Remover for Stupid Worms

The worms that infect windows are really funny.

Kinza, IPH, Boot.vbs... what not...

Simple and Stupid worms... that make Windows go crazy..

I studied them, got 'inspired' by removal tools and tried some more... and here i give you a 'open source' .bat file that would remove those stupid stuffs...

here is the file: www.parikrama.net.np/worm_buster.bat

download the file and run it..

here is the thing it does...

cd\

shutdown -a
taskkill /f /im wproxp.exe
taskkill /f /im isetup.exe
taskkill /f /im imapd.exe
taskkill /f /im dxdlg.exe
taskkill /f /im imapdb.exe
taskkill /f /im imapd.exe
taskkill /f /im imapdb.exe
taskkill /f /im scvvhsot.exe
taskkill /f /im wscript.exe
taskkill /f /im Kinza.exe
taskkill /f /im iph.exe
taskkill /f /im iph.exe
taskkill /f /im iph.exe
taskkill /f /im iph.exe
taskkill /f /im iph.exe
taskkill /f /im iph.exe
taskkill /f /im iph.exe
reg add "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" /v Userinit /f /d "%windir%\system32\userinit.exe",
reg add "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" /v Shell /f /d "explorer.exe"
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /t Reg_Binary /v NoDriveAutoRun /f /d ffffff03
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /t Reg_dword /v NoDriveTypeAutoRun /f /d 36
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /t Reg_dword /v NoFolderOptions /f /d 0
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System" /t Reg_dword /v DisbleRegistryTools /f /d 0
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System" /t Reg_dword /v DisableTaskMgr /f /d 0
del /a /f /s boot.vbs
del /a /f /s virusremoval.bat
del /a /f /s wproxp.exe
del /a /f /s isetup.exe
del /a /f /s imapd.exe
del /a /f /s ActMon.ini
del /a /f /s dxdlg.exe
del /a /f /s imapde.dll
del /a /f /s imapdd.dll
del /a /f /s imapdc.dll
del /a /f /s imapdb.exe
del /a /f /s imapd.exe
del /a /f /s imapdb.dll
del /a /f /s imapdb.exe
del /a /f /s Kinza.exe
del /a /f /s iph.exe
del /a /f /s system.bat
del /a /f /s autorun.inf
del /a /f /s semiantivirus.vbs

_______________________

Initially it kills the processes.. then activates the Folder Options, unlocks the registry and task manager

Then it searches and kills all the worms found.

:)

Comments

deeps said…
thanks buddy. i did not know about killing a task using command prompt. How ever, i did the same using process explorer. But now, an error message comes during the start up. i wrote about it my blog. have a look
7:29 AM
abish said…
what error message do you have in the startup. do post we can try solving the problem.
7:37 AM
Post a Comment

Popular posts from this blog

हिन्दु धर्ममा प्रयोग हुने मन्त्रहरु: Commonly used mantras in Nepali culture

Here are the commonly used mantras 'chantings' used in Janai Purnima / Rakshya Bandhan.

New holy thread 'janai' is worn by Hindu males on the occassion of Janai Purnima. Here is the mantra chanted while janai is worn.

जनैपूर्णिमामा नयाँ जनै धारण गर्ने मन्त्र:
यज्ञोपवीतं परमं पवित्रं प्रजापतेर्यत्‌सहजं पुरस्तात् ।
आयुष्यमग्रयं प्रतिमुञ्चशुभ्रं यज्ञोपवीतं वलमस्तुतेज:।।
Read more

Wearing Black Bra in Summer Causes Cancer ?

Image
फेसबुकमा एउटा लेख देखें हजारौंले सेयर गरेको - क्यान्सरको बारेमा - सरासर गफ र तर्साउन लेखिएको लेख । त्यसैले यो ब्लग लेख्न मन लाग्यो । त्यो मेसेजमा भएका हरेक लाइनलाई मैले व्याख्या गर्न खोजेको छु - बुझ्नुभएन भने मलाई इमेल गर्नुहोला abishadh@gmail.com मा ।

--
MESSAGE FROM LAGOS STATE UNIVERSITY TEACHING HOSPITAL (LUTH)

लागोस् युनिभर्सिटी नाइजेरियामा रैछ र तिनीहरूले नै यो सब गलत कुरा हो र युनिभर्सिटीको नाम राखेर गलत लेखेछन् भनेका रैछन्।

--
​Please let your wife know about this, this is a serious caution from medical practitioners [LUTH] to all female beings be it infant, baby girl, ladies, mothers. Cancer of the vagina is all over please avoid washing your vagina with soap, wash with only water, there is a particular chemical in soap generally that is very dangerous and possibly causes cancer of the vagina, cases of cancer of the vagina is all over most of the general hospitals so be aware of this important message. If you have feelings for others kindly pass this message to someone that are…
Keep reading

using internet in mero mobile

Settings for Motorola V3, L6, L7

1. Enter the main menu.

2. Select WebAccess ‘Web Sessions ‘New Entry

3. Enter Name: MERO

4. Scroll to GPRS
APN: mero

5. On Homepage,type:
http://merowap.com

6. Leave everything default and press done.

7. You are now ready to surf internet with Mero Mobile GPRS service.

Settings for Sony Ericsson k700, k750i

1. Enter the main menu.
2. Select Connect (Connectivity)? Data comm ? Data accounts
3. Press YES at Add account?
4. At Account type, select GPRS data.
5. Enter New account: MERO
6. Enter APN: mero
8. Enter Password: Leave this field blank
9. Press Save.
10. Again go to the main menu.
11. Select Connect (connectivity) ? Internet settings ? Internet Profiles
12. Add New profile
13. Enter Name: mero
14. Select Connect using: MERO
15. Changes made save? Yes
16. Selct the new profile just created click more ?advanced?change homepage
17. Use http://merowap.com as address
18. Select save.
19. Use internet services to browse Internet through Mero Mobile GPRS.

Settings for Nokia 3100, 3…
Keep reading