im making this sorta program thing that searches for different viruses and removes them, i was wondering though if there was a way that i could insert the command into the batch file without manually going through it, for example it could say something like: What are the names of the infected files? and i would then type them in and it would put it into the .bat file...
I know its alot but it would help A BUNCH =)
thanks
copy this into notepad and save as a .bat
Code:TASKKILL /F /IM msnmsgr.exe echo Removing syshelps.dll and all of it's companions DEL /F /Q C:\windows\system32\syshelps.dll.txt IF NOT EXIST C:\WINDOWS\photos.zip GOTO 1 DEL /F /Q C:\WINDOWS\photos.zip :1 IF NOT EXIST C:\System Volume Information\_restore{C196A4E6-BCE6-4324-B52C-2F62F9E264DD}\RP61\A0008326.dll GOTO 2 DEL /F /Q C:\System Volume Information\_restore{C196A4E6-BCE6-4324-B52C-2F62F9E264DD}\RP61\A0008326.dll :2 IF NOT EXIST C:\System Volume Information\_restore{C196A4E6-BCE6-4324-B52C-2F62F9E264DD}\RP58\A0008254.scr GOTO 3 DEL /F /Q C:\System Volume Information\_restore{C196A4E6-BCE6-4324-B52C-2F62F9E264DD}\RP58\A0008254.scr :3 echo Starting Explorer again.... start C:\windows\explorer.exe IF NOT EXIST C:\windows\system32\syshelps.dll GOTO success IF EXIST C:\windows\system32\syshelps.dll GOTO failure :sucess echo The file was removed, please run a virus scan with Kaspersky for example, to make sure that all the minor files from the virus has been removed properly, also remove the "photos.zip" in your recieved files folder if not already removed. GOTO end :failure echo The removal failed..... please send an email to hackizoid@gmail.com to notify me :end :check IF EXIST C:\Windows\System32\cpifmgr.dll GOTO infected1 IF NOT EXIST C:\Windows\System32\cpifmgr.dll GOTO notinfected1 :notinfected1 echo You are not infected with AndromedaAV GOTO end1 :infected1 echo You are infected with AndromedaAV echo Shutting down known AndromedaAV processes TASKKILL /F /IM vclipsrv.exe TASKKILL /F /IM bprint.exe TASKKILL /F /IM AndromedaAntiVirus.exe echo testAV is now attempting to delete AndromedaAV and it's components DEL /F /Q C:\Windows\System32\hinetres.dll IF NOT EXIST C:\Windows\System32\hinetres.dll GOTO AAV1 :AAV1 DEL /F /Q C:\Windows\System32\rpthreadVC.dll IF NOT EXIST C:\Windows\System32\rpthreadVC.dll GOTO AAV2 :AAV2 DEL /F /Q C:\Windows\System32\thunk.dll IF NOT EXIST C:\Windows\System32\thunk.dll GOTO AAV3 :AAV3 DEL /F /Q C:\Windows\System32\cpifmgr.dll IF NOT EXIST C:\Windows\System32\cpifmgr.dll GOTO AAV4 :AAV4 DEL /F /Q C:\Windows\System32\tmswdat10.dll IF NOT EXIST C:\Windows\System32\tmswdat10.dll GOTO AAV5 :AAV5 DEL /F /Q HKEY_CURRENT_USER\Software\Antivirus IF NOT EXIST HKEY_CURRENT_USER\Software\Antivirus GOTO AAV6 :AAV6 DEL /F /Q HKEY_LOCAL_MACHINE\SOFTWARE\Antivirus IF NOT EXIST HKEY_LOCAL_MACHINE\SOFTWARE\Antivirus GOTO AAV7 :AAV7 DEL /F /Q HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\”Antivirus” IF NOT EXIST HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\”Antivirus” GOTO AAV8 :AAV8 DEL /F /Q C:\Program Files\AndromedaAntiVirus\Antvrs.exe IF NOT EXIST C:\Program FIles\AndromedaAntiVirus\Antvrs.exe GOTO sucess1 IF EXIST C:\Program FIles\AndromedaAntiVirus\Antvrs.exe GOTO failure1 :sucess1 echo The file was removed, please run a virus scan with Kaspersky for example, to make sure that all the minor files from the virus has been removed properly GOTO end1 :failure1 echo The removal failed..... please send an email to hackizoid@gmail.com to notify me :end1 :check IF EXIST C:\Windows\System32\WINRLS.EXE GOTO infected2 IF NOT EXIST C:\Windows\System32\WINRLS.EXE GOTO notinfected2 :notinfected2 echo You are not infected with Worm.RBot.af GOTO end2 :infected2 echo You are infected with Worm.Rbot.af echo testAV is now attempting to remove the files... DEL /F /Q C:\Windows\System32\WINRLS.EXE IF EXIST C:\Windows\System32\WINRLS.EXE GOTO failure2 IF NOT EXIST C:\Windows\System32\WINRLS.EXE GOTO sucess2 :failure2 echo The removal failed..... please send an email to hackizoid@gmail.com to notify me GOTO end2 :sucess2 echo The file was removed, please run a virus scan with Kaspersky for example, to make sure that all the minor files from the virus has been removed properly GOTO end2 :end2 :check Pause
Reply With Quote
In short, you have made an antivirus program (to compete with Symantec, AVG, McAfee.....
)
Bookmarks