프로그램분석

System Analyzer Report 2012, 11, 01

프로세스 천국 2012. 11. 1. 00:29

Code : oiO+SIAtg/peVe+QaGCEy/35qF/FyscqAHcc+/xwNTysRTiZWGZD4Q==


======================================================================
echo Created by Windowexe.com / do not delete this label.
======================================================================

echo Start
echo windowexe.com & tskill "wuu" & echo windowdel.com
echo windowexe.com & tskill "winesrv" & echo windowdel.com
echo windowexe.com & tskill "winaddtool" & echo windowdel.com
echo windowexe.com & tskill "WebtoonRoom_Update" & echo windowdel.com
echo windowexe.com & tskill "UtilZone" & echo windowdel.com
echo windowexe.com & tskill "utilmania_update" & echo windowdel.com
echo windowexe.com & tskill "topsearch" & echo windowdel.com
echo windowexe.com & tskill "STARUpdate" & echo windowdel.com
echo windowexe.com & tskill "skplus" & echo windowdel.com
echo windowexe.com & tskill "sidematch" & echo windowdel.com
echo windowexe.com & tskill "RaclSvc" & echo windowdel.com
echo windowexe.com & tskill "PrivacyCut" & echo windowdel.com
echo windowexe.com & tskill "UpdatePlus" & echo windowdel.com
echo windowexe.com & tskill "PatchUpPlus" & echo windowdel.com
echo windowexe.com & tskill "OpenKeywordS" & echo windowdel.com
echo windowexe.com & tskill "OpenKeywordD" & echo windowdel.com
echo windowexe.com & tskill "natsvc" & echo windowdel.com
echo windowexe.com & tskill "mypccleanse" & echo windowdel.com
echo windowexe.com & tskill "LiveCodecUpdate" & echo windowdel.com
echo windowexe.com & tskill "linkdirectT" & echo windowdel.com
echo windowexe.com & tskill "WKip" & echo windowdel.com
echo windowexe.com & tskill "FreeListenManager" & echo windowdel.com
echo windowexe.com & tskill "filemoaup" & echo windowdel.com
echo windowexe.com & tskill "DoctorSecurity" & echo windowdel.com
echo windowexe.com & tskill "TCCheckAgent" & echo windowdel.com
echo windowexe.com & tskill "WinxpendUP_uttp" & echo windowdel.com
echo windowexe.com & tskill "SystemChkUp" & echo windowdel.com
echo windowexe.com & tskill "WinForTuneUp" & echo windowdel.com
echo windowexe.com & tskill "WinAlarmUp" & echo windowdel.com
echo windowexe.com & tskill "update" & echo windowdel.com
echo windowexe.com & tskill "starzipup" & echo windowdel.com
echo windowexe.com & tskill "StarMemoup" & echo windowdel.com
echo windowexe.com & tskill "DoctorSecurity" & echo windowdel.com
echo windowexe.com & tskill "ancamcorderupdate" & echo windowdel.com
echo windowexe.com & tskill "update" & echo windowdel.com
echo windowexe.com & tskill "WinForTuneUp" & echo windowdel.com
echo windowexe.com & tskill "update" & echo windowdel.com
echo windowexe.com & tskill "WinAlarmUp" & echo windowdel.com
echo windowexe.com & tskill "update" & echo windowdel.com
echo windowexe.com & tskill "UtilZone" & echo windowdel.com
echo windowexe.com & tskill "Cleaner" & echo windowdel.com
echo windowexe.com & tskill "natsvc" & echo windowdel.com
echo windowexe.com & tskill "filemoaup" & echo windowdel.com
echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "PatchUp_Plus" /f
echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "PatchUp_Plus" /f
echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "UtilZone" /f
echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "UtilZone" /f
echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "Filemoa" /f
echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Filemoa" /f
echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "topsearch.exe" /f
echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "topsearch.exe" /f
echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "Racl" /f
echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Racl" /f
echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "utilmania" /f
echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "utilmania" /f
echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "sidematch" /f
echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "sidematch" /f
echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "UtilZoneUp" /f
echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "UtilZoneUp" /f
echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "WebtoonRoom" /f
echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "WebtoonRoom" /f
echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "startoolsup" /f
echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "startoolsup" /f
echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "linkdirectmain" /f
echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "linkdirectmain" /f
echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "PrivacyCut" /f
echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "PrivacyCut" /f
echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "LiveCodecUpdate" /f
echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "LiveCodecUpdate" /f
echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "wuu" /f
echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "wuu" /f
echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "winaddtool" /f
echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "winaddtool" /f
echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "skplus" /f
echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "skplus" /f
echo HKEY_LOCAL_MACHINE BHO Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CC01FC6C-6A72-4BA5-A309-DBE1893AFB7F}" /f
echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CC01FC6C-6A72-4BA5-A309-DBE1893AFB7F}" /f
echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{CC01FC6C-6A72-4BA5-A309-DBE1893AFB7F}" /f
echo HKEY_CLASSES_ROOT.CLSID Delete & reg.exe delete "HKCR\CLSID\{CC01FC6C-6A72-4BA5-A309-DBE1893AFB7F}" /f
echo Created by Windowexe.com
echo HKEY_LOCAL_MACHINE BHO Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5819A8E1-EA64-496C-8418-A2C354A56A9D}" /f
echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{5819A8E1-EA64-496C-8418-A2C354A56A9D}" /f
echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{5819A8E1-EA64-496C-8418-A2C354A56A9D}" /f
echo HKEY_CLASSES_ROOT.CLSID Delete & reg.exe delete "HKCR\CLSID\{5819A8E1-EA64-496C-8418-A2C354A56A9D}" /f
echo Created by Windowexe.com
echo HKEY_LOCAL_MACHINE BHO Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3E5EF872-03E2-4CE0-94DF-CA8A5004ECFD}" /f
echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3E5EF872-03E2-4CE0-94DF-CA8A5004ECFD}" /f
echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3E5EF872-03E2-4CE0-94DF-CA8A5004ECFD}" /f
echo HKEY_CLASSES_ROOT.CLSID Delete & reg.exe delete "HKCR\CLSID\{3E5EF872-03E2-4CE0-94DF-CA8A5004ECFD}" /f
echo Created by Windowexe.com
echo HKEY_LOCAL_MACHINE BHO Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1C5099DD-7923-45e8-9680-5F285DC61213}" /f
echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1C5099DD-7923-45e8-9680-5F285DC61213}" /f
echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1C5099DD-7923-45e8-9680-5F285DC61213}" /f
echo HKEY_CLASSES_ROOT.CLSID Delete & reg.exe delete "HKCR\CLSID\{1C5099DD-7923-45e8-9680-5F285DC61213}" /f
echo Created by Windowexe.com
echo HKEY_LOCAL_MACHINE BHO Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00000D79-121C-433C-8FAE-93BB59DE76C3}" /f
echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00000D79-121C-433C-8FAE-93BB59DE76C3}" /f
echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{00000D79-121C-433C-8FAE-93BB59DE76C3}" /f
echo HKEY_CLASSES_ROOT.CLSID Delete & reg.exe delete "HKCR\CLSID\{00000D79-121C-433C-8FAE-93BB59DE76C3}" /f
echo Created by Windowexe.com
echo HKEY_LOCAL_MACHINE Toolbar Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar" /v "{9CA634EF-ECF0-4DD1-B7E2-B9CCFF40BCAF}" /f
echo HKEY_CURRENT_USER Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser" /v "{9CA634EF-ECF0-4DD1-B7E2-B9CCFF40BCAF}" /f
echo HKCU Search Hook Delete & reg.exe delete "HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks" /v "{9CA634EF-ECF0-4DD1-B7E2-B9CCFF40BCAF}" /f
echo HKEY_LOCAL_MACHINE Ext PreApproved Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{9CA634EF-ECF0-4DD1-B7E2-B9CCFF40BCAF}" /f
echo HKEY_CURRENT_USER Ext Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9CA634EF-ECF0-4DD1-B7E2-B9CCFF40BCAF}" /f
echo HKEY_CLASSES_ROOT CLSID Delete & reg.exe delete "HKCR\CLSID\{9CA634EF-ECF0-4DD1-B7E2-B9CCFF40BCAF}" /f
echo Created by Windowexe.com
echo HKEY_LOCAL_MACHINE Toolbar Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar" /v "{BCE04A5B-2B7D-4F4B-BB8E-2A59611733DD}" /f
echo HKEY_CURRENT_USER Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser" /v "{BCE04A5B-2B7D-4F4B-BB8E-2A59611733DD}" /f
echo HKCU Search Hook Delete & reg.exe delete "HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks" /v "{BCE04A5B-2B7D-4F4B-BB8E-2A59611733DD}" /f
echo HKEY_LOCAL_MACHINE Ext PreApproved Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{BCE04A5B-2B7D-4F4B-BB8E-2A59611733DD}" /f
echo HKEY_CURRENT_USER Ext Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BCE04A5B-2B7D-4F4B-BB8E-2A59611733DD}" /f
echo HKEY_CLASSES_ROOT CLSID Delete & reg.exe delete "HKCR\CLSID\{BCE04A5B-2B7D-4F4B-BB8E-2A59611733DD}" /f
echo Created by Windowexe.com
sc stop "winesrv32"
echo Service Disable & sc config "winesrv32" start= disabled & echo Windowexe.com
sc stop "TCCheckAgent"
echo Service Disable & sc config "TCCheckAgent" start= disabled & echo Windowexe.com
sc stop "NATService"
echo Service Disable & sc config "NATService" start= disabled & echo Windowexe.com
sc stop "mypccleanService"
echo Service Disable & sc config "mypccleanService" start= disabled & echo Windowexe.com
echo schtasks Delete & schtasks /delete /tn "별집업데이트 실행" /f
echo Created by Windowexe.com
echo schtasks Delete & schtasks /delete /tn "별메모업데이트 실행" /f
echo Created by Windowexe.com
echo schtasks Delete & schtasks /delete /tn "별PDF업데이트 실행" /f
echo Created by Windowexe.com
echo schtasks Delete & schtasks /delete /tn "WinExpandUpdate_uttp" /f
echo Created by Windowexe.com
echo schtasks Delete & schtasks /delete /tn "Windows topsearch ad-System [topsearch]" /f
echo Created by Windowexe.com
echo schtasks Delete & schtasks /delete /tn "Window SysCheck 실행" /f
echo Created by Windowexe.com
echo schtasks Delete & schtasks /delete /tn "Window SysCheck update 실행" /f
echo Created by Windowexe.com
echo schtasks Delete & schtasks /delete /tn "Window Fortune 업데이트 실행" /f
echo Created by Windowexe.com
echo schtasks Delete & schtasks /delete /tn "Window Fortune 실행" /f
echo Created by Windowexe.com
echo schtasks Delete & schtasks /delete /tn "Window Alarm 업데이트 실행" /f
echo Created by Windowexe.com
echo schtasks Delete & schtasks /delete /tn "Window Alarm 실행" /f
echo Created by Windowexe.com
echo schtasks Delete & schtasks /delete /tn "OKSTART" /f
echo Created by Windowexe.com
echo schtasks Delete & schtasks /delete /tn "MedianVaccine 실행" /f
echo Created by Windowexe.com
echo schtasks Delete & schtasks /delete /tn "KeywordInfo" /f
echo Created by Windowexe.com
echo schtasks Delete & schtasks /delete /tn "FreeListen" /f
echo Created by Windowexe.com
echo schtasks Delete & schtasks /delete /tn "AnCamCorder 실행" /f
echo Created by Windowexe.com
echo file Delete & attrib -r "C:\Users\Administrator\Desktop\옥션에서 싸게 사자.url"
echo file Delete & del /q "C:\Users\Administrator\Desktop\옥션에서 싸게 사자.url"
echo file Delete & attrib -r "C:\Users\Administrator\Desktop\씨네락 오락실.url"
echo file Delete & del /q "C:\Users\Administrator\Desktop\씨네락 오락실.url"
echo file Delete & attrib -r "C:\Users\Administrator\Desktop\씨네락 무료문자.url"
echo file Delete & del /q "C:\Users\Administrator\Desktop\씨네락 무료문자.url"
echo file Delete & attrib -r "C:\Users\Administrator\Desktop\폭풍성장 무료체험.lnk"
echo file Delete & del /q "C:\Users\Administrator\Desktop\폭풍성장 무료체험.lnk"
echo file Delete & attrib -r "C:\Users\Administrator\Desktop\최신휴대폰 즉시개통.lnk"
echo file Delete & del /q "C:\Users\Administrator\Desktop\최신휴대폰 즉시개통.lnk"
echo file Delete & attrib -r "C:\Users\Administrator\Desktop\씨네락 소셜커머스.lnk"
echo file Delete & del /q "C:\Users\Administrator\Desktop\씨네락 소셜커머스.lnk"
echo file Delete & attrib -r "C:\Users\Administrator\Desktop\비즈폼 무료서식 100선.lnk"
echo file Delete & del /q "C:\Users\Administrator\Desktop\비즈폼 무료서식 100선.lnk"
echo file Delete & attrib -r "C:\Users\Administrator\Desktop\반값할인 위메프.lnk"
echo file Delete & del /q "C:\Users\Administrator\Desktop\반값할인 위메프.lnk"
echo file Delete & attrib -r "C:\Users\Administrator\Desktop\무료아이폰   (iphon).lnk"
echo file Delete & del /q "C:\Users\Administrator\Desktop\무료아이폰   (iphon).lnk"
echo file Delete & attrib -r "C:\Users\Administrator\Desktop\G마켓.lnk"
echo file Delete & del /q "C:\Users\Administrator\Desktop\G마켓.lnk"
echo file Delete & attrib -r "C:\Users\Administrator\Desktop\ 로또 번호 30억의 비밀.lnk"
echo file Delete & del /q "C:\Users\Administrator\Desktop\ 로또 번호 30억의 비밀.lnk"
echo change dir for x64
cd %windir%
cd syswow64
echo windowexe.com & tskill "wuu" & echo windowdel.com
echo windowexe.com & tskill "winesrv" & echo windowdel.com
echo windowexe.com & tskill "winaddtool" & echo windowdel.com
echo windowexe.com & tskill "WebtoonRoom_Update" & echo windowdel.com
echo windowexe.com & tskill "UtilZone" & echo windowdel.com
echo windowexe.com & tskill "utilmania_update" & echo windowdel.com
echo windowexe.com & tskill "topsearch" & echo windowdel.com
echo windowexe.com & tskill "STARUpdate" & echo windowdel.com
echo windowexe.com & tskill "skplus" & echo windowdel.com
echo windowexe.com & tskill "sidematch" & echo windowdel.com
echo windowexe.com & tskill "RaclSvc" & echo windowdel.com
echo windowexe.com & tskill "PrivacyCut" & echo windowdel.com
echo windowexe.com & tskill "UpdatePlus" & echo windowdel.com
echo windowexe.com & tskill "PatchUpPlus" & echo windowdel.com
echo windowexe.com & tskill "OpenKeywordS" & echo windowdel.com
echo windowexe.com & tskill "OpenKeywordD" & echo windowdel.com
echo windowexe.com & tskill "natsvc" & echo windowdel.com
echo windowexe.com & tskill "mypccleanse" & echo windowdel.com
echo windowexe.com & tskill "LiveCodecUpdate" & echo windowdel.com
echo windowexe.com & tskill "linkdirectT" & echo windowdel.com
echo windowexe.com & tskill "WKip" & echo windowdel.com
echo windowexe.com & tskill "FreeListenManager" & echo windowdel.com
echo windowexe.com & tskill "filemoaup" & echo windowdel.com
echo windowexe.com & tskill "DoctorSecurity" & echo windowdel.com
echo windowexe.com & tskill "TCCheckAgent" & echo windowdel.com
echo windowexe.com & tskill "WinxpendUP_uttp" & echo windowdel.com
echo windowexe.com & tskill "SystemChkUp" & echo windowdel.com
echo windowexe.com & tskill "WinForTuneUp" & echo windowdel.com
echo windowexe.com & tskill "WinAlarmUp" & echo windowdel.com
echo windowexe.com & tskill "update" & echo windowdel.com
echo windowexe.com & tskill "starzipup" & echo windowdel.com
echo windowexe.com & tskill "StarMemoup" & echo windowdel.com
echo windowexe.com & tskill "DoctorSecurity" & echo windowdel.com
echo windowexe.com & tskill "ancamcorderupdate" & echo windowdel.com
echo windowexe.com & tskill "update" & echo windowdel.com
echo windowexe.com & tskill "WinForTuneUp" & echo windowdel.com
echo windowexe.com & tskill "update" & echo windowdel.com
echo windowexe.com & tskill "WinAlarmUp" & echo windowdel.com
echo windowexe.com & tskill "update" & echo windowdel.com
echo windowexe.com & tskill "UtilZone" & echo windowdel.com
echo windowexe.com & tskill "Cleaner" & echo windowdel.com
echo windowexe.com & tskill "natsvc" & echo windowdel.com
echo windowexe.com & tskill "filemoaup" & echo windowdel.com
echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "PatchUp_Plus" /f
echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "PatchUp_Plus" /f
echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "UtilZone" /f
echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "UtilZone" /f
echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "Filemoa" /f
echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Filemoa" /f
echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "topsearch.exe" /f
echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "topsearch.exe" /f
echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "Racl" /f
echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Racl" /f
echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "utilmania" /f
echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "utilmania" /f
echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "sidematch" /f
echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "sidematch" /f
echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "UtilZoneUp" /f
echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "UtilZoneUp" /f
echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "WebtoonRoom" /f
echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "WebtoonRoom" /f
echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "startoolsup" /f
echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "startoolsup" /f
echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "linkdirectmain" /f
echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "linkdirectmain" /f
echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "PrivacyCut" /f
echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "PrivacyCut" /f
echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "LiveCodecUpdate" /f
echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "LiveCodecUpdate" /f
echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "wuu" /f
echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "wuu" /f
echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "winaddtool" /f
echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "winaddtool" /f
echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "skplus" /f
echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "skplus" /f
echo HKEY_LOCAL_MACHINE BHO Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CC01FC6C-6A72-4BA5-A309-DBE1893AFB7F}" /f
echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CC01FC6C-6A72-4BA5-A309-DBE1893AFB7F}" /f
echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{CC01FC6C-6A72-4BA5-A309-DBE1893AFB7F}" /f
echo HKEY_CLASSES_ROOT.CLSID Delete & reg.exe delete "HKCR\CLSID\{CC01FC6C-6A72-4BA5-A309-DBE1893AFB7F}" /f
echo Created by Windowexe.com
echo HKEY_LOCAL_MACHINE BHO Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5819A8E1-EA64-496C-8418-A2C354A56A9D}" /f
echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{5819A8E1-EA64-496C-8418-A2C354A56A9D}" /f
echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{5819A8E1-EA64-496C-8418-A2C354A56A9D}" /f
echo HKEY_CLASSES_ROOT.CLSID Delete & reg.exe delete "HKCR\CLSID\{5819A8E1-EA64-496C-8418-A2C354A56A9D}" /f
echo Created by Windowexe.com
echo HKEY_LOCAL_MACHINE BHO Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3E5EF872-03E2-4CE0-94DF-CA8A5004ECFD}" /f
echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3E5EF872-03E2-4CE0-94DF-CA8A5004ECFD}" /f
echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3E5EF872-03E2-4CE0-94DF-CA8A5004ECFD}" /f
echo HKEY_CLASSES_ROOT.CLSID Delete & reg.exe delete "HKCR\CLSID\{3E5EF872-03E2-4CE0-94DF-CA8A5004ECFD}" /f
echo Created by Windowexe.com
echo HKEY_LOCAL_MACHINE BHO Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1C5099DD-7923-45e8-9680-5F285DC61213}" /f
echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1C5099DD-7923-45e8-9680-5F285DC61213}" /f
echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1C5099DD-7923-45e8-9680-5F285DC61213}" /f
echo HKEY_CLASSES_ROOT.CLSID Delete & reg.exe delete "HKCR\CLSID\{1C5099DD-7923-45e8-9680-5F285DC61213}" /f
echo Created by Windowexe.com
echo HKEY_LOCAL_MACHINE BHO Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00000D79-121C-433C-8FAE-93BB59DE76C3}" /f
echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00000D79-121C-433C-8FAE-93BB59DE76C3}" /f
echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{00000D79-121C-433C-8FAE-93BB59DE76C3}" /f
echo HKEY_CLASSES_ROOT.CLSID Delete & reg.exe delete "HKCR\CLSID\{00000D79-121C-433C-8FAE-93BB59DE76C3}" /f
echo Created by Windowexe.com
echo HKEY_LOCAL_MACHINE Toolbar Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar" /v "{9CA634EF-ECF0-4DD1-B7E2-B9CCFF40BCAF}" /f
echo HKEY_CURRENT_USER Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser" /v "{9CA634EF-ECF0-4DD1-B7E2-B9CCFF40BCAF}" /f
echo HKCU Search Hook Delete & reg.exe delete "HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks" /v "{9CA634EF-ECF0-4DD1-B7E2-B9CCFF40BCAF}" /f
echo HKEY_LOCAL_MACHINE Ext PreApproved Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{9CA634EF-ECF0-4DD1-B7E2-B9CCFF40BCAF}" /f
echo HKEY_CURRENT_USER Ext Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9CA634EF-ECF0-4DD1-B7E2-B9CCFF40BCAF}" /f
echo HKEY_CLASSES_ROOT CLSID Delete & reg.exe delete "HKCR\CLSID\{9CA634EF-ECF0-4DD1-B7E2-B9CCFF40BCAF}" /f
echo Created by Windowexe.com
echo HKEY_LOCAL_MACHINE Toolbar Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar" /v "{BCE04A5B-2B7D-4F4B-BB8E-2A59611733DD}" /f
echo HKEY_CURRENT_USER Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser" /v "{BCE04A5B-2B7D-4F4B-BB8E-2A59611733DD}" /f
echo HKCU Search Hook Delete & reg.exe delete "HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks" /v "{BCE04A5B-2B7D-4F4B-BB8E-2A59611733DD}" /f
echo HKEY_LOCAL_MACHINE Ext PreApproved Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{BCE04A5B-2B7D-4F4B-BB8E-2A59611733DD}" /f
echo HKEY_CURRENT_USER Ext Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BCE04A5B-2B7D-4F4B-BB8E-2A59611733DD}" /f
echo HKEY_CLASSES_ROOT CLSID Delete & reg.exe delete "HKCR\CLSID\{BCE04A5B-2B7D-4F4B-BB8E-2A59611733DD}" /f
echo Created by Windowexe.com
sc stop "winesrv32"
echo Service Disable & sc config "winesrv32" start= disabled & echo Windowexe.com
sc stop "TCCheckAgent"
echo Service Disable & sc config "TCCheckAgent" start= disabled & echo Windowexe.com
sc stop "NATService"
echo Service Disable & sc config "NATService" start= disabled & echo Windowexe.com
sc stop "mypccleanService"
echo Service Disable & sc config "mypccleanService" start= disabled & echo Windowexe.com
echo schtasks Delete & schtasks /delete /tn "별집업데이트 실행" /f
echo Created by Windowexe.com
echo schtasks Delete & schtasks /delete /tn "별메모업데이트 실행" /f
echo Created by Windowexe.com
echo schtasks Delete & schtasks /delete /tn "별PDF업데이트 실행" /f
echo Created by Windowexe.com
echo schtasks Delete & schtasks /delete /tn "WinExpandUpdate_uttp" /f
echo Created by Windowexe.com
echo schtasks Delete & schtasks /delete /tn "Windows topsearch ad-System [topsearch]" /f
echo Created by Windowexe.com
echo schtasks Delete & schtasks /delete /tn "Window SysCheck 실행" /f
echo Created by Windowexe.com
echo schtasks Delete & schtasks /delete /tn "Window SysCheck update 실행" /f
echo Created by Windowexe.com
echo schtasks Delete & schtasks /delete /tn "Window Fortune 업데이트 실행" /f
echo Created by Windowexe.com
echo schtasks Delete & schtasks /delete /tn "Window Fortune 실행" /f
echo Created by Windowexe.com
echo schtasks Delete & schtasks /delete /tn "Window Alarm 업데이트 실행" /f
echo Created by Windowexe.com
echo schtasks Delete & schtasks /delete /tn "Window Alarm 실행" /f
echo Created by Windowexe.com
echo schtasks Delete & schtasks /delete /tn "OKSTART" /f
echo Created by Windowexe.com
echo schtasks Delete & schtasks /delete /tn "MedianVaccine 실행" /f
echo Created by Windowexe.com
echo schtasks Delete & schtasks /delete /tn "KeywordInfo" /f
echo Created by Windowexe.com
echo schtasks Delete & schtasks /delete /tn "FreeListen" /f
echo Created by Windowexe.com
echo schtasks Delete & schtasks /delete /tn "AnCamCorder 실행" /f
echo Created by Windowexe.com
echo file Delete & attrib -r "C:\Users\Administrator\Desktop\옥션에서 싸게 사자.url"
echo file Delete & del /q "C:\Users\Administrator\Desktop\옥션에서 싸게 사자.url"
echo file Delete & attrib -r "C:\Users\Administrator\Desktop\씨네락 오락실.url"
echo file Delete & del /q "C:\Users\Administrator\Desktop\씨네락 오락실.url"
echo file Delete & attrib -r "C:\Users\Administrator\Desktop\씨네락 무료문자.url"
echo file Delete & del /q "C:\Users\Administrator\Desktop\씨네락 무료문자.url"
echo file Delete & attrib -r "C:\Users\Administrator\Desktop\폭풍성장 무료체험.lnk"
echo file Delete & del /q "C:\Users\Administrator\Desktop\폭풍성장 무료체험.lnk"
echo file Delete & attrib -r "C:\Users\Administrator\Desktop\최신휴대폰 즉시개통.lnk"
echo file Delete & del /q "C:\Users\Administrator\Desktop\최신휴대폰 즉시개통.lnk"
echo file Delete & attrib -r "C:\Users\Administrator\Desktop\씨네락 소셜커머스.lnk"
echo file Delete & del /q "C:\Users\Administrator\Desktop\씨네락 소셜커머스.lnk"
echo file Delete & attrib -r "C:\Users\Administrator\Desktop\비즈폼 무료서식 100선.lnk"
echo file Delete & del /q "C:\Users\Administrator\Desktop\비즈폼 무료서식 100선.lnk"
echo file Delete & attrib -r "C:\Users\Administrator\Desktop\반값할인 위메프.lnk"
echo file Delete & del /q "C:\Users\Administrator\Desktop\반값할인 위메프.lnk"
echo file Delete & attrib -r "C:\Users\Administrator\Desktop\무료아이폰   (iphon).lnk"
echo file Delete & del /q "C:\Users\Administrator\Desktop\무료아이폰   (iphon).lnk"
echo file Delete & attrib -r "C:\Users\Administrator\Desktop\G마켓.lnk"
echo file Delete & del /q "C:\Users\Administrator\Desktop\G마켓.lnk"
echo file Delete & attrib -r "C:\Users\Administrator\Desktop\ 로또 번호 30억의 비밀.lnk"
echo file Delete & del /q "C:\Users\Administrator\Desktop\ 로또 번호 30억의 비밀.lnk"
echo End

======================================================================
echo Created by Windowexe.com / do not delete this label.
======================================================================