1.bat

整合了很多杀毒软件 实用 经典 可以使用

@echo off
title 各种病毒清理专杀
echo ******************************************************************************
echo *                      *
echo *      欢迎使用 ☆梦幻古都论坛☆ 常见病毒专杀      *
echo *                      *
echo ******************************************************************************
echo.
color 0A
echo 说明:
echo.
echo 本作品是结合了许多经典的各种病毒专杀写成的
echo.
echo 主要是方便新手们学习
echo.
echo 让天下的所有网友和菜鸟们都能够学到好的黑客技术
echo.
echo 为了大家的梦想一起努力，请不要放弃自己的梦想。 o(∩_∩)o..
echo.
echo.希望大家能够喜欢~
echo.
echo 梦幻古都论坛群 QQ:32534118
echo.
echo 请按回车键
pause>nul
cls
echo *****************************************************************************
echo *                      *
echo *        选 择 杀 毒 的 方 式        *
echo *                      *
echo *****************************************************************************
echo.
echo.
echo 输入 1 后按回车键, 专杀熊猫烧香.
echo 输入 2 后按回车键, 清理熊猫烧香内存病毒.
echo 输入 3 后按回车键, 专杀金威病毒.
echo 输入 4 后按回车键, sxs病毒专杀.bat.
echo 输入 5 后按回车键, 清除灰鸽子2.0.
echo 输入 6 后按回车键, 防病毒.
echo 输入 7 后按回车键, viking专杀.
echo 输入 8 后按回车键, 清理U盘病毒和保护.
echo 输入 9 后按回车键, 冲击波专杀.
echo 输入 10 后按回车键, 修复IE.
echo 输入 11 后按回车键, 熊猫烧香变种spcolsv专杀.
echo 输入 12 后按回车键, autorun病毒免疫.
echo 输入 13 后按回车键, 可屏蔽网址的批处理.
echo 输入 14 后按回车键, 强行聊QQ.
echo 输入 15 后按回车键, 清理流氓插件.
echo 输入 16 选择退出
echo.
@set /p start=请选择 (1、2、3、4、5、6、7、8、9、10、11、12、13、14、15、16=退出) 后按回车键: 
if "%start%"=="1" goto 1
if "%start%"=="2" goto 2 
if "%start%"=="3" goto 3 
if "%start%"=="4" goto 4
if "%start%"=="5" goto 5
if "%start%"=="6" goto 6
if "%start%"=="7" goto 7
if "%start%"=="8" goto 8 
if "%start%"=="8" goto 9
if "%start%"=="10" goto 10
if "%start%"=="11" goto 11
if "%start%"=="12" goto 12
if "%start%"=="13" goto 13 
if "%start%"=="14" goto 14
if "%start%"=="15" goto 15
if "%start%"=="16" goto 16
if "%start%"=="17" goto 17
if "%start%"=="18" goto 18
if "%start%"=="19" goto 19
:1 
@echo off 
title 清除熊猫烧香病工具 God God.10Mb.cN 
@echo 清除熊猫烧香病工具 
@echo 
@echo 
@echo 
@echo 
pause 

if exist %windir%\rundl132.exe echo ☆☆☆发现有熊猫烧香病毒! ☆☆☆ 
if exist %windir%\logo_1.exe echo ☆☆☆发现有熊猫烧香病毒! ☆☆☆ 
if exist %Windir%\system32\drivers\spoclsv.exe echo ☆☆☆嘿嘿！！熊猫烧香你还想跑!!☆☆☆ 
@echo 正在杀进程里的病毒,请稍等......... 
tskill logo_1 
tskill rundl132 
tskill zt 
tskill wow 
tskill logo1_ 
tskill Ravmon 
tskill Eghost 
tskill Mailmon 
tskill KAVPFW 
tskill IPARMOR 
tskill Ravmond 
tskill spoclsv 
tskill SVCHQST 
tskill devgt 
tskill sxs 
taskkill /f /im 0sy.exe 
taskkill /f /im 1sy.exe 
taskkill /f /im 2sy.exe 
taskkill /f /im 3sy.exe 
taskkill /f /im 4sy.exe 
taskkill /f /im 5sy.exe 
taskkill /f /im 6sy.exe 
taskkill /f /im 7sy.exe 
taskkill /f /im 8sy.exe 
taskkill /f /im 9sy.exe 
taskkill /f /im spoclsv.exe 
taskkill /f /im SVCHQST 
taskkill /f /im devgt.exe 
taskkill /f /im sxs.exe 
echo 正在查找熊猫烧香病毒,请稍等......... 
del d:\_desktop.ini /f/s/q/a 
del c:\Program Files\_desktop.ini 
del %Windir%\MickNew\MickNew.dll 
del %Windir%\MH_FILE\MH_DLL.dll 
del %Windir%\_desktop.ini 
del %Windir%\TODAYZTKING\TODAYZTKING.DLL 
del %Windir%\system32\drivers\spoclsv.exe 
attrib -h -r -s c:\sxs.exe 
del c:\sxs.exe 
del c:\setup.exe 
attrib -h -s -r c:\autorun.inf 
del c:\autorun.inf 
attrib -h -r -s d:\sxs.exe 
del d:\sxs.exe 
del d:\setup.exe 
attrib -h -s -r d:\autorun.inf 
del d:\autorun.inf 
attrib -h -r -s e:\sxs.exe 
del e:\sxs.exe 
del e:\setup.exe 
attrib -h -s -r e:\autorun.inf 
del e:\autorun.inf 
attrib -h -r -s f:\sxs.exe 
del f:\sxs.exe 
del f:\setup.exe 
attrib -h -s -r f:\autorun.inf 
del f:\autorun.inf 
attrib -h -r -s g:\sxs.exe 
del g:\sxs.exe 
del g:\setup.exe 
attrib -h -s -r g:\autorun.inf 
del g:\autorun.inf 
attrib -h -s -r h:\sxs.exe 
del h:\sxs.exe 
del h:\setup.exe 
attrib -h -s -r h:\autorun.inf 
del h:\autorun.inf 
attrib -h -s -r i:\sxs.exe 
del i:\sxs.exe 
del i:\setup.exe 
attrib -h -s -r i:\autorun.inf 
del i:\autorun.inf 
attrib -h -s -r i:\sxs.exe 
del j:\sxs.exe 
del j:\setup.exe 
attrib -h -s -r g:\autorun.inf 
del j:\autorun.inf 
del %windir%\system\Logo1_.exe 
del %windir%\rundl132.exe 
del %windir%\vDll.dll 
del %windir%\Dll.dll 
del %windir%{topic_info}Sy.exe 
del %windir%\1Sy.exe 
del %windir%\2Sy.exe 
del %windir%\3Sy.exe 
del %windir%\5Sy.exe 
del %windir%\1.com 
echo 正在删注册表的病毒...... 
echo Windows Registry Editor Version 5.00> c:\aa.reg 
echo [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]>> c:\aa.reg 
echo "qdoxjq"=->> c:\aa.reg 
echo "ctfmon"=->> c:\aa.reg 
echo "svcshare"=->> c:\aa.reg 
echo "myZt3"=->> c:\aa.reg 
echo "myMh2"=->> c:\aa.reg 
echo "SVOHOST"=- >> c:\aa.reg 
echo "sxs"=->> c:\aa.reg 
echo Nowing using the registry file to chang the system default properties. 
regedit /s c:\aa.reg 
echo Deleting the temprotarily files. 
del c:\aa.reg 
echo 正在修改被病毒感染的注册表...... 
echo Windows Registry Editor Version 5.00> c:\delshare.reg 
echo [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL]>> c:\delshare.reg 
echo "RegPath"="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced">> c:\delshare.reg 
echo "Text"="@shell32.dll,-30500">> c:\delshare.reg 
echo "Type"="radio">> c:\delshare.reg 
echo "CheckedValue"=dword:00000001>> c:\delshare.reg 
echo "ValueName"="Hidden">> c:\delshare.reg 
echo "DefaultValue"=dword:00000002>> c:\delshare.reg 
echo "HKeyRoot"=dword:80000001>> c:\delshare.reg 
echo "HelpID"="shell.hlp#51105">> c:\delshare.reg 
echo Nowing using the registry file to chang the system default properties. 
regedit /s c:\delshare.reg 
echo Deleting the temprotarily files. 
del c:\delshare.reg 
echo Windows Registry Editor Version 5.00> c:\cc.reg 
echo [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]>> c:\cc.reg 
echo "DebugOptions"="2048">> c:\cc.reg 
echo "Documents"="">> c:\cc.reg 
echo "DosPrint"="no">> c:\cc.reg 
echo "load"=->> c:\cc.reg 
echo "NetMessage"="no">> c:\cc.reg 
echo "NullPort"="None">> c:\cc.reg 
echo "Programs"="com exe bat pif cmd">> c:\cc.reg 
echo "Device"="">> c:\cc.reg 
echo Nowing using the registry file to chang the system default properties. 
regedit /s c:\cc.reg 
echo Deleting the temprotarily files. 
del c:\cc.reg 
@echo -God QQ9746093-请重新启动!!---- 
goto type
:2
call 清除熊猫内存病毒.bat
:3 
@echo off
title 清除威金（logo_1,熊猫烧香）病毒最新变种工具
@echo 清除VIKING病毒最新变种工具
@echo -------------------------------------------------------
@echo by:zero MYQQ：36766812
@echo 
@echo VIKLIG病毒，专杀工具,请复制此代码 保存为.bat后缀的批处理文件双击运行即可.
@echo --------------------------------------------------------
pause>nul

if exist %windir%\rundl132.exe echo ---病毒警报，发现有威金病毒
if exist %windir%\logo_1.exe echo ---病毒警报，发现有威金病毒
rem 杀viking进程
tskill logo_1
tskill rundl132
tskill zt
tskill wow
tskill logo1_ 
tskill Ravmon 
tskill Eghost 
tskill Mailmon 
tskill KAVPFW 
tskill IPARMOR 
tskill Ravmond 
taskkill /f /im 0sy.exe 
taskkill /f /im 1sy.exe 
taskkill /f /im 2sy.exe 
taskkill /f /im 3sy.exe 
taskkill /f /im 4sy.exe 
taskkill /f /im 5sy.exe 
taskkill /f /im 6sy.exe 
taskkill /f /im 7sy.exe 
taskkill /f /im 8sy.exe 
taskkill /f /im 9sy.exe 


rem 删除木马
del d:\_desktop.ini /f/s/q/a
del c:\Program Files\_desktop.ini
del %Windir%\MickNew\MickNew.dll
del %Windir%\MH_FILE\MH_DLL.dll 
del %Windir%\_desktop.ini
del %Windir%\TODAYZTKING\TODAYZTKING.DLL
attrib -h -r -s c:\go.exe 
del c:\go.exe 
del c:\setup.exe
attrib -h -s -r c:\autorun.inf 
del c:\autorun.inf 
attrib -h -r -s d:\go.exe 
del d:\go.exe 
del d:\setup.exe
attrib -h -s -r d:\autorun.inf 
del d:\autorun.inf 
del e:\setup.exe
attrib -h -r -s e:\go.exe 
del e:\go.exe 
attrib -h -s -r e:\autorun.inf 
del e:\autorun.inf 
attrib -h -r -s f:\autorun.inf
del f:\go.exe 
del f:\setup.exe
attrib -h -s -r f:\autorun.inf 
del f:\autorun.inf 
attrib -h -r -s g:\go.exe 
del g:\go.exe 
del g:\setup.exe
attrib -h -s -r g:\autorun.inf 
del g:\autorun.inf 
del h:\go.exe 
del h:\setup.exe
attrib -h -s -r g:\autorun.inf 
del h:\autorun.inf 
del i:\go.exe 
attrib -h -s -r g:\autorun.inf 
del i:\autorun.inf
del i:\setup.exe
del j:\go.exe 
attrib -h -s -r g:\autorun.inf 
del j:\autorun.inf 
del j:\setup.exe
del %windir%\system\Logo1_.exe
del %windir%\rundl132.exe
del %windir%\vDll.dll
del %windir%\Dll.dll
del %windir%\0Sy.exe
del %windir%\1Sy.exe
del %windir%\2Sy.exe
del %windir%\3Sy.exe
del %windir%\5Sy.exe
del %windir%\1.com
@echo ^_^ 报告老大，VIKING已经全都被处死 


@echo 真累哈,再给你的系统免疫下,不需要的话请直接退出
pause
//免疫系统
echo > %windir%\Logo1_.exe
echo > %windir%\rundl132.exe
echo > %windir%\0Sy.exe
echo > %windir%\vDll.dll
echo > %windir%\1Sy.exe
echo > %windir%\2Sy.exe
echo > %windir%\rundll32.exe
echo > %windir%\3Sy.exe
echo > %windir%\5Sy.exe
echo > %windir%\1.com
echo > %windir%\exerouter.exe
echo > %windir%\EXP10RER.com
echo > %windir%\finders.com
echo > %windir%\Shell.sys
echo > %windir%\kill.exe
echo > %windir%\sws.dll
echo > %windir%\sws32.dll
echo > %windir%\uninstall\rundl132.exe
echo > %windir%\SVCHOST.exe
echo > %windir%\WINLOGON.exe
echo > %windir%\RUNDLL32.EXE
echo > C:\"Program Files"\svchost.exe
echo > C:\"Program Files"\"Internet Explorer"\svchost.exe
echo > %windir%\Download\svchost.exe
echo > %windir%\system32\wldll.dll

attrib %windir%\Logo1_.exe +s +r +h