@Echo Off
color 9f
REM title 移動(dòng)介質(zhì)病毒免疫工具
:reg
Rem 無(wú)條件禁止自動(dòng)運(yùn)行特性防范病毒
reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v NoDriveAutoRun /t REG_BINARY /d ffffff03 /f>nul 2>nul
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer" /v NoDriveTypeAutoRun /t REG_DWORD /d 0x000000df /f>nul 2>nul
reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v NoDriveTypeAutoRun /t REG_DWORD /d 0x000000df /f>nul 2>nul
reg add "HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v NoDriveTypeAutoRun /t REG_DWORD /d 0x000000df /f>nul 2>nul
reg add "HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v NoDriveTypeAutoRun /t REG_DWORD /d 0x000000df /f>nul 2>nul
reg add "HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v NoDriveTypeAutoRun /t REG_DWORD /d 0x000000df /f>nul 2>nul
reg add "HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v NoDriveTypeAutoRun /t REG_DWORD /d 0x000000df /f>nul 2>nul
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL" /v CheckedValue /t REG_DWORD /d 0x00000001 /f>nul 2>nul
rem 修復(fù)磁盤(pán)打開(kāi)關(guān)聯(lián)
reg delete "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2" /f>nul 2>nul
rem 殺除U盤(pán)病毒進(jìn)程
taskkill /F /IM ctfmon.exe /IM ctfmon.exe /IM SVOHOST.exe /IM AdobeR.exe /IM ravmone.exe /IM wincfgs.exe /IM doc.exe /IM rose.exe /IM sxs.exe /IM autorun.exe /IM KB20060111.exe>nul 2>nul
rem 免疫自動(dòng)運(yùn)行
echo Y|cacls "%USERPROFILE%\「開(kāi)始」菜單\程序\啟動(dòng)" /C /P everyone:F>nul 2>nul
echo Y|cacls "%ALLUSERSPROFILE%\「開(kāi)始」菜單\程序\啟動(dòng)" /C /P everyone:F>nul 2>nul
attrib -s -h -r "%USERPROFILE%\「開(kāi)始」菜單\程序\啟動(dòng)\*.exe">nul 2>nul
attrib -s -h -r "%ALLUSERSPROFILE%\「開(kāi)始」菜單\程序\啟動(dòng)\*.exe">nul 2>nul
del /A /F /S /Q "%USERPROFILE%\「開(kāi)始」菜單\程序\啟動(dòng)\*.exe">nul 2>nul
del /A /F /S /Q "%ALLUSERSPROFILE%\「開(kāi)始」菜單\程序\啟動(dòng)\*.exe">nul 2>nul
rem echo Y|cacls "%USERPROFILE%\「開(kāi)始」菜單\程序\啟動(dòng)" /C /P everyone:N>nul 2>nul
rem echo Y|cacls "%ALLUSERSPROFILE%\「開(kāi)始」菜單\程序\啟動(dòng)" /C /P everyone:N>nul 2>nul
:menu1
cls
Echo.
Echo.
Echo 磁盤(pán) Autorun 病毒清除/免疫工具 By 陳毅
Echo.
Echo 移動(dòng)磁盤(pán)容易受到利用移動(dòng)設(shè)備的自動(dòng)運(yùn)行特性而感染和發(fā)作的病毒
Echo 的侵襲，而我們無(wú)法保證其他的機(jī)器中沒(méi)有這類(lèi)病毒。
Echo.
Echo 本工具可對(duì)移動(dòng)磁盤(pán)進(jìn)行特別的免疫處理，使得它的自動(dòng)運(yùn)行特性完
Echo 失效，從而避免帶毒的移動(dòng)磁盤(pán)插入本機(jī)后病毒立即自動(dòng)執(zhí)行。
Echo 當(dāng)然，您也完全可以對(duì)硬盤(pán)分區(qū)進(jìn)行免疫處理。
Echo.
Echo.
Echo [1] 免疫當(dāng)前系統(tǒng)中所有磁盤(pán)
Echo [2] 只免疫指定磁盤(pán)或移動(dòng)磁盤(pán)
Echo [3] 退出
Set Choice=
Echo.
Set /P Choice= 請(qǐng)輸入要執(zhí)行的操作，然后按回車(chē)：
Echo.
If '%Choice%'=='' goto other
If /I '%Choice%'=='1' GOTO alldisk
If /I '%Choice%'=='2' GOTO setlet
If /I '%Choice%'=='3' GOTO end
Goto menu1
:alldisk
Echo.
Echo 正在免疫！可能需要一小會(huì)時(shí)間，請(qǐng)稍候……
for %%a in (c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z) do echo Y|cacls %%a:\autorun.inf /C /P everyone:F>nul 2>nul
for %%a in (c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z) do attrib -s -h -r %%a:\Autorun.inf>nul 2>nul
for %%a in (c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z) do del /A /F /S /Q %%a:\Autorun.inf>nul 2>nul
for %%a in (c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z) do md %%a:\Autorun.inf\>nul 2>nul
for %%a in (c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z) do md %%a:\Autorun.inf\病毒免疫目錄不要?jiǎng)h除！..\>nul 2>nul
for %%a in (c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z) do attrib +s +h +r %%a:\Autorun.inf>nul 2>nul
for %%a in (c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z) do echo Y|cacls %%a:\autorun.inf /C /P everyone:R>nul 2>nul
rem 殺除U盤(pán)病毒進(jìn)程
taskkill /F /IM ctfmon.exe /IM ctfmon.exe /IM SVOHOST.exe /IM AdobeR.exe /IM ravmone.exe /IM wincfgs.exe /IM doc.exe /IM rose.exe /IM sxs.exe /IM autorun.exe /IM KB20060111.exe>nul 2>nul
rem 免疫自動(dòng)運(yùn)行
echo Y|cacls "%USERPROFILE%\「開(kāi)始」菜單\程序\啟動(dòng)" /C /P everyone:F>nul 2>nul
echo Y|cacls "%ALLUSERSPROFILE%\「開(kāi)始」菜單\程序\啟動(dòng)" /C /P everyone:F>nul 2>nul
attrib -s -h -r "%USERPROFILE%\「開(kāi)始」菜單\程序\啟動(dòng)\*.exe">nul 2>nul
attrib -s -h -r "%ALLUSERSPROFILE%\「開(kāi)始」菜單\程序\啟動(dòng)\*.exe">nul 2>nul
del /A /F /S /Q "%USERPROFILE%\「開(kāi)始」菜單\程序\啟動(dòng)\*.exe">nul 2>nul
del /A /F /S /Q "%ALLUSERSPROFILE%\「開(kāi)始」菜單\程序\啟動(dòng)\*.exe">nul 2>nul
rem echo Y|cacls "%USERPROFILE%\「開(kāi)始」菜單\程序\啟動(dòng)" /C /P everyone:N>nul 2>nul
rem echo Y|cacls "%ALLUSERSPROFILE%\「開(kāi)始」菜單\程序\啟動(dòng)" /C /P everyone:N>nul 2>nul
rem 清除自動(dòng)加載鍵值
reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v SoundMam /f>nul 2>nul
reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v wincfgs /f>nul 2>nul
reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows" /v Load /f>nul 2>nul
reg delete "HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows" /v Load /f>nul 2>nul
rem 清除喜歡利用回收站的移動(dòng)磁盤(pán)自動(dòng)運(yùn)行病毒
for %%a in (c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z) do echo Y|cacls "%%a:\Recycler\*.exe" /C /P everyone:F>nul 2>nul
for %%a in (c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z) do echo Y|cacls "%%a:\Recycler\*.pif" /C /P everyone:F>nul 2>nul
for %%a in (c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z) do echo Y|cacls "%%a:\Recycler\*.com" /C /P everyone:F>nul 2>nul
for %%a in (c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z) do echo Y|cacls "%%a:\Recycled\*.exe" /C /P everyone:F>nul 2>nul
for %%a in (c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z) do echo Y|cacls "%%a:\Recycled\*.pif" /C /P everyone:F>nul 2>nul
for %%a in (c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z) do echo Y|cacls "%%a:\Recycled\*.com" /C /P everyone:F>nul 2>nul
for %%a in (c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z) do echo Y|cacls "%%a:\Recycled\Recycled\*.exe" /C /P everyone:F>nul 2>nul
for %%a in (c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z) do echo Y|cacls "%%a:\Recycled\Recycled\*.pif" /C /P everyone:F>nul 2>nul
for %%a in (c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z) do echo Y|cacls "%%a:\Recycled\Recycled\*.com" /C /P everyone:F>nul 2>nul
for %%a in (c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z) do del /A /F /S /Q "%%a:\Recycled\*.exe">nul 2>nul
for %%a in (c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z) do del /A /F /S /Q "%%a:\Recycled\*.com">nul 2>nul
for %%a in (c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z) do del /A /F /S /Q "%%a:\Recycled\*.pif">nul 2>nul
for %%a in (c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z) do del /A /F /S /Q "%%a:\Recycler\*.exe">nul 2>nul
for %%a in (c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z) do del /A /F /S /Q "%%a:\Recycler\*.com">nul 2>nul
for %%a in (c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z) do del /A /F /S /Q "%%a:\Recycler\*.pif">nul 2>nul
cls
Echo.
Echo 當(dāng)前系統(tǒng)的所有磁盤(pán)已經(jīng)成功地進(jìn)行了自動(dòng)運(yùn)行病毒免疫！
Echo 任意鍵退出……
pause>nul
goto end
:setlet
echo.
Echo.
Set Choice=
Set /P Choice= 請(qǐng)輸入要免疫的移動(dòng)磁盤(pán)的盤(pán)符，如 F: 然后按回車(chē)：
If '%Choice%'=='' goto setlet
echo Y|cacls %Choice%\autorun.inf /C /P everyone:F>nul 2>nul
If Exist %Choice%\Autorun.inf Del /A /F /S /Q %Choice%\Autorun.inf>nul 2>nul
md %Choice%\Autorun.inf\>nul 2>nul
md %Choice%\Autorun.inf\病毒免疫目錄不要?jiǎng)h除！..\>nul 2>nul
attrib +s +h +r %Choice%\Autorun.inf>nul 2>nul
echo Y|cacls %Choice%\Autorun.inf /P everyone:N>nul
rem 清除回收站可能的病毒
cacls "%Choice%\Recycler\*.exe" /C /P everyone:F>nul 2>nul
cacls "%Choice%\Recycler\*.pif" /C /P everyone:F>nul 2>nul
cacls "%Choice%\Recycler\*.com" /C /P everyone:F>nul 2>nul
cacls "%Choice%\Recycled\*.exe" /C /P everyone:F>nul 2>nul
cacls "%Choice%\Recycled\*.pif" /C /P everyone:F>nul 2>nul
cacls "%Choice%\Recycled\*.com" /C /P everyone:F>nul 2>nul
cacls "%Choice%\Recycled\Recycled\*.exe" /C /P everyone:F>nul 2>nul
cacls "%Choice%\Recycled\Recycled\*.pif" /C /P everyone:F>nul 2>nul
cacls "%Choice%\Recycled\Recycled\*.com" /C /P everyone:F>nul 2>nul
del /A /F /S /Q "%Choice%\Recycled\*.exe">nul 2>nul
del /A /F /S /Q "%Choice%\Recycled\*.com">nul 2>nulcls
del /A /F /S /Q "%Choice%\Recycled\*.pif">nul 2>nul
Echo.
Echo 指定的磁盤(pán)　%Choice%　已經(jīng)成功地進(jìn)行了病毒免疫！
:other
Echo.
Echo [1] 繼續(xù)免疫其他的磁盤(pán) [2] 退出
Set Choice=
Echo.
Set /P Choice= 請(qǐng)輸入要執(zhí)行的操作，然后按回車(chē)：
Echo.
If '%Choice%'=='' goto other
If /I '%Choice%'=='1' GOTO setlet
If /I '%Choice%'=='2' GOTO end
Goto other
:End
cls
Echo.
Echo 友情提示：
Echo 如果系統(tǒng)中已經(jīng)感染了打開(kāi)磁盤(pán)分區(qū)即自動(dòng)運(yùn)行的病毒，請(qǐng)用本工具
Echo 對(duì)所有磁盤(pán)進(jìn)行免疫處理后，立即重啟計(jì)算機(jī)，然后這類(lèi)病毒就不會(huì)
Echo 在打開(kāi)磁盤(pán)時(shí)自動(dòng)運(yùn)行了。此時(shí)只需直接刪除病毒文件即可！
Echo.
Echo 任意鍵退出……
pause>nul
Exit