只要有兩個批次檔就解決了... Q!GB^P
;]Y.2 J
第一個檔將下面的文字剪下貼上記事本再把檔名存成 kavo1.bat MCL?J,1?r
a 3R#Bg(
-------------------------------------------------------------------------------------------------------------------- ZN%$k-2
@echo off TeHL=\L-^
cls 9p2"5x
echo. ^4B6IF*
echo 自動刪除KAVO病毒 第1個步驟 2NIK0%6
reg delete "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run" /v "kava" /f >nul 2>nul Sh2q#7hf
echo.
S3)JEZi
echo 1.刪除個磁碟中的autorun.inf及ntdelect.com的病毒檔 )bi*y`UM]
echo. Be8Gx
echo 請按任意鍵以開始做這個動作..... t( p
pause >nul 2>nul ik7#Og~3
for %%a in (C D E F G H I J K L M N O P Q R S T U V W X Y Z) do ( ~z32%k
attrib -r -s -h -a %%a:\autorun.inf >nul 2>nul&&echo.&&echo.&&attrib -r -s -h -a %%a:\ntdelect.com >nul 2>nul GlQ=M )E
del %%a:\autorun.inf /q /f >nul 2>nul&&echo.&&echo.&&del %%a:\nddelect.com /q /f >nul 2>nul ) %b@>riR(y
echo. I`Rxijz
cls wT*`Od8w
echo autorun.inf及ntdelect.com 的病毒檔刪除完成 ``aoLQc`
echo. z)QyQ
echo. O}IS{/^7
echo. @OwU[\6fc}
echo 2.建立名稱為autorun.inf的資料夾,防止病毒再度寫入 -bo0!@MK
echo 屬性順便改成「唯讀、隱藏、系統」 Jv7 @[<$
echo. 9&rn3hmP
echo 請按任意鍵以開始做這個動作..... &,NHk9.aq
pause >nul 2>nul $5il]D`
pause >nul 2>nul {(xNC#
for %%a in (C D E F G H I J K L M N O P Q R S T U V W X Y Z) do ( |$bZO`^
del %%a:\autorun.inf /q /f >nul 2>nul&del %%a:\nddelect.com /q /f >nul 2>nul (qohb0
md %%a:\autorun.inf >nul 2>nul&&echo.&&echo.&&echo.&&echo.&&echo.&&echo.&&echo.&&echo.&&echo.&&echo.&&echo.&&echo.&&echo.&&attrib +r +s +h %%a:\autorun.inf >nul 2>nul ) Q?[k>fu0
echo 完成autorun.inf資料夾的建立(可用attrib autorun.inf的指令看到) iW)FjDTP
echo. 2"V?+Hhz
echo. 2! &:V]
echo. ,JVD ;u
echo 最後請『重新開機』再執行第2個步驟的批次檔 nX?fj<oR|
echo 請按任意鍵以關閉這個視窗(有時要按2下,跟電腦有關)..... wPqIy}-
pause >nul 2>nul ?CmW{9O
pause >nul 2>nul =A=er1~%
Kr]F+erJe
R<k4LHDy
----------------------------------------------------------------------------------------------------------------- m_(+-G
W@pVP4F0xM
第二個檔做法一樣...改成kavo2.bat G}f.fRY
uCUQxFp
------------------------------------------------------------------------------------------------------------------- 8 +uOYNXsA
@echo off D!)'c(b
cls VA2%2g2n{
echo. &\c$s
echo 自動刪除KAVO病毒 第2個步驟(前提執行過第1個步驟後重開機) d [K56wbpx
echo 如未執行過第1個步驟請按「CTRL+C」結束這個動作 {WFYNEQ[
echo. #M{}Grg
echo 3.將被鎖定的隱藏檢視功能開啟(登錄檔的部份) N}.h_~6
echo. 3tOnALv
echo 請按任意鍵以開始做這個動作..... y"2#bq
pause >nul 2>nul _Se>X=
reg.exe add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL" /v "CheckedValue" /t REG_DWORD /d 00000001 /f >nul 2>nul &=_YL
echo. sowkxw.^Q
reg.exe add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL" /v "DefaultValue" /t REG_DWORD /d 00000002 /f >nul 2>nul +a;:7[%&
echo. ! =|{
reg.exe add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL" /v "CHKeyRoot" /t REG_DWORD /d 80000001 /f >nul 2>nul #[Ns\%Ri0
echo. %Ix^Xb0
reg.exe add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL" /v "ValueName" /t REG_SZ /d Hidden /f >nul 2>nul ^\Jg
{9a
echo. /Xn I>
reg.exe add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL" /v "Text" /t REG_SZ /d "@shell32.dll,-30500" /f >nul 2>nul +F4xCz7f
echo. .XYSO
reg.exe add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL" /v "Type" /t REG_SZ /d radio /f >nul 2>nul #WfJz}P,!
echo. fZXd<Fg+
reg.exe add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL" /v "RegPath" /t REG_SZ /d "Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /f >nul 2>nul Mt-y{*6!k
echo. A}[Lk#|n
cls ,>"1'i&@
echo 已修復無法開啟檢視隱藏檔的功能 #N,\c@Gy
echo 請到資料夾中的資料夾選項去開啟檢視隱藏的功能(有需要就開,不需要就別開) u4fTC})4{C
echo. [yjC@docH
echo 4.刪除kavo.exe的病毒主程式 r}03&h~Hc&
echo.
Z p]Bs
attrib -s -h -r "C:\WINDOWS\system32\kav*.*" >nul 2>nul {`l]RIig
del "C:\WINDOWS\system32\kav*.*" >nul 2>nul ,gD30Pylz
attrib -s -h -r "C:\ntdelect.com" >nul 2>nul *GD 1[:
del "C:\ntdelect.com" >nul 2>nul d5sGt#
attrib -s -h -r "C:\WINDOWS\fly3*.*" >nul 2>nul T /[)U
del "C:\WINDOWS\fly3*.*" >nul 2>nul 5)&e2V',y
attrib -r -s -h -a "c:\found.???" /S /D >nul 2>nul Uf_w
o
del "c:\found.???\*.*" /s /q /f >nul 2>nul $Q]`+:g*}
echo. /R@(yT=t
echo 刪除完成,kavo的病毒已成功解除! | b@?]M
echo. Q9W*)gBvn
echo 請按任意鍵以關閉這個視窗(有時要按2下,跟電腦有關)..... ,wZ[Y
3
pause >nul 2>nul ~zYp(#0op
pause >nul 2>nul lzuPE,h
&TC
------------------------------------------------------------------------------------------------------------------------------ O7rm(
TR
]lP<m
最後再把這兩個檔放到C槽根目錄下...點第一個檔...會提示重開機...重開後再點第二個檔...按照說明做...這樣就行了... S93NsrBbY
oZOFZ-<
祝大家解毒愉快!~~