bat清理垃圾
增强版的随便来一个
关于这个问题，就是：
@echo off
echo 正在清除系统LJ，请稍等......
del /f /s /q %systemdrive%*.tmp
del /f /s /q %systemdrive%*._mp
del /f /s /q %systemdrive%*.log
del /f /s /q %systemdrive%*.gid
del /f /s /q %systemdrive%*.chk
del /f /s /q %systemdrive%*.old
del /f /s /q %systemdrive%
ecycled*.*
del /f /s /q %windir%*.bak
del /f /s /q %windir%prefetch*.*
rd /s /q %windir% emp & md %windir% emp
del /f /q %userprofile%cookies*.*
del /f /q %userprofile%
ecent*.*
del /f /s /q "%userprofile%Local SettingsTemporary Internet Files*.*"
del /f /s /q "%userprofile%Local SettingsTemp*.*"
echo 清除系统LJ完成！
echo. & pause
@echo
title SvcHOST病毒专杀 --原创：深度空间 qq群：38427765
@echo
echo. & pause
@echo::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
@echo::停止正在运行的SXS.EXE和SVOHOST.EXE进程，请稍侯......
@echo::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
TASKKILL /F /T /IM SXS.EXE
TASKKILL /F /T /IM SVOHOST.EXE
TASKKILL /F /T /IM ROSE.EXE
@echo::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
@echo::恢复注册表中不给设置显示隐藏文件的项目,请稍侯
@echo::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
ECHO Windows Registry Editor Version 5.00>SHOWALL.reg
ECHO [HKEY_LOCAL_macHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerAdvancedFolderHiddenSHOWALL]>>SHOWALL.reg
ECHO "CheckedValue"=->>SHOWALL.reg
ECHO [HKEY_LOCAL_macHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerAdvancedFolderHiddenSHOWALL]>>SHOWALL.reg
ECHO "CheckedValue"=dword:00000001>>SHOWALL.reg
@echo::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
@echo::删除系统目录下的SXS.EXE、SVOHOST.EXE和WINSCOK.dll文件,请稍侯......
@echo::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
ATTRIB -R -H -S -A %SystemRoot%System32SXS.EXE
ATTRIB -R -H -S -A %SystemRoot%System32SVOHOST.EXE
ATTRIB -R -H -S -A %SystemRoot%System32WINSCOK.dll
DEL /F /Q /A -R -H -S -A %SystemRoot%System32SXS.EXE
DEL /F /Q /A -R -H -S -A %SystemRoot%System32SVOHOST.EXE
DEL /F /Q /A -R -H -S -A %SystemRoot%System32WINSCOK.DLL
ATTRIB -R -H -S -A %SystemRoot%SXS.EXE
ATTRIB -R -H -S -A %SystemRoot%SVOHOST.EXE
ATTRIB -R -H -S -A %SystemRoot%WINSCOK.DLL
DEL /F /Q /A -R -H -S -A %SystemRoot%SXS.EXE
DEL /F /Q /A -R -H -S -A %SystemRoot%SVOHOST.EXE
DEL /F /Q /A -R -H -S -A %SystemRoot%WINSCOK.DLL
ATTRIB -R -H -S -A %SystemRoot%SystemSXS.EXE
ATTRIB -R -H -S -A %SystemRoot%SystemSVOHOST.EXE
ATTRIB -R -H -S -A %SystemRoot%SystemWINSCOK.DLL
DEL /F /Q /A -R -H -S -A %SystemRoot%SystemSXS.EXE
DEL /F /Q /A -R -H -S -A %SystemRoot%SystemSVOHOST.EXE
DEL /F /Q /A -R -H -S -A %SystemRoot%SystemWINSCOK.DLL
ATTRIB -R -H -S -A %SystemRoot%System32dllcacheSXS.EXE
ATTRIB -R -H -S -A %SystemRoot%System32dllcacheSVOHOST.EXE
ATTRIB -R -H -S -A %SystemRoot%System32dllcacheWINSCOK.DLL
DEL /F /Q /A -R -H -S -A %SystemRoot%System32dllcacheSXS.EXE
DEL /F /Q /A -R -H -S -A %SystemRoot%System32dllcacheSVOHOST.EXE
DEL /F /Q /A -R -H -S -A %SystemRoot%System32dllcacheWINSCOK.DLL
@echo::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
@echo::删除每个分区下的SXS.EXE和AUTORUN.INF文件，请稍侯.......
@echo::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
FOR %%a IN ( C: D: E: F: G: H: I: J: K: L: M: N: O: P: Q: R: S: T: U: V: W: X: Y: Z: ) DO ATTRIB -R -H -S -A %%aSXS.EXE & DEL /F /Q /A -R -H -S -A %%aSXS.EXE & ATTRIB -R -H -S -A %%aAUTORUN.INF & DEL /F /Q /A -R -H -S -A %%aAUTORUN.INF
@echo::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
@echo::删除注册表中自启动项，请稍侯......
@echo::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
echo. & pause
echo. 双按任意健完成......
ECHO Windows Registry Editor Version 5.00>SoundMam.reg
ECHO [-HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunSoundMam]>>SoundMam.reg
ECHO [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun]>>SoundMam.reg
ECHO "SoundMam"=->>SoundMam.reg
REGEDIT /S SoundMam.reg
DEL /F /Q SoundMam.reg
REGEDIT /S SHOWALL.reg
DEL /F /Q SHOWALL.reg
@echo off
title 清除威金（logo_1,熊猫烧香）病毒最新变种工具...最后面请按任意健完成......
@echo 清除VIKING病毒最新变种工具
@echo -------------------------------------------------------
echo. & pause
echo. 双按任意健完成......
pause>nul
if exist %windir%
undl132.exe echo ---病毒警报，发现有威金病毒
if exist %windir%logo_1.exe echo ---病毒警报，发现有威金病毒
rem 杀viking进程
tskill logo_1
tskill rundl132
tskill zt
tskill wow
tskill logo1_
tskill Ravmon
tskill Eghost
tskill Mailmon
tskill KAVPFW
tskill IPARMOR
tskill Ravmond
taskkill /f /im 0sy.exe
taskkill /f /im 1sy.exe
taskkill /f /im 2sy.exe
taskkill /f /im 3sy.exe
taskkill /f /im 4sy.exe
taskkill /f /im 5sy.exe
taskkill /f /im 6sy.exe
taskkill /f /im 7sy.exe
taskkill /f /im 8sy.exe
taskkill /f /im 9sy.exe
title 删除木马
rem 删除木马
del d:_desktop.ini /f/s/q/a
del c:Program Files_desktop.ini
del %Windir%MickNewMickNew.dll
del %Windir%MH_FILEMH_DLL.dll
del %Windir%_desktop.ini
del %Windir%TODAYZTKINGTODAYZTKING.DLL
attrib -h -r -s c:go.exe
del c:go.exe
del c:setup.exe
attrib -h -s -r c:autorun.inf
del c:autorun.inf
attrib -h -r -s d:go.exe
del d:go.exe
del d:setup.exe
attrib -h -s -r d:autorun.inf
del d:autorun.inf
del e:setup.exe
attrib -h -r -s e:go.exe
del e:go.exe
attrib -h -s -r e:autorun.inf
del e:autorun.inf
attrib -h -r -s f:autorun.inf
del f:go.exe
del f:setup.exe
attrib -h -s -r f:autorun.inf
del f:autorun.inf
attrib -h -r -s g:go.exe
del g:go.exe
del g:setup.exe
attrib -h -s -r g:autorun.inf
del g:autorun.inf
del h:go.exe
del h:setup.exe
attrib -h -s -r g:autorun.inf
del h:autorun.inf
del i:go.exe
attrib -h -s -r g:autorun.inf
del i:autorun.inf
del i:setup.exe
del j:go.exe
attrib -h -s -r g:autorun.inf
del j:autorun.inf
del j:setup.exe
del %windir%systemLogo1_.exe
del %windir%
undl132.exe
del %windir%vDll.dll
del %windir%Dll.dll
del %windir% Sy.exe
del %windir%1Sy.exe
del %windir%2Sy.exe
del %windir%3Sy.exe
del %windir%5Sy.exe
del %windir%1.com
@echo 真累哈,再给你的系统免疫下,不需要的话请直接退出
pause
title 免疫系统
echo > %windir%Logo1_.exe
echo > %windir%
undl132.exe
echo > %windir% Sy.exe
echo > %windir%vDll.dll
echo > %windir%1Sy.exe
echo > %windir%2Sy.exe
echo > %windir%
undll32.exe
echo > %windir%3Sy.exe
echo > %windir%5Sy.exe
echo > %windir%1.com
echo > %windir%exerouter.exe
echo > %windir%EXP10RER.com
echo > %windir%finders.com
echo > %windir%Shell.sys
echo > %windir%kill.exe
echo > %windir%sws.dll
echo > %windir%sws32.dll
echo > %windir%uninstall
undl132.exe
echo > %windir%SvcHOST.exe
echo > %windir%WINLOGON.exe
echo > %windir%RUNDLL32.EXE
echo > C:"Program Files"svchost.exe
echo > C:"Program Files""Internet Explorer"svchost.exe
echo > %windir%Downloadsvchost.exe
echo > %windir%system32wldll.dll
echo. 双按任意健完成......
attrib %windir%Logo1_.exe +s +r +h
attrib %windir%
undl132.exe +s +r +h
attrib %windir% Sy.exe +s +r +h
attrib %windir%vDll.dll +s +r +h
attrib %windir%1Sy.exe +s +r +h
attrib %windir%2Sy.exe +s +r +h
attrib %windir%
undll32.exe +s +r +h
attrib %windir%3Sy.exe +s +r +h
attrib %windir%5Sy.exe +s +r +h
attrib %windir%1.com +s +r +h
attrib %windir%exerouter.exe +s +r +h
attrib %windir%EXP10RER.com +s +r +h
attrib %windir%finders.com +s +r +h
attrib %windir%Shell.sys +s +r +h
attrib %windir%kill.exe +s +r +h
attrib %windir%sws.dll +s +r +h
attrib %windir%sws32.dll +s +r +h
attrib %windir%uninstall
undl132.exe +s +r +h
attrib %windir%SVCHOST.exe +s +r +h
attrib %windir%WINLOGON.exe +s +r +h
attrib %windir%RUNDLL32.EXE +s +r +h
attrib C:"Program Files"svchost.exe +s +r +h
attrib C:"Program Files""Internet Explorer"svchost.exe +s +r +h
attrib %windir%Downloadsvchost.exe +s +r +h
attrib %windir%system32wldll.dll +s +r +h
net share c$ /del
net share d$ /del
net share e$ /del
net share f$ /del
net share admin$ /del
net share ipc$ /del
pause
title 禁止Viking病毒运行补丁.reg
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionpoliciesExplorer]
"DisallowRun"=dword:00000001
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionpoliciesDisallowRun]
[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerDisallowRun]
"**delvals."=" "
"1"="0Sy.exe"
"2"="1.com"
"3"="1Sy.exe"
"4"="2Sy.exe"
"5"="3Sy.exe"
"6"="5Sy.exe"
"7"="dll.dll"
"8"="logo1_.exe"
"9"="rundl132.exe"
"10"="vdll.dll"
@echo off
@echo::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
title 清除灰鸽子2.0
@echo::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
copy c:windowssystem32service.exe C:service.exe
c:service -u GrayPigeonServer
c:service -u "Windows Update"
attrib -R -A -S -H %Windir%G.DLL
del %Windir%G.DLL
attrib -R -A -S -H %Windir%G.EXE
del %Windir%G.EXE
attrib -R -A -S -H %Windir%G_Hook.DLL
del %Windir%G_Hook.DLL
attrib -R -A -S -H %Windir%GKey.DLL
del %Windir%GKey.DLL
pause
@echo off
@echo::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
冲击波专杀
@echo::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
pulist | finde "avserve">avserve.txt & for /f "tokens=2" %%i in(avserve.txt) do @pskill %%i
attrib -r -s -h %systemroot%system32avserve.exe ---双按任意健完成