프로그램분석

Code : AVdf4kCL+p7umgX76FbTA1B+l29NI7J9

프로세스 천국 2013. 3. 10. 10:38

System Analyzer Report 2013, 03, 10

NA001 ======================================================================
NA002 echo Created by Windowexe.com / do not delete this label.
NA003 ======================================================================
NA004 echo Start
NA005 echo windowexe.com & tskill "inforesetupdate" & echo windowdel.com
NA006 echo windowexe.com & tskill "FBDSvcMan" & echo windowdel.com
NA007 echo windowexe.com & tskill "FBDManager" & echo windowdel.com
NA008 echo windowexe.com & tskill "update" & echo windowdel.com
NA009 echo windowexe.com & tskill "appis" & echo windowdel.com
NA010 echo windowexe.com & tskill "windowviewconup" & echo windowdel.com
NA011 echo windowexe.com & tskill "intsfsrv" & echo windowdel.com
NA012 echo windowexe.com & tskill "nmgsrv" & echo windowdel.com
NA013 echo windowexe.com & tskill "SmartWS" & echo windowdel.com
NA014 echo windowexe.com & tskill "SmartWD" & echo windowdel.com
NA015 echo windowexe.com & tskill "SNUpdate" & echo windowdel.com
NA016 echo windowexe.com & tskill "SNSlide" & echo windowdel.com
NA017 echo windowexe.com & tskill "SNChkSvc" & echo windowdel.com
NA018 echo windowexe.com & tskill "nswsrv" & echo windowdel.com
NA019 echo windowexe.com & tskill "natsvc" & echo windowdel.com
NA020 echo windowexe.com & tskill "HSSearch" & echo windowdel.com
NA021 echo windowexe.com & tskill "BigfileSearch" & echo windowdel.com
NA022 echo windowexe.com & tskill "barosvc" & echo windowdel.com
NA023 echo windowexe.com & tskill "TCSearch" & echo windowdel.com
NA024 echo windowexe.com & tskill "TCCheckAgent" & echo windowdel.com
NA025 echo windowexe.com & tskill "update" & echo windowdel.com
NA026 echo windowexe.com & tskill "pcmagent" & echo windowdel.com
NA027 echo windowexe.com & tskill "pcm" & echo windowdel.com
NA028 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "appis.exe" /f
NA029 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "appis.exe" /f
NA030 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "update.exe" /f
NA031 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "update.exe" /f
NA032 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "BigfileSearch" /f
NA033 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "BigfileSearch" /f
NA034 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "rpga" /f
NA035 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "rpga" /f
NA036 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "SpeedDownload" /f
NA037 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "SpeedDownload" /f
NA038 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "snslide" /f
NA039 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "snslide" /f
NA040 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "SearchN" /f
NA041 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "SearchN" /f
NA042 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "pcm" /f
NA043 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "pcm" /f
NA044 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "ParkKJ" /f
NA045 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "ParkKJ" /f
NA046 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "windowviewcon" /f
NA047 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "windowviewcon" /f
NA048 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "Adv_TopC" /f
NA049 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Adv_TopC" /f
NA050 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "HiSch" /f
NA051 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "HiSch" /f
NA052 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "zcnew" /f
NA053 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "zcnew" /f
NA054 echo HKEY_LOCAL_MACHINE BHO Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FE14A4CA-5CFA-4C05-9274-6006397B68C9}" /f
NA055 echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FE14A4CA-5CFA-4C05-9274-6006397B68C9}" /f
NA056 echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FE14A4CA-5CFA-4C05-9274-6006397B68C9}" /f
NA057 echo HKEY_CLASSES_ROOT.CLSID Delete & reg.exe delete "HKCR\CLSID\{FE14A4CA-5CFA-4C05-9274-6006397B68C9}" /f
NA058 echo Created by Windowexe.com
NA059 echo HKEY_LOCAL_MACHINE BHO Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BA422916-F424-4EFC-851E-9092EDDE8ECF}" /f
NA060 echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BA422916-F424-4EFC-851E-9092EDDE8ECF}" /f
NA061 echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{BA422916-F424-4EFC-851E-9092EDDE8ECF}" /f
NA062 echo HKEY_CLASSES_ROOT.CLSID Delete & reg.exe delete "HKCR\CLSID\{BA422916-F424-4EFC-851E-9092EDDE8ECF}" /f
NA063 echo Created by Windowexe.com
NA064 echo HKEY_LOCAL_MACHINE BHO Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B8660232-6779-456E-B9A7-316B14922E69}" /f
NA065 echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{B8660232-6779-456E-B9A7-316B14922E69}" /f
NA066 echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{B8660232-6779-456E-B9A7-316B14922E69}" /f
NA067 echo HKEY_CLASSES_ROOT.CLSID Delete & reg.exe delete "HKCR\CLSID\{B8660232-6779-456E-B9A7-316B14922E69}" /f
NA068 echo Created by Windowexe.com
NA069 echo HKEY_LOCAL_MACHINE BHO Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A433374B-2F44-402B-AB7E-E58B4A09DF8A}" /f
NA070 echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A433374B-2F44-402B-AB7E-E58B4A09DF8A}" /f
NA071 echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A433374B-2F44-402B-AB7E-E58B4A09DF8A}" /f
NA072 echo HKEY_CLASSES_ROOT.CLSID Delete & reg.exe delete "HKCR\CLSID\{A433374B-2F44-402B-AB7E-E58B4A09DF8A}" /f
NA073 echo Created by Windowexe.com
NA074 echo HKEY_LOCAL_MACHINE BHO Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8D98E3CA-8CBE-40D8-8FB2-738407C87834}" /f
NA075 echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8D98E3CA-8CBE-40D8-8FB2-738407C87834}" /f
NA076 echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{8D98E3CA-8CBE-40D8-8FB2-738407C87834}" /f
NA077 echo HKEY_CLASSES_ROOT.CLSID Delete & reg.exe delete "HKCR\CLSID\{8D98E3CA-8CBE-40D8-8FB2-738407C87834}" /f
NA078 echo Created by Windowexe.com
NA079 echo HKEY_LOCAL_MACHINE BHO Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{492D6406-DC6F-4885-A8A2-C970E38B12CA}" /f
NA080 echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{492D6406-DC6F-4885-A8A2-C970E38B12CA}" /f
NA081 echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{492D6406-DC6F-4885-A8A2-C970E38B12CA}" /f
NA082 echo HKEY_CLASSES_ROOT.CLSID Delete & reg.exe delete "HKCR\CLSID\{492D6406-DC6F-4885-A8A2-C970E38B12CA}" /f
NA083 echo Created by Windowexe.com
NA084 echo HKEY_LOCAL_MACHINE BHO Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{48B6053A-F6EC-4A30-AF7D-1F174DE8ABE1}" /f
NA085 echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{48B6053A-F6EC-4A30-AF7D-1F174DE8ABE1}" /f
NA086 echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{48B6053A-F6EC-4A30-AF7D-1F174DE8ABE1}" /f
NA087 echo HKEY_CLASSES_ROOT.CLSID Delete & reg.exe delete "HKCR\CLSID\{48B6053A-F6EC-4A30-AF7D-1F174DE8ABE1}" /f
NA088 echo Created by Windowexe.com
NA089 echo HKEY_LOCAL_MACHINE BHO Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3E5EF872-03E2-4CE0-94DF-CA8A5004ECFD}" /f
NA090 echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3E5EF872-03E2-4CE0-94DF-CA8A5004ECFD}" /f
NA091 echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3E5EF872-03E2-4CE0-94DF-CA8A5004ECFD}" /f
NA092 echo HKEY_CLASSES_ROOT.CLSID Delete & reg.exe delete "HKCR\CLSID\{3E5EF872-03E2-4CE0-94DF-CA8A5004ECFD}" /f
NA093 echo Created by Windowexe.com
NA094 echo HKEY_LOCAL_MACHINE Toolbar Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar" /v "{07C93B4E-4625-4C84-BA7E-BCA231037B0B}" /f
NA095 echo HKEY_CURRENT_USER Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser" /v "{07C93B4E-4625-4C84-BA7E-BCA231037B0B}" /f
NA096 echo HKCU Search Hook Delete & reg.exe delete "HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks" /v "{07C93B4E-4625-4C84-BA7E-BCA231037B0B}" /f
NA097 echo HKEY_LOCAL_MACHINE Ext PreApproved Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{07C93B4E-4625-4C84-BA7E-BCA231037B0B}" /f
NA098 echo HKEY_CURRENT_USER Ext Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{07C93B4E-4625-4C84-BA7E-BCA231037B0B}" /f
NA099 echo HKEY_CLASSES_ROOT CLSID Delete & reg.exe delete "HKCR\CLSID\{07C93B4E-4625-4C84-BA7E-BCA231037B0B}" /f
NA100 echo Created by Windowexe.com
NA101 sc stop "WinCast Controler"
NA102 echo Service Disable & sc config "WinCast Controler" start= disabled & echo Windowexe.com
NA103 sc stop "userpc Update Service"
NA104 echo Service Disable & sc config "userpc Update Service" start= disabled & echo Windowexe.com
NA105 sc stop "TCCheckAgent"
NA106 echo Service Disable & sc config "TCCheckAgent" start= disabled & echo Windowexe.com
NA107 sc stop "SearchN"
NA108 echo Service Disable & sc config "SearchN" start= disabled & echo Windowexe.com
NA109 sc stop "NWSvc Manager"
NA110 echo Service Disable & sc config "NWSvc Manager" start= disabled & echo Windowexe.com
NA111 sc stop "NATService"
NA112 echo Service Disable & sc config "NATService" start= disabled & echo Windowexe.com
NA113 sc stop "nassvc"
NA114 echo Service Disable & sc config "nassvc" start= disabled & echo Windowexe.com
NA115 sc stop "InternetSafer Protector"
NA116 echo Service Disable & sc config "InternetSafer Protector" start= disabled & echo Windowexe.com
NA117 sc stop "FBDSvcman"
NA118 echo Service Disable & sc config "FBDSvcman" start= disabled & echo Windowexe.com
NA119 sc stop "barocn"
NA120 echo Service Disable & sc config "barocn" start= disabled & echo Windowexe.com
NA121 echo HKEY_LOCAL_MACHINE EB Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{FA214B13-1A9F-480B-B749-94A566FC59D9}" /f
NA122 echo HKCU EB Delete & reg.exe delete "HKCU\Software\Microsoft\Internet Explorer\Extensions\{FA214B13-1A9F-480B-B749-94A566FC59D9}" /f
NA123 echo Created by Windowexe.com
NA124 echo HKEY_LOCAL_MACHINE EB Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{D64A7743-7E62-4002-90EA-80E0671F9902}" /f
NA125 echo HKCU EB Delete & reg.exe delete "HKCU\Software\Microsoft\Internet Explorer\Extensions\{D64A7743-7E62-4002-90EA-80E0671F9902}" /f
NA126 echo Created by Windowexe.com
NA127 echo HKEY_LOCAL_MACHINE EB Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{8605E9B4-68C1-4ED9-B282-74C1AA3C312E}" /f
NA128 echo HKCU EB Delete & reg.exe delete "HKCU\Software\Microsoft\Internet Explorer\Extensions\{8605E9B4-68C1-4ED9-B282-74C1AA3C312E}" /f
NA129 echo Created by Windowexe.com
NA130 echo schtasks Delete & schtasks /delete /tn "SWSTART" /f
NA131 echo Created by Windowexe.com
NA132 echo schtasks Delete & schtasks /delete /tn "AppIsUpdate" /f
NA133 echo Created by Windowexe.com
NA134 echo 000 & reg.exe delete "HKCR\CLSID\{5121BCAB-14D5-40AD-A469-4437CC51F7AA}" /f & echo windowdel.com
NA135 echo Created by Windowexe.com
NA136 echo 000 & reg.exe delete "HKCR\CLSID\{A832F633-668F-4F8A-9EA1-A6375D1C1418}" /f & echo windowdel.com
NA137 echo Created by Windowexe.com
NA138 echo change dir for x64
NA139 cd %windir%
NA140 cd syswow64
NA141 echo windowexe.com & tskill "inforesetupdate" & echo windowdel.com
NA142 echo windowexe.com & tskill "FBDSvcMan" & echo windowdel.com
NA143 echo windowexe.com & tskill "FBDManager" & echo windowdel.com
NA144 echo windowexe.com & tskill "update" & echo windowdel.com
NA145 echo windowexe.com & tskill "appis" & echo windowdel.com
NA146 echo windowexe.com & tskill "windowviewconup" & echo windowdel.com
NA147 echo windowexe.com & tskill "intsfsrv" & echo windowdel.com
NA148 echo windowexe.com & tskill "nmgsrv" & echo windowdel.com
NA149 echo windowexe.com & tskill "SmartWS" & echo windowdel.com
NA150 echo windowexe.com & tskill "SmartWD" & echo windowdel.com
NA151 echo windowexe.com & tskill "SNUpdate" & echo windowdel.com
NA152 echo windowexe.com & tskill "SNSlide" & echo windowdel.com
NA153 echo windowexe.com & tskill "SNChkSvc" & echo windowdel.com
NA154 echo windowexe.com & tskill "nswsrv" & echo windowdel.com
NA155 echo windowexe.com & tskill "natsvc" & echo windowdel.com
NA156 echo windowexe.com & tskill "HSSearch" & echo windowdel.com
NA157 echo windowexe.com & tskill "BigfileSearch" & echo windowdel.com
NA158 echo windowexe.com & tskill "barosvc" & echo windowdel.com
NA159 echo windowexe.com & tskill "TCSearch" & echo windowdel.com
NA160 echo windowexe.com & tskill "TCCheckAgent" & echo windowdel.com
NA161 echo windowexe.com & tskill "update" & echo windowdel.com
NA162 echo windowexe.com & tskill "pcmagent" & echo windowdel.com
NA163 echo windowexe.com & tskill "pcm" & echo windowdel.com
NA164 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "appis.exe" /f
NA165 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "appis.exe" /f
NA166 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "update.exe" /f
NA167 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "update.exe" /f
NA168 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "BigfileSearch" /f
NA169 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "BigfileSearch" /f
NA170 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "rpga" /f
NA171 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "rpga" /f
NA172 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "SpeedDownload" /f
NA173 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "SpeedDownload" /f
NA174 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "snslide" /f
NA175 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "snslide" /f
NA176 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "SearchN" /f
NA177 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "SearchN" /f
NA178 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "pcm" /f
NA179 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "pcm" /f
NA180 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "ParkKJ" /f
NA181 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "ParkKJ" /f
NA182 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "windowviewcon" /f
NA183 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "windowviewcon" /f
NA184 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "Adv_TopC" /f
NA185 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Adv_TopC" /f
NA186 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "HiSch" /f
NA187 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "HiSch" /f
NA188 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "zcnew" /f
NA189 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "zcnew" /f
NA190 echo HKEY_LOCAL_MACHINE BHO Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FE14A4CA-5CFA-4C05-9274-6006397B68C9}" /f
NA191 echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FE14A4CA-5CFA-4C05-9274-6006397B68C9}" /f
NA192 echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FE14A4CA-5CFA-4C05-9274-6006397B68C9}" /f
NA193 echo HKEY_CLASSES_ROOT.CLSID Delete & reg.exe delete "HKCR\CLSID\{FE14A4CA-5CFA-4C05-9274-6006397B68C9}" /f
NA194 echo Created by Windowexe.com
NA195 echo HKEY_LOCAL_MACHINE BHO Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BA422916-F424-4EFC-851E-9092EDDE8ECF}" /f
NA196 echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BA422916-F424-4EFC-851E-9092EDDE8ECF}" /f
NA197 echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{BA422916-F424-4EFC-851E-9092EDDE8ECF}" /f
NA198 echo HKEY_CLASSES_ROOT.CLSID Delete & reg.exe delete "HKCR\CLSID\{BA422916-F424-4EFC-851E-9092EDDE8ECF}" /f
NA199 echo Created by Windowexe.com
NA200 echo HKEY_LOCAL_MACHINE BHO Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B8660232-6779-456E-B9A7-316B14922E69}" /f
NA201 echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{B8660232-6779-456E-B9A7-316B14922E69}" /f
NA202 echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{B8660232-6779-456E-B9A7-316B14922E69}" /f
NA203 echo HKEY_CLASSES_ROOT.CLSID Delete & reg.exe delete "HKCR\CLSID\{B8660232-6779-456E-B9A7-316B14922E69}" /f
NA204 echo Created by Windowexe.com
NA205 echo HKEY_LOCAL_MACHINE BHO Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A433374B-2F44-402B-AB7E-E58B4A09DF8A}" /f
NA206 echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A433374B-2F44-402B-AB7E-E58B4A09DF8A}" /f
NA207 echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A433374B-2F44-402B-AB7E-E58B4A09DF8A}" /f
NA208 echo HKEY_CLASSES_ROOT.CLSID Delete & reg.exe delete "HKCR\CLSID\{A433374B-2F44-402B-AB7E-E58B4A09DF8A}" /f
NA209 echo Created by Windowexe.com
NA210 echo HKEY_LOCAL_MACHINE BHO Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8D98E3CA-8CBE-40D8-8FB2-738407C87834}" /f
NA211 echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8D98E3CA-8CBE-40D8-8FB2-738407C87834}" /f
NA212 echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{8D98E3CA-8CBE-40D8-8FB2-738407C87834}" /f
NA213 echo HKEY_CLASSES_ROOT.CLSID Delete & reg.exe delete "HKCR\CLSID\{8D98E3CA-8CBE-40D8-8FB2-738407C87834}" /f
NA214 echo Created by Windowexe.com
NA215 echo HKEY_LOCAL_MACHINE BHO Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{492D6406-DC6F-4885-A8A2-C970E38B12CA}" /f
NA216 echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{492D6406-DC6F-4885-A8A2-C970E38B12CA}" /f
NA217 echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{492D6406-DC6F-4885-A8A2-C970E38B12CA}" /f
NA218 echo HKEY_CLASSES_ROOT.CLSID Delete & reg.exe delete "HKCR\CLSID\{492D6406-DC6F-4885-A8A2-C970E38B12CA}" /f
NA219 echo Created by Windowexe.com
NA220 echo HKEY_LOCAL_MACHINE BHO Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{48B6053A-F6EC-4A30-AF7D-1F174DE8ABE1}" /f
NA221 echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{48B6053A-F6EC-4A30-AF7D-1F174DE8ABE1}" /f
NA222 echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{48B6053A-F6EC-4A30-AF7D-1F174DE8ABE1}" /f
NA223 echo HKEY_CLASSES_ROOT.CLSID Delete & reg.exe delete "HKCR\CLSID\{48B6053A-F6EC-4A30-AF7D-1F174DE8ABE1}" /f
NA224 echo Created by Windowexe.com
NA225 echo HKEY_LOCAL_MACHINE BHO Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3E5EF872-03E2-4CE0-94DF-CA8A5004ECFD}" /f
NA226 echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3E5EF872-03E2-4CE0-94DF-CA8A5004ECFD}" /f
NA227 echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3E5EF872-03E2-4CE0-94DF-CA8A5004ECFD}" /f
NA228 echo HKEY_CLASSES_ROOT.CLSID Delete & reg.exe delete "HKCR\CLSID\{3E5EF872-03E2-4CE0-94DF-CA8A5004ECFD}" /f
NA229 echo Created by Windowexe.com
NA230 echo HKEY_LOCAL_MACHINE Toolbar Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar" /v "{07C93B4E-4625-4C84-BA7E-BCA231037B0B}" /f
NA231 echo HKEY_CURRENT_USER Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser" /v "{07C93B4E-4625-4C84-BA7E-BCA231037B0B}" /f
NA232 echo HKCU Search Hook Delete & reg.exe delete "HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks" /v "{07C93B4E-4625-4C84-BA7E-BCA231037B0B}" /f
NA233 echo HKEY_LOCAL_MACHINE Ext PreApproved Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{07C93B4E-4625-4C84-BA7E-BCA231037B0B}" /f
NA234 echo HKEY_CURRENT_USER Ext Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{07C93B4E-4625-4C84-BA7E-BCA231037B0B}" /f
NA235 echo HKEY_CLASSES_ROOT CLSID Delete & reg.exe delete "HKCR\CLSID\{07C93B4E-4625-4C84-BA7E-BCA231037B0B}" /f
NA236 echo Created by Windowexe.com
NA237 sc stop "WinCast Controler"
NA238 echo Service Disable & sc config "WinCast Controler" start= disabled & echo Windowexe.com
NA239 sc stop "userpc Update Service"
NA240 echo Service Disable & sc config "userpc Update Service" start= disabled & echo Windowexe.com
NA241 sc stop "TCCheckAgent"
NA242 echo Service Disable & sc config "TCCheckAgent" start= disabled & echo Windowexe.com
NA243 sc stop "SearchN"
NA244 echo Service Disable & sc config "SearchN" start= disabled & echo Windowexe.com
NA245 sc stop "NWSvc Manager"
NA246 echo Service Disable & sc config "NWSvc Manager" start= disabled & echo Windowexe.com
NA247 sc stop "NATService"
NA248 echo Service Disable & sc config "NATService" start= disabled & echo Windowexe.com
NA249 sc stop "nassvc"
NA250 echo Service Disable & sc config "nassvc" start= disabled & echo Windowexe.com
NA251 sc stop "InternetSafer Protector"
NA252 echo Service Disable & sc config "InternetSafer Protector" start= disabled & echo Windowexe.com
NA253 sc stop "FBDSvcman"
NA254 echo Service Disable & sc config "FBDSvcman" start= disabled & echo Windowexe.com
NA255 sc stop "barocn"
NA256 echo Service Disable & sc config "barocn" start= disabled & echo Windowexe.com
NA257 echo HKEY_LOCAL_MACHINE EB Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{FA214B13-1A9F-480B-B749-94A566FC59D9}" /f
NA258 echo HKCU EB Delete & reg.exe delete "HKCU\Software\Microsoft\Internet Explorer\Extensions\{FA214B13-1A9F-480B-B749-94A566FC59D9}" /f
NA259 echo Created by Windowexe.com
NA260 echo HKEY_LOCAL_MACHINE EB Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{D64A7743-7E62-4002-90EA-80E0671F9902}" /f
NA261 echo HKCU EB Delete & reg.exe delete "HKCU\Software\Microsoft\Internet Explorer\Extensions\{D64A7743-7E62-4002-90EA-80E0671F9902}" /f
NA262 echo Created by Windowexe.com
NA263 echo HKEY_LOCAL_MACHINE EB Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{8605E9B4-68C1-4ED9-B282-74C1AA3C312E}" /f
NA264 echo HKCU EB Delete & reg.exe delete "HKCU\Software\Microsoft\Internet Explorer\Extensions\{8605E9B4-68C1-4ED9-B282-74C1AA3C312E}" /f
NA265 echo Created by Windowexe.com
NA266 echo schtasks Delete & schtasks /delete /tn "SWSTART" /f
NA267 echo Created by Windowexe.com
NA268 echo schtasks Delete & schtasks /delete /tn "AppIsUpdate" /f
NA269 echo Created by Windowexe.com
NA270 echo 000 & reg.exe delete "HKCR\CLSID\{5121BCAB-14D5-40AD-A469-4437CC51F7AA}" /f & echo windowdel.com
NA271 echo Created by Windowexe.com
NA272 echo 000 & reg.exe delete "HKCR\CLSID\{A832F633-668F-4F8A-9EA1-A6375D1C1418}" /f & echo windowdel.com
NA273 echo Created by Windowexe.com
NA274 echo End
NA275 ======================================================================
NA276 echo Created by Windowexe.com / do not delete this label.
NA277 ======================================================================