Size Yazılım Yaparken Kaynak Olabileceğini Düşünerek Ekliyorum..
Birçok Onarımda Kullandığım Bir BAT Dosyasının En Basitleştirilmiş Halidir..
Özellikleri
1: Sürücülerdeki *.inf / *.pif / *.cmd / *.vbs Zararlılarını Temizler..
2: Arkaplanda Çalışan Zararlı Dosyaların Durdurulması..
3: Regeditte Bulunan Zararlıların Başlangıçtan Kaldırılması..
4: Gizli Dosyaların Görüntülenmesi / Görev Yöneticisinin Açılma Sorununun Giderilmesi..
5: Windows Ve System32 İçerisindeki Zararlı Dosyaların Temizliği..
6: Host Dosyasının Onarımı..
7: TCP/IP Önbelleğinin temizlenmesi..
8: Windows Task / Temp İçeriğinin Temizlenmesi..
Kod:
@echo off
@TITLE VirtualMan Trojan Remover - TEMIZLEME MODULU
@taskkill /im explorer.exe /f
@taskkill /im wscript.exe
@taskkill /im Boot.exe /f /t
@taskkill /im SE2010.exe /f /t
@taskkill /im WSscript.exe /f /t
@taskkill /im WinForm.exe /f /t
@taskkill /im activexdebugger32.exe /f /t
@taskkill /im ahnsbsb.exe /f /t
@taskkill /im amo.exe /f /t
@taskkill /im amva.exe /f /t
@taskkill /im amvo.exe /f /t
@taskkill /im antivirusxp.exe /f /t
@taskkill /im aspimgr.exe /f /t
@taskkill /im autorun.exe /f /t
@taskkill /im autorun.vbs.exe /f /t
@taskkill /im avpo.exe /f /t
@taskkill /im bittorrent.exe /f /t
@taskkill /im command.exe /f /t
@taskkill /im copy.exe /f /t
@taskkill /im fooool.exe /f /t
@taskkill /im herss.exe /f /t
@taskkill /im host.exe /f /t
@taskkill /im ie.exe /f /t
@taskkill /im is2010.exe /f /t
@taskkill /im kamsoft.exe /f /t
@taskkill /im kavo0.exe /f /t
@taskkill /im kxvo.exe /f /t
@taskkill /im meex.exe /f /t
@taskkill /im next1.exe /f /t
@taskkill /im next2.exe /f /t
@taskkill /im next3.exe /f /t
@taskkill /im nhbivui.exe /f /t
@taskkill /im nodqq.exe /f /t
@taskkill /im olhrwef.exe /f /t
@taskkill /im oufddh.exe /f /t
@taskkill /im quit.exe /f /t
@taskkill /im r6r.exe /f /t
@taskkill /im recycler.exe /f /t
@taskkill /im semo2x.exe /f /t
@taskkill /im sxs.exe /f /t
@taskkill /im tavo.exe /f /t
@taskkill /im temp0.exe /f /t
@taskkill /im temp1.exe /f /t
@taskkill /im temp2.exe /f /t
@taskkill /im winfile.exe /f /t
@taskkill /im xnxlufi.exe /f /t
@taskkill /im yyjnldu.exe /f /t
@attrib -a -s -r -h "C:\RECYCLER\*.*" /S /D&del /f /s /a /q "C:\RECYCLER\*.*"
@attrib -a -s -r -h "D:\RECYCLER\*.*" /S /D&del /f /s /a /q "D:\RECYCLER\*.*"
@attrib -a -s -r -h "E:\RECYCLER\*.*" /S /D&del /f /s /a /q "E:\RECYCLER\*.*"
@attrib -a -s -r -h "F:\RECYCLER\*.*" /S /D&del /f /s /a /q "F:\RECYCLER\*.*"
@attrib -a -s -r -h "G:\RECYCLER\*.*" /S /D&del /f /s /a /q "G:\RECYCLER\*.*"
@attrib -a -s -r -h "H:\RECYCLER\*.*" /S /D&del /f /s /a /q "H:\RECYCLER\*.*"
@attrib -a -s -r -h "I:\RECYCLER\*.*" /S /D&del /f /s /a /q "I:\RECYCLER\*.*"
@attrib -a -s -r -h "J:\RECYCLER\*.*" /S /D&del /f /s /a /q "J:\RECYCLER\*.*"
@attrib -a -s -r -h "K:\RECYCLER\*.*" /S /D&del /f /s /a /q "K:\RECYCLER\*.*"
@attrib -a -s -r -h "C:\RECYCLE.BIN\*.*" /S /D&del /f /s /a /q "C:\RECYCLE.BIN\*.*"
@attrib -a -s -r -h "D:\RECYCLE.BIN\*.*" /S /D&del /f /s /a /q "D:\RECYCLE.BIN\*.*"
@attrib -a -s -r -h "E:\RECYCLE.BIN\*.*" /S /D&del /f /s /a /q "E:\RECYCLE.BIN\*.*"
@attrib -a -s -r -h "F:\RECYCLE.BIN\*.*" /S /D&del /f /s /a /q "F:\RECYCLE.BIN\*.*"
@attrib -a -s -r -h "G:\RECYCLE.BIN\*.*" /S /D&del /f /s /a /q "G:\RECYCLE.BIN\*.*"
@attrib -a -s -r -h "H:\RECYCLE.BIN\*.*" /S /D&del /f /s /a /q "H:\RECYCLE.BIN\*.*"
@attrib -a -s -r -h "I:\RECYCLE.BIN\*.*" /S /D&del /f /s /a /q "I:\RECYCLE.BIN\*.*"
@attrib -a -s -r -h "J:\RECYCLE.BIN\*.*" /S /D&del /f /s /a /q "J:\RECYCLE.BIN\*.*"
@attrib -a -s -r -h "K:\RECYCLE.BIN\*.*" /S /D&del /f /s /a /q "K:\RECYCLE.BIN\*.*"
@attrib -a -s -r -h "C:\Bifrost\*.*" /S /D&del /f /s /a /q "C:\Bifrost\*.*"
@attrib -a -s -r -h "D:\Bifrost\*.*" /S /D&del /f /s /a /q "D:\Bifrost\*.*"
@attrib -a -s -r -h "E:\Bifrost\*.*" /S /D&del /f /s /a /q "E:\Bifrost\*.*"
@attrib -a -s -r -h "F:\Bifrost\*.*" /S /D&del /f /s /a /q "F:\Bifrost\*.*"
@attrib -a -s -r -h "G:\Bifrost\*.*" /S /D&del /f /s /a /q "G:\Bifrost\*.*"
@attrib -a -s -r -h "H:\Bifrost\*.*" /S /D&del /f /s /a /q "H:\Bifrost\*.*"
@attrib -a -s -r -h "I:\Bifrost\*.*" /S /D&del /f /s /a /q "I:\Bifrost\*.*"
@attrib -a -s -r -h "J:\Bifrost\*.*" /S /D&del /f /s /a /q "J:\Bifrost\*.*"
@attrib -a -s -r -h "K:\Bifrost\*.*" /S /D&del /f /s /a /q "K:\Bifrost\*.*"
@attrib -a -s -r -h "C:\BifroXx\*.*" /S /D&del /f /s /a /q "C:\BifroXx\*.*"
@attrib -a -s -r -h "D:\BifroXx\*.*" /S /D&del /f /s /a /q "D:\BifroXx\*.*"
@attrib -a -s -r -h "E:\BifroXx\*.*" /S /D&del /f /s /a /q "E:\BifroXx\*.*"
@attrib -a -s -r -h "F:\BifroXx\*.*" /S /D&del /f /s /a /q "F:\BifroXx\*.*"
@attrib -a -s -r -h "G:\BifroXx\*.*" /S /D&del /f /s /a /q "G:\BifroXx\*.*"
@attrib -a -s -r -h "H:\BifroXx\*.*" /S /D&del /f /s /a /q "H:\BifroXx\*.*"
@attrib -a -s -r -h "I:\BifroXx\*.*" /S /D&del /f /s /a /q "I:\BifroXx\*.*"
@attrib -a -s -r -h "J:\BifroXx\*.*" /S /D&del /f /s /a /q "J:\BifroXx\*.*"
@attrib -a -s -r -h "K:\BifroXx\*.*" /S /D&del /f /s /a /q "K:\BifroXx\*.*"
@attrib -a -s -r -h "C:\Extract\*.*" /S /D&del /f /s /a /q "C:\Extract\*.*"
@attrib -a -s -r -h "D:\Extract\*.*" /S /D&del /f /s /a /q "D:\Extract\*.*"
@attrib -a -s -r -h "E:\Extract\*.*" /S /D&del /f /s /a /q "E:\Extract\*.*"
@attrib -a -s -r -h "F:\Extract\*.*" /S /D&del /f /s /a /q "F:\Extract\*.*"
@attrib -a -s -r -h "G:\Extract\*.*" /S /D&del /f /s /a /q "G:\Extract\*.*"
@attrib -a -s -r -h "H:\Extract\*.*" /S /D&del /f /s /a /q "H:\Extract\*.*"
@attrib -a -s -r -h "I:\Extract\*.*" /S /D&del /f /s /a /q "I:\Extract\*.*"
@attrib -a -s -r -h "J:\Extract\*.*" /S /D&del /f /s /a /q "J:\Extract\*.*"
@attrib -a -s -r -h "K:\Extract\*.*" /S /D&del /f /s /a /q "K:\Extract\*.*"
@attrib -a -s -r -h "C:\Extracts\*.*" /S /D&del /f /s /a /q "C:\Extracts\*.*"
@attrib -a -s -r -h "D:\Extracts\*.*" /S /D&del /f /s /a /q "D:\Extracts\*.*"
@attrib -a -s -r -h "E:\Extracts\*.*" /S /D&del /f /s /a /q "E:\Extracts\*.*"
@attrib -a -s -r -h "F:\Extracts\*.*" /S /D&del /f /s /a /q "F:\Extracts\*.*"
@attrib -a -s -r -h "G:\Extracts\*.*" /S /D&del /f /s /a /q "G:\Extracts\*.*"
@attrib -a -s -r -h "H:\Extracts\*.*" /S /D&del /f /s /a /q "H:\Extracts\*.*"
@attrib -a -s -r -h "I:\Extracts\*.*" /S /D&del /f /s /a /q "I:\Extracts\*.*"
@attrib -a -s -r -h "J:\Extracts\*.*" /S /D&del /f /s /a /q "J:\Extracts\*.*"
@attrib -a -s -r -h "K:\Extracts\*.*" /S /D&del /f /s /a /q "K:\Extracts\*.*"
@attrib -a -s -r -h "C:\TEMP\*.*" /S /D&del /f /s /a /q "C:\TEMP\*.*"
@attrib -a -s -r -h "D:\TEMP\*.*" /S /D&del /f /s /a /q "D:\TEMP\*.*"
@attrib -a -s -r -h "E:\TEMP\*.*" /S /D&del /f /s /a /q "E:\TEMP\*.*"
@attrib -a -s -r -h "F:\TEMP\*.*" /S /D&del /f /s /a /q "F:\TEMP\*.*"
@attrib -a -s -r -h "G:\TEMP\*.*" /S /D&del /f /s /a /q "G:\TEMP\*.*"
@attrib -a -s -r -h "H:\TEMP\*.*" /S /D&del /f /s /a /q "H:\TEMP\*.*"
@attrib -a -s -r -h "I:\TEMP\*.*" /S /D&del /f /s /a /q "I:\TEMP\*.*"
@attrib -a -s -r -h "J:\TEMP\*.*" /S /D&del /f /s /a /q "J:\TEMP\*.*"
@attrib -a -s -r -h "K:\TEMP\*.*" /S /D&del /f /s /a /q "K:\TEMP\*.*"
@attrib -a -s -r -h "C:\TMP\*.*" /S /D&del /f /s /a /q "C:\TMP\*.*"
@attrib -a -s -r -h "D:\TMP\*.*" /S /D&del /f /s /a /q "D:\TMP\*.*"
@attrib -a -s -r -h "E:\TMP\*.*" /S /D&del /f /s /a /q "E:\TMP\*.*"
@attrib -a -s -r -h "F:\TMP\*.*" /S /D&del /f /s /a /q "F:\TMP\*.*"
@attrib -a -s -r -h "G:\TMP\*.*" /S /D&del /f /s /a /q "G:\TMP\*.*"
@attrib -a -s -r -h "H:\TMP\*.*" /S /D&del /f /s /a /q "H:\TMP\*.*"
@attrib -a -s -r -h "I:\TMP\*.*" /S /D&del /f /s /a /q "I:\TMP\*.*"
@attrib -a -s -r -h "J:\TMP\*.*" /S /D&del /f /s /a /q "J:\TMP\*.*"
@attrib -a -s -r -h "K:\TMP\*.*" /S /D&del /f /s /a /q "K:\TMP\*.*"
@attrib -a -s -r -h "C:\RECYCLER.BIN\*.*" /S /D&del /f /s /a /q "C:\RECYCLER.BIN\*.*"
@attrib -a -s -r -h "D:\RECYCLER.BIN\*.*" /S /D&del /f /s /a /q "D:\RECYCLER.BIN\*.*"
@attrib -a -s -r -h "E:\RECYCLER.BIN\*.*" /S /D&del /f /s /a /q "E:\RECYCLER.BIN\*.*"
@attrib -a -s -r -h "F:\RECYCLER.BIN\*.*" /S /D&del /f /s /a /q "F:\RECYCLER.BIN\*.*"
@attrib -a -s -r -h "G:\RECYCLER.BIN\*.*" /S /D&del /f /s /a /q "G:\RECYCLER.BIN\*.*"
@attrib -a -s -r -h "H:\RECYCLER.BIN\*.*" /S /D&del /f /s /a /q "H:\RECYCLER.BIN\*.*"
@attrib -a -s -r -h "I:\RECYCLER.BIN\*.*" /S /D&del /f /s /a /q "I:\RECYCLER.BIN\*.*"
@attrib -a -s -r -h "J:\RECYCLER.BIN\*.*" /S /D&del /f /s /a /q "J:\RECYCLER.BIN\*.*"
@attrib -a -s -r -h "K:\RECYCLER.BIN\*.*" /S /D&del /f /s /a /q "K:\RECYCLER.BIN\*.*"
@if exist C:\autorun.* attrib -a -s -r -h C:\autorun.*&del C:\autorun.*
@if exist D:\autorun.* attrib -a -s -r -h D:\autorun.*&del D:\autorun.*
@if exist E:\autorun.* attrib -a -s -r -h E:\autorun.*&del E:\autorun.*
@if exist F:\autorun.* attrib -a -s -r -h F:\autorun.*&del F:\autorun.*
@if exist G:\autorun.* attrib -a -s -r -h G:\autorun.*&del G:\autorun.*
@if exist H:\autorun.* attrib -a -s -r -h H:\autorun.*&del H:\autorun.*
@if exist I:\autorun.* attrib -a -s -r -h I:\autorun.*&del I:\autorun.*
@if exist J:\autorun.* attrib -a -s -r -h J:\autorun.*&del J:\autorun.*
@if exist K:\autorun.* attrib -a -s -r -h K:\autorun.*&del K:\autorun.*
@if exist L:\autorun.* attrib -a -s -r -h L:\autorun.*&del L:\autorun.*
@if exist M:\autorun.* attrib -a -s -r -h M:\autorun.*&del M:\autorun.*
@if exist C:\*.inf attrib -a -s -r -h C:\*.inf&del C:\*.inf
@if exist C:\*.pif attrib -a -s -r -h C:\*.pif&del C:\*.pif
@if exist C:\*.vbs attrib -a -s -r -h C:\*.vbs&del C:\*.vbs
@if exist C:\*.cmd attrib -a -s -r -h C:\*.cmd&del C:\*.cmd
@if exist D:\*.inf attrib -a -s -r -h D:\*.inf&del D:\*.inf
@if exist D:\*.pif attrib -a -s -r -h D:\*.pif&del D:\*.pif
@if exist D:\*.vbs attrib -a -s -r -h D:\*.vbs&del D:\*.vbs
@if exist D:\*.cmd attrib -a -s -r -h D:\*.cmd&del D:\*.cmd
@if exist E:\*.inf attrib -a -s -r -h E:\*.inf&del E:\*.inf
@if exist E:\*.pif attrib -a -s -r -h E:\*.pif&del E:\*.pif
@if exist E:\*.vbs attrib -a -s -r -h E:\*.vbs&del E:\*.vbs
@if exist E:\*.cmd attrib -a -s -r -h E:\*.cmd&del E:\*.cmd
@if exist F:\*.inf attrib -a -s -r -h F:\*.inf&del F:\*.inf
@if exist F:\*.pif attrib -a -s -r -h F:\*.pif&del F:\*.pif
@if exist F:\*.vbs attrib -a -s -r -h F:\*.vbs&del F:\*.vbs
@if exist F:\*.cmd attrib -a -s -r -h F:\*.cmd&del F:\*.cmd
@if exist G:\*.inf attrib -a -s -r -h G:\*.inf&del G:\*.inf
@if exist G:\*.pif attrib -a -s -r -h G:\*.pif&del G:\*.pif
@if exist G:\*.vbs attrib -a -s -r -h G:\*.vbs&del G:\*.vbs
@if exist G:\*.cmd attrib -a -s -r -h G:\*.cmd&del G:\*.cmd
@if exist H:\*.inf attrib -a -s -r -h H:\*.inf&del H:\*.inf
@if exist H:\*.pif attrib -a -s -r -h H:\*.pif&del H:\*.pif
@if exist H:\*.vbs attrib -a -s -r -h H:\*.vbs&del H:\*.vbs
@if exist H:\*.cmd attrib -a -s -r -h H:\*.cmd&del H:\*.cmd
@if exist I:\*.inf attrib -a -s -r -h I:\*.inf&del I:\*.inf
@if exist I:\*.pif attrib -a -s -r -h I:\*.pif&del I:\*.pif
@if exist I:\*.vbs attrib -a -s -r -h I:\*.vbs&del I:\*.vbs
@if exist I:\*.cmd attrib -a -s -r -h I:\*.cmd&del I:\*.cmd
@if exist J:\*.inf attrib -a -s -r -h J:\*.inf&del J:\*.inf
@if exist J:\*.pif attrib -a -s -r -h J:\*.pif&del J:\*.pif
@if exist J:\*.vbs attrib -a -s -r -h J:\*.vbs&del J:\*.vbs
@if exist J:\*.cmd attrib -a -s -r -h J:\*.cmd&del J:\*.cmd
@if exist K:\*.inf attrib -a -s -r -h K:\*.inf&del K:\*.inf
@if exist K:\*.pif attrib -a -s -r -h K:\*.pif&del K:\*.pif
@if exist K:\*.vbs attrib -a -s -r -h K:\*.vbs&del K:\*.vbs
@if exist K:\*.cmd attrib -a -s -r -h K:\*.cmd&del K:\*.cmd
@if exist L:\*.inf attrib -a -s -r -h L:\*.inf&del L:\*.inf
@if exist L:\*.pif attrib -a -s -r -h L:\*.pif&del L:\*.pif
@if exist L:\*.vbs attrib -a -s -r -h L:\*.vbs&del L:\*.vbs
@if exist L:\*.cmd attrib -a -s -r -h L:\*.cmd&del L:\*.cmd
@if exist M:\*.inf attrib -a -s -r -h M:\*.inf&del M:\*.inf
@if exist M:\*.pif attrib -a -s -r -h M:\*.pif&del M:\*.pif
@if exist M:\*.vbs attrib -a -s -r -h M:\*.vbs&del M:\*.vbs
@if exist M:\*.cmd attrib -a -s -r -h M:\*.cmd&del M:\*.cmd
@attrib -a -s -r -h "%APPDATA%\*.tmp" /S /D&del /f /q "%APPDATA%\*.tmp"
@attrib -a -s -r -h "%APPDATA%\*.bat" /S /D&del /f /q "%APPDATA%\*.bat"
@attrib -a -s -r -h "%APPDATA%\*.pif" /S /D&del /f /q "%APPDATA%\*.pif"
@attrib -a -s -r -h "%APPDATA%\*.vbs" /S /D&del /f /q "%APPDATA%\*.vbs"
@attrib -a -s -r -h "%APPDATA%\*.inf" /S /D&del /f /q "%APPDATA%\*.inf"
@attrib -a -s -r -h "%APPDATA%\*.cmd" /S /D&del /f /q "%APPDATA%\*.cmd"
@attrib -a -s -r -h "%APPDATA%\*.htm" /S /D&del /f /q "%APPDATA%\*.htm"
@attrib -a -s -r -h "%APPDATA%\*.html" /S /D&del /f /q "%APPDATA%\*.html"
@attrib -a -s -r -h "%APPDATA%\*.exe" /S /D&del /f /q "%APPDATA%\*.exe"
@if exist "%APPDATA%\Microsoft\*.exe" attrib -a -s -r -h "%APPDATA%\Microsoft\*.exe"&del /f /q "%APPDATA%\Microsoft\*.exe"
@if exist "%APPDATA%\Microsoft\*.dll" attrib -a -s -r -h "%APPDATA%\Microsoft\*.dll"&del /f /q "%APPDATA%\Microsoft\*.dll"
@if exist "%APPDATA%\Microsoft\*.pif" attrib -a -s -r -h "%APPDATA%\Microsoft\*.pif"&del /f /q "%APPDATA%\Microsoft\*.pif"
@if exist "%APPDATA%\Microsoft\*.bat" attrib -a -s -r -h "%APPDATA%\Microsoft\*.bat"&del /f /q "%APPDATA%\Microsoft\*.bat"
@if exist "%APPDATA%\Microsoft\*.cmd" attrib -a -s -r -h "%APPDATA%\Microsoft\*.cmd"&del /f /q "%APPDATA%\Microsoft\*.cmd"
@if exist "%APPDATA%\Microsoft\*.tmp" attrib -a -s -r -h "%APPDATA%\Microsoft\*.tmp"&del /f /q "%APPDATA%\Microsoft\*.tmp"
@if exist "%APPDATA%\Microsoft\*.scr" attrib -a -s -r -h "%APPDATA%\Microsoft\*.scr"&del /f /q "%APPDATA%\Microsoft\*.scr"
@if exist "%APPDATA%\Microsoft\*.sys" attrib -a -s -r -h "%APPDATA%\Microsoft\*.sys"&del /f /q "%APPDATA%\Microsoft\*.sys"
@if exist "%SYSTEMROOT%\images.*" attrib -a -s -r -h "%SYSTEMROOT%\images.*"&del "%SYSTEMROOT%\images.*"
@if exist "%SYSTEMROOT%\photos.*" attrib -a -s -r -h "%SYSTEMROOT%\photos.*"&del "%SYSTEMROOT%\photos.*"
@if exist "%SYSTEMROOT%\photo.*" attrib -a -s -r -h "%SYSTEMROOT%\photo.*"&del "%SYSTEMROOT%\photo.*"
@if exist "%SYSTEMROOT%\album.*" attrib -a -s -r -h "%SYSTEMROOT%\album.*"&del "%SYSTEMROOT%\album.*"
@if exist "%SYSTEMROOT%\picture.*" attrib -a -s -r -h "%SYSTEMROOT%\picture.*"&del "%SYSTEMROOT%\picture.*"
@if exist "%SYSTEMROOT%\pictures.*" attrib -a -s -r -h "%SYSTEMROOT%\pictures.*"&del "%SYSTEMROOT%\pictures.*"
@attrib -a -s -r -h "%ProgramFiles%\Bifrost\*.*" /S /D&del /f /s /a /q "%ProgramFiles%\Bifrost\*.*"
@attrib -a -s -r -h "%SYSTEMROOT%\*.log"&del /f /q "%SYSTEMROOT%\*.log"
@attrib -a -s -r -h "%SYSTEMROOT%\Tasks\*.*"&del /f /q "%SYSTEMROOT%\Tasks\*.*"
@attrib -a -s -r -h "%USERPROFILE%\Local Settings\Temp\*.*" /S /D&del /f /s /a /q "%USERPROFILE%\Local Settings\Temp\*.*"
@attrib -a -s -r -h "%TEMP%\*.*" /S /D&del /f /s /a /q "%TEMP%\*.*"
@attrib -a -s -r -h "%SYSTEMROOT%\Temp\*.*" /S /D&del /f /s /a /q "%SYSTEMROOT%\Temp\*.*"
@attrib -a -s -r -h "%SYSTEMROOT%\*.log"&del /f /q "%SYSTEMROOT%\*.log"
@attrib -a -s -r -h "%SYSTEMROOT%\*.txt"&del /f /q "%SYSTEMROOT%\*.txt"
@attrib -a -s -r -h "%SYSTEMROOT%\*.inf"&del /f /q "%SYSTEMROOT%\*.inf"
@attrib -a -s -r -h "%SYSTEMROOT%\Tasks\*.*"&del /f /q "%SYSTEMROOT%\Tasks\*.*"
@attrib -a -s -r -h "%SYSTEMROOT%\Prefetch\*.*"&del /f /q "%SYSTEMROOT%\Prefetch\*.*"
@attrib -a -s -r -h "%SYSTEMROOT%\ravmonlog.*"&del /f /q "%SYSTEMROOT%\ravmonlog.*"
@attrib -a -s -r -h "%SYSTEMROOT%\SYSTEM\autorun.*"&del /f /q "%SYSTEMROOT%\SYSTEM\autorun.*"
@attrib -a -s -r -h "%SYSTEMROOT%\SYSTEM32\autorun.*"&del /f /q "%SYSTEMROOT%\SYSTEM32\autorun.*"
@attrib -a -s -r -h "%SYSTEMROOT%\SYSTEM32\ravmonlog.*"&del /f /q "%SYSTEMROOT%\SYSTEM32\ravmonlog.*"
@attrib -a -s -r -h "%SYSTEMROOT%\autorun.*"&del /f /q "%SYSTEMROOT%\autorun.*"
@if exist "%WINDIR%\Fonts\*.exe" attrib -a -s -r -h "%WINDIR%\Fonts\*.exe"&del /f /q "%WINDIR%\Fonts\*.exe"
@if exist "%WINDIR%\Fonts\*.dll" attrib -a -s -r -h "%WINDIR%\Fonts\*.dll"&del /f /q "%WINDIR%\Fonts\*.dll"
@if exist "%WINDIR%\Fonts\*.pif" attrib -a -s -r -h "%WINDIR%\Fonts\*.pif"&del /f /q "%WINDIR%\Fonts\*.pif"
@if exist "%WINDIR%\Fonts\*.bat" attrib -a -s -r -h "%WINDIR%\Fonts\*.bat"&del /f /q "%WINDIR%\Fonts\*.bat"
@if exist "%WINDIR%\Fonts\*.cmd" attrib -a -s -r -h "%WINDIR%\Fonts\*.cmd"&del /f /q "%WINDIR%\Fonts\*.cmd"
@if exist "%WINDIR%\Fonts\*.tmp" attrib -a -s -r -h "%WINDIR%\Fonts\*.tmp"&del /f /q "%WINDIR%\Fonts\*.tmp"
@if exist "%WINDIR%\Fonts\*.scr" attrib -a -s -r -h "%WINDIR%\Fonts\*.scr"&del /f /q "%WINDIR%\Fonts\*.scr"
@if exist "%WINDIR%\Fonts\*.sys" attrib -a -s -r -h "%WINDIR%\Fonts\*.sys"&del /f /q "%WINDIR%\Fonts\*.sys"
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "autorun" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "winflash" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "windseven" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "regwintask" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "taskmid" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "amva" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "avpo" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "avpa" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "winfile" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "xnxlufi" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "kxvo" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "kamsoft" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "antivirusxp" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "bittorrent" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "olhrwef" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "oufddh" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "quit" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "recycler" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "semo" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "tavo" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "yyjnldu" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "meex" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "autorun" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "ahnsbsb" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "WinForm" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "activexdebugger32" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "SystemDrive" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "avp" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "kxva" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "kava" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "tava" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "TaskMonitor" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Realshade" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "cftmonn" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "vamsoft" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "kmmsoft" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "cdoosoft" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "dso32" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "cbvcs" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "jvsoft" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "ckvo" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "winconfig" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "csrcs" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "WinUpdater AutoRun" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "win.com" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Tok-Cirrhatus" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Bron-Spizaetus" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "SW20" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "SW24" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "ApnUpdater" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "UI0Detect" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "vds" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "WatAdminSvc" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "wbengine" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "forces_elite" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "StartCpl" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "dmehg.exe" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Microsoft Windows System" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "sound64" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "WTFCTF" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "wintcfg" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "adobemgr" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "SystemCheck" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "pmkjh" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Elite" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "MalWarrior" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "SpyFighterMonitor" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "SpyFighterUpdate" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "WinLogs" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "WinToch" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "WinYum" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "WinXn" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Java developer Script Browse" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Graphic Update" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "MSN Plus" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Debug" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "iPrint Tray" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Windows Service" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Microsoft Office" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Flash Player2" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "ValueX" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Servicee" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "iNotice" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Service Entry" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "DirectX9" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Master" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Firewall auto setup" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Microsoft Windows Automatic Updater" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Microsoft Windows Update" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Flash Driver" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Streams Drivers" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Firewall Administrating" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "4946550101" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Install" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Flashy Bot" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "svchostl" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Scxaxs" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "csrss.exe" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Zurik System" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Acrobat Reader" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Intel Corp" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Icxaxi" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Java Update" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Chrome" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "velyqyuf" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Smad" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "stubpath" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "LiveSp2" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Promix" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "myqaf" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Regedit32" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "mafi6whezj" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "patch.exe" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "iTunesHelper" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "VIPA" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Yahoo Messengger" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Intec Service Drivers" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "{3DFA1AE4-115C-AD7B-A6BA-A75086AF8442}" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "tarqen" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "{2C0BE568-4431-11DB-8C92-806D6172696F}" /f
@reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "{2C0BE568-4431-11DB-8C92-806D6172696F}" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "MicrosoftUpdateServices" /f
@reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "MicrosoftUpdateServices" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "snfob" /f
@reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "snfob" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "RegMon" /f
@reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "RegMon" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Run" /f
@reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Run" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "ortzz.exe" /f
@reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "ortzz.exe" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "RDSound" /f
@reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "RDSound" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "kwgoy" /f
@reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "kwgoy" /f
@reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "dso32" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "zaber0" /f
@reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "zaber0" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "zaber1" /f
@reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "zaber1" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "zaber2" /f
@reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "zaber2" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "zaber3" /f
@reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "zaber3" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "zaber4" /f
@reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "zaber4" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "zaber5" /f
@reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "zaber5" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "zaber6" /f
@reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "zaber6" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "zaber7" /f
@reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "zaber7" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "zaber8" /f
@reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "zaber8" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "zaber9" /f
@reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "zaber9" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Intel" /f
@reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Intel" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "updchecker" /f
@reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "updchecker" /f
@reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Minoral" /f
@reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Minoral" /f
@reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "{3DFA1AE4-115C-AD7B-A6BA-A75086AF8442}" /f
@reg add "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v Hidden /t REG_DWORD /d 1 /f
@reg add "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v SuperHidden /t REG_DWORD /d 1 /f
@reg add "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v ShowSuperHidden /t REG_DWORD /d 1 /f
@reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v Hidden /t REG_DWORD /d 1 /f
@reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v SuperHidden /t REG_DWORD /d 1 /f
@reg add "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v ShowSuperHidden /t REG_DWORD /d 1 /f
@reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN" /v CheckedValue /t REG_DWORD /d 2 /f
@reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN" /v DefaultValue /t REG_DWORD /d 2 /f
@reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL" /v CheckedValue /t REG_DWORD /d 1 /f
@reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL" /v DefaultValue /t REG_DWORD /d 2 /f
@reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden" /v CheckedValue /t REG_DWORD /d 0 /f
@reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden" /v DefaultValue /t REG_DWORD /d 0 /f
@reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden" /v Type /t REG_SZ /d Group /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v DisableRegistryTools /t REG_DWORD /d 0 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v DisableTaskMgr /t REG_DWORD /d 0 /f
@reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UsbStor" /V Start /T REG_DWORD /D 3 /F
@reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\StorageDevicePolicies" /V WriteProtect /T REG_DWORD /D 0 /F
@reg add "HKEY_LOCAL_MACHINE\\Software\Policies\Microsoft\Windows\System" /v "DisableCMD" /t REG_DWORD /d 0 /f
@reg add "HKEY_CURRENT_USER\Control Panel\Mouse" /v SwapMouseButtons /t REG_SZ /d 0 /f
@reg add "HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer" /v norun /t reg_dword /d 0 /f
@IF EXIST %WINDIR%\SYSTEM32\DRIVERS\ETC\HOSTS*.* ATTRIB +A -H -R -S %WINDIR%\SYSTEM32\DRIVERS\ETC\HOSTS*.*>NUL
@IF EXIST %WINDIR%\SYSTEM32\DRIVERS\ETC\HOSTS REN %WINDIR%\SYSTEM32\DRIVERS\ETC\HOSTS HOSTS.bak>NUL
@echo 127.0.0.1 localhost > %WINDIR%\SYSTEM32\DRIVERS\ETC\HOSTS
@echo 127.0.0.1 mpa.one.microsoft.com >> %WINDIR%\SYSTEM32\DRIVERS\ETC\HOSTS
@ipconfig.exe /release
@ipconfig.exe /renew
@ipconfig.exe /flushdns
@ipconfig.exe /registerdns
@start explorer.exe
@exitSaygılarımla..
