First step :
1. open your notepad
2. copy this script
echo off
cls
REM — chage colour
color b
REM — chage title
title HARRY POTTER Remover *
echo ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
echo.
echo clean shortcut
echo.
echo ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
echo.
echo - don't RUN on DRIVE C,
echo.
echo ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
echo.
echo.
pause
echo.
REM — stop virus proses
taskkill /f /im wscript.exe
REM — set to normal
attrib -s -h -r /s autorun.inf
attrib -s -h -r /s thumb.db
attrib -s -h -r /s Baca AQ.rtf
attrib -s -h -r /s My name is Yuyun.rtf
attrib -s -h -r Microsoft.lnk
attrib -s -h -r New Harry Potter and....lnk
attrib -s -h -r New Folder.lnk
REM — remove virus
del c:\windows\system32\wscript.exe
del c:\windows\Microsoft Office Update for Windows XP.sys
del C:\Windows\system32\dllcache\wscript.exe
erase /s "Baca AQ.rtf"
erase /s "My name is Yuyun.rtf"
erase /s thumb.db
erase /s autorun.inf
erase /s *.lnk
erase /s *.ini
erase /s *.eml
%SYSTEMDRIVE%
cd %UserProfile%\Local Settings\Temp
attrib -s -h -r [Random].tmp
attrib -s -h -r auto.exe
attrib -s -h -r Yuyun.Q
attrib -s -h -r v.doc
del [Random].tmp
del auto.exe
del Yuyun.Q
del v.doc
cd %UserProfile%\My Documents
attrib -s -h -r database.mdb
del database.mdb
REM — remove virus registry
reg delete HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v "Explorer" /f
reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v "WinUpdate" /f
reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System /v "DisableRegistryTools" /f
reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v "NoFolderOption" /f
reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v "NoFind" /f
cls
echo --- Please click "close" to exit ---
msg %username% /time:30 "see you thelurunk"
exit
3. Save with your own filename and the file type is (.BAT) extention
4. Note.! you can insert othe file name that you want to be remove automatic
0 comments