@Echo Off
color 9f
REM title 移動介質(zhì)病毒免疫工具
:reg
Rem 無條件禁止自動運行特性防范病毒
reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v NoDriveAutoRun /t REG_BINARY /d ffffff03 /f>nul 2>nul
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer" /v NoDriveTypeAutoRun /t REG_DWORD /d 0x000000df /f>nul 2>nul
reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v NoDriveTypeAutoRun /t REG_DWORD /d 0x000000df /f>nul 2>nul
reg add "HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v NoDriveTypeAutoRun /t REG_DWORD /d 0x000000df /f>nul 2>nul
reg add "HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v NoDriveTypeAutoRun /t REG_DWORD /d 0x000000df /f>nul 2>nul
reg add "HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v NoDriveTypeAutoRun /t REG_DWORD /d 0x000000df /f>nul 2>nul
reg add "HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v NoDriveTypeAutoRun /t REG_DWORD /d 0x000000df /f>nul 2>nul
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL" /v CheckedValue /t REG_DWORD /d 0x00000001 /f>nul 2>nul
rem 修復(fù)磁盤打開關(guān)聯(lián)
reg delete "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2" /f>nul 2>nul
rem 殺除U盤病毒進程
taskkill /F /IM ctfmon.exe /IM ctfmon.exe /IM SVOHOST.exe /IM AdobeR.exe /IM ravmone.exe /IM wincfgs.exe /IM doc.exe /IM rose.exe /IM sxs.exe /IM autorun.exe /IM KB20060111.exe>nul 2>nul
rem 免疫自動運行
echo Y|cacls "%USERPROFILE%\「開始」菜單\程序\啟動" /C /P everyone:F>nul 2>nul
echo Y|cacls "%ALLUSERSPROFILE%\「開始」菜單\程序\啟動" /C /P everyone:F>nul 2>nul
attrib -s -h -r "%USERPROFILE%\「開始」菜單\程序\啟動\*.exe">nul 2>nul
attrib -s -h -r "%ALLUSERSPROFILE%\「開始」菜單\程序\啟動\*.exe">nul 2>nul
del /A /F /S /Q "%USERPROFILE%\「開始」菜單\程序\啟動\*.exe">nul 2>nul
del /A /F /S /Q "%ALLUSERSPROFILE%\「開始」菜單\程序\啟動\*.exe">nul 2>nul
rem echo Y|cacls "%USERPROFILE%\「開始」菜單\程序\啟動" /C /P everyone:N>nul 2>nul
rem echo Y|cacls "%ALLUSERSPROFILE%\「開始」菜單\程序\啟動" /C /P everyone:N>nul 2>nul
:menu1
cls
Echo.
Echo.
Echo 磁盤 Autorun 病毒清除/免疫工具 By 陳毅
Echo.
Echo 移動磁盤容易受到利用移動設(shè)備的自動運行特性而感染和發(fā)作的病毒
Echo 的侵襲，而我們無法保證其他的機器中沒有這類病毒。
Echo.
Echo 本工具可對移動磁盤進行特別的免疫處理，使得它的自動運行特性完
Echo 失效，從而避免帶毒的移動磁盤插入本機后病毒立即自動執(zhí)行。
Echo 當然，您也完全可以對硬盤分區(qū)進行免疫處理。
Echo.
Echo.
Echo [1] 免疫當前系統(tǒng)中所有磁盤
Echo [2] 只免疫指定磁盤或移動磁盤
Echo [3] 退出
Set Choice=
Echo.
Set /P Choice= 請輸入要執(zhí)行的操作，然后按回車：
Echo.
If '%Choice%'=='' goto other
If /I '%Choice%'=='1' GOTO alldisk
If /I '%Choice%'=='2' GOTO setlet
If /I '%Choice%'=='3' GOTO end
Goto menu1
:alldisk
Echo.
Echo 正在免疫！可能需要一小會時間，請稍候……
for %%a in (c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z) do echo Y|cacls %%a:\autorun.inf /C /P everyone:F>nul 2>nul
for %%a in (c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z) do attrib -s -h -r %%a:\Autorun.inf>nul 2>nul
for %%a in (c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z) do del /A /F /S /Q %%a:\Autorun.inf>nul 2>nul
for %%a in (c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z) do md %%a:\Autorun.inf\>nul 2>nul
for %%a in (c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z) do md %%a:\Autorun.inf\病毒免疫目錄不要刪除！..\>nul 2>nul
for %%a in (c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z) do attrib +s +h +r %%a:\Autorun.inf>nul 2>nul
for %%a in (c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z) do echo Y|cacls %%a:\autorun.inf /C /P everyone:R>nul 2>nul
rem 殺除U盤病毒進程
taskkill /F /IM ctfmon.exe /IM ctfmon.exe /IM SVOHOST.exe /IM AdobeR.exe /IM ravmone.exe /IM wincfgs.exe /IM doc.exe /IM rose.exe /IM sxs.exe /IM autorun.exe /IM KB20060111.exe>nul 2>nul
rem 免疫自動運行
echo Y|cacls "%USERPROFILE%\「開始」菜單\程序\啟動" /C /P everyone:F>nul 2>nul
echo Y|cacls "%ALLUSERSPROFILE%\「開始」菜單\程序\啟動" /C /P everyone:F>nul 2>nul
attrib -s -h -r "%USERPROFILE%\「開始」菜單\程序\啟動\*.exe">nul 2>nul
attrib -s -h -r "%ALLUSERSPROFILE%\「開始」菜單\程序\啟動\*.exe">nul 2>nul
del /A /F /S /Q "%USERPROFILE%\「開始」菜單\程序\啟動\*.exe">nul 2>nul
del /A /F /S /Q "%ALLUSERSPROFILE%\「開始」菜單\程序\啟動\*.exe">nul 2>nul
rem echo Y|cacls "%USERPROFILE%\「開始」菜單\程序\啟動" /C /P everyone:N>nul 2>nul
rem echo Y|cacls "%ALLUSERSPROFILE%\「開始」菜單\程序\啟動" /C /P everyone:N>nul 2>nul
rem 清除自動加載鍵值
reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v SoundMam /f>nul 2>nul
reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v wincfgs /f>nul 2>nul
reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows" /v Load /f>nul 2>nul
reg delete "HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows" /v Load /f>nul 2>nul
rem 清除喜歡利用回收站的移動磁盤自動運行病毒
for %%a in (c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z) do echo Y|cacls "%%a:\Recycler\*.exe" /C /P everyone:F>nul 2>nul
for %%a in (c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z) do echo Y|cacls "%%a:\Recycler\*.pif" /C /P everyone:F>nul 2>nul
for %%a in (c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z) do echo Y|cacls "%%a:\Recycler\*.com" /C /P everyone:F>nul 2>nul
for %%a in (c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z) do echo Y|cacls "%%a:\Recycled\*.exe" /C /P everyone:F>nul 2>nul
for %%a in (c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z) do echo Y|cacls "%%a:\Recycled\*.pif" /C /P everyone:F>nul 2>nul
for %%a in (c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z) do echo Y|cacls "%%a:\Recycled\*.com" /C /P everyone:F>nul 2>nul
for %%a in (c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z) do echo Y|cacls "%%a:\Recycled\Recycled\*.exe" /C /P everyone:F>nul 2>nul
for %%a in (c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z) do echo Y|cacls "%%a:\Recycled\Recycled\*.pif" /C /P everyone:F>nul 2>nul
for %%a in (c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z) do echo Y|cacls "%%a:\Recycled\Recycled\*.com" /C /P everyone:F>nul 2>nul
for %%a in (c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z) do del /A /F /S /Q "%%a:\Recycled\*.exe">nul 2>nul
for %%a in (c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z) do del /A /F /S /Q "%%a:\Recycled\*.com">nul 2>nul
for %%a in (c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z) do del /A /F /S /Q "%%a:\Recycled\*.pif">nul 2>nul
for %%a in (c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z) do del /A /F /S /Q "%%a:\Recycler\*.exe">nul 2>nul
for %%a in (c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z) do del /A /F /S /Q "%%a:\Recycler\*.com">nul 2>nul
for %%a in (c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z) do del /A /F /S /Q "%%a:\Recycler\*.pif">nul 2>nul
cls
Echo.
Echo 當前系統(tǒng)的所有磁盤已經(jīng)成功地進行了自動運行病毒免疫！
Echo 任意鍵退出……
pause>nul
goto end
:setlet
echo.
Echo.
Set Choice=
Set /P Choice= 請輸入要免疫的移動磁盤的盤符，如 F: 然后按回車：
If '%Choice%'=='' goto setlet
echo Y|cacls %Choice%\autorun.inf /C /P everyone:F>nul 2>nul
If Exist %Choice%\Autorun.inf Del /A /F /S /Q %Choice%\Autorun.inf>nul 2>nul
md %Choice%\Autorun.inf\>nul 2>nul
md %Choice%\Autorun.inf\病毒免疫目錄不要刪除！..\>nul 2>nul
attrib +s +h +r %Choice%\Autorun.inf>nul 2>nul
echo Y|cacls %Choice%\Autorun.inf /P everyone:N>nul
rem 清除回收站可能的病毒
cacls "%Choice%\Recycler\*.exe" /C /P everyone:F>nul 2>nul
cacls "%Choice%\Recycler\*.pif" /C /P everyone:F>nul 2>nul
cacls "%Choice%\Recycler\*.com" /C /P everyone:F>nul 2>nul
cacls "%Choice%\Recycled\*.exe" /C /P everyone:F>nul 2>nul
cacls "%Choice%\Recycled\*.pif" /C /P everyone:F>nul 2>nul
cacls "%Choice%\Recycled\*.com" /C /P everyone:F>nul 2>nul
cacls "%Choice%\Recycled\Recycled\*.exe" /C /P everyone:F>nul 2>nul
cacls "%Choice%\Recycled\Recycled\*.pif" /C /P everyone:F>nul 2>nul
cacls "%Choice%\Recycled\Recycled\*.com" /C /P everyone:F>nul 2>nul
del /A /F /S /Q "%Choice%\Recycled\*.exe">nul 2>nul
del /A /F /S /Q "%Choice%\Recycled\*.com">nul 2>nulcls
del /A /F /S /Q "%Choice%\Recycled\*.pif">nul 2>nul
Echo.
Echo 指定的磁盤　%Choice%　已經(jīng)成功地進行了病毒免疫！
:other
Echo.
Echo [1] 繼續(xù)免疫其他的磁盤 [2] 退出
Set Choice=
Echo.
Set /P Choice= 請輸入要執(zhí)行的操作，然后按回車：
Echo.
If '%Choice%'=='' goto other
If /I '%Choice%'=='1' GOTO setlet
If /I '%Choice%'=='2' GOTO end
Goto other
:End
cls
Echo.
Echo 友情提示：
Echo 如果系統(tǒng)中已經(jīng)感染了打開磁盤分區(qū)即自動運行的病毒，請用本工具
Echo 對所有磁盤進行免疫處理后，立即重啟計算機，然后這類病毒就不會
Echo 在打開磁盤時自動運行了。此時只需直接刪除病毒文件即可！
Echo.
Echo 任意鍵退出……
pause>nul
Exit