start.frm

u盘kill

VERSION 5.00
Begin VB.Form start 
   BackColor       =   &H80000018&
   Caption         =   "U盘病毒专杀——made by FLY"
   ClientHeight    =   6120
   ClientLeft      =   60
   ClientTop       =   345
   ClientWidth     =   6870
   Icon            =   "start.frx":0000
   LinkTopic       =   "Form1"
   ScaleHeight     =   6120
   ScaleWidth      =   6870
   StartUpPosition =   3  '窗口缺省
   Begin VB.ListBox List1 
      Height          =   3120
      ItemData        =   "start.frx":08CA
      Left            =   840
      List            =   "start.frx":08CC
      TabIndex        =   3
      Top             =   1800
      Width           =   5175
   End
   Begin VB.CommandButton Command1 
      BackColor       =   &H80000018&
      Caption         =   "杀毒"
      Height          =   615
      Left            =   2760
      MaskColor       =   &H00C0FFFF&
      Picture         =   "start.frx":08CE
      TabIndex        =   0
      Top             =   960
      Width           =   1095
   End
   Begin VB.Label Label5 
      BackColor       =   &H80000018&
      Caption         =   "支持清除kill,ravmon病毒"
      Height          =   255
      Left            =   3600
      TabIndex        =   6
      Top             =   480
      Width           =   2415
   End
   Begin VB.Label Label4 
      BackColor       =   &H80000018&
      Caption         =   "http://eternalflier.blog.sohu.com"
      ForeColor       =   &H00FF0000&
      Height          =   255
      Left            =   1920
      TabIndex        =   5
      Top             =   5400
      Width           =   3135
   End
   Begin VB.Label Label3 
      BackColor       =   &H80000018&
      Caption         =   "U盘病毒专杀——made by FLY"
      BeginProperty Font 
         Name            =   "宋体"
         Size            =   15.75
         Charset         =   134
         Weight          =   700
         Underline       =   0   'False
         Italic          =   0   'False
         Strikethrough   =   0   'False
      EndProperty
      ForeColor       =   &H000000FF&
      Height          =   495
      Left            =   1200
      TabIndex        =   4
      Top             =   120
      Width           =   4695
   End
   Begin VB.Label Label2 
      BackColor       =   &H80000018&
      Caption         =   "[e-mail]"
      Height          =   255
      Left            =   2520
      TabIndex        =   2
      Top             =   5640
      Width           =   1935
   End
   Begin VB.Label Label1 
      BackColor       =   &H80000018&
      Caption         =   "copyright @2006 FLY"
      Height          =   255
      Left            =   2520
      TabIndex        =   1
      Top             =   5160
      Width           =   1815
   End
End
Attribute VB_Name = "start"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Private Sub Command1_Click()
List1.Visible = True
List1.Clear
Dim check As Integer
check = 0
Dim fso     As New FileSystemObject, fil         As File
List1.AddItem ("正在调用杀毒引擎……")
'***************************************
'frmSplash.Show
'结束进程
pk.Hide
wk.Hide
'***************************************
If pro = 1 Then
List1.AddItem ("发现病毒进程，正在结束病毒进程……")
List1.AddItem ("已经结束病毒进程")
check = 1
pro = 0
Else
List1.AddItem ("没有发现病毒进程")
End If
List1.AddItem ("正在搜索系统中病毒文件……")
'删除病毒文件
On Error Resume Next
'删除系统中顽固文件
     Set fil = fso.GetFile("c:\WINNT\svchost.exe")
     fil.Attributes = Normal
     Set fil = fso.GetFile("c:\windows\svchost.exe")
     fil.Attributes = Normal


'*******************************************
'删除系统中ravmon文件
Call del("c:\WINNT\mdm.exe", List1)
Call del("c:\windows\mdm.exe ", List1)
'*******************************************
'删除系统中kill文件
Call del("c:\WINNT\system32\SocksA.exe", List1)
Call del("c:\WINNT\Session.exe", List1)
Call del("c:\WINNT\BACKINF.TAB", List1)
Call del("c:\WINNT\system32\FileKan.exe", List1)
Call del("c:\WINNT\system32\SocksA.exe", List1)
Call del("c:\WINNT\svchost.exe", List1)
Call del("c:\windows\system32\SocksA.exe", List1)
Call del("c:\windows\Session.exe", List1)
Call del("c:\windows\BACKINF.TAB ", List1)
Call del("c:\windows\system32\FileKan.exe", List1)
Call del("c:\windows\system32\SocksA.exe ", List1)
'*******************************************
If vir = 0 Then
List1.AddItem ("在系统中没有发现病毒文件")
Else
check = 1
List1.AddItem ("已经清除系统中病毒文件")
End If
vir = 0
List1.AddItem ("正在修复注册表项……")
'修复注册表项
'*******************************************
'隐藏文件修复
Call WriteRegValue(HKEY_LOCAL_MACHINE, "SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ policies \ Explorer", "NoDriveTypeAutoRun", 255, REG_DWORD)
Call WriteRegValue(HKEY_LOCAL_MACHINE, "Software\Microsoft\windows\CurrentVersion\explorer\Advanced\Folder\Hidden\SHOWALL", "CheckedValue", 1, REG_DWORD)
'启动项修复
'ravmon启动项
Call DeleteRegKey(HKEY_LOCAL_MACHINE, "SOFTWARE\Microsoft\Windows\CurrentVersion\Run", "svchost")
'kill启动项
Call DeleteRegKey(HKEY_LOCAL_MACHINE, "SOFTWARE\Microsoft\Windows\CurrentVersion\Run", "ASocksrv")
'*******************************************
List1.AddItem ("注册表项修复完毕")
List1.AddItem ("正在搜索个盘符下病毒文件……")
'删除病毒文件
Dim i As Integer
For i = 99 To 122
 Dim p As String
  p = Chr(i)
  On Error Resume Next
'*************************************
'删除各盘符下病毒文件

 
     Set fil = fso.GetFile(p & ":\autorun.inf")
     fil.Attributes = Normal
    'ravmon
     Set fil = fso.GetFile(p & ":\ravmon.exe")
     fil.Attributes = Normal
    'kill
     Set fil = fso.GetFile(p & ":\tel.xls.exe")
     fil.Attributes = Normal
    
    

  Call del(p & ":\autorun.inf", List1)
  'ravmon
  Call del(p & ":\ravmon.exe", List1)
  'kill
  Call del(p & ":\tel.xls.exe", List1)
Next i
'*************************************
'删除顽固项
'ravmon
Call del("c:\WINNT\svchost.exe", List1)
Call del("c:\windows\svchost.exe", List1)
'kill
Call del("c:\WINNT\svchost.exe", List1)
Call del("c:\windows\svchost.exe", List1)
'*************************************
If vir = 0 Then
List1.AddItem ("在各盘符下没有发现病毒文件")
Else
check = 1
List1.AddItem ("已经清除各盘符下病毒文件")
vir = 0
End If
'unload frmSplash
If check = 0 Then
List1.AddItem ("在您的系统中没有发现病毒")
Call MsgBox("在您的系统中没有发现病毒", , "U盘病毒专杀")
Else
List1.AddItem ("病毒清除完毕")
Call MsgBox("病毒清除完毕", , "U盘病毒专杀")
check = 0
End If


End Sub

Private Sub Form_Load()
'屏幕位置
Left = (Screen.Width - Width) / 2   ' 在水平方向上居中。
Top = (Screen.Height - Height) / 2   ' 在垂直方向上居中
List1.AddItem ("请按杀毒按钮开始杀毒")
pro = 0
vir = 0


End Sub

Private Sub Form_Unload(Cancel As Integer)
Unload pk
Unload wk
End Sub

Private Sub Label4_Click()
'打开网页
Shell "C:\\Program Files\\Internet Explorer\\IEXPLORE.exe http://eternalflier.blog.sohu.com", vbNormalFocus
'vbNormalFocus可以省略??省略后网页的打开方式为最小化打开

End Sub