L
laoyangzi
Unregistered / Unconfirmed
GUEST, unregistred user!
最近该病毒比较猖狂,听说也是DELPHI写的,从网上偶然得知此方法,共大家分享,网多指教,全部代码请到:http://hi.baidu.com/pochina/blog/item/83e9ce5438c03058d009063d.html拷贝
@echo off
title 清除威金(logo_1,熊猫烧香)病毒最新变种工具
@echo 清除VIKING病毒最新变种工具
@echo -------------------------------------------------------
@echo 原创于9java.com
@echo VIKLIG病毒,专杀工具,请复制此代码 保存为.bat后缀的批处理文件双击运行即可.
@echo --------------------------------------------------------
pause
if exist %windir%/rundl132.exe echo ---报告,发现有威金病毒
if exist %windir%/logo_1.exe echo ---报告,发现有威金病毒
//杀viking进程
tskill logo_1
tskill rundl132
tskill zt
tskill wow
tskill logo1_
tskill Ravmon
tskill Eghost
tskill Mailmon
tskill KAVPFW
tskill IPARMOR
tskill Ravmond
taskkill /f /im 0sy.exe
taskkill /f /im 1sy.exe
taskkill /f /im 2sy.exe
taskkill /f /im 3sy.exe
taskkill /f /im 4sy.exe
taskkill /f /im 5sy.exe
taskkill /f /im 6sy.exe
taskkill /f /im 7sy.exe
taskkill /f /im 8sy.exe
taskkill /f /im 9sy.exe
//删除木马
del d:/_desktop.ini /f/s/q/a
del c:/Program Files/_desktop.ini
del %Windir%/MickNew/MickNew.dll
del %Windir%/MH_FILE/MH_DLL.dll
del %Windir%/_desktop.ini
del %Windir%/TODAYZTKING/TODAYZTKING.DLL
attrib -h -r -s c:/go.exe
del c:/go.exe
del c:/setup.exe
attrib -h -s -r c:/autorun.inf
del c:/autorun.inf
attrib -h -r -s d:/go.exe
del d:/go.exe
del d:/setup.exe
attrib -h -s -r d:/autorun.inf
del d:/autorun.inf
del e:/setup.exe
attrib -h -r -s e:/go.exe
del e:/go.exe
attrib -h -s -r e:/autorun.inf
del e:/autorun.inf
attrib -h -r -s f:/autorun.inf
del f:/go.exe
del f:/setup.exe
attrib -h -s -r f:/autorun.inf
del f:/autorun.inf
attrib -h -r -s g:/go.exe
del g:/go.exe
del g:/setup.exe
attrib -h -s -r g:/autorun.inf
del g:/autorun.inf
del h:/go.exe
del h:/setup.exe
attrib -h -s -r g:/autorun.inf
del h:/autorun.inf
del i:/go.exe
attrib -h -s -r g:/autorun.inf
del i:/autorun.inf
del i:/setup.exe
del j:/go.exe
attrib -h -s -r g:/autorun.inf
del j:/autorun.inf
del j:/setup.exe
del %windir%/system/Logo1_.exe
del %windir%/rundl132.exe
del %windir%/vDll.dll
del %windir%/Dll.dll
del %windir%/0Sy.exe
del %windir%/1Sy.exe
del %windir%/2Sy.exe
del %windir%/3Sy.exe
del %windir%/5Sy.exe
del %windir%/1.com
@echo ^_^ 报告老大,VIKING已经全都被处死
@echo 真累哈,再给你的系统免疫下,不需要的话请直接退出
.....
上面是杀毒代码,还有免疫代码功能、禁止运行功能、清除残余功能,代码较多,全部请到我博客该页里拷贝
http://hi.baidu.com/pochina/blog/item/83e9ce5438c03058d009063d.html
@echo off
title 清除威金(logo_1,熊猫烧香)病毒最新变种工具
@echo 清除VIKING病毒最新变种工具
@echo -------------------------------------------------------
@echo 原创于9java.com
@echo VIKLIG病毒,专杀工具,请复制此代码 保存为.bat后缀的批处理文件双击运行即可.
@echo --------------------------------------------------------
pause
if exist %windir%/rundl132.exe echo ---报告,发现有威金病毒
if exist %windir%/logo_1.exe echo ---报告,发现有威金病毒
//杀viking进程
tskill logo_1
tskill rundl132
tskill zt
tskill wow
tskill logo1_
tskill Ravmon
tskill Eghost
tskill Mailmon
tskill KAVPFW
tskill IPARMOR
tskill Ravmond
taskkill /f /im 0sy.exe
taskkill /f /im 1sy.exe
taskkill /f /im 2sy.exe
taskkill /f /im 3sy.exe
taskkill /f /im 4sy.exe
taskkill /f /im 5sy.exe
taskkill /f /im 6sy.exe
taskkill /f /im 7sy.exe
taskkill /f /im 8sy.exe
taskkill /f /im 9sy.exe
//删除木马
del d:/_desktop.ini /f/s/q/a
del c:/Program Files/_desktop.ini
del %Windir%/MickNew/MickNew.dll
del %Windir%/MH_FILE/MH_DLL.dll
del %Windir%/_desktop.ini
del %Windir%/TODAYZTKING/TODAYZTKING.DLL
attrib -h -r -s c:/go.exe
del c:/go.exe
del c:/setup.exe
attrib -h -s -r c:/autorun.inf
del c:/autorun.inf
attrib -h -r -s d:/go.exe
del d:/go.exe
del d:/setup.exe
attrib -h -s -r d:/autorun.inf
del d:/autorun.inf
del e:/setup.exe
attrib -h -r -s e:/go.exe
del e:/go.exe
attrib -h -s -r e:/autorun.inf
del e:/autorun.inf
attrib -h -r -s f:/autorun.inf
del f:/go.exe
del f:/setup.exe
attrib -h -s -r f:/autorun.inf
del f:/autorun.inf
attrib -h -r -s g:/go.exe
del g:/go.exe
del g:/setup.exe
attrib -h -s -r g:/autorun.inf
del g:/autorun.inf
del h:/go.exe
del h:/setup.exe
attrib -h -s -r g:/autorun.inf
del h:/autorun.inf
del i:/go.exe
attrib -h -s -r g:/autorun.inf
del i:/autorun.inf
del i:/setup.exe
del j:/go.exe
attrib -h -s -r g:/autorun.inf
del j:/autorun.inf
del j:/setup.exe
del %windir%/system/Logo1_.exe
del %windir%/rundl132.exe
del %windir%/vDll.dll
del %windir%/Dll.dll
del %windir%/0Sy.exe
del %windir%/1Sy.exe
del %windir%/2Sy.exe
del %windir%/3Sy.exe
del %windir%/5Sy.exe
del %windir%/1.com
@echo ^_^ 报告老大,VIKING已经全都被处死
@echo 真累哈,再给你的系统免疫下,不需要的话请直接退出
.....
上面是杀毒代码,还有免疫代码功能、禁止运行功能、清除残余功能,代码较多,全部请到我博客该页里拷贝
http://hi.baidu.com/pochina/blog/item/83e9ce5438c03058d009063d.html