Now many malignant viruses need to be killed by special killing tools, but some viruses will automatically prohibit the killing tool from running. For these stubborn viruses, we often use other systems (such as DOS or PE) to kill. In fact, the killing tool is a batch file that can delete virus files. It is not difficult to understand and write. This article takes everyone to understand and write a special killing tool, you can directly enter the anti-virus menu and kill the virus when the system starts.
Related Articles: Windows
XP Automatic Batch File Cleanup Machine Dog Virus
Windows
Vista System User Because Windows
Vista uses NTFS partition, it is inaccessible under DOS, so we can't Use the above method to achieve automatic antivirus. However, we can also use Windows
PE2.0 (hereinafter referred to as PE) to achieve automatic anti-virus. The first step: make a special kill batch file and save it as d:\\kill.bat. Since the command line under Windows
supports more parameters, our code changes as follows: attrib -h -r -s C:\\ Windows\\IGM.exe rem does not need to confirm the direct deletion of the virus file del /f /q /s C: \\ Windows \\ IIG.exe md C: \\ Windows \\ IIG.exe rem automatically restart after the anti-virus shutdown shutdown -r Step 2: http://www.downbank.cn/uploadimages/file_box/downbank070105%20%20VistaPECN.rar, download PE. Unzip and get an ISO file, then use WinRAR to extract all the files to d:\\PE. Step 3: Download WimTool (http://www.mydown.com/soft/utilitIE/systems/405/440405.sHtml), extract the downloaded WimTool, and run "WimTool Runtime.exe" as the administrator. ", then run WimTool as an administrator, click "Browse", select the Wim file to be unpacked d:\\ pe\\sources\\boot.wim, select the target folder to be unpacked and select d:\\PE1(D To partition for NTFS). Check all options under the image volume number and click Mount Image. The fourth step: the system will automatically mount the boot.wim file, use the Notepad program to open the "d:\\pe\\Windows\\system32\\peshell.ini" file, add the following code at the end of the [AutoRun] field, the code means After the PE shell is loaded, kill.bat is automatically run to automatically delete the poisoned files. 1=d:\\kill.bat Step 5: After completing the above operation, return to the Wimtool window, click “Uninstall Image”, and when prompted to save the changed image, click “Yes” to save the changed boot.wim file. Step 6: Download Easybcd (http://www.mydown.com/game/demo/109/416109.sHtml). After running Easybcd, switch to "Add/Remove EntrIEs", switch to "WinPE" under "Add a entry", enter d:\\pe\\sources\\boot.wim in the Path path, click "Add entry", and then press prompt Just insert the Vista installation CD and copy the file. Step 7: After completing the above operation, if you want to anti-virus later, after rebooting, select “NST winPE Image” in the boot multi-boot menu. After the antivirus is completed, it will restart automatically. Tip: For Windows
XP single system users, if the system partition uses NTFS format. We can also install PE to NTFS partition to kill viruses. Extract all downloaded PE files to c:\\, and use Wimtool to edit c:\\souces\\boot.wim. Then open the C drive, change the XP boot file ntldr to WINXP, and change c:\\bootmgr (the file released from the PE) to ntldr. Finally open "c:\\boot.ini" and add "C:\\winxp="Windows
XP"" (without double quotes) after the text. After restarting, select "Windows
Setup [EMS Enabled]" to enter PE automatic antivirus.