IMG病毒清楚脚本

weigongwan

    今天俺机器也中了号称是仅次于熊猫烧香的病毒。后来问了好多朋友才知道只要把它的相关文件都删除掉就OK了！因此写出脚本程序来，以备不测时用！呵呵……

@echo KILL ALL IMG virus!
@echo I'm deleteing you computer virus, please wait......
del /s/q c:\windows\igm.exe
del /s/q c:\windows\msimm32.exe
del /s/q c:\windows\system32\msimm32.dll
del /s/q c:\windows\avpsrv.exe
del /s/q c:\windows\system32\avpsrv.dll
del /s/q c:\windows\mppds.exe
del /s/q c:\windows\system32\mppds.dll
del /s/q c:\windows\nvdispdrv.exe
del /s/q c:\windows\system32\nvdispdrv.dll
del /s/q c:\windows\cmdbcs.exe
del /s/q c:\windows\system32\cmdbcs.dll
del /s/q c:\windows\upxdnd.exe
del /s/q c:\windows\system32\upxdnd.dll
del /s/q c:\windows\msccrt.exe
del /s/q c:\windows\system32\msccrt.dll
del /s/q c:\windows\kvsc3.exe
del /s/q c:\windows\system32\kvsc3.dll
del /s/q c:\auto.exe
del /s/q c:\autorun.inf
del /s/q d:\auto.exe
del /s/q d:\autorun.inf
del /s/q e:\auto.exe
del /s/q e:\autorun.inf
del /s/q f:\auto.exe
del /s/q f:\autorun.inf
reg /delete HKLM\software\Microsoft\Windows\CurrentVersion\run\LTSMMSG /f
reg /delete HKLM\software\Microsoft\Windows\CurrentVersion\run\Kvsc3 /f
reg /delete HKLM\software\Microsoft\Windows\CurrentVersion\run\avpsrc /f
reg /delete HKLM\software\Microsoft\Windows\CurrentVersion\run\mppds /f
reg /delete HKLM\software\Microsoft\Windows\CurrentVersion\run\cmdbcs /f
reg /delete HKLM\software\Microsoft\Windows\CurrentVersion\run\upxdnd /f
reg /delete HKLM\software\Microsoft\Windows\CurrentVersion\run\msccrt /f
reg /delete HKLM\software\Microsoft\Windows\CurrentVersion\run\msimmS32 /f
@echo viurs alread deleted complere! please restart your system!
@echo Restart computer?
pause
shutdown -r -t 0
将此脚本保存为IMG_KILL.bat然后双击即可运行!


本文来自ChinaUnix博客，如果查看原文请点：http://blog.chinaunix.net/u/31179/showart_421659.html