Spiga

Script Remover Brontok

write script bellow in notepad and save with .inf extension after your write right klick file and left klick install

[Version]
Signature="$Chicago$"
Provider=Baykard

[DefaultInstall]
AddReg=RegFixer
DelReg=Del
;DelReg=Del2 ; for 9x - Me - NT hilangkan tanda titik-koma di depan DelReg=Del2

[RegFixer]
HKCU, Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced,Hidden,%REG_DWORD%,1
HKCU, Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced,HideFileExt,%REG_DWORD%,0
HKCU, Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced,ShowSuperHidden,%REG_DWORD%,0
HKLM, Software\CLASSES\batfile\shell\open\command,,,"""%1"" %*"
HKLM, Software\CLASSES\comfile\shell\open\command,,,"""%1"" %*"
HKLM, Software\CLASSES\exefile\shell\open\command,,,"""%1"" %*"
HKLM, Software\CLASSES\piffile\shell\open\command,,,"""%1"" %*"
HKLM, Software\CLASSES\regfile\shell\open\command,,,"regedit.exe "%1""
HKLM, Software\CLASSES\scrfile\shell\open\command,,,"""%1"" %*"
HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell,0, "Explorer.exe"

[Del]
HKCU, Software\Microsoft\Windows\CurrentVersion\Run,Tok-Cirrhatus
HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion\Run,Bron-Spizaetus
HKLM, SYSTEM\CurrentContolSet\Control\SafeBoot,AlternateShell
HKLM, SYSTEM\ContolSet001\Control\SafeBoot,AlternateShell
HKLM, SYSTEM\ContolSet002\Control\SafeBoot,AlternateShell
HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\System,DisableCMD
HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\System,DisableRegistryTools
HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\Explorer,NoFolderOptions

[Del2]
HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion\Run,msconfig
HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion\Run,Pirus Males
HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion\Run,Buat Anda

[Strings]
REG_DWORD = 0x00010001

; for 98 - Me - NT uncomment key below
;HKCU, .DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run,Tok-Cirrhatus
;HKCU, .DEFAULT\Software\Microsoft\Windows\CurrentVersion\Policies\System,DisableCMD
;HKCU, .DEFAULT\Software\Microsoft\Windows\CurrentVersion\Policies\System,DisableRegistryTools


write script bellow in notepad and save with .bat extension and left klick this script for run

DEL /S /Q %UserProfile%\Start Menu\Programs\Startup\Empty.pif

explorer "%UserProfile%\Local Settings\Application Data"
msg %username% /time:10 /w /v "Hapus folder Bron.tok-xxx dan *bron* !"

cd "%UserProfile%\Local Settings\Application Data"
DEL /S /Q services.exe
DEL /S /Q lsass.exe
DEL /S /Q inetinfo.exe
DEL /S /Q csrss.exe
DEL /S /Q winlogon.exe
DEL /S /Q smss.exe
DEL /S /Q svchost.exe
DEL /S /Q *Bron*
DEL /S /Q br*

cd %WinDir%
RD /S /Q ShellNew
DEL /S /Q *bron*

cd %WinDir%\..
DEL /S /Q *NendangBro*

cd %WinDir%\System32
DEL /S /Q KesenjanganSosial.exe
DEL /S /Q *bron*

cd %WinDir%\Tasks
DEL /S /Q A*

msg %username% /time:10 /w /v "Hapus 'PAUSE' pada file AUTOEXEC.BAT berikut ini... kemudian simpan!"
notepad C:\AUTOEXEC.BAT

msg %username% /time:10 "Brontok Remover (c) 2006 - Baykard's"



reference script by Baykard's

0 comments: