In-depth understanding and writing a special killing tool system to kill the virus at startup (1)

  
        Now many malignant viruses need to be killed by special killing tools, but some viruses will automatically prohibit the killing tool from running. For these stubborn viruses, we often use other systems (such as DOS or PE) to kill. In fact, the killing tool is a batch file that can delete virus files. It is not difficult to understand and write. This article takes everyone to understand and write a special killing tool, you can directly enter the anti-virus menu and kill the virus when the system starts.

a for WindowsXP system users

for this type of system users, we can help Vfloppy and other virtual floppy drive DOS software add antivirus system is WindowsXP, then with automatic batch file under DOS (Autoexec .bat) to remove viruses easily. Here is an example of automatic removal of the dog virus.

first step: to find online robot virus information, make a batch file or directly download virus signature users make a good batch file. For example, the robot dog virus can be obtained by http://hi.baidu.com/%D0%C2%C9%FA%BA%DA%BF%CD/blog/item/4274eef44b0645ea7709d7ec.Html
Kill the batch file.

Step Two: Start Notepad, enter the following code, save it as kill.bat, placed in the root directory in D (Rem statement is a comment, do not enter).

Rem remove the virus files hidden, read-only, system properties

attrib-hr-sC: WindowsIGM.exe

rem delete the virus file specified

delC: WindowsIGM.exe

rem build directory and files with the same virus at the source, to prevent the recurrence of the virus

mdC: WindowsIGM.exe

Note: for convenience, grant In the process, just delete one of the virus files C:WindowsIGM.exe as an example, and delete the commands of other virus files, please refer to the above format to add.

Step Three: Download Vfloppy, run Vfloppy.exe download, unzip, select the image file decompression "bookdisk.img" file in the directory, display text as "DOS automatic antivirus", the other to take the default settings, finally Click Apply and the program prompts that the boot image file is successful. Do not choose to restart and exit Vfloppy at this time.

Step Four: Modify the batch file Bootdisk.img are now starting to realize virus. Go to http://winimage.com/winima70g.exe
to download winimage. After running WinImage, click "File → Open", open C:?oot?ootdisk.img, then select "AUTOEXEC.BAT" in the file list, right click on it and select "Expand" to release AUTOEXEC.BAT to d:.

Step 5: Notepad open d: autoexec.bat, find "echoThediagnostictoolsweresuccessfullyloadedtodrive% RAMD%." Line, and then add the following line in the "echo.": Calld: kill.bat

Tip: The function of the above command is to automatically delete the virus after calling DOS to make the batch file kill.bat.

Step Six: run again WinImage open C:?? When oot ootdisk.img, click the "Image → Add", follow the prompts to add a modified AUTOEXEC.BAT file, the program prompts whether to overwrite, click "Yes", then save bootdisk.img and exit the program. By modifying AUTOEXEC.BAT, the purpose of automatically calling the killing batch file to delete the virus after booting to DOS is realized. If you encounter other viruses next time, just modify the code in d:kill.bat to implement the new kill function.
Copyright © Windows knowledge All Rights Reserved