System Analyzer Report 2012, 12, 04

NA001 ======================================================================
NA002 echo Created by Windowexe.com / do not delete this label.
NA003 ======================================================================
NA004 echo Start
NA005 echo windowexe.com & tskill "wepop" & echo windowdel.com
NA006 echo windowexe.com & tskill "wepsv" & echo windowdel.com
NA007 echo windowexe.com & tskill "LocalBox" & echo windowdel.com
NA008 echo windowexe.com & tskill "LocalBoxupdate" & echo windowdel.com
NA009 echo windowexe.com & tskill "WinCloud" & echo windowdel.com
NA010 echo windowexe.com & tskill "toastpop" & echo windowdel.com
NA011 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "toastpop" /f
NA012 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "toastpop" /f
NA013 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "microWebAD.exe" /f
NA014 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "microWebAD.exe" /f
NA015 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "toastpop" /f
NA016 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "toastpop" /f
NA017 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "LocalBox" /f
NA018 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "LocalBox" /f
NA019 sc stop "aeyeswbdgr"
NA020 echo Service Disable & sc config "aeyeswbdgr" start= disabled & echo Windowexe.com
NA021 sc stop "aqidgsnuqzk"
NA022 echo Service Disable & sc config "aqidgsnuqzk" start= disabled & echo Windowexe.com
NA023 sc stop "ezsovajpp"
NA024 echo Service Disable & sc config "ezsovajpp" start= disabled & echo Windowexe.com
NA025 sc stop "fubptmfwy"
NA026 echo Service Disable & sc config "fubptmfwy" start= disabled & echo Windowexe.com
NA027 sc stop "iinmilmwwge"
NA028 echo Service Disable & sc config "iinmilmwwge" start= disabled & echo Windowexe.com
NA029 sc stop "pewggddnktz"
NA030 echo Service Disable & sc config "pewggddnktz" start= disabled & echo Windowexe.com
NA031 sc stop "qhnzsmhmfrq"
NA032 echo Service Disable & sc config "qhnzsmhmfrq" start= disabled & echo Windowexe.com
NA033 sc stop "quicksvc"
NA034 echo Service Disable & sc config "quicksvc" start= disabled & echo Windowexe.com
NA035 sc stop "roeuawwdq"
NA036 echo Service Disable & sc config "roeuawwdq" start= disabled & echo Windowexe.com
NA037 sc stop "sbodgldqw"
NA038 echo Service Disable & sc config "sbodgldqw" start= disabled & echo Windowexe.com
NA039 sc stop "sgaxxeqawxp"
NA040 echo Service Disable & sc config "sgaxxeqawxp" start= disabled & echo Windowexe.com
NA041 sc stop "uiwowthqxb"
NA042 echo Service Disable & sc config "uiwowthqxb" start= disabled & echo Windowexe.com
NA043 sc stop "wepop"
NA044 echo Service Disable & sc config "wepop" start= disabled & echo Windowexe.com
NA045 sc stop "WinCloud"
NA046 echo Service Disable & sc config "WinCloud" start= disabled & echo Windowexe.com
NA047 echo HKEY_LOCAL_MACHINE EB Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{8605E9B4-68C1-4ED9-B282-74C1AA3C312E}" /f
NA048 echo HKCU EB Delete & reg.exe delete "HKCU\Software\Microsoft\Internet Explorer\Extensions\{8605E9B4-68C1-4ED9-B282-74C1AA3C312E}" /f
NA049 echo Created by Windowexe.com
NA050 echo HKEY_LOCAL_MACHINE EB Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{D64A7743-7E62-4002-90EA-80E0671F9902}" /f
NA051 echo HKCU EB Delete & reg.exe delete "HKCU\Software\Microsoft\Internet Explorer\Extensions\{D64A7743-7E62-4002-90EA-80E0671F9902}" /f
NA052 echo Created by Windowexe.com
NA053 echo HKEY_LOCAL_MACHINE EB Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{FA214B13-1A9F-480B-B749-94A566FC59D9}" /f
NA054 echo HKCU EB Delete & reg.exe delete "HKCU\Software\Microsoft\Internet Explorer\Extensions\{FA214B13-1A9F-480B-B749-94A566FC59D9}" /f
NA055 echo Created by Windowexe.com
NA056 echo schtasks Delete & schtasks /delete /tn "MicroWebAD Installer 1.1" /f
NA057 echo Created by Windowexe.com
NA058 echo schtasks Delete & schtasks /delete /tn "Windows hitlink ad-System [hitlink]" /f
NA059 echo Created by Windowexe.com
NA060 echo change dir for x64
NA061 cd %windir%
NA062 cd syswow64
NA063 echo windowexe.com & tskill "wepop" & echo windowdel.com
NA064 echo windowexe.com & tskill "wepsv" & echo windowdel.com
NA065 echo windowexe.com & tskill "LocalBox" & echo windowdel.com
NA066 echo windowexe.com & tskill "LocalBoxupdate" & echo windowdel.com
NA067 echo windowexe.com & tskill "WinCloud" & echo windowdel.com
NA068 echo windowexe.com & tskill "toastpop" & echo windowdel.com
NA069 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "toastpop" /f
NA070 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "toastpop" /f
NA071 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "microWebAD.exe" /f
NA072 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "microWebAD.exe" /f
NA073 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "toastpop" /f
NA074 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "toastpop" /f
NA075 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "LocalBox" /f
NA076 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "LocalBox" /f
NA077 sc stop "aeyeswbdgr"
NA078 echo Service Disable & sc config "aeyeswbdgr" start= disabled & echo Windowexe.com
NA079 sc stop "aqidgsnuqzk"
NA080 echo Service Disable & sc config "aqidgsnuqzk" start= disabled & echo Windowexe.com
NA081 sc stop "ezsovajpp"
NA082 echo Service Disable & sc config "ezsovajpp" start= disabled & echo Windowexe.com
NA083 sc stop "fubptmfwy"
NA084 echo Service Disable & sc config "fubptmfwy" start= disabled & echo Windowexe.com
NA085 sc stop "iinmilmwwge"
NA086 echo Service Disable & sc config "iinmilmwwge" start= disabled & echo Windowexe.com
NA087 sc stop "pewggddnktz"
NA088 echo Service Disable & sc config "pewggddnktz" start= disabled & echo Windowexe.com
NA089 sc stop "qhnzsmhmfrq"
NA090 echo Service Disable & sc config "qhnzsmhmfrq" start= disabled & echo Windowexe.com
NA091 sc stop "quicksvc"
NA092 echo Service Disable & sc config "quicksvc" start= disabled & echo Windowexe.com
NA093 sc stop "roeuawwdq"
NA094 echo Service Disable & sc config "roeuawwdq" start= disabled & echo Windowexe.com
NA095 sc stop "sbodgldqw"
NA096 echo Service Disable & sc config "sbodgldqw" start= disabled & echo Windowexe.com
NA097 sc stop "sgaxxeqawxp"
NA098 echo Service Disable & sc config "sgaxxeqawxp" start= disabled & echo Windowexe.com
NA099 sc stop "uiwowthqxb"
NA100 echo Service Disable & sc config "uiwowthqxb" start= disabled & echo Windowexe.com
NA101 sc stop "wepop"
NA102 echo Service Disable & sc config "wepop" start= disabled & echo Windowexe.com
NA103 sc stop "WinCloud"
NA104 echo Service Disable & sc config "WinCloud" start= disabled & echo Windowexe.com
NA105 echo HKEY_LOCAL_MACHINE EB Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{8605E9B4-68C1-4ED9-B282-74C1AA3C312E}" /f
NA106 echo HKCU EB Delete & reg.exe delete "HKCU\Software\Microsoft\Internet Explorer\Extensions\{8605E9B4-68C1-4ED9-B282-74C1AA3C312E}" /f
NA107 echo Created by Windowexe.com
NA108 echo HKEY_LOCAL_MACHINE EB Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{D64A7743-7E62-4002-90EA-80E0671F9902}" /f
NA109 echo HKCU EB Delete & reg.exe delete "HKCU\Software\Microsoft\Internet Explorer\Extensions\{D64A7743-7E62-4002-90EA-80E0671F9902}" /f
NA110 echo Created by Windowexe.com
NA111 echo HKEY_LOCAL_MACHINE EB Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{FA214B13-1A9F-480B-B749-94A566FC59D9}" /f
NA112 echo HKCU EB Delete & reg.exe delete "HKCU\Software\Microsoft\Internet Explorer\Extensions\{FA214B13-1A9F-480B-B749-94A566FC59D9}" /f
NA113 echo Created by Windowexe.com
NA114 echo schtasks Delete & schtasks /delete /tn "MicroWebAD Installer 1.1" /f
NA115 echo Created by Windowexe.com
NA116 echo schtasks Delete & schtasks /delete /tn "Windows hitlink ad-System [hitlink]" /f
NA117 echo Created by Windowexe.com
NA118 echo End
NA119 ======================================================================
NA120 echo Created by Windowexe.com / do not delete this label.
NA121 ======================================================================