Вы находитесь на странице: 1из 8

Operation: 1. Copy the below codes 2. Open notepad and paste it. 3.

Save the file as Anyname with a ".bat" file extension 4. Copy the bat file in any drive you wish to access. 5. Execute the file by doubleclicking it. 6. The files of the directory will be displayed 7. Press the TAB key on your keyboard to Select the file that you want to delete. CAUTION: Any file deleted that way will never go at the RECYCLE BIN, and will never be recovered.

@ECHO OFF prompt $p$g title algeeroidbiletdoux System FlashX :Shredder color 02 CLS ECHO. ECHO algeeroidbilletdoux System FlashX ECHO DRIVE SHREDDER ECHO. dir /a/w ECHO. ECHO "PRESS THE TAB KEY IN YOUR KEYBOARD TO SELECT ON THE DIRECTORY" ECHO. SET /P M= SHREDD IF NOT EXIST %M% GOTO :driveShredderERROR attrib -s -h -r %M% del /f /q %M% IF NOT EXIST %M% GOTO :SHREDCOMP RD /S %M% :SHREDCOMP COLOR 0A echo MyBox = MsgBox("File/Folder has been Shredded. File/Folder deleted this way will never go at the recycle bin.", 6000, "algeeroidbilletdoux System FlashX") >driveshredder.vbs start /w driveshredder.vbs del /f /q driveshredder.vbs GOTO :Shredder :driveShredderERROR COLOR 0A echo MyBox = MsgBox("The File/Folder you type does not exist and match in the directory.", 6000, "algeeroidbilletdoux System FlashX") >folderatt.vbs

start /w folderatt.vbs del /f /q folderatt.vbs GOTO :Shredder

Answer: You can't use MS-DOS to delete viruses. who the hell says you can't delete the virus using dos prompts? thats the most common effective method to do it! first, reboot your pc into a PURE dos environment using the recovery console (F8 while the pc is booting) log onto c:\ the next command lines below can be copied and pasted into a spiffy batch file which will pretty much nuke several different viruses out there In the first command line, replace the word "owner" with the username who'se temp files need to be deleted (and gotta do that with every user on the pc attrib -r -s -h c:\windows\documents and settings\owner\local settings\tmp\*.* cd .. (do that till you get back behind the first owner's directory cd (next owner's directory) again point to the temp files Once that is done for all owners, again browse to the temp directory for each owner, and then del *.* (for each of them, that will delete everything in the temp files, including the virus, which usually stores those unremovable files that are always "in use by another user or program") that'll get you back to a point that most antivirus programs can delete the remnants and fix registries. For the more advanced and the more patient, do the same cycle of processes and commands to empty the temporary internet files c:\windows\documents and settings\owner\local settings\temporary internet files del *.* YOU will be pleasantly surprised to find that after that maneuver, antivirus is a lot more effective at removing viruses, and especially trojan horses. f

Microsoft Command Prompt "attrib" is a very useful tool to check if your hard drives even your flashdisks have been infected by a virus. You will know if a Malware is inside your hard drive just by looking at the attributes of each files and the file that has the attributes of +s +h +r

The function of attrib is to set and remove file attributes (read-only, archive, system and hidden).

Launch attrib
To start attrib Go to Start Menu > Run Type cmd (cmd stands for command prompt) Press Enter key The Command Prompt will appear showing us where is our location in the directory.

command prompt showing the current location in the directory

Using attrib
To use attrib Go to the root directory first by typing cd\(because this is always the target of Malware / Virus) 2. Type attrib and press Enter key

after typing attrib, all the attributes of all the files (excluding folders) will be shown Spanish Galleon Andalucia The Spanish Galleon Andalucia visited the beautiful island of bohol from October 23-26,2010. 6 months ago Uchiha Sasuke Team Hebi Hebi (means snake) is a group of specialized shinobi created by Uchiha Sasuke having one goal in mind, and that is to kill his brother Uchiha Itachi. - 6 months ago Microsoft Innovation with Microsoft Surface codename milan Microsoft Surface (code name: Milan) is a multi-touch product from Microsoft, designed as a combination of software and hardware technology, which the user sends or more uses of digital content is being... - 7 months ago In this example, I have two files that are considered as malware. Note that there are two files which I outlined in red (SilentSoftech.exe and autorun.inf). Since you cannot see this file nor delete it (because the attributes that was set on these files are +s +h +r) +s - meaning it is a system file (which also means that you cannot delete it just by using the delete command) +h - means it is hidden (so you cannot delete it)

+r - means it is a read only file ( which also means that you cannot delete it just by using the delete command)

Now we need to set the attributes of autorun.inf to -s -h -r (so that we can manually delete it) Type attrib -s -h -r autorun.inf ( be sure to include -s -h -r because you cannot change the attributes using only -s or -h or -r alone) Type attrib again to check if your changes have been commited If the autorun.inf file has no more attributes, you can now delete it by typing del autorun.inf Since SilentSoftech.exe is a malware you can remove its attributes by doing step 1 and step 3(just change the filename) ex. attrib -s -h -r silentsoftech.exe

a) I typed the attrib command with the -s -h -r setting b) the result after I pressed enter autorun.inf has no attributes left There you have it!!!! NOTE : when autorun.inf keeps coming back even if you already deleted it, be sure to check your Task Manager by pressing CTRL + ALT + DELETE ( a virus is still running as a process thats why you cannot delete it. KILL the process first by selecting it and clicking End Process. NOTE: You can also apply the attrib -s -h -r command to all the partition of your computer, drive D: drive E: drive F: (all of your drives). For example. for drive D, just type "D:" (minus the

double quote) then you can see that your current drive is D.. type there the command "attrib -s -h -r *.exe" for exe files and "attrib -s -h -r *.inf" and then delete the file by "del autorun.inf". Hope this helps!!!!! :) Jah bles!
++++++++++++++++++++++++++++++++++++++++++++++++++ +++++++++++++++++++++++++++++++++++

Now go to Start> Run and type cmd to open the Command Prompt window . (On windows 7 , vista or later search for run using search option from start menu). *Now go to My Computer and Check the Drive letter of your USB drive or Pen Drive . ( E.g. If it is written Kingston (I:) , then I: will be the drive letter .) *In the Command Window ( cmd ) , type the drive letter: and Hit Enter .. *Now type dir/w/o/a/p and Hit Enter *You will get a list of files . In the list , search if somethings like the following do exist 1. Autorun.inf 2. New Folder.exe 3. Bha.vbs 4. Iexplore.vbs 5. Info.exe 6. New_Folder.exe 7. Ravmon.exe 8. RVHost.exe 9. Images.bat or any other files with .exe Extension. (I mean the executable files that should not exist you think) If you find any one of the files above , Run the command attrib -h -r -s -a *.* and Hit Enter. Now Delete each File using the following Command del filename ( E.g del autorun.inf ) . Now just scan your USB drive with the anti virus you have to ensure that you made your Pen Drive free of Virus. You should also find out suspicious hidden folders where malwares hide themselves instead of root location as above. Remember its only one way to remove viruses from a infected removable memory disk. There are some other methods to do it. And this can be very backdated method to remove viruses from USB sticks. In future more effective tips on blocking removable disk viruses will be available on TechGainer.
&&&&&&&&&&&&&&&&&IMP&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& &&&&&&& http://www.scribd.com/doc/2353773/Step-By-Step-Manual-Delete-Autorun-Virus &&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& &&&&&&&&

MS-DOS commands to remove the virus automatically or manually.

Difficulty: Moderate

Instructions
o

1. 1 Click "Start," type "cmd" (without quotes) into the "Search Programs and Files" box and press "Enter." Or, if you are using a version of Windows released prior to Windows Vista, click "Start > Run," type "cmd" (without quotes) into the dialog box and click "OK." The Command Prompt opens.

2 Type "C:\Program Files\Windows Defender\MpCmdRun.exe --Scan -2" (without quotes) into the Command Prompt and press "Enter." Windows Defender will now scan your entire computer and remove any viruses that it detects.

3 Type "regsvr32 /u name.dll" (without quotes) into the Command Prompt and press "Enter." Note that "name.dll" should be replaced with the name of the Dynamic Link Library (DLL) associated with the virus. To find this information, type the name of the virus into the "Search" box found on one of the online manual removal websites (see Resources).

4 Type "REG DELETE registryfolder/registryentry" (without quotes) into the Command Prompt and press "Enter." Note that "registryfolder/registryentry" should be replaced with the name of the registry entry associated with the virus. To find this information, type the name of the virus into the "Search" box found on one of the online manual removal websites (see Resources).

5 Type "DEL filename" (without quotes) into the Command Prompt and press "Enter." Note that "filename" should be replaced with the name of the file associated with the virus. To find this information, type the name of the virus into the "Search" box found on one of the online manual removal websites (see Resources).

6 Close the Command Prompt and restart your computer.

Вам также может понравиться