![]() |
China DOS Union-- Unite DOS · Advance DOS · Grow DOS --Union site: www.cn-dos.net Forum site: www.cn-dos.net/forum |
| Guest | Log in | Register | Members | Search | China DOS Union |
|
中国DOS联盟论坛 The time now is 2026-08-29 08:05 |
47,816 topics / 349,916 posts / today 0 new / 48,265 members |
| DOS批处理 & 脚本技术(批处理室) » How to use batch processing to delete the registry entries of rogue software |
| Printable Version 4,312 / 7 |
| Floor1 wang6610 | Posted 2006-11-30 08:13 |
| 银牌会员 Posts 488 Credits 1,246 | |
|
HKLM\SOFTWARE\3721 -> Adware.CnsMin : Ignored.
HKLM\SOFTWARE\3721\Assist -> Adware.CnsMin : Ignored. HKLM\SOFTWARE\3721\Assist\Modules -> Adware.CnsMin : Ignored. HKLM\SOFTWARE\3721\AutoLive -> Adware.CnsMin : Ignored. HKLM\SOFTWARE\3721\AutoLive\scrblock -> Adware.CnsMin : Ignored. HKLM\SOFTWARE\3721\CnsMin -> Adware.CnsMin : Ignored. HKLM\SOFTWARE\3721\CnsMinCg -> Adware.CnsMin : Ignored. HKLM\SOFTWARE\3721\CnsMin\CnsMinEx -> Adware.CnsMin : Ignored. HKLM\SOFTWARE\3721\CnsMin\Variant -> Adware.CnsMin : Ignored. HKLM\SOFTWARE\Classes\AutoLive.Live -> Adware.CnsMin : Ignored. HKLM\SOFTWARE\Classes\AutoLive.Live.1 -> Adware.CnsMin : Ignored. HKLM\SOFTWARE\Classes\AutoLive.Live\CLSID -> Adware.CnsMin : Ignored. HKLM\SOFTWARE\Classes\AutoLive.Live\CurVer -> Adware.CnsMin : Ignored. HKLM\SOFTWARE\Classes\CnsHelper.CH -> Adware.CnsMin : Ignored. HKLM\SOFTWARE\Classes\CnsHelper.CH.1 -> Adware.CnsMin : Ignored. HKLM\SOFTWARE\Classes\CnsHelper.CH\CLSID -> Adware.CnsMin : Ignored. HKLM\SOFTWARE\Classes\CnsHelper.CH\CurVer -> Adware.CnsMin : Ignored. HKLM\SOFTWARE\Classes\CnsMinHK.CnsHook -> Adware.CnsMin : Ignored. HKLM\SOFTWARE\Classes\CnsMinHK.CnsHook.1 -> Adware.CnsMin : Ignored. HKLM\SOFTWARE\Classes\CnsMinHK.CnsHook\CLSID -> Adware.CnsMin : Ignored. HKLM\SOFTWARE\Classes\CnsMinHK.CnsHook\CurVer -> Adware.CnsMin : Ignored. HKLM\SOFTWARE\Microsoft\Internet Explorer\AdvancedOptions\!CNS -> Adware.CnsMin : Ignored. HKLM\SOFTWARE\Microsoft\Internet Explorer\AdvancedOptions\!CNS\AutoUpdate -> Adware.CnsMin : Ignored. HKLM\SOFTWARE\Microsoft\Internet Explorer\AdvancedOptions\!CNS\Enable -> Adware.CnsMin : Ignored. HKLM\SOFTWARE\Microsoft\Internet Explorer\AdvancedOptions\!CNS\Hint -> Adware.CnsMin : Ignored. HKLM\SOFTWARE\Microsoft\Internet Explorer\AdvancedOptions\!CNS\List -> Adware.CnsMin : Ignored. HKLM\SOFTWARE\Microsoft\Internet Explorer\AdvancedOptions\!CNS\Reset -> Adware.CnsMin : Ignored. HKLM\SOFTWARE\Microsoft\Internet Explorer\AdvancedOptions\!CNS\ResetCatch -> Adware.CnsMin : Ignored. HKLM\SOFTWARE\Microsoft\Internet Explorer\AdvancedOptions\!CNS\Tips -> Adware.CnsMin : Ignored. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CnsMin -> Adware.CnsMin : Ignored. HKU\S-1-5-21-2000478354-842925246-1202660629-500\Software\3721 -> Adware.CnsMin : Ignored. HKU\S-1-5-21-2000478354-842925246-1202660629-500\Software\3721\CnsMin -> Adware.CnsMin : Ignored. HKU\S-1-5-21-2000478354-842925246-1202660629-500\Software\3721\CnsMin\Variant -> Adware.CnsMin : Ignored. HKU\S-1-5-21-2000478354-842925246-1202660629-500\Software\3721\CnsUrl -> Adware.CnsMin : Ignored. HKU\S-1-5-21-2000478354-842925246-1202660629-500\Software\3721\InputCns -> Adware.CnsMin : Ignored. HKLM\SOFTWARE\Classes\SearchHook.URLSearchHook -> Adware.CrackedEarth : Ignored. HKLM\SOFTWARE\Classes\SearchHook.URLSearchHook.1 -> Adware.CrackedEarth : Ignored. HKLM\SOFTWARE\Classes\SearchHook.URLSearchHook\CLSID -> Adware.CrackedEarth : Ignored. HKLM\SOFTWARE\Classes\SearchHook.URLSearchHook\CurVer -> Adware.CrackedEarth : Ignored. C:\Program Files\Rising\AntiSpyware\Ras.exe -> Heuristic.Win32.HostFile : Ignored. HKLM\SOFTWARE\Classes\SearchHook.SrchHook -> Hijacker.ShopNav : Ignored. HKLM\SOFTWARE\Classes\SearchHook.SrchHook.1 -> Hijacker.ShopNav : Ignored. HKLM\SOFTWARE\Classes\SearchHook.SrchHook\CLSID -> Hijacker.ShopNav : Ignored. HKLM\SOFTWARE\Classes\SearchHook.SrchHook\CurVer -> Hijacker.ShopNav : Ignored. |
|
| Floor2 wang6610 | Posted 2006-11-30 08:15 |
| 银牌会员 Posts 488 Credits 1,246 | |
|
You can also provide the *.reg for deleting them.
Thank you! |
|
| Floor3 namejm | Posted 2006-11-30 08:59 |
| 荣誉版主 Posts 1,737 Credits 5,226 From 成都 | |
|
This item C:\Program Files\Rising\AntiSpyware\Ras.exe is not a registry entry, right? Since I'm not very familiar with the registry, the following code has excluded this one:
[ Last edited by namejm on 2006-11-29 at 08:34 PM ] |
|
| Floor4 wang6610 | Posted 2006-11-30 10:15 |
| 银牌会员 Posts 488 Credits 1,246 | |
|
First, thank the moderator namejm.
The content of del.reg obtained is as follows: (I don't know if it's correct?) Windows Registry Editor Version 5.00 [-HKEY_LOCAL_MACHINE\SOFTWARE\3721] [-HKEY_LOCAL_MACHINE\SOFTWARE\3721\Assist] [-HKEY_LOCAL_MACHINE\SOFTWARE\3721\Assist\Modules] [-HKEY_LOCAL_MACHINE\SOFTWARE\3721\AutoLive] [-HKEY_LOCAL_MACHINE\SOFTWARE\3721\AutoLive\scrblock] [-HKEY_LOCAL_MACHINE\SOFTWARE\3721\CnsMin] [-HKEY_LOCAL_MACHINE\SOFTWARE\3721\CnsMinCg] [-HKEY_LOCAL_MACHINE\SOFTWARE\3721\CnsMin\CnsMinEx] [-HKEY_LOCAL_MACHINE\SOFTWARE\3721\CnsMin\Variant] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AutoLive.Live] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AutoLive.Live.1] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AutoLive.Live\CLSID] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AutoLive.Live\CurVer] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CnsHelper.CH] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CnsHelper.CH.1] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CnsHelper.CH\CLSID] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CnsHelper.CH\CurVer] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CnsMinHK.CnsHook] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CnsMinHK.CnsHook.1] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CnsMinHK.CnsHook\CLSID] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CnsMinHK.CnsHook\CurVer] [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AdvancedOptions\CNS] [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AdvancedOptions\CNS\AutoUpdate] [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AdvancedOptions\CNS\Enable] [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AdvancedOptions\CNS\Hint] [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AdvancedOptions\CNS\List] [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AdvancedOptions\CNS\Reset] [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AdvancedOptions\CNS\ResetCatch] [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AdvancedOptions\CNS\Tips] [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CnsMin] [-HKEY_USERS\S-1-5-21-2000478354-842925246-1202660629-500\Software\3721] [-HKEY_USERS\S-1-5-21-2000478354-842925246-1202660629-500\Software\3721\CnsMin] [-HKEY_USERS\S-1-5-21-2000478354-842925246-1202660629-500\Software\3721\CnsMin\Variant] [-HKEY_USERS\S-1-5-21-2000478354-842925246-1202660629-500\Software\3721\CnsUrl] [-HKEY_USERS\S-1-5-21-2000478354-842925246-1202660629-500\Software\3721\InputCns] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SearchHook.URLSearchHook] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SearchHook.URLSearchHook.1] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SearchHook.URLSearchHook\CLSID] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SearchHook.URLSearchHook\CurVer] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SearchHook.SrchHook] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SearchHook.SrchHook.1] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SearchHook.SrchHook\CLSID] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SearchHook.SrchHook\CurVer] |
|
| Floor5 namejm | Posted 2006-11-30 11:36 |
| 荣誉版主 Posts 1,737 Credits 5,226 From 成都 | |
|
If in a reg file, the format of can uprooting this item. Then this code can achieve your purpose.
Rechecked and found that there are exclamation marks in the registry item. When processing, filter them out. This problem is a bit troublesome. [ Last edited by namejm on 2006-11-29 at 10:44 PM ] |
|
| Floor6 namejm | Posted 2006-11-30 12:10 |
| 荣誉版主 Posts 1,737 Credits 5,226 From 成都 | |
|
Modify the code of 3F as follows, please test:
|
|
| Floor7 okmhy | Posted 2007-06-12 21:30 |
| 新手上路 Posts 7 Credits 15 | |
|
C:\>reg delete \\HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon\\Notify\\888 /f
Error: Invalid item name Where is the mistake in this sentence? I have tested repeatedly and it seems that the mistake is here: there is a space in "Windows NT". How to solve this? |
|
| Floor8 anythingsky | Posted 2009-01-13 16:19 |
| 新手上路 Posts 6 Credits 11 | |
|
It's too advanced, I can't understand it at all.
|
|
|
[ Contact the Union admin team -
中国DOS联盟 -
Standard version ] Sponsored by ifanr Inc | © 2001–2023 |