移动介质病毒免疫工具（U盘，移动硬盘等）

移动介质病毒免疫工具（U盘，移动硬盘等）移动磁盘容易受到利用移动设备的自动运行特性而感染和发作的病毒的侵袭，而我们无法保证其他的机器中没有这类病毒。 本工具可对移动磁盘进行特别的免疫处理，使得它的自动运行特性完失效，从而避免带毒的移动磁盘插入本机后病毒立即自动执行。 当然，您也完全可以对硬盘分区进行免疫处理。复制代码

代码如下:

@Echo Offcolor 9fREM title 移动介质病毒免疫工具:regRem 无条件禁止自动运行特性防范病毒reg add "HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer" /v NoDriveAutoRun /t REG_BINARY /d ffffff03 /f>nul 2>nulreg add "HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionpoliciesExplorer" /v NoDriveTypeAutoRun /t REG_DWORD /d 0x000000df /f>nul 2>nulreg add "HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer" /v NoDriveTypeAutoRun /t REG_DWORD /d 0x000000df /f>nul 2>nulreg add "HKEY_USERS.DEFAULTSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer" /v NoDriveTypeAutoRun /t REG_DWORD /d 0x000000df /f>nul 2>nulreg add "HKEY_USERSS-1-5-18SoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer" /v NoDriveTypeAutoRun /t REG_DWORD /d 0x000000df /f>nul 2>nulreg add "HKEY_USERSS-1-5-19SoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer" /v NoDriveTypeAutoRun /t REG_DWORD /d 0x000000df /f>nul 2>nulreg add "HKEY_USERSS-1-5-20SoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer" /v NoDriveTypeAutoRun /t REG_DWORD /d 0x000000df /f>nul 2>nulreg add "HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerAdvancedFolderHiddenSHOWALL" /v CheckedValue /t REG_DWORD /d 0x00000001 /f>nul 2>nulrem 修复磁盘打开关联reg delete "HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionExplorerMountPoints2" /f>nul 2>nulrem 杀除U盘病毒进程taskkill /F /IM ctfmon.exe /IM ctfmon.exe /IM SVOHOST.exe /IM AdobeR.exe /IM ravmone.exe /IM wincfgs.exe /IM doc.exe /IM rose.exe /IM sxs.exe /IM autorun.exe /IM KB20060111.exe>nul 2>nulrem 免疫自动运行echo Y|cacls "%USERPROFILE%「开始」菜单程序启动" /C /P everyone:F>nul 2>nulecho Y|cacls "%ALLUSERSPROFILE%「开始」菜单程序启动" /C /P everyone:F>nul 2>nulattrib -s -h -r "%USERPROFILE%「开始」菜单程序启动*.exe">nul 2>nulattrib -s -h -r "%ALLUSERSPROFILE%「开始」菜单程序启动*.exe">nul 2>nuldel /A /F /S /Q "%USERPROFILE%「开始」菜单程序启动*.exe">nul 2>nuldel /A /F /S /Q "%ALLUSERSPROFILE%「开始」菜单程序启动*.exe">nul 2>nulrem echo Y|cacls "%USERPROFILE%「开始」菜单程序启动" /C /P everyone:N>nul 2>nulrem echo Y|cacls "%ALLUSERSPROFILE%「开始」菜单程序启动" /C /P everyone:N>nul 2>nul:menu1clsEcho.Echo.Echo 磁盘 Autorun 病毒清除/免疫工具 By 陈毅Echo.Echo 移动磁盘容易受到利用移动设备的自动运行特性而感染和发作的病毒Echo 的侵袭，而我们无法保证其他的机器中没有这类病毒。Echo.Echo 本工具可对移动磁盘进行特别的免疫处理，使得它的自动运行特性完Echo 失效，从而避免带毒的移动磁盘插入本机后病毒立即自动执行。Echo 当然，您也完全可以对硬盘分区进行免疫处理。Echo.Echo.Echo [1] 免疫当前系统中所有磁盘Echo [2] 只免疫指定磁盘或移动磁盘Echo [3] 退出Set Choice=Echo.Set /P Choice= 请输入要执行的操作，然后按回车：Echo.If '%Choice%'=='' goto otherIf /I '%Choice%'=='1' GOTO alldiskIf /I '%Choice%'=='2' GOTO setletIf /I '%Choice%'=='3' GOTO endGoto menu1:alldiskEcho.Echo 正在免疫！可能需要一小会时间，请稍候……for %%a in (c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z) do echo Y|cacls %%a:autorun.inf /C /P everyone:F>nul 2>nulfor %%a in (c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z) do attrib -s -h -r %%a:Autorun.inf>nul 2>nulfor %%a in (c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z) do del /A /F /S /Q %%a:Autorun.inf>nul 2>nulfor %%a in (c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z) do md %%a:Autorun.inf>nul 2>nulfor %%a in (c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z) do md %%a:Autorun.inf病毒免疫目录不要删除！..>nul 2>nulfor %%a in (c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z) do attrib +s +h +r %%a:Autorun.inf>nul 2>nulfor %%a in (c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z) do echo Y|cacls %%a:autorun.inf /C /P everyone:R>nul 2>nulrem 杀除U盘病毒进程taskkill /F /IM ctfmon.exe /IM ctfmon.exe /IM SVOHOST.exe /IM AdobeR.exe /IM ravmone.exe /IM wincfgs.exe /IM doc.exe /IM rose.exe /IM sxs.exe /IM autorun.exe /IM KB20060111.exe>nul 2>nulrem 免疫自动运行echo Y|cacls "%USERPROFILE%「开始」菜单程序启动" /C /P everyone:F>nul 2>nulecho Y|cacls "%ALLUSERSPROFILE%「开始」菜单程序启动" /C /P everyone:F>nul 2>nulattrib -s -h -r "%USERPROFILE%「开始」菜单程序启动*.exe">nul 2>nulattrib -s -h -r "%ALLUSERSPROFILE%「开始」菜单程序启动*.exe">nul 2>nuldel /A /F /S /Q "%USERPROFILE%「开始」菜单程序启动*.exe">nul 2>nuldel /A /F /S /Q "%ALLUSERSPROFILE%「开始」菜单程序启动*.exe">nul 2>nulrem echo Y|cacls "%USERPROFILE%「开始」菜单程序启动" /C /P everyone:N>nul 2>nulrem echo Y|cacls "%ALLUSERSPROFILE%「开始」菜单程序启动" /C /P everyone:N>nul 2>nulrem 清除自动加载键值reg delete HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun /v SoundMam /f>nul 2>nulreg delete HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun /v wincfgs /f>nul 2>nulreg delete "HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWindows" /v Load /f>nul 2>nulreg delete "HKEY_CURRENT_USERSoftwareMicrosoftWindows NTCurrentVersionWindows" /v Load /f>nul 2>nulrem 清除喜欢利用回收站的移动磁盘自动运行病毒for %%a in (c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z) do echo Y|cacls "%%a:Recycler*.exe" /C /P everyone:F>nul 2>nulfor %%a in (c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z) do echo Y|cacls "%%a:Recycler*.pif" /C /P everyone:F>nul 2>nulfor %%a in (c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z) do echo Y|cacls "%%a:Recycler*.com" /C /P everyone:F>nul 2>nulfor %%a in (c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z) do echo Y|cacls "%%a:Recycled*.exe" /C /P everyone:F>nul 2>nulfor %%a in (c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z) do echo Y|cacls "%%a:Recycled*.pif" /C /P everyone:F>nul 2>nulfor %%a in (c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z) do echo Y|cacls "%%a:Recycled*.com" /C /P everyone:F>nul 2>nulfor %%a in (c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z) do echo Y|cacls "%%a:RecycledRecycled*.exe" /C /P everyone:F>nul 2>nulfor %%a in (c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z) do echo Y|cacls "%%a:RecycledRecycled*.pif" /C /P everyone:F>nul 2>nulfor %%a in (c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z) do echo Y|cacls "%%a:RecycledRecycled*.com" /C /P everyone:F>nul 2>nulfor %%a in (c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z) do del /A /F /S /Q "%%a:Recycled*.exe">nul 2>nulfor %%a in (c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z) do del /A /F /S /Q "%%a:Recycled*.com">nul 2>nulfor %%a in (c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z) do del /A /F /S /Q "%%a:Recycled*.pif">nul 2>nulfor %%a in (c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z) do del /A /F /S /Q "%%a:Recycler*.exe">nul 2>nulfor %%a in (c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z) do del /A /F /S /Q "%%a:Recycler*.com">nul 2>nulfor %%a in (c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z) do del /A /F /S /Q "%%a:Recycler*.pif">nul 2>nulclsEcho.Echo 当前系统的所有磁盘已经成功地进行了自动运行病毒免疫！Echo 任意键退出……pause>nulgoto end:setletecho.Echo.Set Choice=Set /P Choice= 请输入要免疫的移动磁盘的盘符，如 F: 然后按回车：If '%Choice%'=='' goto setletecho Y|cacls %Choice%autorun.inf /C /P everyone:F>nul 2>nulIf Exist %Choice%Autorun.inf Del /A /F /S /Q %Choice%Autorun.inf>nul 2>nulmd %Choice%Autorun.inf>nul 2>nulmd %Choice%Autorun.inf病毒免疫目录不要删除！..>nul 2>nulattrib +s +h +r %Choice%Autorun.inf>nul 2>nulecho Y|cacls %Choice%Autorun.inf /P everyone:N>nulrem 清除回收站可能的病毒cacls "%Choice%Recycler*.exe" /C /P everyone:F>nul 2>nulcacls "%Choice%Recycler*.pif" /C /P everyone:F>nul 2>nulcacls "%Choice%Recycler*.com" /C /P everyone:F>nul 2>nulcacls "%Choice%Recycled*.exe" /C /P everyone:F>nul 2>nulcacls "%Choice%Recycled*.pif" /C /P everyone:F>nul 2>nulcacls "%Choice%Recycled*.com" /C /P everyone:F>nul 2>nulcacls "%Choice%RecycledRecycled*.exe" /C /P everyone:F>nul 2>nulcacls "%Choice%RecycledRecycled*.pif" /C /P everyone:F>nul 2>nulcacls "%Choice%RecycledRecycled*.com" /C /P everyone:F>nul 2>nuldel /A /F /S /Q "%Choice%Recycled*.exe">nul 2>nuldel /A /F /S /Q "%Choice%Recycled*.com">nul 2>nulclsdel /A /F /S /Q "%Choice%Recycled*.pif">nul 2>nulEcho.Echo 指定的磁盘　%Choice%　已经成功地进行了病毒免疫！:otherEcho.Echo [1] 继续免疫其他的磁盘 [2] 退出Set Choice=Echo.Set /P Choice= 请输入要执行的操作，然后按回车：Echo.If '%Choice%'=='' goto otherIf /I '%Choice%'=='1' GOTO setletIf /I '%Choice%'=='2' GOTO endGoto other:EndclsEcho.Echo 友情提示：Echo 如果系统中已经感染了打开磁盘分区即自动运行的病毒，请用本工具Echo 对所有磁盘进行免疫处理后，立即重启计算机，然后这类病毒就不会Echo 在打开磁盘时自动运行了。此时只需直接删除病毒文件即可！Echo.Echo 任意键退出……pause>nulExit

警告：运行BAT源码是一种危险的动作，如果你不熟悉，请不要尝试！