Never give up！永不放棄

不會洩漏個人資料100%保證
方便大家使用!所以把修改後編碼OP上來
================================================================================
公告: 此批次檔!
請在t73319的無名自行手動製作
此文為個人使用,若造成個人電腦損害!
本人恕不負責!
================================================================================

批次檔更新公告: (因字數關係-此公告只留最新修改的公告)

98/08/28 增加4隻變種病毒
98/10/09 增加大量變種病毒(懶的數..太多)
98/10/30 新增g9rv.exe
99/01/19 增加43隻新種病毒

(此版本適用XP以上版本)
(如有win95~98se系統需要的請留言)
==================================================================================
重要:請優先關閉"系統還原"
系統還原關閉流程
我的電腦(右鍵>內容)>系統還原(勾選關閉)>套用>確定
==================================================================================

教學步驟

重要注意事項:
                       如果按CTRL+ALT+DEL 出現[工作管理員] 內有出現"Ahnrpta.exe"
                       請終止Ahnrpta.exe再立即使用批次檔!
附註:由於批次檔是針對已知病毒所寫,找不到檔案為正常,找到顯示為刪除或者拒絕存取
1.在你桌面上開一個新的筆記本檔案
2.點開筆記本
3.把網誌內要複製的內碼(兩個＊字中間部分)圈選複製
4.到筆記本貼上存檔
5.此時檔案名稱為"新增文字文件.txt"
6.如果看不見 .txt 副檔名請至
我的電腦>工具>資料夾選項>檢視>(最底下)隱藏已知檔名的副檔名>把勾取消>確定
7.更改檔名(請看標題日期) "年月日.bat"
8.因為這篇文會隨著更新更改標題日期(以辨識你手上更新的批次檔是否為舊版本)
9.清除IE暫存檔(點選桌面IE右鍵)(包括離線資料)
10.關閉系統還原(原先關閉的請先開啟套用後再關閉~徹底清除還原資料夾)
11.點選剛完成的檔案,假如跑程式途中,有碰到要按"Y"的 請全部按"Y" (因為可能之前用過其他程式有建置防禦資料夾)
12.跑完一次後請重開機,重開後再使用批次檔一次(刪除病毒殘餘檔案)
13.測試是否解毒完成
我的電腦>工具>資料夾選項>檢視>(最底下)隱藏系統檔案and顯示所有資料夾>把勾取消>確定
14.請重複 13.步驟一次
15.如果可以開啟隱藏檔案!恭喜你已經解毒完成!
如果無法看到隱藏檔!!就是還有殘餘病毒!
(附註:怕有殘存病毒,請下載免費版"小紅傘防毒軟體"進行全機掃毒)
16.如果關閉系統還原以後,還是無法解毒



提供DOS畫面
請在 開始>執行>打 cmd >
cd\
dir/w/a
提供登錄檔畫面流程
開始>執行>regedit 依照下列路徑點RUN照下圖片
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
把此畫面留言給我或放置連結給我,我將會製作最新的更新檔
如無法正常解毒請至[限進階者]點此

有隻病毒無法使用批次檔解毒必須手動解毒
檔名:Ahnrpta.exe  e8main0~9.dll
如果中這兩隻病毒請點此
=====================================================

＊＊＊以下請用筆記本寫入~請勿複製此行＊＊＊

@echo off
echo.
echo.
echo.
echo.
echo 執行程式前 請先檢查系統還原是否關閉
echo.
echo 若無關閉請先關閉系統還原
echo.
echo 以免刪毒失敗......
echo.
echo.
echo 啟動刪除隨身碟病毒批次檔
echo.
echo 若不執行請關閉程式
echo.
echo 本批次檔會自動建制防禦資料夾
echo.
echo 資料夾檔名:autorun.inf(開機會讀取的檔案)
echo.
echo 以及修復點不開隱藏檔選項功能
echo.
echo.
pause
cls
echo.
echo 清除autorun.inf資料夾
echo.
for %%a in (C D E F G H I J K L M N O P Q R S T U V W X Y Z) do (
attrib -A -S -H -R %%a:\autorun.inf
rd %%a:\autorun.inf
echo.
echo 刪除autorun.inf檔案
echo.
attrib -A -S -H -R %%a:\autorun.inf
del %%a:\autorun.inf /f /a )
echo.
echo 刪除系統下system32區病毒
echo.
for %%e in (
AMVa.exe
AMVO.exe
AVPa.exe
AVPO.exe
afmain0.dll
afmain1.dll
afmain2.dll
aqoeerw.exe
Bitkv1.dll
Bitkv2.dll
Bitkv0.dll
bnmkue0.dll
bnmkue1.dll
bnmkue2.dll
cvsdfw.exe
dsewtds0.dll
dsewtds1.dll
dsewtds2.dll
e8main0.dll
e8main1.dll
godert0.dll
godert1.dll
godert2.dll
ierdfgh.exe
j3ewro.exe
jvvo0.dll
jvvo1.dll
jvvo2.dll
jvvo.exe
jwedsfdo0.dll
jwedsfdo1.dll
jwedsfdo2.dll
kacsde.exe
kava.exe
kavo.exe
kavo0.dll
kavo1.dll
kavo2.dll
kxvo.exe
kxvo1.dll
kxvo2.dll
lhgjyit0.dll
lhgjyit1.dll
lhgjyit2.dll
otrewe0.dll
pytdfse0.dll
pytdfse1.dll
pytdfse2.dll
pytdfse3.dll
pytdfse4.dll
pytdfse5.dll
pytdfse6.dll
pytdfse7.dll
pytdfse8.dll
pytdfse9.dll
rttrwq.exe
mkfght0.dll
mkfght1.dll
mkfght2.dll
mmva.exe
mnsa.exe
TASO.exe
tavo.exe
tavo0.dll
tavo1.dll
tavo2.dll
taso.exe
uret463.exe
weidfsg.exe
wvps.dll
yt8a.exe
huwesa.exe
) do (
if exist %windir%\system32\%%e attrib -A -S -H -R %windir%\system32\%%e
del %windir%\system32\%%e /f /a
)
echo.
echo 刪除特殊路徑下病毒
echo.
for %%b in (
rb.exe
tt.exe
rundl132.exe
dll.dll
jwgkvsq.vmx
vdll.dll
logo1_.exe
2.exe
FF[n].EXE
Ahnrpta.exe

) do (
if exist %windir%\%%b attrib -A -S -H -R %windir%\%%b
del %windir%\%%b /s /f /a
)

echo.
echo 刪除硬碟目錄下病毒
echo.
for %%c in (C D E F G H I J K L M N O P Q R S T U V W X Y Z) do (
for %%d in (
0.com
00p3se.exe
096.bat
0ap.bak
0ap.exe
0c2q.com
0eboyg.exe
0jbnlnu8.exe
0ohqxsdx.bat
0qx0sc6.bat
0tmhoc.cmd
0wk2.cmd
1.exe
11d9o.exe
16onq.bat
19f.exe
19kcv.exe
1a0sr.cmd
1bbvq96y.com
1bg.cmd
1brfrip.exe
1dgybkp.bat
1gia.com
1i.com
1irqtv.cmd
1jief.cmd
1m.cmd
1n.cmd
1q8p0y.com
1wkwxgxw.com
1wod1.com
1xxec.exe
1yl.cmd
2.cmd
202tq6.exe
20740666.DAT
23ft.exe
26612903.DAT
2ACE4CFBAF2C.dll
2ACE4CFBAF2C.exe
2dxy1kc.exe
2g.com
2px8tdn.bat
2w.exe
2y8la.exe
300y.cmd
30c0e.cmd
30ed3.exe
38840801.SVD
39ysi89.com
3bo9tn.cmd
3ce.exe
3dohrt.com
3ds.cmd
3g3.exe
3hihyi.exe
3iugonx.com
3jkka91.com
3o0fp.exe
3p9wj19.exe
3u.cmd
3vf9968r.exe
3wy1vm.cmd
3yr1.cmd
54521049.EXE
6.bat
6.exe
6g3.com
6j2j.com
6o0.BAT
6r3p.com
6tkoyhx.cmd
6vu680.com
81365594.EXE
82.EXE
82i.cmd
82r9.cmd
82tgk9eg.exe
89nrb.com
8ae2q.exe
8d.cmd
8df.exe
8e.com
8e9gmih.bat
8gidy.exe
8h3hh3m.exe
8iyqbsp1.exe
8mlo1q.cmd
8nli1q.cmd
8nlo1q.cmd
8oupido.bat
8ox6116.cmd
8ox61l6.cmd
8q6h.exe
8tss2gwq.bat
90imhpnc.exe
91407786.EXE
91m.com
92j11sm.com
93vx0c.com
96.com
9b8kmipy.com
9dl.cmd
9es.com
9l66g8k1.com
9mf.exe
9tb8ist.bat
9yp8nyvg.exe
a.bat
a.exe
a1.exe
abqk2c3i.bat
abs.exe
af93gcf.exe
aoutfq.exe
ap.com
atymi09.bat
autorun.inf
avmb.exe
aw.bat
ay8p6v3.cmd
b.bat
b.cmd
bitkv0.dll
bitkv1.dll
bitkv2.dll
bn0.bat
bp13cg.exe
bplel98.cmd
bplrl98.cmd
bpvwvays.exe
bsp.cmd
bunip.bat
bxuup9r.bat
c.bat
c.com
c9.com
cc.exe
cd8idoy1.com
cd8idoyl.com
cfv90h.com
chlf9.exe
cjrp8.com
clc1al.com
clc3k.com
clxam6r6.exe
copetttt.com
correcttime.bat
cp13cg.exe
cubp.bat
d.bat
d1y36.com
d218eht.exe
d22xl.bat
d3bn0j.exe
d3bnoj.exe
d8ur3qs.bat
ddyikr.cmd
dgf.exe
dgkx.exe
dih6ke.bat
dmf.exe
dp.exe
dsty.com
dynrn6e.cmd
e.bat
e.exe
e00233it.com
e619e.cmd
e898.com
eadf6s.exe
EB6C4499B05F.dll
EB6C4499B05F.exe
eb9ehyh.exe
eg1.cmd
eito.exe
ejoq.exe
ek.com
ekf6dbg0.com
erdeIect.com
ewatr.cmd
f.bat
f.exe
f2ir.com
F3C74E3FA248.dll
F3C74E3FA248.exe
feav9a2.cmd
ff.exe
fp.exe
fphj6j31.bat
ftiduico.bat
fvbk.exe
g0.cmd
g2p3s.exe
g8rruyw.exe
g9rv.exe
gabptk6d.bat
ggl.cmd
gjfl.exe
gmi1jxy.com
gmiljxy.com
gnc.bat
gnwav.exe
gqsk.bat
gsxlexd.cmd
gx.com
gxlxknou.exe
gxul.com
gymussy.bat
h0giuhmg.bat
h0ti1de.bat
h1ahxi.bat
h2t6u.exe
h3hi1k3.exe
h3i1k3.exe
hovrflst.bat
hpkq.cmd
hqx292nu.exe
hsi.com
htjtq8O.exe
hupxj.bat
hv8fv2.exe
i.bat
i.exe
i0.cmd
i2.com
i8.com
ib3qc3t.cmd
ierdfgh.exe
ig.bat
ig.com
igcmrtjw.cmd
ilpg9ejd.com
iok.exe
iq0ecwcj.cmd
iu.bat
iw.bat
j.bat
j.cmd
j0.exe
j0mpdkja.cmd
j1.cmd
j16dp6.exe
jbfqv8j.cmd
jc1r11.exe
jcmmawa.bat
jdt2ofp.exe
jg.com
jg6w3yx.com
jhcqxax.exe
jj.bat
jj.com
jj2.com
jq6w3yx.com
jvu69.bat
jwedsfdo0.dll
jwedsfdo1.dll
jwedsfdo2.dll
jy.exe
k.bat
k08e.com
k2d8j3wa.bat
k9cuos2q.exe
kaq86asx.bat
kdy.cmd
kg18j.exe
kiibu.com
kjbu.com
kjibu.com
kk.bat
kqsr.exe
kya61.bat
kya6l.bat
l1.cmd
l6w2eaih.exe
l9dwu8.bat
ldgybkp.bat
lgbg8q.exe
lgcadwx.bat
lj6hdv.com
ll.exe
lp3c.bat
lvxvo1xg.cmd
lwd.bat
lyhwcea.exe
m.exe
m2.cmd
m6n.com
m6r8v.com
m8wafly.com
mb.bat
mcmm.bat
mm6q.exe
mmtpw22.bat
mmva.exe
mnsa.exe
mpstxgx.exe
mrsne.bat
mt.com
mt0.cmd
n.com
n.exe
n1.com
n1v93rqo.exe
n6j.com
n89f1d1w.exe
ndmego0f.cmd
ngq6hva0.exe
nl.com
nmje9v6d.bat
nncu6kk.com
np.exe
nq.bat
nqgcd.com
nskmu.exe
nsv.bat
nt6ry3bn.cmd
ntdeIect.com
ntdelect.com
nw0t1l0d.exe
o2yf0w.bat
o93ml8.bat
o9o2u.bat
oaljb6.exe
obg.exe
obtpf.bat
oc.cmd
oess.bat
oka3yrf.bat
okhr.exe
om.cmd
om0.com
otf.cmd
p.exe
p8ihdw.exe
p9.exe
pamn.exe
pbwkwj.com
pchkh.cmd
phgr1j.bat
PICTURE015.SCR
pjwtv.cmd
pnc.exe
prjydpe.cmd
psgq60.bat
px.bat
pytnmk.exe
q.bat
q0rppr.exe
q10js.exe
q1pady.cmd
q2vl2fiy.com
q6h6j.com
qjfl.exe
qkarc.exe
qkolx.exe
qotdyl.bat
qs6m.bat
qsid8g.exe
r.com
r120.bat
r9ghv9.com
r9hv9.com
rcpi.exe
rf.cmd
rjiybg.exe
rjx0.exe
rn.exe
rtnlpipu.com
rv36m1f9.exe
s38k.exe
s39tg.cmd
s6.bat
s6muem.cmd
s9l.exe
SCVB.EXE
se11.cmd
sie2v8.exe
smkjd.cmd
spkr9wou.bat
spq.bat
stwi.com
suq36m1f9.exe
suqfl.exe
suqrfw.exe
sxs.exe
t.cmd
t.exe
t1xdgvq.exe
t2ydo.exe
t82e2v.cmd
tan3yt.bat
tbhje.cmd
tfa8rk6.com
tg.com
tg.com
tigi.cmd
tj8odymw.exe
tlmjw.cmd
tlmjw.com
tmf3w3g0.com
tn0k.exe
tt.com
tudqrfw.exe
txfl1rhh.com
u.exe
u18vxqle.bat
u18vxqle.com
u26ufgv.exe
u2by.exe
u6k.cmd
u99.exe
ubs.exe
ud.exe
ufwi6sq.exe
uh.exe
uh31.exe
uhjqlk.exe
uorys.cmd
usbmons.dll
utcn8c63.exe
uxkktr.cmd
uyd9cck.cmd
uyfd9cck.cmd
v0f8rqc.cmd
v0vj.exe
v2h3.exe
v3pif.bat
v86htgx.cmd
v91qw.com
v9l1l.com
v9l8.exe
v9ug2p2.com
vctio.com
vmyphd.bat
vnkucvv.com
vpqdgkx.com
w.bat
w.cmd
w0owgn.bat
w6hikrv.com
w9fc.exe
weg6sp.com
wg0kpd.bat
wglplm6g.bat
winpows.exe
wpkx.bat
x.cmd
x1o8uo.exe
xa8v8.exe
XAdeIect.com
xc.exe
xe9fdii1.cmd
xj.bat
xpq63xl.exe
xqg0.exe
xv.com
xwpehlv.com
y319s.exe
y6u.bat
y9rlqi.cmd
yfmqo.cmd
yh.bat
yi9.exe
ynfs9ks.cmd
ypjq1.cmd
yq.com
yq00tht.exe
yt8a.exe
yu.bat
Z.EXE

)do (
if exist %%c:\%%d attrib -A -S -H -R %%c:\%%d
del %%c:\%%d /f /a
))

cls
echo.
echo 修復磁碟點不開和關閉autorun功能
echo.
echo.
reg.exe add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v NoDriveAutoRun /t REG_BINARY /d ffffff03 /f >nul 2>nul
reg.exe add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer" /v NoDriveTypeAutoRun /t REG_DWORD /d 0x000000Ff /f >nul 2>nul
reg.exe add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v NoDriveTypeAutoRun /t REG_DWORD /d 0x000000Ff /f >nul 2>nul
reg.exe add "HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v NoDriveTypeAutoRun /t REG_DWORD /d 0x000000Ff /f >nul 2>nul
reg delete "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2" /f >nul 2>nul

echo.
echo 恢復autorun.inf功能
echo.
reg.exe delete "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v "NoDriveAutoRun" /f >nul 2>nul
reg.exe add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer" /v NoDriveTypeAutoRun /t REG_DWORD /d 0x00000091 /f >nul 2>nul
reg.exe add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v NoDriveTypeAutoRun /t REG_DWORD /d 0x00000091 /f >nul 2>nul
reg.exe add "HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v NoDriveTypeAutoRun /t REG_DWORD /d 0x00000091 /f >nul 2>nul
echo.
echo 創建autorun.inf資料夾
echo.
for %%b in (C D E F G H I J K L M N O P Q R S T U V W X Y Z) do (md %%b:\autorun.inf)>nul 2>nul
cls
echo 修復登錄檔!無法開啟隱藏檔
reg.exe delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL" /v "CheckedValue" /f >nul 2>nul
reg.exe add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL" /v CheckedValue /t REG_DWORD /d 0x00000001 /f >nul 2>nul
echo.
echo.刪除病毒登錄檔
echo.
reg.exe delete "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run" /v "jvsoft" /f >nul 2>nul
reg.exe delete "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run" /v "tasoft" /f >nul 2>nul
reg.exe delete "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run" /v "anhtaaa" /f >nul 2>nul
reg.exe delete "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run" /v "dorfgwe" /f >nul 2>nul
reg.exe delete "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run" /v "kava" /f >nul 2>nul
reg.exe delete "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run" /v "nhkletd" /f >nul 2>nul
reg.exe delete "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run" /v "ertyuop" /f >nul 2>nul
reg.exe delete "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run" /v "anhtaas" /f >nul 2>nul
reg.exe delete "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run" /v "kxswsoft" /f >nul 2>nul
reg.exe delete "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run" /v "rwasds" /f >nul 2>nul
reg.exe delete "HKEY_LOCAL_MACHINE\SOFTWARE\soft" /f >nul 2>nul
reg.exe delete "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run" /v "wsctf.exe" /f >nul 2>nul

cls
echo.
echo 刪除完畢!
echo 若有未刪除病毒殘餘檔
echo 請重開機再執行一次本批次檔
echo
echo.請進入REGEDIT自行刪除執行病毒登錄檔
echo.路徑如下:
echo. (可刪可不刪)
echo HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
echo.
echo 若使用本批次檔兩次後
echo 還是無法打開隱藏檔
echo 請在執行打CMD
echo 指令: cd\
echo dir/w/a
echo. 製作者 t73319
echo. http://www.wretch.cc/blog/t73319/11855505
pause
@echo on