ AdobeR.exe

del / f / s / q / ae: \ msi.exe

del / f / s / q / ae: \ bittorrent.exe

del / f / s / q / ae: \ copy.exe

del / f / s / q / ae: \ desktop.exe

del / f / s / q / ae: \ desktop2.exe

del / f / s / q / ae: \ folder.exe

del / f / s / q / ae: \ host.exe

del / f / s / q / ae: \ msinfmgr.exe

del / f / s / q / ae: \ msvcr71.dll

del / f / s / q / ae: \ RavMonE.exe

del / f / s / q / ae: \ RavMonLog

del / f / s / q / ae: \ RECYCLER \ *.*

del / f / s / q / ae: \ RECYCLER

del / f / s / q / ae: \ SHE.exe

del / f / s / q / ae: \ sxs.exe

del / f / s / q / ae: \ SYSTEM.VER

del / f / s / q / ae: \ toy.exe

del / f / s / q / ae: \ setup.pif

taskkill / F / im explorer.exe

@ Echo off

attrib-r-h-s-a F: \ *.*

del / f / s / q / af: \ autorun.inf

del / f / s / q / af: \ AdobeR.exe

del / f / s / q / af: \ msi.exe

del / f / s / q / af: \ bittorrent.exe

del / f / s / q / af: \ copy.exe

del / f / s / q / af: \ desktop.exe

del / f / s / q / af: \ desktop2.exe

del / f / s / q / af: \ folder.exe

del / f / s / q / af: \ host.exe

del / f / s / q / af: \ msinfmgr.exe

del / f / s / q / af: \ msvcr71.dll

del / f / s / q / af: \ RavMonE.exe

del / f / s / q / af: \ RavMonLog

del / f / s / q / af: \ RECYCLER \ *.*

del / f / s / q / af: \ RECYCLER

del / f / s / q / af: \ SHE.exe

del / f / s / q / af: \ sxs.exe

del / f / s / q / af: \ SYSTEM.VER

del / f / s / q / af: \ toy.exe

del / f / s / q / af: \ setup.pif

taskkill / F / im explorer.exe

@ Echo off

attrib-r-h-s-a G: \ *.*

del / f / s / q / ag: \ autorun.inf

del / f / s / q / ag: \ AdobeR.exe

del / f / s / q / ag: \ msi.exe

del / f / s / q / ag: \ bittorrent.exe

del / f / s / q / ag: \ copy.exe

del / f / s / q / ag: \ desktop.exe

del / f / s / q / ag: \ desktop2.exe

del / f / s / q / ag: \ folder.exe

del / f / s / q / ag: \ host.exe

del / f / s / q / ag: \ msinfmgr.exe

del / f / s / q / ag: \ msvcr71.dll

del / f / s / q / ag: \ RavMonE.exe

del / f / s / q / ag: \ RavMonLog

del / f / s / q / ag: \ RECYCLER \ *.*

del / f / s / q / ag: \ RECYCLER

del / f / s / q / ag: \ SHE.exe

del / f / s / q / ag: \ sxs.exe

del / f / s / q / ag: \ SYSTEM.VER

del / f / s / q / ag: \ toy.exe

del / f / s / q / ag: \ setup.pif

taskkill / F / im explorer.exe

@ Echo off

attrib-r-h-s-ah: \ *.*

del / f / s / q / ah: \ autorun.inf

del / f / s / q / ah: \ AdobeR.exe

del / f / s / q / ah: \ msi.exe

del / f / s / q / ah: \ bittorrent.exe

del / f / s / q / ah: \ copy.exe

del / f / s / q / ah: \ desktop.exe

del / f / s / q / ah: \ desktop2.exe

del / f / s / q / ah: \ folder.exe

del / f / s / q / ah: \ host.exe

del / f / s / q / ah: \ msinfmgr.exe

del / f / s / q / ah: \ msvcr71.dll

del / f / s / q / ah: \ RavMonE.exe

del / f / s / q / ah: \ RavMonLog

del / f / s / q / ah: \ RECYCLER \ *.*

del / f / s / q / ah: \ RECYCLER

del / f / s / q / ah: \ SHE.exe

del / f / s / q / ah: \ sxs.exe

del / f / s / q / ah: \ SYSTEM.VER

del / f / s / q / ah: \ toy.exe

del / f / s / q / ah: \ setup.pif

taskkill / F / im explorer.exe

@ Echo off

attrib-r-h-s-ai: \ *.*

del / f / s / q / ai: \ autorun.inf

del / f / s / q / ai: \ AdobeR.exe

del / f / s / q / ai: \ msi.exe

del / f / s / q / ai: \ bittorrent.exe

del / f / s / q / ai: \ copy.exe

del / f / s / q / ai: \ desktop.exe

del / f / s / q / ai: \ desktop2.exe

del / f / s / q / ai: \ folder.exe

del / f / s / q / ai: \ host.exe

del / f / s / q / ai: \ msinfmgr.exe

del / f / s / q / ai: \ msvcr71.dll

del / f / s / q / ai: \ RavMonE.exe

del / f / s / q / ai: \ RavMonLog

del / f / s / q / ai: \ RECYCLER \ *.*

del / f / s / q / ai: \ RECYCLER

del / f / s / q / ai: \ SHE.exe

del / f / s / q / ai: \ sxs.exe

del / f / s / q / ai: \ SYSTEM.VER

del / f / s / q / ai: \ toy.exe

del / f / s / q / ai: \ setup.pif

taskkill / F / im explorer.exe

@ Echo off

attrib-r-h-s-aj: \ *.*

del / f / s / q / aj: \ autorun.inf

del / f / s / q / aj: \ AdobeR.exe

del / f / s / q / aj: \ msi.exe

del / f / s / q / aj: \ bittorrent.exe

del / f / s / q / aj: \ copy.exe

del / f / s / q / aj: \ desktop.exe

del / f / s / q / aj: \ desktop2.exe

del / f / s / q / aj: \ folder.exe

del / f / s / q / aj: \ host.exe

del / f / s / q / aj: \ msinfmgr.exe

del / f / s / q / aj: \ msvcr71.dll

del / f / s / q / aj: \ RavMonE.exe

del / f / s / q / aj: \ RavMonLog

del / f / s / q / aj: \ RECYCLER \ *.*

del / f / s / q / aj: \ RECYCLER

del / f / s / q / aj: \ SHE.exe

del / f / s / q / aj: \ sxs.exe

del / f / s / q / aj: \ SYSTEM.VER

del / f / s / q / aj: \ toy.exe

del / f / s / q / aj: \ setup.pif

taskkill / F / im explorer.exe

@ Echo off

attrib-r-h-s-ak: \ *.*

del / f / s / q / ak: \ autorun.inf

del / f / s / q / ak: \ AdobeR.exe

del / f / s / q / ak: \ msi.exe

del / f / s / q / ak: \ bittorrent.exe

del / f / s / q / ak: \ copy.exe

del / f / s / q / ak: \ desktop.exe

del / f / s / q / ak: \ desktop2.exe

del / f / s / q / ak: \ folder.exe

del / f / s / q / ak: \ host.exe

del / f / s / q / ak: \ msinfmgr.exe

del / f / s / q / ak: \ msvcr71.dll

del / f / s / q / ak: \ RavMonE.exe

del / f / s / q / ak: \ RavMonLog

del / f / s / q / ak: \ RECYCLER \ *.*

del / f / s / q / ak: \ RECYCLER

del / f / s / q / ak: \ SHE.exe

del / f / s / q / ak: \ sxs.exe

del / f / s / q / ak: \ SYSTEM.VER

del / f / s / q / ak: \ toy.exe

del / f / s / q / ak: \ setup.pif

taskkill / F / im explorer.exe

pause

এখন একইভাবে আপনি আরো ফাইল যুক্ত করে এই ভাইরাস মুছতে পারবেন।

উপরের দেয়া কোড দিয়ে সাময়িকভাবে আপনার কম্পিউটার থেকে ভাইরাস ডিলেট করবে, কিন্তু পুরোপরি সমাধান পেতে হলে আপনাকে এন্টি-ভাইরাস ব্যাবহার করতে হবে। অথবা, এই লিঙ্কঃ viruskillerplus.bat (২৯ কিলোবাইট) থেকে ডাউনলোড করে, ডবল-ক্লিক করলেই হবে, যা কিনা সুপ্ত অবস্থায় অথবা, আপনার পিসি-এর রেজিস্ট্রি থেকে ভাইরাস মুছে ফেলবে।

কোড ঃ

@echo Modified by রনি মজুমদার —

@echo Definition: ০২.২৩

path %SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;

shutdown -a

Color 1F

shutdown -a

tskill bar311

tskill blastcln

tskill mveo

tskill password_viewer

tskill photos

tskill sscviihost

tskill services

tskill silentsoftech

tskill smss

tskill wscript

tskill flashy

shutdown -a

taskkill /f /im awkeygen.exe

taskkill /f /im flashy.exe

taskkill /f /im boot.exe

taskkill /f /im calc.exe

taskkill /f /im ccprxy.exe

taskkill /f /im ctfmon.exe

taskkill /f /im exp1orer.exe

taskkill /f /im exiplorer.exe

taskkill /f /im “Funny UST Scandal.avi.exe”

taskkill /f /im iexp1ore.exe

taskkill /f /im iexplore.exe

taskkill /f /im iloveher.exe

taskkill /f /im jay.exe

taskkill /f /im killer.exe

taskkill /f /im knight.exe

taskkill /f /im krag.exe

taskkill /f /im ld.exe

taskkill /f /im netsvcs.exe

taskkill /f /im “new document.exe”

taskkill /f /im “new folder.exe”

taskkill /f /im pet32.exe

taskkill /f /im ravmone.exe

taskkill /f /im scvhosts.exe

taskkill /f /im scvshosts.exe

taskkill /f /im scvvhsot.exe

taskkill /f /im SecretStub.exe

taskkill /f /im spoclsv.exe

taskkill /f /im sscvihost.exe

taskkill /f /im svchosl.exe

taskkill /f /im svhost.exe

taskkill /f /im svhost32.exe

taskkill /f /im svohost.exe

taskkill /f /im svshost.exe

taskkill /f /im vhost.exe

taskkill /f /im wmiprvse.exe

shutdown -a

Color 4F

shutdown -a

REG add “HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System” /v DisableRegistryTools /t REG_DWORD /d 0 /f > nul

REG add “HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System” /v DisableRegistryTools /t REG_DWORD /d 0 /f > nul

REG delete “HKCU\Software\BARRY” /f >nul

shutdown -a

REG add “HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon” /v
“Userinit” /t reg_sz /d “%SystemRoot%\system32\userinit.exe,” /f >nul

REG delete “HKCU\Software\Microsoft\Command Processor” /v “autorun” /f >nul

REG delete “HKLM\Software\Microsoft\Command Processor” /v “autorun” /f >nul

shutdown -a

echo.

shutdown -a

rd /q /s c:\docume~1\admini~1\mydocu~1\ratedr~1

cd %userprofile%

del /f /a wintask.exe

cd..

cd alluse~1\startm~1\programs\startup

del /f /a lsass.exe

cd %userprofile%\startm~1\programs\startup

del /f /a ctfmon.exe

del startu~1.com

cd %userprofile%\applic~1\micros~1\intern~1\quickl~1

del intern~1.lnk

cd %userprofile%\locals~1\applic~1

del jalak-~1.com

rd /q /s dv6116~1

cd\docume~1\anggra~1\locals~1\applic~1

del jalak-~1.com

rd /q /s dv6156~1

cd\docume~1\locals~1\locals~1\applic~1

del jalak-~1.com

rd /q /s dv6191~1

rd /q /s dv6333~1

cd\docume~1\admini~1.use\locals~1\applic~1

del jalak-~1.com

rd /q /s dv6211~1

cd %userprofile%\locals~1\temp

del winlogon.exe

cd\progra~1\common~1\micros~1\msinfo

shutdown -a

del /f /a c:\docume~1\admini~1\wintask.exe

del /f /a c:\docume~1\admini~1\templa~1\ld.exe

del /f /a c:\docume~1\admini~1\templa~1\ldup.exe

del /f /a c:\docume~1\admini~1\mydocu~1\myfold~1.com

del /f /a c:\docume~1\admini~1\mydocu~1\ratedr~1

del /f /a c:\docume~1\admini~1\mydocu~1\ratedr~1.com

del /f /a c:\docume~1\alluse~1\startm~1\programs\startup\dllhost.com

shutdown -a

del /f /a exp1orer.exe

del /f /a noteped.exe

del /f /a redelbat.bat

shutdown -a

del /f /a c:\aikelyu.html

del /f /a c:\iloveher.exe

del /f /a c:\SilentSoftecth.exe

shutdown -a

del /f /a c:\FLEXLM\awkeygen.exe

shutdown -a

shutdown -a

shutdown -a

shutdown -a

color 6f

attrib -r -s -h -a c:\windows\pc-off.bat

del c:\windows\pc-0ff.bat

del c:\windows\system32\flashy.exe

shutdown -a

shutdown -a

attrib -r -s -h -a c:\il0byu3h.*

del c:\il0byu3h.*

attrib -r -s -h -a c:\gy.*

del c:\gy.*

attrib -r -s -h -a c:\autorun.*

del C:\autorun.*

attrib -r -s -h -a c:\bar311.exe

del c:\bar311.exe

attrib -r -s -h -a c:\password_viewer.exe

del c:\password_viewer.exe

attrib -r -s -h -a c:\flashy.exe

del c:\flashy.exe

attrib -r -s -h -a c:\il0byu3h.*

del c:\il0byu3h.*

attrib -r -s -h -a c:\gy.*

del c:\gy.*

attrib -r -s -h -a c:\autorun.*

del C:\autorun.*

attrib -r -s -h -a c:\bar311.exe

del c:\bar311.exe

attrib -r -s -h -a c:w98.*

del c:\w98.*

attrib -r -s -h -a b:\il0byu3h.*

del b:\il0byu3h.*

attrib -r -s -h -a b:\gy.*

del b:\gy.*

attrib -r -s -h -a b:\autorun.*

del b:\autorun.*

attrib -r -s -h -a b:\bar311.exe

del b:\bar311.exe

attrib -r -s -h -a b:\password_viewer.exe

del b:\password_viewer.exe

attrib -r -s -h -a b:\flashy.exe

del b:\flashy.exe

attrib -r -s -h -a b:\sowar.vbs

del b:\sowar.vbs

attrib -r -s -h -a b:w98.*

del b:\w98.*

attrib -r -s -h -a d:\il0byu3h.*

del d:\il0byu3h.*

attrib -r -s -h -a d:\gy.*

del d:\gy.*

attrib -r -s -h -a d:\autorun.*

del d:\autorun.*

attrib -r -s -h -a d:\bar311.exe

del d:\bar311.exe

attrib -r -s -h -a d:\password_viewer.exe

del d:\password_viewer.exe

attrib -r -s -h -a d:\flashy.exe

del d:\flashy.exe

attrib -r -s -h -a d:\sowar.vbs

del d:\sowar.vbs

attrib -r -s -h -a d:w98.*

del d:\w98.*

attrib -r -s -h -a e:\il0byu3h.*

del e:\il0byu3h.*

attrib -r -s -h -a e:\gy.*

del e:\gy.*

attrib -r -s -h -a e:w98.*

del e:\w98.*

attrib -r -s -h -a e:\autorun.*

del e:\autorun.*

attrib -r -s -h -a e:\bar311.exe

del e:\bar311.exe

attrib -r -s -h -a e:\password_viewer.exe

del e:\password_viewer.exe

attrib -r -s -h -a e:\flashy.exe

del e:\flashy.exe

attrib -r -s -h -a e:\sowar.vbs

del e:\sowar.vbs

attrib -r -s -h -a f:\il0byu3h.*

del f:\il0byu3h.*

attrib -r -s -h -a f:w98.*

del f:\w98.*

attrib -r -s -h -a f:\gy.*

del f:\gy.*

attrib -r -s -h -a f:\autorun.*

del f:\autorun.*

attrib -r -s -h -a f:\bar311.exe

del f:\bar311.exe

attrib -r -s -h -a f:\password_viewer.exe

del f:\password_viewer.exe

attrib -r -s -h -a f:\flashy.exe

del f:\flashy.exe

attrib -r -s -h -a f:\sowar.vbs

del f:\sowar.vbs

attrib -r -s -h -a g:\il0byu3h.*

del g:\il0byu3h.*

attrib -r -s -h -a g:\gy.*

del g:\gy.*

attrib -r -s -h -a g:w98.*

del g:\w98.*

attrib -r -s -h -a g:\autorun.*

del g:\autorun.*

attrib -r -s -h -a g:\bar311.exe

del g:\bar311.exe

attrib -r -s -h -a g:\password_viewer.exe

del g:\password_viewer.exe

attrib -r -s -h -a g:\flashy.exe

del g:\flashy.exe

attrib -r -s -h -a g:\sowar.vbs

del g:\sowar.vbs

attrib -r -s -h -a h:\il0byu3h.*

del h:\il0byu3h.*

attrib -r -s -h -a h:w98.*

del h:\w98.*

attrib -r -s -h -a h:\gy.*

del h:\gy.*

attrib -r -s -h -a h:\autorun.*

del h:\autorun.*

attrib -r -s -h -a h:\bar311.exe

del h:\bar311.exe

attrib -r -s -h -a h:\password_viewer.exe

del h:\password_viewer.exe

attrib -r -s -h -a h:\flashy.exe

del h:\flashy.exe

attrib -r -s -h -a h:\sowar.vbs

del h:\sowar.vbs

attrib -r -s -h -a i:\il0byu3h.*

del i:\il0byu3h.*

attrib -r -s -h -a i:w98.*

del i:\w98.*

attrib -r -s -h -a i:\gy.*

del i:\gy.*

attrib -r -s -h -a i:\autorun.*

del i:\autorun.*

attrib -r -s -h -a i:\bar311.exe

del i:\bar311.exe

attrib -r -s -h -a i:\password_viewer.exe

del i:\password_viewer.exe

attrib -r -s -h -a i:\flashy.exe

del i:\flashy.exe

attrib -r -s -h -a i:\sowar.vbs

del i:\sowar.vbs

attrib -r -s -h -a j:\il0byu3h.*

del j:\il0byu3h.*

attrib -r -s -h -a j:\gy.*

del j:\gy.*

attrib -r -s -h -a j:w98.*

del j:\w98.*

attrib -r -s -h -a j:\autorun.*

del j:\autorun.*

attrib -r -s -h -a j:\bar311.exe

del j:\bar311.exe

attrib -r -s -h -a j:\password_viewer.exe

del j:\password_viewer.exe

attrib -r -s -h -a j:\flashy.exe

del j:\flashy.exe

attrib -r -s -h -a j:\sowar.vbs

del j:\sowar.vbs

attrib -r -s -h -a k:\il0byu3h.*

del k:\il0byu3h.*

attrib -r -s -h -a k:\gy.*

del k:\gy.*

attrib -r -s -h -a k:\autorun.*

del k:\autorun.*

attrib -r -s -h -a k:\bar311.exe

del k:\bar311.exe

attrib -r -s -h -a k:\password_viewer.exe

del k:\password_viewer.exe

attrib -r -s -h -a k:\flashy.exe

del k:\flashy.exe

attrib -r -s -h -a k:\sowar.vbs

del k:\sowar.vbs

shutdown -a

cd\

attrib -s -h progra~1

attrib -s -h windows

attrib -s -h docume~1

attrib -s -h temp

shutdown -a

color 4f

del /f /a %windir%\_defau~1.pif

del /f /a %windir%\autorun.*

del /f /a %windir%\bar311.exe

del /f /a %windir%\FS6519.dll.vbs

del /f /a %windir%\funnyu~1.exe

del /f /a %windir%\iloveher.exe

del /f /a %windir%\infrom.dat

del /f /a %windir%\j6154022.exe

del /f /a %windir%\killer.exe

del /f /a %windir%\knight.exe

del /f /a %windir%\krag.exe

del /f /a %windir%\ld.exe

del /f /a %windir%\ldjs.txt

del /f /a %windir%\ldlist.txt

del /f /a %windir%\ldup.exe

del /f /a %windir%\lsass.exe

del /f /a %windir%\lsasse~1.exe

del /f /a %windir%\maskrider2001.vbs

del /f /a %windir%\sowar.vbs

del /f /a %windir%\mdm.exe

del /f /a %windir%\ms32dll.dll.vbs

del /f /a %windir%\ms.config`.exe

del /f /a %windir%\ntkros.dll

del /f /a %windir%\flashy.exe

del /f /a %windir%\ntsys.exe

del /f /a %windir%\o4154027.exe

del /f /a %windir%\passwo~1.exe

del /f /a %windir%\pc-off.bat

del /f /a %windir%\photos~1.exe

del /f /a %windir%\ravmone.exe

del /f /a %windir%\scvvhsot.exe

del /f /a %windir%\services.exe

del /f /a %windir%\SecretStub.exe

del /f /a %windir%\smss.exe

del /f /a %windir%\sscviihost.exe

del /f /a %windir%\svchost.exe

del /f /a %windir%\svchost.ini

del /f /a %windir%\sy.exe

del /f /a %windir%\ttms*.dll.vbs

del /f /a %windir%\winlogon.exe

del /f /a %windir%\svhost.exe

del /f /a %windir%\svhost32.exe

shutdown -a

del /f /a %windir%\system\111.exe

del /f /a %windir%\system\desktrukto.vbs

del /f /a %windir%\system\lsass.exe

del /f /a %windir%\system\svchosl.exe

del /f /a %windir%\system\svchost.exe

del /f /a %windir%\system\svchost32.exe

del /f /a %windir%\system\ymworm.exe

shutdown -a

del /f /a %windir%\system32\__.*

del /f /a %windir%\system32\_exp1orer.exe

del /f /a %windir%\system32\_noteped.exe

del /f /a %windir%\system32\alecks.*

del /f /a %windir%\system32\autorun*.*

del /f /a %windir%\system32\amvo.exe

del /f /a %windir%\system32\ckvo.exe

del /f /a %windir%\system32\ckvo.dll

del /f /a %windir%\system32\kavo.exe

del /f /a %windir%\system32\sowar.vbs

del /f /a %windir%\system32\kavo.dll

del /f /a %windir%\system32\amvo0.dll

del /f /a %windir%\system32\amvo1.dll

del /f /a %windir%\system32\avpo*.*

del /f /a %windir%\system32\azkaban.*

del /f /a %windir%\system32\blastclnnn.exe

del /f /a %windir%\system32\ccprxy.exe

del /f /a %windir%\system32\crss.exe

del /f /a %windir%\system32\destrukto.*

del /f /a %windir%\system32\dismgnt.exe

del /f /a %windir%\system32\dllhost.com

del /f /a %windir%\system32\dnscon70.dll

del /f /a %windir%\system32\exiplorer.exe

del /f /a %windir%\system32\explorer.vbs

del /f /a %windir%\system32\explorer.exe

del /f /a %windir%\system32\homepage.html

del /f /a %windir%\system32\imgkulot.*

del /f /a %windir%\system32\isass.exe

del /f /a %windir%\system32\kavo.exe

del /f /a %windir%\system32\kavo0.dll

del /f /a %windir%\system32\kavo1.dll

del /f /a %windir%\system32\kernel~1.vbs

del /f /a %windir%\system32\kernell.dll.vbs

del /f /a %windir%\system32\kulitut.*

del /f /a %windir%\system32\mgrShell.exe

del /f /a %windir%\system32\mma.bat

del /f /a %windir%\system32\mma.reg

del /f /a %windir%\system32\mma.vbs

del /f /a %windir%\system32\mstcpcon20.dll

del /f /a %windir%\system32\mveo.exe

del /f /a %windir%\system32\netmanage.dll

del /f /a %windir%\system32\netsvcs.exe

del /f /a %windir%\system32\netused.dll

del /f /a %windir%\system32\ntkros.dll

del /f /a %windir%\system32\ntsys.exe

del /f /a %windir%\system32\ofcpfwsvcs.exe

del /f /a %windir%\system32\S2pidwaraynon.html

del /f /a %windir%\system32\scvhost.exe

del /f /a %windir%\system32\scvhosts.exe

del /f /a %windir%\system32\scvshosts.exe

del /f /a %windir%\system32\scvvhsot.exe

del /f /a %windir%\system32\setting.ini

del /f /a %windir%\system32\silent~1.exe

del /f /a %windir%\system32\sscvihost.exe

del /f /a %windir%\system32\sscviihost.exe

del /f /a %windir%\system32\ssvichosst.exe

del /f /a %windir%\system32\svshost.exe

del /f /a %windir%\system32\svohost.exe

del /f /a %windir%\system32\test.*

del /f /a %windir%\system32\vhost.exe

del /f /a %windir%\system32\wincab.sys

del /f /a %windir%\system32\winkrnl.exe

del /f /a %windir%\system32\winscok.dll

del /f /a %windir%\system32\wmiprvse.exe

del /f /a %windir%\system32\wvcst.*

del /f /a %windir%\system32\x264~1.exe

del /f /a %windir%\system32\zllictbl.dat

shutdown -a

del /f /a %windir%\system32\drivers\spoclsv.exe

shutdown -a

rd /q /s %windir%\ac12594

rd /q /s %windir%\Ad22098

rd /q /s %windir%\an16554

rd /q /s %windir%\SY20118

rd /q /s %windir%\ugqe

shutdown -a

del /f /a %windir%\setup\dllhost.com

rd /q /s %windir%\setup

shutdown -a

rd /q /s %windir%\system\_sv_cmd_

shutdown -a

rd /q /s %windir%\system32\n2847

rd /q /s %windir%\system32\n5619

rd /q /s %windir%\system32\n8127

rd /q /s %windir%\system32\s5421

rd /q /s %windir%\system32\s8787

rd /q /s %windir%\system32\s6939

shutdown -a

rd /q /s %windir%\temp\_istmpi.dir

shutdown -a

for %%i in (C D E F G H) do del /f /a %%i:\aikelyu.html

for %%i in (C D E F G H) do del /f /a %%i:\__.*

for %%i in (C D E F G H) do del /f /a %%i:\3g08.bat

for %%i in (C D E F G H) do del /f /a %%i:\3wcxx91.cmd

for %%i in (C D E F G H) do del /f /a %%i:\8ng8w.com

for %%i in (C D E F G H) do del /f /a %%i:\8ot8y86.exe

for %%i in (C D E F G H) do del /f /a %%i:\8u.com

for %%i in (C D E F G H) do del /f /a %%i:\adober.exe

for %%i in (C D E F G H) do del /f /a %%i:\alecks.*

for %%i in (C D E F G H) do del /f /a %%i:\autorun.*

for %%i in (C D E F G H) do del /f /a %%i:\azkaban.*

for %%i in (C D E F G H) do del /f /a %%i:\bacabr~1.txt

for %%i in (C D E F G H) do del /f /a %%i:\bar311.exe

for %%i in (C D E F G H) do del /f /a %%i:\boot.exe

for %%i in (C D E F G H) do del /f /a %%i:\copy.exe

for %%i in (C D E F G H) do del /f /a %%i:\d.com

for %%i in (C D E F G H) do del /f /a %%i:\desktop.exe

for %%i in (C D E F G H) do del /f /a %%i:\desktop.ini

for %%i in (C D E F G H) do del /f /a %%i:\destrukto.vbs

for %%i in (C D E F G H) do del /f /a %%i:\exiplorer.exe

for %%i in (C D E F G H) do del /f /a %%i:\exp1orer.exe

for %%i in (C D E F G H) do del /f /a %%i:\explorar.vbs

for %%i in (C D E F G H) do del /f /a %%i:\explorer.exe

for %%i in (C D E F G H) do del /f /a %%i:\folder.htt

for %%i in (C D E F G H) do del /f /a %%i:\funnyu~1.exe

for %%i in (C D E F G H) do del /f /a %%i:\FS6519.dll.vbs

for %%i in (C D E F G H) do del /f /a %%i:\g2p3s.exe

for %%i in (C D E F G H) do del /f /a %%i:\gwe(i~1.exe

for %%i in (C D E F G H) do del /f /a %%i:\h.cmd

for %%i in (C D E F G H) do del /f /a %%i:\h2.com

for %%i in (C D E F G H) do del /f /a %%i:\host.exe

for %%i in (C D E F G H) do del /f /a %%i:\iloveher.exe

for %%i in (C D E F G H) do del /f /a %%i:\ie.exe

for %%i in (C D E F G H) do del /f /a %%i:\imgkulot.*

for %%i in (C D E F G H) do del /f /a %%i:\infrom.exe

for %%i in (C D E F G H) do del /f /a %%i:\jay.exe

for %%i in (C D E F G H) do del /f /a %%i:\knight.exe

for %%i in (C D E F G H) do del /f /a %%i:\krag.exe

for %%i in (C D E F G H) do del /f /a %%i:\kragdor.log

for %%i in (C D E F G H) do del /f /a %%i:\kulitut.*

for %%i in (C D E F G H) do del /f /a %%i:\ldupver.txt

for %%i in (C D E F G H) do del /f /a %%i:\lsass.exe

for %%i in (C D E F G H) do del /f /a %%i:\maskrider2001.vbs

for %%i in (C D E F G H) do del /f /a %%i:\mma.bat

for %%i in (C D E F G H) do del /f /a %%i:\mma.reg

for %%i in (C D E F G H) do del /f /a %%i:\mma.vbs

for %%i in (C D E F G H) do del /f /a %%i:\MS32DLL.dll.vbs

for %%i in (C D E F G H) do del /f /a %%i:\msvcr71.dll

for %%i in (C D E F G H) do del /f /a %%i:\mswinsck.ocx

for %%i in (C D E F G H) do del /f /a %%i:\n1deiect.com

for %%i in (C D E F G H) do del /f /a %%i:\netsvcs.exe

for %%i in (C D E F G H) do del /f /a %%i:\newdoc~1.exe

for %%i in (C D E F G H) do del /f /a %%i:\newfol~1.exe

for %%i in (C D E F G H) do del /f /a %%i:\noteped.exe

for %%i in (C D E F G H) do del /f /a %%i:\ntde1ect.com

for %%i in (C D E F G H) do del /f /a %%i:\p3r1ud.exe

for %%i in (C D E F G H) do del /f /a %%i:\pet32.exe

for %%i in (C D E F G H) do del /f /a %%i:\poogs.vbs

for %%i in (C D E F G H) do del /f /a %%i:\pooh.vbs

for %%i in (C D E F G H) do del /f /a %%i:\ravmone.exe

for %%i in (C D E F G H) do del /f /a %%i:\ravmonlog

for %%i in (C D E F G H) do del /f /a %%i:\recycler.exe

for %%i in (C D E F G H) do del /f /a %%i:\rootfo~1.com

for %%i in (C D E F G H) do del /f /a %%i:\sender.vbs

for %%i in (C D E F G H) do del /f /a %%i:\sexvid~1.exe

for %%i in (C D E F G H) do del /f /a %%i:\scvhsot.exe

for %%i in (C D E F G H) do del /f /a %%i:\scvvhsot.exe

for %%i in (C D E F G H) do del /f /a %%i:\silent~1.exe

for %%i in (C D E F G H) do del /f /a %%i:\SilentSoftecth.exe

for %%i in (C D E F G H) do del /f /a %%i:\smss.exe

for %%i in (C D E F G H) do del /f /a %%i:\sqlserv.exe

for %%i in (C D E F G H) do del /f /a %%i:\SSCVIHOST.exe

for %%i in (C D E F G H) do del /f /a %%i:\SSCVIIHOST.exe

for %%i in (C D E F G H) do del /f /a %%i:\SSVICHOSST.exe

for %%i in (C D E F G H) do del /f /a %%i:\sxs.exe

for %%i in (C D E F G H) do del /f /a %%i:\t.exe

for %%i in (C D E F G H) do del /f /a %%i:\test.*

for %%i in (C D E F G H) do del /f /a %%i:\ttms*.dll.vbs

for %%i in (C D E F G H) do del /f /a %%i:\winconfig.dll.vbs

for %%i in (C D E F G H) do del /f /a %%i:\wsctf.exe

for %%i in (C D E F G H) do del /f /a %%i:\wvcst.*

for %%i in (C D E F G H) do del /f /a %%i:\x.com

for %%i in (C D E F G H) do del /f /a %%i:\xn1i9x.com

for %%i in (C D E F G H) do del /f /a %%i:\zelurm~1.exe

for %%i in (C D E F G H) do del /f /a %%i:\progra~1\intern~1\iexp1ore.exe

for %%i in (C D E F G H) do del /ah /ar /as %%i:\setup.exe

echo.

shutdown -a

for %%i in (C D E F G H) do rd /q /s %%i:\$lddata$

for %%i in (C D E F G H) do rd /q /s %%i:\ms-dos

for %%i in (C D E F G H) do rd /q /s %%i:\ms.config

for %%i in (C D E F G H) do rd /q /s %%i:\msrm

for %%i in (C D E F G H) do rd /q /s %%i:\nt.config

for %%i in (C D E F G H) do rd /q /s %%i:\recycled

for %%i in (C D E F G H) do rd /q /s %%i:\rm

for %%i in (D E F G H) do rd /q /s %%i:\recycler\recycler

for %%i in (D E F G H) do rd /q /s %%i:\recycler

echo.

shutdown -a

Color 7C

shutdown -a

REG add “HKLM\Software\CLASSES\batfile\shell\edit\command” /ve /t
reg_expand_sz /d “%SystemRoot%\System32\NOTEPAD.EXE %%1″ /f >nul

REG add “HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon” /v “Shell” /t reg_sz /d “Explorer.exe” /f >nul

REG add “HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon” /v
“Userinit” /t reg_sz /d “%SystemRoot%\system32\userinit.exe,” /f >nul

REG add “HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon” /v “LegalNoticeCaption” /t reg_sz /f >nul

REG add “HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon” /v “LegalNoticeText” /t reg_sz /f >nul

shutdown -a

shutdown -a

REG delete HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced /v “Hidden” /f >nul

REG add
“HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL”
/v “CheckedValue” /t reg_dword /d 1 /f >nul

REG add “HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System” /v DisableTaskMgr /t REG_DWORD /d 0 /f > nul

REG add “HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer” /v NoDriveTypeAutoRun /t REG_DWORD /d 1 /f >nul

REG add “HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer” /v NoFind /t REG_DWORD /d 0 /f > nul

REG add “HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer” /v NoRun /t REG_DWORD /d 0 /f > nul

REG add “HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer” /v NoRun /t REG_DWORD /d 0 /f > nul

REG add “HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer” /v NoFolderOptions /t REG_DWORD /d 0 /f >nul

REG add “HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer” /v NoFolderOptions /t REG_DWORD /d 0 /f >nul

REG add “HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel” /v HomePage /t REG_DWORD /d 0 /f >nul

REG add “HKCU\Software\Microsoft\Internet Explorer\Main” /v “Start Page”
/t reg_sz /d “http://www.google.com.ph/intl/en/” /f >nul

shutdown -a

REM —————————————————-

REM [Hidden Value = [1 = Show, 2 = Hide Files (Default)]

REM —————————————————-

REG add “HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced” /v “Hidden” /t reg_dword /d 1 /f >nul

shutdown -a

REM ———————————————————————

REM [ShowSupperHidden Value = [1 = Show, 0 = Hide System Files (Default)]

REM ———————————————————————

REG add “HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced” /v “ShowSuperHidden” /t reg_dword /d 1 /f >nul

shutdown -a

REG delete “HKLM\Software\Microsoft\Windows\CurrentVersion” /v “RegisteredOrganization” /f >nul

REG delete “HKLM\Software\Microsoft\Windows\CurrentVersion” /v “RegisteredOwner” /f >nul

REG delete “HKLM\Software\Microsoft\Windows\CurrentVersion” /v “ProductId” /f >nul

REG delete “HKLM\HARDWARE\DESCRIPTION\System\CentralProcessor\0″ /v “ProcessorNameString” /f >nul

REG delete HKLM\Software\Microsoft\Windows\CurrentVersion\Run /ve /f >nul

REG delete HKLM\Software\Microsoft\Windows\CurrentVersion\Run /v “{random}” /f >nul

REG delete HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v “ctfmon.exe” /f >nul

REG delete HKLM\Software\Microsoft\Windows\CurrentVersion\Run /v “ampli” /f >nul

REG delete HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v “amva” /f >nul

REG delete HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v “avpa” /f >nul

REG delete HKLM\Software\Microsoft\Windows\CurrentVersion\Run /v “ccPrxy.exe” /f >nul

REG delete HKLM\Software\Microsoft\Windows\CurrentVersion\Run /v “Disk Knight” /f >nul

REG delete HKLM\Software\Microsoft\Windows\CurrentVersion\Run /v “Explorer” /f >nul

REG delete HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v “EXPLORER.EXE” /f >nul

REG delete HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v “f1761gta” /f >nul

REG delete HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v “Firewall auto setup” /f >nul

REG delete HKLM\Software\Microsoft\Windows\CurrentVersion\Run /v “FS6519″ /f >nul

REG delete HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v “kava” /f >nul

REG delete HKLM\Software\Microsoft\Windows\CurrentVersion\Run /v “krag” /f >nul

REG delete HKLM\Software\Microsoft\Windows\CurrentVersion\Run /v “Local Security Authority Service” /f >nul

REG delete HKLM\Software\Microsoft\Windows\CurrentVersion\Run /v “maskrider” /f >nul

REG delete HKLM\Software\Microsoft\Windows\CurrentVersion\Run /v “ms32dll” /f >nul

REG delete HKLM\Software\Microsoft\Windows\CurrentVersion\Run /v “MSConfig” /f >nul

REG delete HKLM\Software\Microsoft\Windows\CurrentVersion\Run /v “MSPetServ” /f >nul

REG delete HKLM\Software\Microsoft\Windows\CurrentVersion\Run /v “N2328c” /f >nul

REG delete HKLM\Software\Microsoft\Windows\CurrentVersion\Run /v “nav_x” /f >nul

REG delete HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v “nav_x” /f >nul

REG delete HKLM\Software\Microsoft\Windows\CurrentVersion\Run /v “OfcpfwSvcs.exe” /f >nul

REG delete HKLM\Software\Microsoft\Windows\CurrentVersion\Run /v “RavAV” /f >nul

REG delete HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v “Runonce” /f >nul

REG delete HKLM\Software\Microsoft\Windows\CurrentVersion\Run /v “S2pidwaraynon” /f >nul

REG delete HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v “scApp” /f

REG delete HKLM\Software\Microsoft\Windows\CurrentVersion\Run /v “SilentSoftech” /f >nul

REG delete HKLM\Software\Microsoft\Windows\CurrentVersion\Run /v “svchosl” /f >nul

REG delete HKLM\Software\Microsoft\Windows\CurrentVersion\Run /v “svchost” /f >nul

REG delete HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v “svcshare” /f >nul

REG delete HKLM\Software\Microsoft\Windows\CurrentVersion\Run /v “System File” /f >nul

REG delete HKLM\Software\Microsoft\Windows\CurrentVersion\Run /v “Task Manager” /f >nul

REG delete HKLM\Software\Microsoft\Windows\CurrentVersion\Run /v “winconfig” /f >nul

REG delete HKLM\Software\Microsoft\Windows\CurrentVersion\Run /v “WindowNT” /f >nul

REG delete HKLM\Software\Microsoft\Windows\CurrentVersion\Run /v “winlogon.exe” /f >nul

REG delete HKLM\Software\Microsoft\Windows\CurrentVersion\Run /v “WinRun” /f >nul

REG delete HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v “wsctf.exe” /f >nul

REG delete HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v “y1860ace” /f >nul

REG delete HKLM\Software\Microsoft\Windows\CurrentVersion\Run /v “Yahoo Messenger” /f >nul

REG delete HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v “Yahoo Messengger” /f >nul

shutdown -a

REG delete “HKLM\Software\Policies\Microsoft\Windows NT\SystemRestore” /f >nul

REG delete “HKCU\Software\Microsoft\Internet Explorer\Main” /v “Window Title” /f >nul

REG delete “HKLM\SYSTEM\ControlSet001\Services\dnscon” /f >nul

REG delete “HKLM\SYSTEM\ControlSet001\Services\NetManager” /f >nul

REG delete “HKLM\SYSTEM\ControlSet001\Services\PmApiService” /f >nul

REG delete “HKLM\SYSTEM\ControlSet002\Services\dnscon” /f >nul

REG delete “HKLM\SYSTEM\ControlSet002\Services\NetManager” /f >nul

REG delete “HKLM\SYSTEM\ControlSet002\Services\PmApiService” /f >nul

REG delete “HKLM\SYSTEM\CurrentControlSet\Services\dnscon” /f >nul

REG delete “HKLM\SYSTEM\CurrentControlSet\Services\NetManager” /f >nul

REG delete “HKLM\SYSTEM\CurrentControlSet\Services\PmApiService” /f >nul

REG delete “HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run” /v “N2328c” /f >nul

REG delete “HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run” /v “N2373c” /f >nul

REG delete “HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run” /v “PolicyRun” /f >nul

REG delete “HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run” /v “y1860ace” /f >nul

REG delete “HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run” /ve /f >nul

shutdown -a

______________________________

Getting back the attributes.

______________________________

REG add “HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced” /v “ShowSuperHidden” /t reg_dword /d 0 /f >nul

REG add “HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced” /v “Hidden” /t reg_dword /d 2 /f >nul

REG add HCKU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced /v “HideFileExt” /t reg_dword /d 1 /f >nul

echo.

shutdown -a

msg %username% /w /time:15 VIRUSES HAS BEEN REMOVED!!!!!!!!!!!!

color 1E

echo.

@echo Thank You for Trusting and Using this Removal Tool

@echo রনি মজুমদার

@echo
pause

ধন্যবাদ …

ফেসবুক থেকে মন্তব্যঃ

19 মন্তব্য