@echo off
title 各種病毒清理專殺
echo ******************************************************************************
echo *                      *
echo *      歡迎使用 ☆夢幻古都論壇☆ 常見病毒專殺      *
echo *                      *
echo ******************************************************************************
echo.
color 0A
echo 說明:
echo.
echo 本作品是結合了許多經典的各種病毒專殺寫成的
echo.
echo 主要是方便新手們學習
echo.
echo 讓天下的所有網友和菜鳥們都能夠學到好的黑客技術
echo.
echo 為了大家的夢想一起努力，請不要放棄自己的夢想。 o(∩_∩)o..
echo.
echo.希望大家能夠喜歡~
echo.
echo 夢幻古都論壇群 QQ:32534118
echo.
echo 請按回車鍵
pause>nul
cls
echo *****************************************************************************
echo *                      *
echo *        選 擇 殺 毒 的 方 式        *
echo *                      *
echo *****************************************************************************
echo.
echo.
echo 輸入 1 后按回車鍵, 專殺熊貓燒香.
echo 輸入 2 后按回車鍵, 清理熊貓燒香內存病毒.
echo 輸入 3 后按回車鍵, 專殺金威病毒.
echo 輸入 4 后按回車鍵, sxs病毒專殺.bat.
echo 輸入 5 后按回車鍵, 清除灰鴿子2.0.
echo 輸入 6 后按回車鍵, 防病毒.
echo 輸入 7 后按回車鍵, viking專殺.
echo 輸入 8 后按回車鍵, 清理U盤病毒和保護.
echo 輸入 9 后按回車鍵, 沖擊波專殺.
echo 輸入 10 后按回車鍵, 修復IE.
echo 輸入 11 后按回車鍵, 熊貓燒香變種spcolsv專殺.
echo 輸入 12 后按回車鍵, autorun病毒免疫.
echo 輸入 13 后按回車鍵, 可屏蔽網址的批處理.
echo 輸入 14 后按回車鍵, 強行聊QQ.
echo 輸入 15 后按回車鍵, 清理流氓插件.
echo 輸入 16 選擇退出
echo.
@set /p start=請選擇 (1、2、3、4、5、6、7、8、9、10、11、12、13、14、15、16=退出) 后按回車鍵: 
if "%start%"=="1" goto 1
if "%start%"=="2" goto 2 
if "%start%"=="3" goto 3 
if "%start%"=="4" goto 4
if "%start%"=="5" goto 5
if "%start%"=="6" goto 6
if "%start%"=="7" goto 7
if "%start%"=="8" goto 8 
if "%start%"=="8" goto 9
if "%start%"=="10" goto 10
if "%start%"=="11" goto 11
if "%start%"=="12" goto 12
if "%start%"=="13" goto 13 
if "%start%"=="14" goto 14
if "%start%"=="15" goto 15
if "%start%"=="16" goto 16
if "%start%"=="17" goto 17
if "%start%"=="18" goto 18
if "%start%"=="19" goto 19
:1 
@echo off 
title 清除熊貓燒香病工具 God God.10Mb.cN 
@echo 清除熊貓燒香病工具 
@echo 
@echo 
@echo 
@echo 
pause 

if exist %windir%\rundl132.exe echo ☆☆☆發現有熊貓燒香病毒! ☆☆☆ 
if exist %windir%\logo_1.exe echo ☆☆☆發現有熊貓燒香病毒! ☆☆☆ 
if exist %Windir%\system32\drivers\spoclsv.exe echo ☆☆☆嘿嘿！！熊貓燒香你還想跑!!☆☆☆ 
@echo 正在殺進程里的病毒,請稍等......... 
tskill logo_1 
tskill rundl132 
tskill zt 
tskill wow 
tskill logo1_ 
tskill Ravmon 
tskill Eghost 
tskill Mailmon 
tskill KAVPFW 
tskill IPARMOR 
tskill Ravmond 
tskill spoclsv 
tskill SVCHQST 
tskill devgt 
tskill sxs 
taskkill /f /im 0sy.exe 
taskkill /f /im 1sy.exe 
taskkill /f /im 2sy.exe 
taskkill /f /im 3sy.exe 
taskkill /f /im 4sy.exe 
taskkill /f /im 5sy.exe 
taskkill /f /im 6sy.exe 
taskkill /f /im 7sy.exe 
taskkill /f /im 8sy.exe 
taskkill /f /im 9sy.exe 
taskkill /f /im spoclsv.exe 
taskkill /f /im SVCHQST 
taskkill /f /im devgt.exe 
taskkill /f /im sxs.exe 
echo 正在查找熊貓燒香病毒,請稍等......... 
del d:\_desktop.ini /f/s/q/a 
del c:\Program Files\_desktop.ini 
del %Windir%\MickNew\MickNew.dll 
del %Windir%\MH_FILE\MH_DLL.dll 
del %Windir%\_desktop.ini 
del %Windir%\TODAYZTKING\TODAYZTKING.DLL 
del %Windir%\system32\drivers\spoclsv.exe 
attrib -h -r -s c:\sxs.exe 
del c:\sxs.exe 
del c:\setup.exe 
attrib -h -s -r c:\autorun.inf 
del c:\autorun.inf 
attrib -h -r -s d:\sxs.exe 
del d:\sxs.exe 
del d:\setup.exe 
attrib -h -s -r d:\autorun.inf 
del d:\autorun.inf 
attrib -h -r -s e:\sxs.exe 
del e:\sxs.exe 
del e:\setup.exe 
attrib -h -s -r e:\autorun.inf 
del e:\autorun.inf 
attrib -h -r -s f:\sxs.exe 
del f:\sxs.exe 
del f:\setup.exe 
attrib -h -s -r f:\autorun.inf 
del f:\autorun.inf 
attrib -h -r -s g:\sxs.exe 
del g:\sxs.exe 
del g:\setup.exe 
attrib -h -s -r g:\autorun.inf 
del g:\autorun.inf 
attrib -h -s -r h:\sxs.exe 
del h:\sxs.exe 
del h:\setup.exe 
attrib -h -s -r h:\autorun.inf 
del h:\autorun.inf 
attrib -h -s -r i:\sxs.exe 
del i:\sxs.exe 
del i:\setup.exe 
attrib -h -s -r i:\autorun.inf 
del i:\autorun.inf 
attrib -h -s -r i:\sxs.exe 
del j:\sxs.exe 
del j:\setup.exe 
attrib -h -s -r g:\autorun.inf 
del j:\autorun.inf 
del %windir%\system\Logo1_.exe 
del %windir%\rundl132.exe 
del %windir%\vDll.dll 
del %windir%\Dll.dll 
del %windir%{topic_info}Sy.exe 
del %windir%\1Sy.exe 
del %windir%\2Sy.exe 
del %windir%\3Sy.exe 
del %windir%\5Sy.exe 
del %windir%\1.com 
echo 正在刪注冊表的病毒...... 
echo Windows Registry Editor Version 5.00> c:\aa.reg 
echo [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]>> c:\aa.reg 
echo "qdoxjq"=->> c:\aa.reg 
echo "ctfmon"=->> c:\aa.reg 
echo "svcshare"=->> c:\aa.reg 
echo "myZt3"=->> c:\aa.reg 
echo "myMh2"=->> c:\aa.reg 
echo "SVOHOST"=- >> c:\aa.reg 
echo "sxs"=->> c:\aa.reg 
echo Nowing using the registry file to chang the system default properties. 
regedit /s c:\aa.reg 
echo Deleting the temprotarily files. 
del c:\aa.reg 
echo 正在修改被病毒感染的注冊表...... 
echo Windows Registry Editor Version 5.00> c:\delshare.reg 
echo [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL]>> c:\delshare.reg 
echo "RegPath"="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced">> c:\delshare.reg 
echo "Text"="@shell32.dll,-30500">> c:\delshare.reg 
echo "Type"="radio">> c:\delshare.reg 
echo "CheckedValue"=dword:00000001>> c:\delshare.reg 
echo "ValueName"="Hidden">> c:\delshare.reg 
echo "DefaultValue"=dword:00000002>> c:\delshare.reg 
echo "HKeyRoot"=dword:80000001>> c:\delshare.reg 
echo "HelpID"="shell.hlp#51105">> c:\delshare.reg 
echo Nowing using the registry file to chang the system default properties. 
regedit /s c:\delshare.reg 
echo Deleting the temprotarily files. 
del c:\delshare.reg 
echo Windows Registry Editor Version 5.00> c:\cc.reg 
echo [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]>> c:\cc.reg 
echo "DebugOptions"="2048">> c:\cc.reg 
echo "Documents"="">> c:\cc.reg 
echo "DosPrint"="no">> c:\cc.reg 
echo "load"=->> c:\cc.reg 
echo "NetMessage"="no">> c:\cc.reg 
echo "NullPort"="None">> c:\cc.reg 
echo "Programs"="com exe bat pif cmd">> c:\cc.reg 
echo "Device"="">> c:\cc.reg 
echo Nowing using the registry file to chang the system default properties. 
regedit /s c:\cc.reg 
echo Deleting the temprotarily files. 
del c:\cc.reg 
@echo -God QQ9746093-請重新啟動!!---- 
goto type
:2
call 清除熊貓內存病毒.bat
:3 
@echo off
title 清除威金（logo_1,熊貓燒香）病毒最新變種工具
@echo 清除VIKING病毒最新變種工具
@echo -------------------------------------------------------
@echo by:zero MYQQ：36766812
@echo 
@echo VIKLIG病毒，專殺工具,請復制此代碼 保存為.bat后綴的批處理文件雙擊運行即可.
@echo --------------------------------------------------------
pause>nul

if exist %windir%\rundl132.exe echo ---病毒警報，發現有威金病毒
if exist %windir%\logo_1.exe echo ---病毒警報，發現有威金病毒
rem 殺viking進程
tskill logo_1
tskill rundl132
tskill zt
tskill wow
tskill logo1_ 
tskill Ravmon 
tskill Eghost 
tskill Mailmon 
tskill KAVPFW 
tskill IPARMOR 
tskill Ravmond 
taskkill /f /im 0sy.exe 
taskkill /f /im 1sy.exe 
taskkill /f /im 2sy.exe 
taskkill /f /im 3sy.exe 
taskkill /f /im 4sy.exe 
taskkill /f /im 5sy.exe 
taskkill /f /im 6sy.exe 
taskkill /f /im 7sy.exe 
taskkill /f /im 8sy.exe 
taskkill /f /im 9sy.exe 


rem 刪除木馬
del d:\_desktop.ini /f/s/q/a
del c:\Program Files\_desktop.ini
del %Windir%\MickNew\MickNew.dll
del %Windir%\MH_FILE\MH_DLL.dll 
del %Windir%\_desktop.ini
del %Windir%\TODAYZTKING\TODAYZTKING.DLL
attrib -h -r -s c:\go.exe 
del c:\go.exe 
del c:\setup.exe
attrib -h -s -r c:\autorun.inf 
del c:\autorun.inf 
attrib -h -r -s d:\go.exe 
del d:\go.exe 
del d:\setup.exe
attrib -h -s -r d:\autorun.inf 
del d:\autorun.inf 
del e:\setup.exe
attrib -h -r -s e:\go.exe 
del e:\go.exe 
attrib -h -s -r e:\autorun.inf 
del e:\autorun.inf 
attrib -h -r -s f:\autorun.inf
del f:\go.exe 
del f:\setup.exe
attrib -h -s -r f:\autorun.inf 
del f:\autorun.inf 
attrib -h -r -s g:\go.exe 
del g:\go.exe 
del g:\setup.exe
attrib -h -s -r g:\autorun.inf 
del g:\autorun.inf 
del h:\go.exe 
del h:\setup.exe
attrib -h -s -r g:\autorun.inf 
del h:\autorun.inf 
del i:\go.exe 
attrib -h -s -r g:\autorun.inf 
del i:\autorun.inf
del i:\setup.exe
del j:\go.exe 
attrib -h -s -r g:\autorun.inf 
del j:\autorun.inf 
del j:\setup.exe
del %windir%\system\Logo1_.exe
del %windir%\rundl132.exe
del %windir%\vDll.dll
del %windir%\Dll.dll
del %windir%\0Sy.exe
del %windir%\1Sy.exe
del %windir%\2Sy.exe
del %windir%\3Sy.exe
del %windir%\5Sy.exe
del %windir%\1.com
@echo ^_^ 報告老大，VIKING已經全都被處死 


@echo 真累哈,再給你的系統免疫下,不需要的話請直接退出
pause
//免疫系統
echo > %windir%\Logo1_.exe
echo > %windir%\rundl132.exe
echo > %windir%\0Sy.exe
echo > %windir%\vDll.dll
echo > %windir%\1Sy.exe
echo > %windir%\2Sy.exe
echo > %windir%\rundll32.exe
echo > %windir%\3Sy.exe
echo > %windir%\5Sy.exe
echo > %windir%\1.com
echo > %windir%\exerouter.exe
echo > %windir%\EXP10RER.com
echo > %windir%\finders.com
echo > %windir%\Shell.sys
echo > %windir%\kill.exe
echo > %windir%\sws.dll
echo > %windir%\sws32.dll
echo > %windir%\uninstall\rundl132.exe
echo > %windir%\SVCHOST.exe
echo > %windir%\WINLOGON.exe
echo > %windir%\RUNDLL32.EXE
echo > C:\"Program Files"\svchost.exe
echo > C:\"Program Files"\"Internet Explorer"\svchost.exe
echo > %windir%\Download\svchost.exe
echo > %windir%\system32\wldll.dll

attrib %windir%\Logo1_.exe +s +r +h