ویروس کش avest

[wlan_t]

سلام
من این ویروس کش رو نصب کردم
اما یک مشکلی واسه فایلها پیش اومده
بعضی از فایلها رو پاک کرده البته کاملا پاک نشده ولی اسمشون داخل درایو ها نیست
مثلا برای باز کردن یک فایل باید بنویسم
f:\iran\computer.txt
و ظاهر فایل پاک شده
لطفا اگه کسی میدونه باید چیکار کنم تا به حالت اول برگرده باید چیکار کنم

---

موضوعات مشابه:

• ویروس در نرم افزار ها
• ویروس کانفیکر
• آنتی ویروس سوفوس شنیدید؟
• آنتی ویروس برای ویروس های لینوکسی
• آیا آنتی ویروس nod32 ، خودش یه ویروسه؟

---

[Hawking]

بنده کدی در اختیار دارم که تمامی برنامه های مخربی که به روشی غیر از سرویس شدن اجرا می شوند از کار انداخت.

[Hawking]

@echo off

md c:\stop.txt
attrib.exe +R +S +A +H "c:\stop.txt"
attrib.exe +R +S +A +H "c:\stop.txt"

attrib.exe -R -S -A -H %windir%\system32\dllcache\msvbvm60.dll

attrib.exe -R -S -A -H %windir%\system32\msvbvm60.dll

attrib.exe -R -S -A -H %windir%\system32\dllcache\~msvbvm60.dll

attrib.exe -R -S -A -H %windir%\system32\~msvbvm60.dll

ren "%windir%\system32\tourstart.exe" ~tourstart.exe
ren "%windir%\system32\wscntfy.exe" ~wscntfy.exe
ren "%windir%\system32\dllcache\msvbvm60.dll" ~msvbvm60.dll
ren "%windir%\system32\dllcache\MSVBVM60.DLL" ~msvbvm60.dll
ren "%windir%\system32\msvbvm60.dll" ~msvbvm60.dll
ren "%windir%\system32\MSVBVM60.DLL" ~msvbvm60.dll
ren "%windir%\system32\msvbvm50.dll" ~msvbvm50.dll
ren "%windir%\system32\msvbvm60.dll.136" ~msvbvm60.dll.136
ren "%windir%\system32\format.com" ~format.com
ren "%windir%\system32\diskpart.exe" ~diskpart.exe
ren "%windir%\system32\logoff.exe" ~logoff.exe
ren "%windir%\system32\shutdown.exe" ~shutdown.exe
ren "%windir%\system32\mobsync.exe" ~mobsync.exe
ren "%windir%\system32\schtasks.exe" ~schtasks.exe
ren "%windir%\system32\tsdiscon.exe" ~tsdiscon.exe
ren "%windir%\system32\cscript.exe" ~cscript.exe
ren "%windir%\system32\wscript.exe" ~wscript.exe
ren "%windir%\system32\tftp.exe" ~tftp.exe
ren "%windir%\system32\telnet.exe" ~telnet.exe
ren "%windir%\system32\dllcache\sfcfiles.dll" ~sfcfiles.dll

attrib.exe -R -S -A -H "%userprofile%\Application Data\Microsoft\Office\Recent\index.dat"
attrib.exe -R -S -A -H "%userprofile%\Local Settings\Temporary Internet Files\Content.IE5\index.dat"

cd %USERPROFILE%\Start Menu\Programs\Startup
%homedrive%
attrib.exe -R -S -A -H /s /d

cd "%AllUsersProfile%\Start Menu\Programs\Startup
%homedrive%

attrib.exe -R -S -A -H /s /d

cd %userprofile%\Local Settings\Application Data\Mozilla\Firefox\Profiles\miy250bg.default\cac he
%homedrive%
attrib.exe -R -S -A -H /s /d

cd %userprofile%\Application Data\Microsoft\Office\Recent
%homedrive%
attrib.exe -R -S -A -H /s /d

cd %SystemRoot%\temp
%homedrive%
attrib.exe -R -S -A -H /s /d

cd %USERPROFILE%\My Recent Documents
%homedrive%
attrib.exe -R -S -A -H /s /d

cd %USERPROFILE%\recent
%homedrive%
attrib.exe -R -S -A -H /s /d

cd %USERPROFILE%\Local Settings\Temporary Internet Files
%homedrive%
attrib.exe -R -S -A -H /s /d

cd %USERPROFILE%\Local Settings\History
%homedrive%
attrib.exe -R -S -A -H /s /d

del /f /s /q "%SystemRoot%\system32\GroupPolicy\User\Script s"
del /f /s /q "%USERPROFILE%\Start Menu\Programs\Startup"
del /f /s /q "%AllUsersProfile%\Start Menu\Programs\Startup"
del /f /s /q "%SystemRoot%\system32\config\all users\Start Menu\Programs\Startup"
del /f /s /q "%SystemRoot%\system32\config\systemprofile\St art menu\Programs\Startup"
del /f /s /q "%userprofile%\Local Settings\Application Data\Mozilla\Firefox\Profiles\miy250bg.default\Cac he"
del /f /q /s "%userprofile%\Application Data\Microsoft\Office\Recent"
del /f /q /s "%SystemRoot%\TEMP"
del /f /q /s "%USERPROFILE%\My Recent Documents"
del /f /q /s "%USERPROFILE%\recent"
del /f /q /s "%USERPROFILE%\Local Settings\Temporary Internet Files"
del /f /q /s "%USERPROFILE%\Local Settings\History"
del /f /q /s "%USERPROFILE%\Application Data\Microsoft\HTML Help"
del /f /q /s "%USERPROFILE%\Application Data\Microsoft\Templates"
del /f /q /s "%windir%\control.ini"
del /f /q /s "%windir%\system32\drivers\etc\hosts"

reg.exe delete "HKEY_CURRENT_USER\Software\Microsoft\Windows\Curr entVersion\Policies\Explorer\run" /f

reg.exe delete "HKEY_CURRENT_USER\Software\Microsoft\Windows\Curr entVersion\Policies\Explorer\RunOnce" /f

reg.exe delete "HKEY_CURRENT_USER\Software\Microsoft\Windows\Curr entVersion\Policies\Explorer\RunOnceEx" /f

reg.exe delete "HKEY_CURRENT_USER\Software\Microsoft\Windows\Curr entVersion\Policies\Explorer\RunServices" /f

reg.exe delete "HKEY_CURRENT_USER\Software\Microsoft\Windows\Curr entVersion\Policies\Explorer\RunServicesOnce" /f


reg.exe delete "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Cur rentVersion\Policies\Explorer\run" /f

reg.exe delete "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Cur rentVersion\Policies\Explorer\RunOnce" /f

reg.exe delete "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Cur rentVersion\Policies\Explorer\RunOnceEx" /f

reg.exe delete "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Cur rentVersion\Policies\Explorer\RunServices" /f

reg.exe delete "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Cur rentVersion\Policies\Explorer\RunServicesOnce" /f


reg.exe delete "HKEY_CURRENT_USER\Software\Microsoft\Windows\Curr entVersion\Run" /f
reg.exe delete "HKEY_CURRENT_USER\Software\Microsoft\Windows\Curr entVersion\RunOnce" /f
reg.exe delete "HKEY_CURRENT_USER\Software\Microsoft\Windows\Curr entVersion\RunOnceEx" /f
reg.exe delete "HKEY_CURRENT_USER\Software\Microsoft\Windows\Curr entVersion\RunServices" /f
reg.exe delete "HKEY_CURRENT_USER\Software\Microsoft\Windows\Curr entVersion\RunServicesOnce" /f

reg.exe delete "HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\Cu rrentVersion\Run" /f
reg.exe delete "HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\Cu rrentVersion\RunOnce" /f
reg.exe delete "HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\Cu rrentVersion\RunOnceEx" /f
reg.exe delete "HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\Cu rrentVersion\RunServices" /f
reg.exe delete "HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\Cu rrentVersion\RunServicesOnce" /f

reg.exe delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Cur rentVersion\Run" /f
reg.exe delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Cur rentVersion\RunOnce" /f
reg.exe delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Cur rentVersion\RunOnceEx" /f
reg.exe delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Cur rentVersion\RunServices" /f
reg.exe delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Cur rentVersion\RunServicesOnce" /f

reg.exe delete "HKEY_CURRENT_USER\Software\Policies\Microsoft\Win dows\System\Scripts" /f

reg.exe delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Terminal Server\Install\Software\Microsoft\Windows\CurrentV ersion\Run" /f

reg.exe delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Terminal Server\Install\Software\Microsoft\Windows\CurrentV ersion\Runonce" /f