rem 下面是清除SVOHOST.exe和 sxs.exe
for /f "skip=1 tokens=1,2 " %%i in ('tasklist') do if %%i equ conime.exe ntsd -c q -p %%j
for /f "skip=1 tokens=1,2 " %%i in ('tasklist') do if %%i equ SVOHOST.exe ntsd -c q -p %%j
for /f "skip=1 tokens=1,2 " %%i in ('tasklist') do if %%i equ sxs.exe ntsd -c q -p %%j
for /f "skip=1 tokens=1,2 " %%i in ('tasklist') do if %%i equ explore.exe ntsd -c q -p %%j
for /f "skip=1 tokens=1,2 " %%i in ('tasklist') do if %%i equ jvmlts.exe ntsd -c q -p %%j
del /s /q %w%sxs.exe
del /s /q %w%SVOHOST.exe
del /s /q %w%winscok.dll
del /s /q %w%noruns.reg
del /s /q %w%explore.exe
del /s /q %w%jvmlts.exe
del /s /q %w%jvmlts.dll
del /s /q %w%QQhx.dat
setlocal enabledelayedexpansion
for /f "skip=1 tokens=1,2 delims=\" %%a in ('fsutil fsinfo drives^|find /v ""') do (
set aa=%%a
set aa=!aa:~-2!
for %%i in (!aa!) do (
del /q /ah %%i\sxs.exe & del /q /ah %%i\autorun.inf & attrib.exe -r -h -s %%i\RECYCLER && cd %%i\RECYCLER && del . /q /ah /as & cd \))
rem 下面的是清除sxs.exe的残留注册文件
echo Windows Registry Editor Version 5.00 >repair.reg
echo. >>repair.reg
echo [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] >>repair.reg
echo "SoundMam"=- >>repair.reg
echo "rose"=- >>repair.reg