Remover for Stupid Worms

The worms that infect windows are really funny.

Kinza, IPH, Boot.vbs... what not...

Simple and Stupid worms... that make Windows go crazy..

I studied them, got 'inspired' by removal tools and tried some more... and here i give you a 'open source' .bat file that would remove those stupid stuffs...

here is the file: www.parikrama.net.np/worm_buster.bat

download the file and run it..

here is the thing it does...

cd\

shutdown -a
taskkill /f /im wproxp.exe
taskkill /f /im isetup.exe
taskkill /f /im imapd.exe
taskkill /f /im dxdlg.exe
taskkill /f /im imapdb.exe
taskkill /f /im imapd.exe
taskkill /f /im imapdb.exe
taskkill /f /im scvvhsot.exe
taskkill /f /im wscript.exe
taskkill /f /im Kinza.exe
taskkill /f /im iph.exe
taskkill /f /im iph.exe
taskkill /f /im iph.exe
taskkill /f /im iph.exe
taskkill /f /im iph.exe
taskkill /f /im iph.exe
taskkill /f /im iph.exe
reg add "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" /v Userinit /f /d "%windir%\system32\userinit.exe",
reg add "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" /v Shell /f /d "explorer.exe"
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /t Reg_Binary /v NoDriveAutoRun /f /d ffffff03
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /t Reg_dword /v NoDriveTypeAutoRun /f /d 36
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /t Reg_dword /v NoFolderOptions /f /d 0
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System" /t Reg_dword /v DisbleRegistryTools /f /d 0
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System" /t Reg_dword /v DisableTaskMgr /f /d 0
del /a /f /s boot.vbs
del /a /f /s virusremoval.bat
del /a /f /s wproxp.exe
del /a /f /s isetup.exe
del /a /f /s imapd.exe
del /a /f /s ActMon.ini
del /a /f /s dxdlg.exe
del /a /f /s imapde.dll
del /a /f /s imapdd.dll
del /a /f /s imapdc.dll
del /a /f /s imapdb.exe
del /a /f /s imapd.exe
del /a /f /s imapdb.dll
del /a /f /s imapdb.exe
del /a /f /s Kinza.exe
del /a /f /s iph.exe
del /a /f /s system.bat
del /a /f /s autorun.inf
del /a /f /s semiantivirus.vbs

_______________________

Initially it kills the processes.. then activates the Folder Options, unlocks the registry and task manager

Then it searches and kills all the worms found.

:)

Comments

deeps said…
thanks buddy. i did not know about killing a task using command prompt. How ever, i did the same using process explorer. But now, an error message comes during the start up. i wrote about it my blog. have a look
7:29 AM
abish said…
what error message do you have in the startup. do post we can try solving the problem.
7:37 AM
Post a Comment

Popular posts from this blog

HIV/AIDS: FAQ

Q. What is HIV ? HIV is Human Immuno-deficiency Virus, (a disease of humans where there is deficiency of immunity). It is a RNA virus. It is a special kind because it forms DNA from RNA (generally RNA is formed from DNA), this is due to the presence of the enzyme called reverse transcriptase. HIV belongs to the 'retrovirus' family, so the therapy against this virus is called 'anti-retroviral therapy.' Q. Then what is AIDS ? AIDS is Acquired Immune Deficiency Syndrome which means a collection of symptoms and infections resulting from the damage to the immune system caused by the human immunodeficiency virus (HIV). Since the immune system is the main 'defense' of the body against the infections, the person with damaged immunity because of HIV are more prone to develop various infections and cancers. Many bacterias, viruses and fungi, which rarely infect normal human beings can easily infect the patients in AIDS due to HIV. So, a person who has r
Read more

मेरो गाउँ ज्यामिरे / Mero Gaun Jyamire

Image
"मेरो गाउँ ज्यामिरे, जमुनीको छोरो म, काले भन्छन् मलाई, तर मान्छे गोरो म। सबै पढ्न गएछन्, जान्ने सुन्ने भएछन्, म त अझै गोठमा, छैन हाँसो ओठमा। किन किन मन यो, दुखे दुखे जस्तो छ, यो ज्यामिरे गाउँमा, कुरो मात्र सस्तो छ। मेरो गाउँ ज्यामिरे, जमुनीको छोरो म, काले भन्छन् मलाई, तर मान्छे गोरो म। सबै भन्छन् मलाई, स्कुल किन नगा'को, कसैले नि बुझेनन्, कापी कलम नभा'को। मेरो सानो गोठ नै, मेरो सानो स्कुल, गोबरको अक्षर, पढ्न लेख्न मुस्किल।" mero gaun jyamire, jamuni ko choro ma, kale bhanchan malai, tara manche goro ma. sabai padhna gayechan, janne sunne bhayechan, ma ta ajhai gothma, chainaa haso oothma. kina kina mana yo, dukhe dukhe jasto cha, yo jyamire gaun ma kuro matra sasto cha. mero gaun jyamire, jamuni ko choro ma, kale bhanchan malai, tara manche goro ma. sabai bhancha malai, school kina na gako, kasai le ni bujhenan, kapi kalam na bhako. mero sano goth nai, mero sano schoola, gobarko akshyara, padhna lekhna muskila. मैले  यो गीत  पहिलो पटक के
Read more

Innocent but Positive

Image
Meet baby boy Himal, from Jhapa. He is just 10 months old, and was in our Paediatrics ward when I was posted there. He was admitted to investigate for his recurrent severe pneumonia. After admission, a proper medical history was taken. Family history revealed that both his parents died due to complications of AIDS. He has a elder brother, just 6 years old, who has recently been tested positive. Both the boys live with their grandmother who has no source of income and no family support. The reason for the baby boy's recurrent pneumonia was apparent, but I was waiting for the test results with crossed fingers. The results came, it was positive for HIV. But there still remains a small hope that it might be the antibodies from the mother's blood that would clear off after he is about 2 years of age. When my seniors were investigating more and trying to fit him into a classification of HIV, I was thinking about the future of the boy. How could his parents be so ignorant? They alre
Read more