Notepad ႏွင့္ ဗိုင္းရပ္စ္ရွင္းနည္း

Run ကေနဝင္ၿပီးဖ်က္ေနရတဲ႔ prefetch,temp နဲ႔ recent ေတြကိုတစ္ခါတည္း

နဲ႔ Desktop ေပၚမွာ notepad  ေလးနဲ႔ .bat ဖိုင္ေလးလုပ္ၿပီး ရွင္းလို႔ရေအာင္ျဖစ္ပါတယ္။

ေအာက္ကစာေလးေတြကို notepad ထဲမွာ ကူးထည္႔ေပးၿပီး .bat ဆိုတဲ႔ name နဲ႔ save ေပးလိုက္ရင္ရပါၿပီ။

@echo off
del /s /f /q c:\windows\temp\*.*
rd /s /q c:\windows\temp
md c:\windows\temp
del /s /f /q C:\WINDOWS\Prefetch
del /s /f /q %temp%\*.*
rd /s /q %temp%
md %temp%
deltree /y c:\windows\tempor~1
deltree /y c:\windows\temp
deltree /y c:\windows\tmp
deltree /y c:\windows\ff*.tmp
deltree /y c:\windows\history
deltree /y c:\windows\cookies
deltree /y c:\windows\recent
deltree /y c:\windows\spool\printers
del c:\WIN386.SWP
cls

ေနာက္တစ္ခုက Autorun,Recycle နဲ႔ Rundill32 စတဲ႔ Autorun .exe ေတြကိုသတ္ေပးႏုိင္တဲ႔ တစ္ခုပါ။

အခုစာေလးကိုလည္း notepad ေလးထဲကူးထည္႔ေပးၿပီး .bat ဖိုင္ name ေလးနဲ႔ပဲ Save ေပးလိုက္ပါ။

del:E:\Autorun.inf,del:F:\Autorun.inf,del:G:\Autorun.inf,del:H:\Autorun.inf,
del:E:\Recycled.exe,del:F:\Recycled.exe,del:G:\Recycled.exe,del:H:\Recycled.exe,
del:E:\RUNDILL32.exe,del:F:\RUNDILL32.exe,del:G:\RUNDILL32.exe,del:H:\RUNDILL32.exe,

ေနာက္ထပ္တစ္ခုက Clear Private Cam Virus အတြက္ပါ။အရင္ပံုစံေတြအတုိင္းပဲ notepad ထဲကိုကူးထည္႔

ၿပီး save ေပးလိုက္ပါ။

taskkill /F /IM chrome.exe
taskkill /F /IM privateCam_v0.1.exe
attrib -S -H -R C:\windows\system32\chrome.exe
del C:\windows\system32\chrome.exe
REG Delete HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableRegistryTools /f
REG Delete HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableTaskMgr /f
REG Delete HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NofolderOptions /f
REG Delete HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v "Yahoo Messengger" /f
REG Delete HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v "Yahoo! pager" /f
gpupdate

Posted in: Software