Remover for Stupid Worms

The worms that infect windows are really funny.

Kinza, IPH, Boot.vbs... what not...

Simple and Stupid worms... that make Windows go crazy..

I studied them, got 'inspired' by removal tools and tried some more... and here i give you a 'open source' .bat file that would remove those stupid stuffs...

here is the file: www.parikrama.net.np/worm_buster.bat

download the file and run it..

here is the thing it does...

cd\

shutdown -a
taskkill /f /im wproxp.exe
taskkill /f /im isetup.exe
taskkill /f /im imapd.exe
taskkill /f /im dxdlg.exe
taskkill /f /im imapdb.exe
taskkill /f /im imapd.exe
taskkill /f /im imapdb.exe
taskkill /f /im scvvhsot.exe
taskkill /f /im wscript.exe
taskkill /f /im Kinza.exe
taskkill /f /im iph.exe
taskkill /f /im iph.exe
taskkill /f /im iph.exe
taskkill /f /im iph.exe
taskkill /f /im iph.exe
taskkill /f /im iph.exe
taskkill /f /im iph.exe
reg add "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" /v Userinit /f /d "%windir%\system32\userinit.exe",
reg add "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" /v Shell /f /d "explorer.exe"
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /t Reg_Binary /v NoDriveAutoRun /f /d ffffff03
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /t Reg_dword /v NoDriveTypeAutoRun /f /d 36
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /t Reg_dword /v NoFolderOptions /f /d 0
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System" /t Reg_dword /v DisbleRegistryTools /f /d 0
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System" /t Reg_dword /v DisableTaskMgr /f /d 0
del /a /f /s boot.vbs
del /a /f /s virusremoval.bat
del /a /f /s wproxp.exe
del /a /f /s isetup.exe
del /a /f /s imapd.exe
del /a /f /s ActMon.ini
del /a /f /s dxdlg.exe
del /a /f /s imapde.dll
del /a /f /s imapdd.dll
del /a /f /s imapdc.dll
del /a /f /s imapdb.exe
del /a /f /s imapd.exe
del /a /f /s imapdb.dll
del /a /f /s imapdb.exe
del /a /f /s Kinza.exe
del /a /f /s iph.exe
del /a /f /s system.bat
del /a /f /s autorun.inf
del /a /f /s semiantivirus.vbs

_______________________

Initially it kills the processes.. then activates the Folder Options, unlocks the registry and task manager

Then it searches and kills all the worms found.

:)

Comments

deeps said…
thanks buddy. i did not know about killing a task using command prompt. How ever, i did the same using process explorer. But now, an error message comes during the start up. i wrote about it my blog. have a look
7:29 AM
abish said…
what error message do you have in the startup. do post we can try solving the problem.
7:37 AM
Post a Comment

Popular posts from this blog

HIV/AIDS: FAQ

Q. What is HIV ?
HIV is Human Immuno-deficiency Virus, (a disease of humans where there is deficiency of immunity). It is a RNA virus. It is a special kind because it forms DNA from RNA (generally RNA is formed from DNA), this is due to the presence of the enzyme called reverse transcriptase.
HIV belongs to the 'retrovirus' family, so the therapy against this virus is called 'anti-retroviral therapy.'


Q. Then what is AIDS ? AIDS is Acquired Immune Deficiency Syndrome which means a collection of symptoms and infections resulting from the damage to the immune system caused by the human immunodeficiency virus (HIV).
Since the immune system is the main 'defense' of the body against the infections, the person with damaged immunity because of HIV are more prone to develop various infections and cancers. Many bacterias, viruses and fungi, which rarely infect normal human beings can easily infect the patients in AIDS due to HIV.
So, a person who has recently been infected wi…
Read more

हिन्दु धर्ममा प्रयोग हुने मन्त्रहरु: Commonly used mantras in Nepali culture

Here are the commonly used mantras 'chantings' used in Janai Purnima / Rakshya Bandhan.

New holy thread 'janai' is worn by Hindu males on the occassion of Janai Purnima. Here is the mantra chanted while janai is worn.

जनैपूर्णिमामा नयाँ जनै धारण गर्ने मन्त्र:
यज्ञोपवीतं परमं पवित्रं प्रजापतेर्यत्‌सहजं पुरस्तात् ।
आयुष्यमग्रयं प्रतिमुञ्चशुभ्रं यज्ञोपवीतं वलमस्तुतेज:।।
Read more

Innocent but Positive

Image
Meet baby boy Himal, from Jhapa. He is just 10 months old, and was in our Paediatrics ward when I was posted there.
He was admitted to investigate for his recurrent severe pneumonia.

After admission, a proper medical history was taken. Family history revealed that both his parents died due to complications of AIDS.
He has a elder brother, just 6 years old, who has recently been tested positive. Both the boys live with their grandmother who has no source of income and no family support.

The reason for the baby boy's recurrent pneumonia was apparent, but I was waiting for the test results with crossed fingers. The results came, it was positive for HIV. But there still remains a small hope that it might be the antibodies from the mother's blood that would clear off after he is about 2 years of age.

When my seniors were investigating more and trying to fit him into a classification of HIV, I was thinking about the future of the boy. How could his parents be so ignorant? They already…
Read more