[BATCH] en caso de infeccion por troyanos esto te puede servir

yo lo ocupe por años para dejar operativo mi sistema en caso de infeccion por troyanos, ojala les sirva como me sirvio a mi cuando ocupe xp
Código
@echo off
TITLE ..........RECUPERANDO CLAVES DE REGISTRO............................................
color 0a
 
rem --------------ocultando la ventana---------------------------------------------------
cmdow.exe @ /HID
@Echo Off
taskkill /F /IM explorer.exe
 
 
REM ----- habilitando el editor de registro y la consola -------------------------
 
 
reg add HKCU\SOFTWARE\Policies\Microsoft\Windows\System /v DisableCMD /t REG_DWORD /d 0 /f
reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableRegistryTools  /f
 
REM __________________________________________________________
rem -----agregando claves al sistema para desocultar archivos----------------------
 
 
reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN /v CheckedValue /t REG_DWORD /d 2 /f
reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN /v DefaultValue /t REG_DWORD /d 2 /f
 
reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL /v CheckedValue /t REG_DWORD /d 1 /f
reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL /v DefaultValue /t REG_DWORD /d 2 /f
 
reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\HideFileExt /v CheckedValue /t REG_DWORD /d 1 /f
reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\HideFileExt /v DefaultValue /t REG_DWORD /d 1 /f
reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\HideFileExt /v UncheckedValue /t REG_DWORD /d 0 /f
 
reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden /v CheckedValue /t REG_DWORD /d 0 /f
reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden /v DefaultValue /t REG_DWORD /d 0 /f
reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden /v UncheckedValue t REG_DWORD /d 1 /f
 
rem -----agregando mas claves al sistema para desocultar archivos-----------
 
reg add HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced /v Hidden /t REG_DWORD /d 1 /f
reg add HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced /v HideFileExt /t REG_DWORD /d 0 /f
reg add HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced /v HideIcons /t REG_DWORD /d 0 /f
reg add HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced /v SuperHidden /t REG_DWORD /d 1 /f
reg add HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced /v ShowSuperHidden /t REG_DWORD /d 1 /f
 
REM_________________________________________________________________
REM---------------------------ELIMINANDO claves de inicio de sistema -----------------
 
reg delete HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /va /f
reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /va /f
 
rem----------------------------ELIMINANDO claves de inicio de sistema bloqueados-
 
reg delete HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg /va /f
 
rem -----------------------iniciando el explorador de windows
start explorer.exe
msg * tu pc esta listo
pause
exit