Log in

View Full Version : Making a .bat for my sisters pc(to remove virus)



ShowerThoughts
10-04-2008, 06:40 PM
I need to:

Kill processes:
Antivir64.exe Antvrs.exe Uninstall.exe


Delete registry values:
HKEY_CURRENT_USER\Software\Antivirus
HKEY_LOCAL_MACHINE\SOFTWARE\Antivirus
HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Run\”Antivirus” = “%ProgramFiles%\Antivir64\Antvrs.exe”


Unregister DLLs:
%ProgramFiles%\\[RANDOM NAME]\\MFC71.dll %ProgramFiles%\\[RANDOM NAME]\\MFC71ENU.DLL %ProgramFiles%\\[RANDOM NAME]\\msvcp71.dll %ProgramFiles%\\[RANDOM NAME]\\msvcr71.dll %ProgramFiles%\\[RANDOM NAME]\\shlwapi.dll %ProgramFiles%\\[RANDOM NAME]\\wininet.dll


Delete files:
c:\\Program Files\\Antivir64\\Buy.url
c:\\Program Files\\Antivir64\\Help.url
c:\\Program Files\\Antivir64\\HowToBuy.txt
c:\\Program Files\\Antivir64\\ID.dat
c:\\Program Files\\Antivir64\\License.txt
%UserProfile%\\Desktop\\Antivir64.lnk
%UserProfile%\\Application Data\\Antivir64
%UserProfile%\\Application Data\\Antivir64\\Antivir64.ini %UserProfile%\\Application Data\\Antivir64\\base.dat %UserProfile%\\Application Data\\Antivir64\\base2.dat %UserProfile%\\Application Data\\Antivir64\\Desc.dat %UserProfile%\\Application Data\\Antivir64\\spline.dat
c:\\Documents and Settings\\All Users\\Start Menu\\Programs\\Antivir64 c:\\Documents and Settings\\All Users\\Start Menu\\Programs\\Antivir64\\Purchase License.lnk
c:\\Documents and Settings\\All Users\\Start Menu\\Programs\\Antivir64\\Start Antivir64.lnk
c:\\Documents and Settings\\All Users\\Start Menu\\Programs\\Antivir64\\Support Page.lnk


Delete directories:
c:\Program Files\Antivir64

I made .bat but I want to be sure it doesn't removes good stuff.

First could you check if i done it correct and I am worried that with deleting those registry keys i delete the other anti virus stuff to.

.bat:

TASKKILL /F /IM "Antivir64.exe"
TASKKILL /F /IM "Antvrs.exe"
TASKKILL /F /IM "Uninstall.exe"

RMDIR "c:\\Program Files\\Antivir64\\" /S /Q
RMDIR "c:\\Documents and Settings\\All Users\\Start Menu\\Programs\\Antivir64"/S /Q
RMDIR "%UserProfile%\\Application Data\\Antivir64\\" /S /Q
DEL "%UserProfile%\\Desktop\\Antivir64.lnk"

REG DELETEHKEY_CURRENT_USER\Software\Microsoft\Windows \CurrentVersion\Run\ /v Antivirus
REG DELETE HKEY_LOCAL_MACHINE\SOFTWARE\Antivirus\
REG DELETE HKEY_CURRENT_USER\Software\Antivirus\

~Hermpie

Note: this is easy to do but my sis doesn't lives in the same house anymore.

Wrycu
10-04-2008, 08:28 PM
Why do you need it in a batch file?

ShowerThoughts
10-04-2008, 08:36 PM
Nvm I send my sis a guide how to delete it, and i forgot to tell she lives very far from me.

Wrycu
10-05-2008, 05:50 AM
For future reference, www.logmein.com

Hack
10-05-2008, 11:30 AM
Would of been easier to download AVG and run a anti virus scan to remove all of the viruses.

Wrycu
10-05-2008, 03:06 PM
Yeah, but AVG isn't exactly the best anti virus program out, and there's no way to verify it will remove all traces of the virus.