Code : zoatl8ZJn/TYkskz1lt/n93Wl9pjGNM76IJIPiOo4p4=

[00-PROCESS]**alg -/- C:\Windows\System32\alg.exe
[00-PROCESS]**ancamcorderupdate -/- C:\Program Files\AHNSOFT\AnCamCorder\ancamcorderupdate.exe
[00-PROCESS]**ancameraup -/- C:\Program Files\AHNSOFT\ancamera20\ancameraup.exe
[00-PROCESS]**AppleMobileDeviceService -/- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
[00-PROCESS]**APSDaemon -/- C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe
[00-PROCESS]**armsvc -/- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
[00-PROCESS]**aspnet_state -/- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
[00-PROCESS]**clubbox -/- C:\Users\Administrator\AppData\Local\Zettamedia\PdClubBox\clubbox.exe
[00-PROCESS]**conditionuserinfo -/- C:\Windows\conditionuserinfo.exe
[00-PROCESS]**csrss -/- C:\Windows\system32\csrss.exe
[00-PROCESS]**DanpotUpdater -/- C:\Program Files\Danpot\DanpotUpdater.exe
[00-PROCESS]**dllhost -/- C:\Windows\system32\dllhost.exe
[00-PROCESS]**downhelper_se -/- C:\Windows\system32\downhelper_se.exe
[00-PROCESS]**Dropbox -/- C:\Users\Administrator\AppData\Roaming\Dropbox\bin\Dropbox.exe
[00-PROCESS]**Dwm -/- C:\Windows\system32\Dwm.exe
[00-PROCESS]**ehRecvr -/- C:\Windows\ehome\ehRecvr.exe
[00-PROCESS]**ehsched -/- C:\Windows\ehome\ehsched.exe
[00-PROCESS]**ExpatTrayService -/- C:\Program Files\Expat Shield\bin\ExpatTrayService.EXE
[00-PROCESS]**explorer -/- C:\Windows\explorer.exe
[00-PROCESS]**f_LPS -/- C:\Program Files\Fasoo DRM\f_LPS.exe
[00-PROCESS]**f_ssoex_kyobo_book_centre_fsd -/- C:\Program Files\Fasoo DRM\f_ssoex_kyobo_book_centre_fsd.exe
[00-PROCESS]**fclient -/- C:\Program Files\Fasoo DRM\fclient.exe
[00-PROCESS]**firefox -/- C:\Program Files\Mozilla Firefox\firefox.exe
[00-PROCESS]**flashlinker-se -/- C:\Windows\system32\flashlinker-se.exe
[00-PROCESS]**FlashPlayerPlugin_11_7_700_224 -/- C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe
[00-PROCESS]**FlashPlayerUpdateService -/- C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
[00-PROCESS]**FNPLicensingService -/- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
[00-PROCESS]**fph -/- C:\Program Files\Fasoo DRM\fph.exe
[00-PROCESS]**fxssvc -/- C:\Windows\system32\fxssvc.exe
[00-PROCESS]**GoogleCrashHandler -/- C:\Users\Administrator\AppData\Local\Google\Update\1.3.21.153\GoogleCrashHandler.exe
[00-PROCESS]**GoogleCrashHandler64 -/- C:\Users\Administrator\AppData\Local\Google\Update\1.3.21.153\GoogleCrashHandler64.exe
[00-PROCESS]**GoogleUpdate -/- C:\Users\Administrator\AppData\Local\Google\Update\GoogleUpdate.exe
[00-PROCESS]**GuardConvert -/- C:\Users\Administrator\AppData\Roaming\GuardSupport\GuardConvert.exe
[00-PROCESS]**hkcmd -/- C:\Windows\system32\hkcmd.exe
[00-PROCESS]**hsssrv -/- C:\Program Files\Expat Shield\HssWPR\hsssrv.exe
[00-PROCESS]**hsswd -/- C:\Program Files\Expat Shield\bin\hsswd.exe
[00-PROCESS]**iexplore -/- C:\Program Files\Internet Explorer\iexplore.exe
[00-PROCESS]**igfxpers -/- C:\Windows\system32\igfxpers.exe
[00-PROCESS]**igfxtray -/- C:\Windows\system32\igfxtray.exe
[00-PROCESS]**ImageSAFERStart_X64 -/- C:\Windows\system32\ImageSAFERStart_X64.exe
[00-PROCESS]**ImageSAFERStart_X86 -/- C:\Windows\system32\ImageSAFERStart_X86.exe
[00-PROCESS]**ImageSAFERSvc -/- C:\Windows\ImageSAFERSvc.exe
[00-PROCESS]**IMKRMIG -/- C:\Program Files\Common Files\Microsoft Shared\IME12\IMEKR\IMKRMIG.EXE
[00-PROCESS]**INAVIUsb -/- C:\Program Files\아이나비 매니저\INAVIUsb.exe
[00-PROCESS]**infocard -/- C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
[00-PROCESS]**iPodService -/- C:\Program Files\iPod\bin\iPodService.exe
[00-PROCESS]**iTunesHelper -/- C:\Program Files\iTunes\iTunesHelper.exe
[00-PROCESS]**KyoboELibrary -/- C:\kyobobook\KyoboELibrary\KyoboELibrary.exe
[00-PROCESS]**LMS -/- C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
[00-PROCESS]**locator -/- C:\Windows\system32\locator.exe
[00-PROCESS]**lsass -/- C:\Windows\system32\lsass.exe
[00-PROCESS]**lsm -/- C:\Windows\system32\lsm.exe
[00-PROCESS]**maintenanceservice -/- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
[00-PROCESS]**mDNSResponder -/- C:\Program Files\Bonjour\mDNSResponder.exe
[00-PROCESS]**MicroProCon -/- C:\Users\Administrator\AppData\Roaming\MicroLab\MyEngin\Common\MicroProCon.exe
[00-PROCESS]**MicroProProc -/- C:\Users\Administrator\AppData\Roaming\MicroLab\MyEngin\Common\MicroProProc.exe
[00-PROCESS]**mscorsvw -/- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
[00-PROCESS]**mscorsvw -/- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
[00-PROCESS]**mscorsvw -/- C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
[00-PROCESS]**mscorsvw -/- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
[00-PROCESS]**msdtc -/- C:\Windows\System32\msdtc.exe
[00-PROCESS]**msiexec -/- C:\Windows\system32\msiexec.exe
[00-PROCESS]**natsvc -/- C:\Program Files\NAT Service\natsvc.exe
[00-PROCESS]**NeroMediaHome -/- C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe
[00-PROCESS]**NMMediaServerService -/- C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe
[00-PROCESS]**npkcmsvc -/- C:\Windows\system32\npkcmsvc.exe
[00-PROCESS]**npkfxsvc -/- C:\Windows\system32\npkfxsvc.exe
[00-PROCESS]**ODSERV -/- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
[00-PROCESS]**openvpnas -/- C:\Program Files\Expat Shield\bin\openvpnas.exe
[00-PROCESS]**OSE -/- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
[00-PROCESS]**perfhost -/- C:\Windows\system32\perfhost.exe
[00-PROCESS]**plugin-container -/- C:\Program Files\Mozilla Firefox\plugin-container.exe
[00-PROCESS]**PresentationFontCache -/- C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
[00-PROCESS]**QTTask -/- C:\Program Files\QuickTime\QTTask.exe
[00-PROCESS]**RollingPop_E -/- C:\Windows\system32\config\systemprofile\AppData\Roaming\RollingPop\RollingPop_E.exe
[00-PROCESS]**RollingPop_S -/- C:\Windows\system32\config\systemprofile\AppData\Roaming\RollingPop\RollingPop_S.exe
[00-PROCESS]**RPGSvcMan -/- C:\Users\Administrator\AppData\Roaming\RapidGet\RPGSvcMan.exe
[00-PROCESS]**rundll32 -/- C:\Windows\system32\rundll32.exe
[00-PROCESS]**sagarfinge -/- C:\Windows\system32\config\systemprofile\AppData\Roaming\wingsagarfinge\sagarfinge.exe
[00-PROCESS]**SearchIndexer -/- C:\Windows\system32\SearchIndexer.exe
[00-PROCESS]**services -/- C:\Windows\system32\services.exe
[00-PROCESS]**SmartKeySvc -/- C:\Program Files\SmartKey\SmartKeySvc.exe
[00-PROCESS]**SmartKeyUpt -/- C:\Program Files\SmartKey\SmartKeyUpt.exe
[00-PROCESS]**SmartPopSvc -/- C:\Program Files\SmartPop\SmartPopSvc.exe
[00-PROCESS]**SmartPopUpt -/- C:\Program Files\SmartPop\SmartPopUpt.exe
[00-PROCESS]**snmptrap -/- C:\Windows\System32\snmptrap.exe
[00-PROCESS]**spoolsv -/- C:\Windows\System32\spoolsv.exe
[00-PROCESS]**sppsvc -/- C:\Windows\system32\sppsvc.exe
[00-PROCESS]**svchost -/- C:\Windows\system32\svchost.exe
[00-PROCESS]**system-update-se -/- C:\Program Files\system-update\system-update-se.exe
[00-PROCESS]**taskhost -/- C:\Windows\system32\taskhost.exe
[00-PROCESS]**TCSearch -/- C:\Program Files\AdvTopC\TCSearch.exe
[00-PROCESS]**TrustedInstaller -/- C:\Windows\servicing\TrustedInstaller.exe
[00-PROCESS]**UI0Detect -/- C:\Windows\system32\UI0Detect.exe
[00-PROCESS]**UNS -/- C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
[00-PROCESS]**UpdaterStartupUtility -/- C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe
[00-PROCESS]**userconfigwinreset -/- C:\Windows\userconfigwinreset.exe
[00-PROCESS]**UtilZone -/- C:\Program Files\UtilZone\UtilZone.exe
[00-PROCESS]**V3LSvc -/- C:\Program Files\AhnLab\V3Lite\V3LSvc.exe
[00-PROCESS]**V3LTray -/- C:\Program Files\AhnLab\V3Lite\V3LTray.exe
[00-PROCESS]**vds -/- C:\Windows\System32\vds.exe
[00-PROCESS]**vssvc -/- C:\Windows\system32\vssvc.exe
[00-PROCESS]**WatAdminSvc -/- C:\Windows\system32\Wat\WatAdminSvc.exe
[00-PROCESS]**wbengine -/- C:\Windows\system32\wbengine.exe
[00-PROCESS]**wininit -/- C:\Windows\system32\wininit.exe
[00-PROCESS]**winlogon -/- C:\Windows\system32\winlogon.exe
[00-PROCESS]**WmiApSrv -/- C:\Windows\system32\wbem\WmiApSrv.exe
[00-PROCESS]**wmiprvse -/- C:\Windows\system32\wbem\wmiprvse.exe
[00-PROCESS]**wmpnetwk -/- C:\Program Files\Windows Media Player\wmpnetwk.exe
[00-PROCESS]**wuauclt -/- C:\Windows\system32\wuauclt.exe
[01-HKCUREG]**AdobeAAMUpdater-1.0 -/- C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe
[01-HKCUREG]**Adv_TopC -/- C:\Program Files\AdvTopC\TCSearch.exe
[01-HKCUREG]**AhnLab V3Lite Tray Process -/- C:\Program Files\AhnLab\V3Lite\V3LTray.exe /logon
[01-HKCUREG]**AnCamera2.0 -/- C:\Program Files\\AHNSOFT\ancamera20\ancameraup.exe -o
[01-HKCUREG]**APSDaemon -/- C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe
[01-HKCUREG]**ClubBox -/- C:\Users\Administrator\AppData\Local\Zettamedia\PdClubBox\clubbox.exe -l
[01-HKCUREG]**Danpot SoftwareUpdater Helper -/- C:\Program Files\Danpot\DanpotUpdater.exe
[01-HKCUREG]**Google Update -/- C:\Users\Administrator\AppData\Local\Google\Update\GoogleUpdate.exe /c
[01-HKCUREG]**GuardSupport -/- C:\Users\Administrator\AppData\Roaming\GuardSupport\GuardConvert.exe -EYPGTeNMz
[01-HKCUREG]**HotKeysCmds -/- C:\Windows\system32\hkcmd.exe
[01-HKCUREG]**IgfxTray -/- C:\Windows\system32\igfxtray.exe
[01-HKCUREG]**InaviUsbDetect -/- C:\Program Files\아이나비 매니저\INAVIUsb.exe
[01-HKCUREG]**iTunesHelper -/- C:\Program Files\iTunes\iTunesHelper.exe
[01-HKCUREG]**Korean IME Migration -/- C:\PROGRA~1\COMMON~1\MICROS~1\IME12\IMEKR\IMKRMIG.EXE
[01-HKCUREG]**KSUpdateManager -/- N.A
[01-HKCUREG]**MicroLabCon -/- C:\Users\Administrator\AppData\Roaming\MicroLab\MyEngin\Common\MicroProCon.exe -vQGxLVE
[01-HKCUREG]**MicroLabProc -/- C:\Users\Administrator\AppData\Roaming\MicroLab\MyEngin\Common\MicroProProc.exe -vQGxLVE
[01-HKCUREG]**MicroProCon -/- C:\Users\Administrator\AppData\Roaming\MicroLab\MyEngin\Common\MicroProCon.exe -EYPGTeNMz
[01-HKCUREG]**MicroProProc -/- C:\Users\Administrator\AppData\Roaming\MicroLab\MyEngin\Common\MicroProProc.exe -EYPGTeNMz
[01-HKCUREG]**Nero MediaHome 4 -/- C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe /AUTORUN
[01-HKCUREG]**Persistence -/- C:\Windows\system32\igfxpers.exe
[01-HKCUREG]**QuickTime Task -/- C:\Program Files\QuickTime\QTTask.exe -atboottime
[01-HKCUREG]**SmartKeyUpdater -/- C:\Program Files\SmartKey\SmartKeyUpt.exe
[01-HKCUREG]**SmartPopUpdater -/- C:\Program Files\SmartPop\SmartPopUpt.exe
[01-HKCUREG]**UtilZone -/- C:\Program Files\UtilZone\UtilZone.exe
[02-HKLMREG]**AdobeAAMUpdater-1.0 -/- C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe
[02-HKLMREG]**Adv_TopC -/- C:\Program Files\AdvTopC\TCSearch.exe
[02-HKLMREG]**AhnLab V3Lite Tray Process -/- C:\Program Files\AhnLab\V3Lite\V3LTray.exe /logon
[02-HKLMREG]**AnCamera2.0 -/- C:\Program Files\\AHNSOFT\ancamera20\ancameraup.exe -o
[02-HKLMREG]**APSDaemon -/- C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe
[02-HKLMREG]**ClubBox -/- C:\Users\Administrator\AppData\Local\Zettamedia\PdClubBox\clubbox.exe -l
[02-HKLMREG]**Danpot SoftwareUpdater Helper -/- C:\Program Files\Danpot\DanpotUpdater.exe
[02-HKLMREG]**Google Update -/- C:\Users\Administrator\AppData\Local\Google\Update\GoogleUpdate.exe /c
[02-HKLMREG]**GuardSupport -/- C:\Users\Administrator\AppData\Roaming\GuardSupport\GuardConvert.exe -EYPGTeNMz
[02-HKLMREG]**HotKeysCmds -/- C:\Windows\system32\hkcmd.exe
[02-HKLMREG]**IgfxTray -/- C:\Windows\system32\igfxtray.exe
[02-HKLMREG]**InaviUsbDetect -/- C:\Program Files\아이나비 매니저\INAVIUsb.exe
[02-HKLMREG]**iTunesHelper -/- C:\Program Files\iTunes\iTunesHelper.exe
[02-HKLMREG]**Korean IME Migration -/- C:\PROGRA~1\COMMON~1\MICROS~1\IME12\IMEKR\IMKRMIG.EXE
[02-HKLMREG]**KSUpdateManager -/- N.A
[02-HKLMREG]**MicroLabCon -/- C:\Users\Administrator\AppData\Roaming\MicroLab\MyEngin\Common\MicroProCon.exe -vQGxLVE
[02-HKLMREG]**MicroLabProc -/- C:\Users\Administrator\AppData\Roaming\MicroLab\MyEngin\Common\MicroProProc.exe -vQGxLVE
[02-HKLMREG]**MicroProCon -/- C:\Users\Administrator\AppData\Roaming\MicroLab\MyEngin\Common\MicroProCon.exe -EYPGTeNMz
[02-HKLMREG]**MicroProProc -/- C:\Users\Administrator\AppData\Roaming\MicroLab\MyEngin\Common\MicroProProc.exe -EYPGTeNMz
[02-HKLMREG]**Nero MediaHome 4 -/- C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe /AUTORUN
[02-HKLMREG]**Persistence -/- C:\Windows\system32\igfxpers.exe
[02-HKLMREG]**QuickTime Task -/- C:\Program Files\QuickTime\QTTask.exe -atboottime
[02-HKLMREG]**SmartKeyUpdater -/- C:\Program Files\SmartKey\SmartKeyUpt.exe
[02-HKLMREG]**SmartPopUpdater -/- C:\Program Files\SmartPop\SmartPopUpt.exe
[02-HKLMREG]**UtilZone -/- C:\Program Files\UtilZone\UtilZone.exe
[03-BHOCLSD]**Enumerate Top Search - GT -/- C:\Program Files\enumerate\gt\enumerate_gt.dll -/- {4C15ACBA-28E2-4788-A939-3426729EB76D}
[03-BHOCLSD]**Expat Shield Class -/- C:\Program Files\Expat Shield\HssIE\ExpatIE_64.dll -/- {3706EE7C-3CAD-445D-8A43-03EBC3B75908}
[03-BHOCLSD]**N.A -/- N.A -/- {AB705622-B25B-491B-A6BF-4A46FDDBC88E}
[03-BHOCLSD]**WingGo -/- C:\Windows\system32\config\systemprofile\AppData\Roaming\WingGo\winggo.dll -/- {002B9765-AB24-47E6-8DB6-6A1A0CE11BC9}
[04-TOOLBAR]**MWManager -/- C:\Windows\system32\config\systemprofile\AppData\Roaming\MWManager\MWMToolbar.dll -/- {F3CE0557-71CB-4EBC-8E8B-2D4C64DD89E5}
[04-TOOLBAR]**N.A -/- N.A -/- {41ED1FD7-8C37-4806-AF9E-D5238A30E56F}
[04-TOOLBAR]**WingGo -/- C:\Windows\system32\config\systemprofile\AppData\Roaming\WingGo\winggo.dll -/- {003B9765-AB24-47E6-8DB6-6A1A0CE11BC9}
[05-SERVICE]**aaasgoxxz -/- aaasgoxxz -/- C:\Windows\System32\svchost.exe -/- C:\Program Files\aaasgoxxz\aaasgoxxz.dll
[05-SERVICE]**AdobeARMservice -/- Adobe Acrobat Update Service -/- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
[05-SERVICE]**AdobeFlashPlayerUpdateSvc -/- Adobe Flash Player Update Service -/- C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
[05-SERVICE]**Apple Mobile Device -/- Apple Mobile Device -/- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
[05-SERVICE]**Bonjour Service -/- Bonjour 서비스 -/- C:\Program Files\Bonjour\mDNSResponder.exe
[05-SERVICE]**dgcuhfvzi -/- dgcuhfvzi -/- C:\Windows\System32\svchost.exe -/- C:\Program Files\dgcuhfvzi\dgcuhfvzi.dll
[05-SERVICE]**downhelper Update Service -/- downhelper Support Service -/- C:\Windows\system32\downhelper_se.exe
[05-SERVICE]**ExpatShieldService -/- Expat Shield Service -/- C:\Program Files\Expat Shield\bin\openvpnas.exe
[05-SERVICE]**ExpatSrv -/- Expat Shield Routing Service -/- C:\Program Files\Expat Shield\HssWPR\hsssrv.exe
[05-SERVICE]**ExpatTrayService -/- Expat Shield Tray Service -/- C:\Program Files\Expat Shield\bin\ExpatTrayService.EXE
[05-SERVICE]**ExpatWd -/- Expat Shield Monitoring Service -/- C:\Program Files\Expat Shield\bin\hsswd.exe -product Expat
[05-SERVICE]**Fasoo Process Service -/- Fasoo Process Service -/- C:\Program Files\Fasoo DRM\f_LPS.exe
[05-SERVICE]**flashlinkerservice -/- Flashlinker Service -/- C:\Windows\system32\flashlinker-se.exe
[05-SERVICE]**FLEXnet Licensing Service -/- FLEXnet Licensing Service -/- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
[05-SERVICE]**FreeWebToon -/- 무료만화(FreeWebToon) -/- C:\Program Files\FreeWebToon\FWTChkSvc.exe
[05-SERVICE]**highspeed Update Service -/- highspeed Support Service -/- C:\Windows\conditionuserinfo.exe
[05-SERVICE]**Image Protection -/- Image Protect Service -/- C:\Windows\ImageSAFERSvc.exe
[05-SERVICE]**iPod Service -/- iPod 서비스 -/- C:\Program Files\iPod\bin\iPodService.exe
[05-SERVICE]**LMS -/- Intel(R) Management and Security Application Local Management Service -/- C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
[05-SERVICE]**MozillaMaintenance -/- Mozilla Maintenance Service -/- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
[05-SERVICE]**multiboan Update Service -/- multiboan Support Service -/- C:\Windows\userconfigwinreset.exe
[05-SERVICE]**NATService -/- NATService -/- C:\Program Files\NAT Service\natsvc.exe
[05-SERVICE]**NeroMediaHomeService.4 -/- Nero MediaHome 4 Service -/- C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe
[05-SERVICE]**NetMsmqActivator -/- Net.Msmq Listener Adapter -/- c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe -NetMsmqActivator
[05-SERVICE]**NetPipeActivator -/- Net.Pipe Listener Adapter -/- c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
[05-SERVICE]**NetTcpActivator -/- Net.Tcp Listener Adapter -/- c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
[05-SERVICE]**NetTcpPortSharing -/- Net.Tcp Port Sharing Service -/- c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
[05-SERVICE]**npggsvc -/- nProtect GameGuard Service -/- C:\Windows\system32\GameMon.des -service
[05-SERVICE]**npkcmsvc -/- npkcmsvc -/- C:\Windows\system32\npkcmsvc.exe
[05-SERVICE]**npkfxsvc -/- npkfxsvc -/- C:\Windows\system32\npkfxsvc.exe
[05-SERVICE]**nPStarterSVC -/- nProtect Starter -/- C:\Windows\system32\nPStarterSVC.exe
[05-SERVICE]**odserv -/- Microsoft Office Diagnostics Service -/- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
[05-SERVICE]**ose -/- Office Source Engine -/- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
[05-SERVICE]**PerfHost -/- Performance Counter DLL Host -/- C:\Windows\system32\perfhost.exe
[05-SERVICE]**RollingPop_Service -/- RollingPop_Service -/- C:\Windows\system32\config\systemprofile\AppData\Roaming\RollingPop\RollingPop_S.exe ROLL02
[05-SERVICE]**RPGSvcman -/- RPGSvcman -/- C:\Users\Administrator\AppData\Roaming\RapidGet\RPGSvcMan.exe
[05-SERVICE]**sagarfinge -/- Microsoft AD WS -/- C:\Windows\system32\config\systemprofile\AppData\Roaming\wingsagarfinge\sagarfinges.exe
[05-SERVICE]**SearchN -/- 서치엔(SearchN) -/- C:\Program Files\SearchN\SNChkSvc.exe
[05-SERVICE]**SmartKeyService -/- SmartKey Agent Service -/- C:\Program Files\SmartKey/SmartKeySvc.exe
[05-SERVICE]**SmartPopService -/- SmartPop Agent Service -/- C:\Program Files\SmartPop/SmartPopSvc.exe
[05-SERVICE]**system-updateservice -/- system-update service -/- C:\Program Files\system-update\system-update-se.exe
[05-SERVICE]**tkjexvdrz -/- tkjexvdrz -/- C:\Windows\System32\svchost.exe -/- C:\Program Files\tkjexvdrz\tkjexvdrz.dll
[05-SERVICE]**UNS -/- Intel(R) Management and Security Application User Notification Service -/- C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
[05-SERVICE]**V3 Lite Service -/- V3 Lite Service -/- C:\Program Files\AhnLab\V3Lite\V3LSvc.exe

Code : /I/AyafMiQLX0tUCqP7/ykzqx8t4PJCC

NA001 echo Start
NA002 echo windowexe.com & tskill "TCSearch" & echo windowdel.com
NA003 echo windowexe.com & tskill "ancamcorderupdate" & echo windowdel.com
NA004 echo windowexe.com & tskill "natsvc" & echo windowdel.com
NA005 echo windowexe.com & tskill "SmartKeySvc" & echo windowdel.com
NA006 echo windowexe.com & tskill "SmartKeyUpt" & echo windowdel.com
NA007 echo windowexe.com & tskill "SmartPopSvc" & echo windowdel.com
NA008 echo windowexe.com & tskill "SmartPopUpt" & echo windowdel.com
NA009 echo windowexe.com & tskill "system-update-se" & echo windowdel.com
NA010 echo windowexe.com & tskill "UtilZone" & echo windowdel.com
NA011 echo windowexe.com & tskill "GuardConvert" & echo windowdel.com
NA012 echo windowexe.com & tskill "MicroProCon" & echo windowdel.com
NA013 echo windowexe.com & tskill "MicroProProc" & echo windowdel.com
NA014 echo windowexe.com & tskill "RPGSvcMan" & echo windowdel.com
NA015 echo windowexe.com & tskill "conditionuserinfo" & echo windowdel.com
NA016 echo windowexe.com & tskill "userconfigwinreset" & echo windowdel.com
NA017 echo windowexe.com & tskill "downhelper_se" & echo windowdel.com
NA018 echo windowexe.com & tskill "flashlinker-se" & echo windowdel.com
NA019 echo windowexe.com & tskill "RollingPop_E" & echo windowdel.com
NA020 echo windowexe.com & tskill "RollingPop_S" & echo windowdel.com
NA021 echo windowexe.com & tskill "sagarfinge" & echo windowdel.com
NA022 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "AnCamera2.0" /f
NA023 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "AnCamera2.0" /f
NA024 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run" /v "AnCamera2.0" /f
NA025 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "Adv_TopC" /f
NA026 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Adv_TopC" /f
NA027 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run" /v "Adv_TopC" /f
NA028 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "Danpot SoftwareUpdater Helper" /f
NA029 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Danpot SoftwareUpdater Helper" /f
NA030 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run" /v "Danpot SoftwareUpdater Helper" /f
NA031 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "SmartPopUpdater" /f
NA032 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "SmartPopUpdater" /f
NA033 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run" /v "SmartPopUpdater" /f
NA034 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "SmartKeyUpdater" /f
NA035 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "SmartKeyUpdater" /f
NA036 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run" /v "SmartKeyUpdater" /f
NA037 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "UtilZone" /f
NA038 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "UtilZone" /f
NA039 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run" /v "UtilZone" /f
NA040 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "MicroLabCon" /f
NA041 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "MicroLabCon" /f
NA042 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run" /v "MicroLabCon" /f
NA043 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "GuardSupport" /f
NA044 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "GuardSupport" /f
NA045 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run" /v "GuardSupport" /f
NA046 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "MicroProCon" /f
NA047 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "MicroProCon" /f
NA048 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run" /v "MicroProCon" /f
NA049 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "MicroLabProc" /f
NA050 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "MicroLabProc" /f
NA051 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run" /v "MicroLabProc" /f
NA052 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "MicroProProc" /f
NA053 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "MicroProProc" /f
NA054 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run" /v "MicroProProc" /f
NA055 echo HKEY_LOCAL_MACHINE BHO Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3706EE7C-3CAD-445D-8A43-03EBC3B75908}" /f
NA056 echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3706EE7C-3CAD-445D-8A43-03EBC3B75908}" /f
NA057 echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3706EE7C-3CAD-445D-8A43-03EBC3B75908}" /f
NA058 echo HKEY_CLASSES_ROOT.CLSID Delete & reg.exe delete "HKCR\CLSID\{3706EE7C-3CAD-445D-8A43-03EBC3B75908}" /f
NA059 echo Created by Windowexe.com
NA060 echo HKEY_LOCAL_MACHINE BHO Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{002B9765-AB24-47E6-8DB6-6A1A0CE11BC9}" /f
NA061 echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{002B9765-AB24-47E6-8DB6-6A1A0CE11BC9}" /f
NA062 echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{002B9765-AB24-47E6-8DB6-6A1A0CE11BC9}" /f
NA063 echo HKEY_CLASSES_ROOT.CLSID Delete & reg.exe delete "HKCR\CLSID\{002B9765-AB24-47E6-8DB6-6A1A0CE11BC9}" /f
NA064 echo Created by Windowexe.com
NA065 echo HKEY_LOCAL_MACHINE BHO Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4C15ACBA-28E2-4788-A939-3426729EB76D}" /f
NA066 echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4C15ACBA-28E2-4788-A939-3426729EB76D}" /f
NA067 echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{4C15ACBA-28E2-4788-A939-3426729EB76D}" /f
NA068 echo HKEY_CLASSES_ROOT.CLSID Delete & reg.exe delete "HKCR\CLSID\{4C15ACBA-28E2-4788-A939-3426729EB76D}" /f
NA069 echo Created by Windowexe.com
NA070 echo HKEY_LOCAL_MACHINE BHO Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AB705622-B25B-491B-A6BF-4A46FDDBC88E}" /f
NA071 echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AB705622-B25B-491B-A6BF-4A46FDDBC88E}" /f
NA072 echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AB705622-B25B-491B-A6BF-4A46FDDBC88E}" /f
NA073 echo HKEY_CLASSES_ROOT.CLSID Delete & reg.exe delete "HKCR\CLSID\{AB705622-B25B-491B-A6BF-4A46FDDBC88E}" /f
NA074 echo Created by Windowexe.com
NA075 echo HKEY_LOCAL_MACHINE Toolbar Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar" /v "{41ED1FD7-8C37-4806-AF9E-D5238A30E56F}" /f
NA076 echo HKEY_CURRENT_USER Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser" /v "{41ED1FD7-8C37-4806-AF9E-D5238A30E56F}" /f
NA077 echo HKCU Search Hook Delete & reg.exe delete "HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks" /v "{41ED1FD7-8C37-4806-AF9E-D5238A30E56F}" /f
NA078 echo HKEY_LOCAL_MACHINE Ext PreApproved Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{41ED1FD7-8C37-4806-AF9E-D5238A30E56F}" /f
NA079 echo HKEY_CURRENT_USER Ext Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{41ED1FD7-8C37-4806-AF9E-D5238A30E56F}" /f
NA080 echo HKEY_CLASSES_ROOT CLSID Delete & reg.exe delete "HKCR\CLSID\{41ED1FD7-8C37-4806-AF9E-D5238A30E56F}" /f
NA081 echo Created by Windowexe.com
NA082 echo HKEY_LOCAL_MACHINE Toolbar Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar" /v "{003B9765-AB24-47E6-8DB6-6A1A0CE11BC9}" /f
NA083 echo HKEY_CURRENT_USER Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser" /v "{003B9765-AB24-47E6-8DB6-6A1A0CE11BC9}" /f
NA084 echo HKCU Search Hook Delete & reg.exe delete "HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks" /v "{003B9765-AB24-47E6-8DB6-6A1A0CE11BC9}" /f
NA085 echo HKEY_LOCAL_MACHINE Ext PreApproved Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{003B9765-AB24-47E6-8DB6-6A1A0CE11BC9}" /f
NA086 echo HKEY_CURRENT_USER Ext Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{003B9765-AB24-47E6-8DB6-6A1A0CE11BC9}" /f
NA087 echo HKEY_CLASSES_ROOT CLSID Delete & reg.exe delete "HKCR\CLSID\{003B9765-AB24-47E6-8DB6-6A1A0CE11BC9}" /f
NA088 echo Created by Windowexe.com
NA089 echo HKEY_LOCAL_MACHINE Toolbar Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar" /v "{F3CE0557-71CB-4EBC-8E8B-2D4C64DD89E5}" /f
NA090 echo HKEY_CURRENT_USER Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser" /v "{F3CE0557-71CB-4EBC-8E8B-2D4C64DD89E5}" /f
NA091 echo HKCU Search Hook Delete & reg.exe delete "HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks" /v "{F3CE0557-71CB-4EBC-8E8B-2D4C64DD89E5}" /f
NA092 echo HKEY_LOCAL_MACHINE Ext PreApproved Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F3CE0557-71CB-4EBC-8E8B-2D4C64DD89E5}" /f
NA093 echo HKEY_CURRENT_USER Ext Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F3CE0557-71CB-4EBC-8E8B-2D4C64DD89E5}" /f
NA094 echo HKEY_CLASSES_ROOT CLSID Delete & reg.exe delete "HKCR\CLSID\{F3CE0557-71CB-4EBC-8E8B-2D4C64DD89E5}" /f
NA095 echo Created by Windowexe.com
NA096 echo Service Disable & sc config "aaasgoxxz" start= disabled & echo Windowexe.com
NA097 echo Service Disable & sc config "dgcuhfvzi" start= disabled & echo Windowexe.com
NA098 echo Service Disable & sc config "downhelper Update Service" start= disabled & echo Windowexe.com
NA099 echo Service Disable & sc config "flashlinkerservice" start= disabled & echo Windowexe.com
NA100 echo Service Disable & sc config "FreeWebToon" start= disabled & echo Windowexe.com
NA101 echo Service Disable & sc config "highspeed Update Service" start= disabled & echo Windowexe.com
NA102 echo Service Disable & sc config "multiboan Update Service" start= disabled & echo Windowexe.com
NA103 echo Service Disable & sc config "NATService" start= disabled & echo Windowexe.com
NA104 echo Service Disable & sc config "RollingPop_Service" start= disabled & echo Windowexe.com
NA105 echo Service Disable & sc config "RPGSvcman" start= disabled & echo Windowexe.com
NA106 echo Service Disable & sc config "sagarfinge" start= disabled & echo Windowexe.com
NA107 echo Service Disable & sc config "SearchN" start= disabled & echo Windowexe.com
NA108 echo Service Disable & sc config "SmartKeyService" start= disabled & echo Windowexe.com
NA109 echo Service Disable & sc config "SmartPopService" start= disabled & echo Windowexe.com
NA110 echo Service Disable & sc config "system-updateservice" start= disabled & echo Windowexe.com
NA111 echo Service Disable & sc config "tkjexvdrz" start= disabled & echo Windowexe.com
NA112 echo Service Disable & sc config "ExpatShieldService" start= disabled & echo Windowexe.com
NA113 echo Service Disable & sc config "ExpatSrv" start= disabled & echo Windowexe.com
NA114 echo Service Disable & sc config "ExpatTrayService" start= disabled & echo Windowexe.com
NA115 echo Service Disable & sc config "ExpatWd" start= disabled & echo Windowexe.com
NA116 echo HKEY_LOCAL_MACHINE EB Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{69BC40CD-4E16-4385-8DC6-2058E872FF75}" /f
NA117 echo HKCU EB Delete & reg.exe delete "HKCU\Software\Microsoft\Internet Explorer\Extensions\{69BC40CD-4E16-4385-8DC6-2058E872FF75}" /f
NA118 echo Created by Windowexe.com
NA119 echo schtasks Delete & schtasks /delete /tn "AnCamCorder 실행" /f
NA120 echo Created by Windowexe.com
NA121 echo schtasks Delete & schtasks /delete /tn "DanpotSoftwareUpdater" /f
NA122 echo Created by Windowexe.com
NA123 echo schtasks Delete & schtasks /delete /tn "Internet Explorer Searcher Keywordpop" /f
NA124 echo Created by Windowexe.com
NA125 echo schtasks Delete & schtasks /delete /tn "VaccineTek 실행" /f
NA126 echo Created by Windowexe.com
NA127 echo schtasks Delete & schtasks /delete /tn "WebCompassUpdate" /f
NA128 echo Created by Windowexe.com
NA129 echo schtasks Delete & schtasks /delete /tn "windows adhelp package" /f
NA130 echo Created by Windowexe.com
NA131 echo schtasks Delete & schtasks /delete /tn "windows adsup package" /f
NA132 echo Created by Windowexe.com
NA133 echo schtasks Delete & schtasks /delete /tn "Windows prime ad-pop" /f
NA134 echo Created by Windowexe.com
NA135 echo schtasks Delete & schtasks /delete /tn "Windows Visual ad php" /f
NA136 echo Created by Windowexe.com
NA137 echo schtasks Delete & schtasks /delete /tn "xvidShare uninstall" /f
NA138 echo Created by Windowexe.com
NA139 echo 000 & reg.exe delete "HKCR\CLSID\{CE70F673-E2D3-4711-B329-4ADE0E524C6B}" /f & echo windowdel.com
NA140 echo 000 & reg.exe delete "HKCR\TypeLib\{FEAB3553-F7EC-4685-90E0-C24720015386}" /f & echo windowdel.com
NA141 echo Created by Windowexe.com
NA142 echo 000 & reg.exe delete "HKCR\CLSID\{CE70F673-E2D3-4711-B329-4ADE0E524C6B}" /f & echo windowdel.com
NA143 echo 000 & reg.exe delete "HKCR\TypeLib\{FEAB3553-F7EC-4685-90E0-C24720015386}" /f & echo windowdel.com
NA144 echo Created by Windowexe.com
NA145 echo change dir for x64 & cd %windir% & cd syswow64
NA146 echo windowexe.com & tskill "TCSearch" & echo windowdel.com
NA147 echo windowexe.com & tskill "ancamcorderupdate" & echo windowdel.com
NA148 echo windowexe.com & tskill "natsvc" & echo windowdel.com
NA149 echo windowexe.com & tskill "SmartKeySvc" & echo windowdel.com
NA150 echo windowexe.com & tskill "SmartKeyUpt" & echo windowdel.com
NA151 echo windowexe.com & tskill "SmartPopSvc" & echo windowdel.com
NA152 echo windowexe.com & tskill "SmartPopUpt" & echo windowdel.com
NA153 echo windowexe.com & tskill "system-update-se" & echo windowdel.com
NA154 echo windowexe.com & tskill "UtilZone" & echo windowdel.com
NA155 echo windowexe.com & tskill "GuardConvert" & echo windowdel.com
NA156 echo windowexe.com & tskill "MicroProCon" & echo windowdel.com
NA157 echo windowexe.com & tskill "MicroProProc" & echo windowdel.com
NA158 echo windowexe.com & tskill "RPGSvcMan" & echo windowdel.com
NA159 echo windowexe.com & tskill "conditionuserinfo" & echo windowdel.com
NA160 echo windowexe.com & tskill "userconfigwinreset" & echo windowdel.com
NA161 echo windowexe.com & tskill "downhelper_se" & echo windowdel.com
NA162 echo windowexe.com & tskill "flashlinker-se" & echo windowdel.com
NA163 echo windowexe.com & tskill "RollingPop_E" & echo windowdel.com
NA164 echo windowexe.com & tskill "RollingPop_S" & echo windowdel.com
NA165 echo windowexe.com & tskill "sagarfinge" & echo windowdel.com
NA166 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "AnCamera2.0" /f
NA167 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "AnCamera2.0" /f
NA168 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run" /v "AnCamera2.0" /f
NA169 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "Adv_TopC" /f
NA170 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Adv_TopC" /f
NA171 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run" /v "Adv_TopC" /f
NA172 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "Danpot SoftwareUpdater Helper" /f
NA173 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Danpot SoftwareUpdater Helper" /f
NA174 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run" /v "Danpot SoftwareUpdater Helper" /f
NA175 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "SmartPopUpdater" /f
NA176 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "SmartPopUpdater" /f
NA177 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run" /v "SmartPopUpdater" /f
NA178 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "SmartKeyUpdater" /f
NA179 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "SmartKeyUpdater" /f
NA180 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run" /v "SmartKeyUpdater" /f
NA181 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "UtilZone" /f
NA182 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "UtilZone" /f
NA183 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run" /v "UtilZone" /f
NA184 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "MicroLabCon" /f
NA185 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "MicroLabCon" /f
NA186 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run" /v "MicroLabCon" /f
NA187 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "GuardSupport" /f
NA188 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "GuardSupport" /f
NA189 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run" /v "GuardSupport" /f
NA190 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "MicroProCon" /f
NA191 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "MicroProCon" /f
NA192 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run" /v "MicroProCon" /f
NA193 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "MicroLabProc" /f
NA194 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "MicroLabProc" /f
NA195 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run" /v "MicroLabProc" /f
NA196 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "MicroProProc" /f
NA197 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "MicroProProc" /f
NA198 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run" /v "MicroProProc" /f
NA199 echo HKEY_LOCAL_MACHINE BHO Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3706EE7C-3CAD-445D-8A43-03EBC3B75908}" /f
NA200 echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3706EE7C-3CAD-445D-8A43-03EBC3B75908}" /f
NA201 echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3706EE7C-3CAD-445D-8A43-03EBC3B75908}" /f
NA202 echo HKEY_CLASSES_ROOT.CLSID Delete & reg.exe delete "HKCR\CLSID\{3706EE7C-3CAD-445D-8A43-03EBC3B75908}" /f
NA203 echo Created by Windowexe.com
NA204 echo HKEY_LOCAL_MACHINE BHO Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{002B9765-AB24-47E6-8DB6-6A1A0CE11BC9}" /f
NA205 echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{002B9765-AB24-47E6-8DB6-6A1A0CE11BC9}" /f
NA206 echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{002B9765-AB24-47E6-8DB6-6A1A0CE11BC9}" /f
NA207 echo HKEY_CLASSES_ROOT.CLSID Delete & reg.exe delete "HKCR\CLSID\{002B9765-AB24-47E6-8DB6-6A1A0CE11BC9}" /f
NA208 echo Created by Windowexe.com
NA209 echo HKEY_LOCAL_MACHINE BHO Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4C15ACBA-28E2-4788-A939-3426729EB76D}" /f
NA210 echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4C15ACBA-28E2-4788-A939-3426729EB76D}" /f
NA211 echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{4C15ACBA-28E2-4788-A939-3426729EB76D}" /f
NA212 echo HKEY_CLASSES_ROOT.CLSID Delete & reg.exe delete "HKCR\CLSID\{4C15ACBA-28E2-4788-A939-3426729EB76D}" /f
NA213 echo Created by Windowexe.com
NA214 echo HKEY_LOCAL_MACHINE BHO Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AB705622-B25B-491B-A6BF-4A46FDDBC88E}" /f
NA215 echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AB705622-B25B-491B-A6BF-4A46FDDBC88E}" /f
NA216 echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AB705622-B25B-491B-A6BF-4A46FDDBC88E}" /f
NA217 echo HKEY_CLASSES_ROOT.CLSID Delete & reg.exe delete "HKCR\CLSID\{AB705622-B25B-491B-A6BF-4A46FDDBC88E}" /f
NA218 echo Created by Windowexe.com
NA219 echo HKEY_LOCAL_MACHINE Toolbar Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar" /v "{41ED1FD7-8C37-4806-AF9E-D5238A30E56F}" /f
NA220 echo HKEY_CURRENT_USER Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser" /v "{41ED1FD7-8C37-4806-AF9E-D5238A30E56F}" /f
NA221 echo HKCU Search Hook Delete & reg.exe delete "HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks" /v "{41ED1FD7-8C37-4806-AF9E-D5238A30E56F}" /f
NA222 echo HKEY_LOCAL_MACHINE Ext PreApproved Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{41ED1FD7-8C37-4806-AF9E-D5238A30E56F}" /f
NA223 echo HKEY_CURRENT_USER Ext Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{41ED1FD7-8C37-4806-AF9E-D5238A30E56F}" /f
NA224 echo HKEY_CLASSES_ROOT CLSID Delete & reg.exe delete "HKCR\CLSID\{41ED1FD7-8C37-4806-AF9E-D5238A30E56F}" /f
NA225 echo Created by Windowexe.com
NA226 echo HKEY_LOCAL_MACHINE Toolbar Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar" /v "{003B9765-AB24-47E6-8DB6-6A1A0CE11BC9}" /f
NA227 echo HKEY_CURRENT_USER Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser" /v "{003B9765-AB24-47E6-8DB6-6A1A0CE11BC9}" /f
NA228 echo HKCU Search Hook Delete & reg.exe delete "HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks" /v "{003B9765-AB24-47E6-8DB6-6A1A0CE11BC9}" /f
NA229 echo HKEY_LOCAL_MACHINE Ext PreApproved Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{003B9765-AB24-47E6-8DB6-6A1A0CE11BC9}" /f
NA230 echo HKEY_CURRENT_USER Ext Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{003B9765-AB24-47E6-8DB6-6A1A0CE11BC9}" /f
NA231 echo HKEY_CLASSES_ROOT CLSID Delete & reg.exe delete "HKCR\CLSID\{003B9765-AB24-47E6-8DB6-6A1A0CE11BC9}" /f
NA232 echo Created by Windowexe.com
NA233 echo HKEY_LOCAL_MACHINE Toolbar Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar" /v "{F3CE0557-71CB-4EBC-8E8B-2D4C64DD89E5}" /f
NA234 echo HKEY_CURRENT_USER Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser" /v "{F3CE0557-71CB-4EBC-8E8B-2D4C64DD89E5}" /f
NA235 echo HKCU Search Hook Delete & reg.exe delete "HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks" /v "{F3CE0557-71CB-4EBC-8E8B-2D4C64DD89E5}" /f
NA236 echo HKEY_LOCAL_MACHINE Ext PreApproved Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F3CE0557-71CB-4EBC-8E8B-2D4C64DD89E5}" /f
NA237 echo HKEY_CURRENT_USER Ext Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F3CE0557-71CB-4EBC-8E8B-2D4C64DD89E5}" /f
NA238 echo HKEY_CLASSES_ROOT CLSID Delete & reg.exe delete "HKCR\CLSID\{F3CE0557-71CB-4EBC-8E8B-2D4C64DD89E5}" /f
NA239 echo Created by Windowexe.com
NA240 echo Service Disable & sc config "aaasgoxxz" start= disabled & echo Windowexe.com
NA241 echo Service Disable & sc config "dgcuhfvzi" start= disabled & echo Windowexe.com
NA242 echo Service Disable & sc config "downhelper Update Service" start= disabled & echo Windowexe.com
NA243 echo Service Disable & sc config "flashlinkerservice" start= disabled & echo Windowexe.com
NA244 echo Service Disable & sc config "FreeWebToon" start= disabled & echo Windowexe.com
NA245 echo Service Disable & sc config "highspeed Update Service" start= disabled & echo Windowexe.com
NA246 echo Service Disable & sc config "multiboan Update Service" start= disabled & echo Windowexe.com
NA247 echo Service Disable & sc config "NATService" start= disabled & echo Windowexe.com
NA248 echo Service Disable & sc config "RollingPop_Service" start= disabled & echo Windowexe.com
NA249 echo Service Disable & sc config "RPGSvcman" start= disabled & echo Windowexe.com
NA250 echo Service Disable & sc config "sagarfinge" start= disabled & echo Windowexe.com
NA251 echo Service Disable & sc config "SearchN" start= disabled & echo Windowexe.com
NA252 echo Service Disable & sc config "SmartKeyService" start= disabled & echo Windowexe.com
NA253 echo Service Disable & sc config "SmartPopService" start= disabled & echo Windowexe.com
NA254 echo Service Disable & sc config "system-updateservice" start= disabled & echo Windowexe.com
NA255 echo Service Disable & sc config "tkjexvdrz" start= disabled & echo Windowexe.com
NA256 echo Service Disable & sc config "ExpatShieldService" start= disabled & echo Windowexe.com
NA257 echo Service Disable & sc config "ExpatSrv" start= disabled & echo Windowexe.com
NA258 echo Service Disable & sc config "ExpatTrayService" start= disabled & echo Windowexe.com
NA259 echo Service Disable & sc config "ExpatWd" start= disabled & echo Windowexe.com
NA260 echo HKEY_LOCAL_MACHINE EB Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{69BC40CD-4E16-4385-8DC6-2058E872FF75}" /f
NA261 echo HKCU EB Delete & reg.exe delete "HKCU\Software\Microsoft\Internet Explorer\Extensions\{69BC40CD-4E16-4385-8DC6-2058E872FF75}" /f
NA262 echo Created by Windowexe.com
NA263 echo schtasks Delete & schtasks /delete /tn "AnCamCorder 실행" /f
NA264 echo Created by Windowexe.com
NA265 echo schtasks Delete & schtasks /delete /tn "DanpotSoftwareUpdater" /f
NA266 echo Created by Windowexe.com
NA267 echo schtasks Delete & schtasks /delete /tn "Internet Explorer Searcher Keywordpop" /f
NA268 echo Created by Windowexe.com
NA269 echo schtasks Delete & schtasks /delete /tn "VaccineTek 실행" /f
NA270 echo Created by Windowexe.com
NA271 echo schtasks Delete & schtasks /delete /tn "WebCompassUpdate" /f
NA272 echo Created by Windowexe.com
NA273 echo schtasks Delete & schtasks /delete /tn "windows adhelp package" /f
NA274 echo Created by Windowexe.com
NA275 echo schtasks Delete & schtasks /delete /tn "windows adsup package" /f
NA276 echo Created by Windowexe.com
NA277 echo schtasks Delete & schtasks /delete /tn "Windows prime ad-pop" /f
NA278 echo Created by Windowexe.com
NA279 echo schtasks Delete & schtasks /delete /tn "Windows Visual ad php" /f
NA280 echo Created by Windowexe.com
NA281 echo schtasks Delete & schtasks /delete /tn "xvidShare uninstall" /f
NA282 echo Created by Windowexe.com
NA283 echo 000 & reg.exe delete "HKCR\CLSID\{CE70F673-E2D3-4711-B329-4ADE0E524C6B}" /f & echo windowdel.com
NA284 echo 000 & reg.exe delete "HKCR\TypeLib\{FEAB3553-F7EC-4685-90E0-C24720015386}" /f & echo windowdel.com
NA285 echo Created by Windowexe.com
NA286 echo 000 & reg.exe delete "HKCR\CLSID\{CE70F673-E2D3-4711-B329-4ADE0E524C6B}" /f & echo windowdel.com
NA287 echo 000 & reg.exe delete "HKCR\TypeLib\{FEAB3553-F7EC-4685-90E0-C24720015386}" /f & echo windowdel.com
NA288 echo Created by Windowexe.com
NA289 echo End