Vcheck.bat
Code: Select all
@echo off
:check
echo Running check....
IF EXIST C:\windows\system32\syshelps.dll GOTO infected
IF NOT EXIST C:\windows\system32\syshelps.dll GOTO notinfected
:notinfected
echo You are not infected with Backdoor.Win32.IRCBot.acd
GOTO end
:infected
echo You are infected with Backdoor.Win32.IRCBot.acd
echo Trying to remove the file syshelps.dll (Backdoor.Win32.IRCBot.acd)
echo Shuting down Explorer for virus removal....
TASKKILL /F /IM explorer.exe
echo Removing syshelps.dll
DEL /F /Q C:\windows\system32\syshelps.dll
echo Starting Explorer again....
start C:\windows\explorer.exe
IF NOT EXIST C:\windows\system32\syshelps.dll GOTO success
IF EXIST C:\windows\system32\syshelps.dll GOTO failure
:sucess
echo The file was removed, please run a virus scan with Kaspersky for example, to make sure that all the minor files from the virus has been removed properly
GOTO end
:failure
echo The removal failed..... please send an email to admin@justbgeek.com to notify me
:end
Pause
