@echo off
color 1a
echo .
echo Welcome
echo .
echo This program mainly deals with viruses, and the symptoms are mainly manifested as "time was changed to 1980.4.1, and the startup prompts the time error.
echo cannot view hidden files, Kaspersky prompts activation error, disk needs to be opened right click, etc.
echo.
echo time error, please manually modify the program after the operation is completed. This program is not responsible for this matter.
echo .
echo .
echo ---------------------------------------------------------------------------------------------------------------------------
echo .
echo .
echo Press the Ctrl C key combination at the same time to exit this program.
pause
echo .
echo -----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
echo .
@echo off
echo is ready to terminate the process
echo Press the Ctrl C key combination at the same time to exit this program.
echo .
echo If the prompt "Error: The process was not found"" in this program, it means that the virus has stopped running.
echo .
pause
taskkill /f /im
taskkill /f /im
echo .
echo starts deleting components in the root directory of C to K
echo .
echo. The desktop may disappear and the open folders may be closed in the middle. Don’t worry too much.
echo .
echo Press the Ctrl C key combination at the same time to exit this program.
echo .
pause
md c:\hold
echo .
copy %SYSTEMROOT%\system32\ c:\hold
taskkill /f /im
echo .
del /f /a %SYSTEMROOT%\system32\autorun.*
del /f /a c:\autorun.*
del /f /a c:\
del /f /a c:\
del /f /a c:\
echo .
copy c:\hold\ %SYSTEMROOT%\system32\
echo .
rd /s /q c:\hold
echo .
del /f /a D:\autorun.*
del /f /a D:\
del /f /a D:\
del /f /a D:\
echo .
del /f /a E:\autorun.*
del /f /a E:\
del /f /a E:\
del /f /a E:\
echo .
del /f /a F:\autorun.*
del /f /a F:\
del /f /a F:\
del /f /a F:\
echo .
del /f /a G:\autorun.*
del /f /a G:\
del /f /a G:\
del /f /a G:\
echo .
del /f /a H:\autorun.*
del /f /a H:\
del /f /a H:\
del /f /a H:\
echo .
del /f /a I:\autorun.*
del /f /a I:\
del /f /a I:\
del /f /a I:\
echo .
del /f /a J:\autorun.*
del /f /a J:\
del /f /a J:\
del /f /a J:\
echo .
del /f /a K:\autorun.*
del /f /a K:\
del /f /a K:\
del /f /a K:\
echo .
start C:\WINDOWS\
echo C to K components under the root directory of the disk have been deleted
echo .
echo is now ready to solve the problem of not being able to open the "Show all files and folders" option and double-clicking the drive letter to open in a new window, etc.
echo Press the Ctrl C key combination at the same time to exit this program.
echo .
pause
reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL /v checkedValue /f
reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL /v checkedValue /t REG_DWORD /d 00000001
reg delete HKCR\Drive\shell /ve /f
reg add HKCR\Drive\shell /ve /t REG_SZ /d none
echo .
echo starts deleting startup items in the registry
echo .
echo If this program experiences "Error: The system cannot find the specified registry key or value" means that the startup key of this virus has been deleted.
echo or a new variant appears, please remove it yourself in the "System Configuration Utility".
echo .
echo Press the Ctrl C key combination at the same time to exit this program.
echo .
pause
reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v sxs2 /f
reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v /f
echo .
echo Now open the "System Configuration Utility", please check if it has its startup items yourself. If so, please remove them yourself.
echo .
echo Press the Ctrl C key combination at the same time to exit this program.
pause
start msconfig
echo .
echo .
echo The cleanup is over. To ensure the successful killing, please cancel the machine.
echo .
echo If there are any other situations, please come to Wusetu "Computer Clinic" for inquiries. Thank you for using it.
echo .
pause