System Analyzer Report 2013, 01, 24

프로그램분석

System Analyzer Report 2013, 01, 24

프로세스 천국 2013. 1. 24. 20:52

NA001 ======================================================================
NA002 echo Created by Windowexe.com / do not delete this label.
NA003 ======================================================================
NA004 echo Start
NA005 echo windowexe.com & tskill "WindowServiceNT" & echo windowdel.com
NA006 echo windowexe.com & tskill "MicrowindowSearch" & echo windowdel.com
NA007 echo windowexe.com & tskill "wizardrian" & echo windowdel.com
NA008 echo windowexe.com & tskill "watetime" & echo windowdel.com
NA009 echo windowexe.com & tskill "sliatekit" & echo windowdel.com
NA010 echo windowexe.com & tskill "simpcvt" & echo windowdel.com
NA011 echo windowexe.com & tskill "sccesrate" & echo windowdel.com
NA012 echo windowexe.com & tskill "sacfilter34" & echo windowdel.com
NA013 echo windowexe.com & tskill "pulsmint" & echo windowdel.com
NA014 echo windowexe.com & tskill "pcsponyis" & echo windowdel.com
NA015 echo windowexe.com & tskill "pasusbord" & echo windowdel.com
NA016 echo windowexe.com & tskill "overprompt" & echo windowdel.com
NA017 echo windowexe.com & tskill "obitalcan48" & echo windowdel.com
NA018 echo windowexe.com & tskill "minetalop" & echo windowdel.com
NA019 echo windowexe.com & tskill "lgmanger32" & echo windowdel.com
NA020 echo windowexe.com & tskill "iochviewer" & echo windowdel.com
NA021 echo windowexe.com & tskill "highqualtip" & echo windowdel.com
NA022 echo windowexe.com & tskill "handapter" & echo windowdel.com
NA023 echo windowexe.com & tskill "grapray" & echo windowdel.com
NA024 echo windowexe.com & tskill "geomemory" & echo windowdel.com
NA025 echo windowexe.com & tskill "featurbt" & echo windowdel.com
NA026 echo windowexe.com & tskill "extractionsp" & echo windowdel.com
NA027 echo windowexe.com & tskill "diacompiler" & echo windowdel.com
NA028 echo windowexe.com & tskill "crossnetpie2" & echo windowdel.com
NA029 echo windowexe.com & tskill "coolerboot" & echo windowdel.com
NA030 echo windowexe.com & tskill "commonder" & echo windowdel.com
NA031 echo windowexe.com & tskill "cleanprocid" & echo windowdel.com
NA032 echo windowexe.com & tskill "classrider" & echo windowdel.com
NA033 echo windowexe.com & tskill "blenxor" & echo windowdel.com
NA034 echo windowexe.com & tskill "SideOh" & echo windowdel.com
NA035 echo windowexe.com & tskill "qdownservice" & echo windowdel.com
NA036 echo windowexe.com & tskill "qdownagent" & echo windowdel.com
NA037 echo windowexe.com & tskill "natsvc" & echo windowdel.com
NA038 echo windowexe.com & tskill "gomsearch_idn" & echo windowdel.com
NA039 echo windowexe.com & tskill "bweeightyprm" & echo windowdel.com
NA040 echo windowexe.com & tskill "bewengetmod" & echo windowdel.com
NA041 echo windowexe.com & tskill "addenmode" & echo windowdel.com
NA042 echo windowexe.com & tskill "upm2ro" & echo windowdel.com
NA043 echo windowexe.com & tskill "talkaction02" & echo windowdel.com
NA044 echo windowexe.com & tskill "shskfkll2" & echo windowdel.com
NA045 echo windowexe.com & tskill "kawkfk25" & echo windowdel.com
NA046 echo windowexe.com & tskill "ec04dndb" & echo windowdel.com
NA047 echo windowexe.com & tskill "dlzmfhal1" & echo windowdel.com
NA048 echo windowexe.com & tskill "de3genprisi" & echo windowdel.com
NA049 echo windowexe.com & tskill "SpeedLinkUpdater" & echo windowdel.com
NA050 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "catroot" /f
NA051 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "catroot" /f
NA052 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "bewengetmod" /f
NA053 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "bewengetmod" /f
NA054 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "bweeightyprm" /f
NA055 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "bweeightyprm" /f
NA056 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "MicrowindowSearch" /f
NA057 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "MicrowindowSearch" /f
NA058 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "adhelp.exe" /f
NA059 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "adhelp.exe" /f
NA060 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "vaccineupdatestart.exe" /f
NA061 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "vaccineupdatestart.exe" /f
NA062 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "appwordmds" /f
NA063 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "appwordmds" /f
NA064 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "addensb" /f
NA065 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "addensb" /f
NA066 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "dltkdgksp1" /f
NA067 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "dltkdgksp1" /f
NA068 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "PostTip" /f
NA069 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "PostTip" /f
NA070 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "SideOh" /f
NA071 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "SideOh" /f
NA072 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "trimbuffer11_3" /f
NA073 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "trimbuffer11_3" /f
NA074 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "Disker" /f
NA075 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Disker" /f
NA076 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "namclean199" /f
NA077 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "namclean199" /f
NA078 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "Enumerate_gtst" /f
NA079 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Enumerate_gtst" /f
NA080 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "smapcore17" /f
NA081 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "smapcore17" /f
NA082 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "머시따쇼핑캐스트" /f
NA083 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "머시따쇼핑캐스트" /f
NA084 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "freeage45" /f
NA085 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "freeage45" /f
NA086 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "sqlogo6" /f
NA087 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "sqlogo6" /f
NA088 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "gomsearch_idn" /f
NA089 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "gomsearch_idn" /f
NA090 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "duelcharge2" /f
NA091 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "duelcharge2" /f
NA092 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "dtengine9" /f
NA093 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "dtengine9" /f
NA094 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "sendismem0" /f
NA095 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "sendismem0" /f
NA096 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "WB32" /f
NA097 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "WB32" /f
NA098 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "crossnetpie2" /f
NA099 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "crossnetpie2" /f
NA100 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "iochviewer" /f
NA101 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "iochviewer" /f
NA102 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "MyStats" /f
NA103 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "MyStats" /f
NA104 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "pasusbord" /f
NA105 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "pasusbord" /f
NA106 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "sccesrate" /f
NA107 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "sccesrate" /f
NA108 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "simpcvt" /f
NA109 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "simpcvt" /f
NA110 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "blenxor" /f
NA111 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "blenxor" /f
NA112 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "MicrowindowSearch" /f
NA113 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "MicrowindowSearch" /f
NA114 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "subgatelong" /f
NA115 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "subgatelong" /f
NA116 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "kipnoomine" /f
NA117 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "kipnoomine" /f
NA118 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "saropix600" /f
NA119 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "saropix600" /f
NA120 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "palstech" /f
NA121 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "palstech" /f
NA122 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "smshotadd56" /f
NA123 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "smshotadd56" /f
NA124 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "rootingax" /f
NA125 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "rootingax" /f
NA126 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "topsyncdoc" /f
NA127 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "topsyncdoc" /f
NA128 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "pcsponyis" /f
NA129 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "pcsponyis" /f
NA130 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "chrosmtol" /f
NA131 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "chrosmtol" /f
NA132 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "sliatekit" /f
NA133 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "sliatekit" /f
NA134 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "imperialEa9" /f
NA135 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "imperialEa9" /f
NA136 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "ncapexc" /f
NA137 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "ncapexc" /f
NA138 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "sacfilter34" /f
NA139 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "sacfilter34" /f
NA140 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "sdrally" /f
NA141 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "sdrally" /f
NA142 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "obitalcan48" /f
NA143 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "obitalcan48" /f
NA144 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "bizpopv3" /f
NA145 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "bizpopv3" /f
NA146 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "pulsmint" /f
NA147 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "pulsmint" /f
NA148 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "winappll" /f
NA149 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "winappll" /f
NA150 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "watetime" /f
NA151 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "watetime" /f
NA152 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "minetalop" /f
NA153 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "minetalop" /f
NA154 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "wizardrian" /f
NA155 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "wizardrian" /f
NA156 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "lgmanger32" /f
NA157 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "lgmanger32" /f
NA158 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "highqualtip" /f
NA159 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "highqualtip" /f
NA160 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "overprompt" /f
NA161 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "overprompt" /f
NA162 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "capnetx86" /f
NA163 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "capnetx86" /f
NA164 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "extractionsp" /f
NA165 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "extractionsp" /f
NA166 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "diacompiler" /f
NA167 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "diacompiler" /f
NA168 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "coolerboot" /f
NA169 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "coolerboot" /f
NA170 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "addenmode" /f
NA171 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "addenmode" /f
NA172 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "cleanprocid" /f
NA173 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "cleanprocid" /f
NA174 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "featurbt" /f
NA175 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "featurbt" /f
NA176 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "ediconfig" /f
NA177 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "ediconfig" /f
NA178 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "geomemory" /f
NA179 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "geomemory" /f
NA180 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "FileCity" /f
NA181 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "FileCity" /f
NA182 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "icarenet" /f
NA183 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "icarenet" /f
NA184 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "grapray" /f
NA185 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "grapray" /f
NA186 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "appwordmds" /f
NA187 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "appwordmds" /f
NA188 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "daheyDriver" /f
NA189 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "daheyDriver" /f
NA190 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "astroi" /f
NA191 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "astroi" /f
NA192 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "classrider" /f
NA193 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "classrider" /f
NA194 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "handapter" /f
NA195 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "handapter" /f
NA196 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "commonder" /f
NA197 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "commonder" /f
NA198 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "rizatap" /f
NA199 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "rizatap" /f
NA200 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "dyrnfmxm3" /f
NA201 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "dyrnfmxm3" /f
NA202 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "kawkfk25" /f
NA203 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "kawkfk25" /f
NA204 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "de3genprisi" /f
NA205 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "de3genprisi" /f
NA206 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "ec04dndb" /f
NA207 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "ec04dndb" /f
NA208 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "sc9ipsdk" /f
NA209 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "sc9ipsdk" /f
NA210 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "mp6donad" /f
NA211 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "mp6donad" /f
NA212 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "pblen1a" /f
NA213 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "pblen1a" /f
NA214 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "upm2ro" /f
NA215 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "upm2ro" /f
NA216 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "tkfkdqjq" /f
NA217 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "tkfkdqjq" /f
NA218 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "EIcon" /f
NA219 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "EIcon" /f
NA220 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "dlzmfhal1" /f
NA221 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "dlzmfhal1" /f
NA222 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "shskfkll2" /f
NA223 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "shskfkll2" /f
NA224 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "ochupa50" /f
NA225 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "ochupa50" /f
NA226 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "FindLock" /f
NA227 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "FindLock" /f
NA228 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "wepdl314" /f
NA229 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "wepdl314" /f
NA230 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "talkaction02" /f
NA231 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "talkaction02" /f
NA232 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "smartlink" /f
NA233 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "smartlink" /f
NA234 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "togelton10" /f
NA235 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "togelton10" /f
NA236 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "SpeedLinkUpdater" /f
NA237 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "SpeedLinkUpdater" /f
NA238 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "subjet" /f
NA239 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "subjet" /f
NA240 echo HKEY_LOCAL_MACHINE BHO Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AB705622-B25B-491B-A6BF-4A46FDDBC88E}" /f
NA241 echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AB705622-B25B-491B-A6BF-4A46FDDBC88E}" /f
NA242 echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AB705622-B25B-491B-A6BF-4A46FDDBC88E}" /f
NA243 echo HKEY_CLASSES_ROOT.CLSID Delete & reg.exe delete "HKCR\CLSID\{AB705622-B25B-491B-A6BF-4A46FDDBC88E}" /f
NA244 echo Created by Windowexe.com
NA245 echo HKEY_LOCAL_MACHINE Toolbar Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar" /v "{BCE04A5B-2B7D-4F4B-BB8E-2A59611733DD}" /f
NA246 echo HKEY_CURRENT_USER Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser" /v "{BCE04A5B-2B7D-4F4B-BB8E-2A59611733DD}" /f
NA247 echo HKCU Search Hook Delete & reg.exe delete "HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks" /v "{BCE04A5B-2B7D-4F4B-BB8E-2A59611733DD}" /f
NA248 echo HKEY_LOCAL_MACHINE Ext PreApproved Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{BCE04A5B-2B7D-4F4B-BB8E-2A59611733DD}" /f
NA249 echo HKEY_CURRENT_USER Ext Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BCE04A5B-2B7D-4F4B-BB8E-2A59611733DD}" /f
NA250 echo HKEY_CLASSES_ROOT CLSID Delete & reg.exe delete "HKCR\CLSID\{BCE04A5B-2B7D-4F4B-BB8E-2A59611733DD}" /f
NA251 echo Created by Windowexe.com
NA252 sc stop "WinHelp32"
NA253 echo Service Disable & sc config "WinHelp32" start= disabled & echo Windowexe.com
NA254 sc stop "WindowsDriver"
NA255 echo Service Disable & sc config "WindowsDriver" start= disabled & echo Windowexe.com
NA256 sc stop "TCCheckAgent"
NA257 echo Service Disable & sc config "TCCheckAgent" start= disabled & echo Windowexe.com
NA258 sc stop "SnTotal"
NA259 echo Service Disable & sc config "SnTotal" start= disabled & echo Windowexe.com
NA260 sc stop "RPGSvcman"
NA261 echo Service Disable & sc config "RPGSvcman" start= disabled & echo Windowexe.com
NA262 sc stop "robertkordrey"
NA263 echo Service Disable & sc config "robertkordrey" start= disabled & echo Windowexe.com
NA264 sc stop "rahlakqbdl"
NA265 echo Service Disable & sc config "rahlakqbdl" start= disabled & echo Windowexe.com
NA266 sc stop "QuickDownload Service"
NA267 echo Service Disable & sc config "QuickDownload Service" start= disabled & echo Windowexe.com
NA268 sc stop "QuickDownload Agent"
NA269 echo Service Disable & sc config "QuickDownload Agent" start= disabled & echo Windowexe.com
NA270 sc stop "qbllkxynb4um"
NA271 echo Service Disable & sc config "qbllkxynb4um" start= disabled & echo Windowexe.com
NA272 sc stop "permesmgSvc"
NA273 echo Service Disable & sc config "permesmgSvc" start= disabled & echo Windowexe.com
NA274 sc stop "pazqjaxl"
NA275 echo Service Disable & sc config "pazqjaxl" start= disabled & echo Windowexe.com
NA276 sc stop "opjaibfqgfc"
NA277 echo Service Disable & sc config "opjaibfqgfc" start= disabled & echo Windowexe.com
NA278 sc stop "NTAService"
NA279 echo Service Disable & sc config "NTAService" start= disabled & echo Windowexe.com
NA280 sc stop "niolhojbbf"
NA281 echo Service Disable & sc config "niolhojbbf" start= disabled & echo Windowexe.com
NA282 sc stop "NATService"
NA283 echo Service Disable & sc config "NATService" start= disabled & echo Windowexe.com
NA284 sc stop "NameCleanSvc"
NA285 echo Service Disable & sc config "NameCleanSvc" start= disabled & echo Windowexe.com
NA286 sc stop "LKO Speaker"
NA287 echo Service Disable & sc config "LKO Speaker" start= disabled & echo Windowexe.com
NA288 sc stop "Kseraion"
NA289 echo Service Disable & sc config "Kseraion" start= disabled & echo Windowexe.com
NA290 sc stop "jwuwqndkun"
NA291 echo Service Disable & sc config "jwuwqndkun" start= disabled & echo Windowexe.com
NA292 sc stop "ipqflmk"
NA293 echo Service Disable & sc config "ipqflmk" start= disabled & echo Windowexe.com
NA294 sc stop "huoltuxt"
NA295 echo Service Disable & sc config "huoltuxt" start= disabled & echo Windowexe.com
NA296 sc stop "gtbcbfkv"
NA297 echo Service Disable & sc config "gtbcbfkv" start= disabled & echo Windowexe.com
NA298 sc stop "gjymtrkj"
NA299 echo Service Disable & sc config "gjymtrkj" start= disabled & echo Windowexe.com
NA300 sc stop "comviewa"
NA301 echo Service Disable & sc config "comviewa" start= disabled & echo Windowexe.com
NA302 sc stop "bxxwendb"
NA303 echo Service Disable & sc config "bxxwendb" start= disabled & echo Windowexe.com
NA304 sc stop "bqyjbvnv"
NA305 echo Service Disable & sc config "bqyjbvnv" start= disabled & echo Windowexe.com
NA306 sc stop "axaqsa"
NA307 echo Service Disable & sc config "axaqsa" start= disabled & echo Windowexe.com
NA308 sc stop "asdoiqyta"
NA309 echo Service Disable & sc config "asdoiqyta" start= disabled & echo Windowexe.com
NA310 sc stop "aricpleck"
NA311 echo Service Disable & sc config "aricpleck" start= disabled & echo Windowexe.com
NA312 sc stop "ApplicationSpecialManagement"
NA313 echo Service Disable & sc config "ApplicationSpecialManagement" start= disabled & echo Windowexe.com
NA314 sc stop "AppCatroots"
NA315 echo Service Disable & sc config "AppCatroots" start= disabled & echo Windowexe.com
NA316 sc stop "antanning"
NA317 echo Service Disable & sc config "antanning" start= disabled & echo Windowexe.com
NA318 echo HKEY_LOCAL_MACHINE EB Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{FA214B13-1A9F-480B-B749-94A566FC59D9}" /f
NA319 echo HKCU EB Delete & reg.exe delete "HKCU\Software\Microsoft\Internet Explorer\Extensions\{FA214B13-1A9F-480B-B749-94A566FC59D9}" /f
NA320 echo Created by Windowexe.com
NA321 echo HKEY_LOCAL_MACHINE EB Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{D64A7743-7E62-4002-90EA-80E0671F9902}" /f
NA322 echo HKCU EB Delete & reg.exe delete "HKCU\Software\Microsoft\Internet Explorer\Extensions\{D64A7743-7E62-4002-90EA-80E0671F9902}" /f
NA323 echo Created by Windowexe.com
NA324 echo HKEY_LOCAL_MACHINE EB Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{8605E9B4-68C1-4ED9-B282-74C1AA3C312E}" /f
NA325 echo HKCU EB Delete & reg.exe delete "HKCU\Software\Microsoft\Internet Explorer\Extensions\{8605E9B4-68C1-4ED9-B282-74C1AA3C312E}" /f
NA326 echo Created by Windowexe.com
NA327 echo HKEY_LOCAL_MACHINE EB Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{00000002-5499-47ed-A234-304F5258E596}" /f
NA328 echo HKCU EB Delete & reg.exe delete "HKCU\Software\Microsoft\Internet Explorer\Extensions\{00000002-5499-47ed-A234-304F5258E596}" /f
NA329 echo Created by Windowexe.com
NA330 echo HKEY_LOCAL_MACHINE EB Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{00000001-5499-47ed-A234-304F5258E596}" /f
NA331 echo HKCU EB Delete & reg.exe delete "HKCU\Software\Microsoft\Internet Explorer\Extensions\{00000001-5499-47ed-A234-304F5258E596}" /f
NA332 echo Created by Windowexe.com
NA333 echo HKEY_LOCAL_MACHINE EB Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{00000000-5499-47ed-A234-304F5258E596}" /f
NA334 echo HKCU EB Delete & reg.exe delete "HKCU\Software\Microsoft\Internet Explorer\Extensions\{00000000-5499-47ed-A234-304F5258E596}" /f
NA335 echo Created by Windowexe.com
NA336 echo HKEY_LOCAL_MACHINE EB Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{FC23FA59-2754-4FD6-9ADA-20C5758D7F66}" /f
NA337 echo HKCU EB Delete & reg.exe delete "HKCU\Software\Microsoft\Internet Explorer\Extensions\{FC23FA59-2754-4FD6-9ADA-20C5758D7F66}" /f
NA338 echo Created by Windowexe.com
NA339 echo HKEY_LOCAL_MACHINE EB Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{FB631360-CC3F-4CF7-AFA8-1CF8D077A886}" /f
NA340 echo HKCU EB Delete & reg.exe delete "HKCU\Software\Microsoft\Internet Explorer\Extensions\{FB631360-CC3F-4CF7-AFA8-1CF8D077A886}" /f
NA341 echo Created by Windowexe.com
NA342 echo HKEY_LOCAL_MACHINE EB Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{42767D19-9D08-4638-8768-D342BA400E36}" /f
NA343 echo HKCU EB Delete & reg.exe delete "HKCU\Software\Microsoft\Internet Explorer\Extensions\{42767D19-9D08-4638-8768-D342BA400E36}" /f
NA344 echo Created by Windowexe.com
NA345 echo schtasks Delete & schtasks /delete /tn "WinExpandUpdate_mcv5" /f
NA346 echo Created by Windowexe.com
NA347 echo schtasks Delete & schtasks /delete /tn "Window FindKey Controller" /f
NA348 echo Created by Windowexe.com
NA349 echo schtasks Delete & schtasks /delete /tn "Sysmax" /f
NA350 echo Created by Windowexe.com
NA351 echo schtasks Delete & schtasks /delete /tn "PlusLineUpdateUP" /f
NA352 echo Created by Windowexe.com
NA353 echo schtasks Delete & schtasks /delete /tn "Micro Visual C 2012 delphi AD" /f
NA354 echo Created by Windowexe.com
NA355 echo schtasks Delete & schtasks /delete /tn "LGuide" /f
NA356 echo Created by Windowexe.com
NA357 echo schtasks Delete & schtasks /delete /tn "KeywordYac" /f
NA358 echo Created by Windowexe.com
NA359 echo schtasks Delete & schtasks /delete /tn "FreeListen" /f
NA360 echo Created by Windowexe.com
NA361 echo schtasks Delete & schtasks /delete /tn "bizsearch" /f
NA362 echo Created by Windowexe.com
NA363 echo schtasks Delete & schtasks /delete /tn "AnCamCorder 실행" /f
NA364 echo Created by Windowexe.com
NA365 echo End
NA366 ======================================================================
NA367 echo Created by Windowexe.com / do not delete this label.
NA368 ======================================================================