Random Technical Talk

Reply Subscribe

Thread Tools

Sep 7, 2015 | 05:15 PM

#641

doopstr

Team Owner

Joined: Jan 2001

Posts: 25,967

Likes: 2,685

From: Jersey

I'm still kicking it with my 42" NEC plasma.

Sep 8, 2015 | 11:06 AM

#642

stogie1020

Needs more Lemon Pledge

Joined: Mar 2005

Posts: 52,768

Likes: 2,000

From: Phoenix, AZ

Quote:

Originally Posted by #1 STUNNA

One of our clients got a new PC in March the drive started failing shortly after, so in June we called HP got a replacement sent to us and I cloned it using Norton Ghost.

Fast forward to this week and we're having drive problems again. This time I buy a new drive from BB ( Tiger Direct ) and clone from the HP replacement drive.

I look at the date of manufacture for the drive that HP sent in June and it was 02/2012!

WTF! 3.5 year old drive sent as a replacement! Fuck HP! I know they all do this refurb bullshit but I think we're going to start just replacing with new drives as soon as we see drive problems. Because it's a new drive and not a refurb POS and there's less downtime, we can have them up in a couple hours instead of waiting for the refurb drive to arrive.

I hate refurb drives as replacement for new. What happened to TD? Their web site is up.

Sep 8, 2015 | 03:03 PM

#643

#1 STUNNA

Sanest Florida Man

Joined: Aug 2007

Posts: 45,948

Likes: 11,748

From: Florida

They took over the CompUSA retail stores in the area a few years back and then they closed them down a couple months ago.

Shit sucks, I hated many things about the store but they had most everything we needed, obscure cables, many part options, etc that BB or Staples don't have. You had 20 choices for power supplies, graphics cards, hard drives. Now I go to BB and they only have 2 GPUs, 1 Power supply, 2-3 choices for hard drives.

Sep 9, 2015 | 10:47 AM

#644

#1 STUNNA

Sanest Florida Man

Joined: Aug 2007

Posts: 45,948

Likes: 11,748

From: Florida

For JeffE or WarrenS. Who's the guy who made S2Cleaner? I love that little utility, I paid him $10 and we still use it from time to time. Has he renamed/updated it? I'm a little hesitant to run it on Windows 8 or 10 since my version is a few years old now.

Sep 9, 2015 | 11:27 AM

#645

Whiskers

Go Giants

Joined: Aug 2004

Posts: 70,003

Likes: 1,260

From: PA

Quote:

Originally Posted by #1 STUNNA

Lol, his name is Trendon Shavers and if you google his name you will see that he started a bitcoin ponzi scheme and is probably in some Federal Prison. He owes me some money too (not bitcoin related).

Sep 9, 2015 | 11:34 AM

#646

stogie1020

Needs more Lemon Pledge

Joined: Mar 2005

Posts: 52,768

Likes: 2,000

From: Phoenix, AZ

I think that .BAT file made the machines it was used on into some kind of BC mining drones...

Sep 9, 2015 | 12:04 PM

#647

Whiskers

Go Giants

Joined: Aug 2004

Posts: 70,003

Likes: 1,260

From: PA

Sep 9, 2015 | 08:14 PM

#648

#1 STUNNA

Sanest Florida Man

Joined: Aug 2007

Posts: 45,948

Likes: 11,748

From: Florida

Yo WTF! I've never noticed anything weird like high CPU after running it. I'm pretty sure I've run it on my PCs before and analyzed the bat file out of boredom before and never noticed anything like that.

Sep 9, 2015 | 08:17 PM

#649

doopstr

Team Owner

Joined: Jan 2001

Posts: 25,967

Likes: 2,685

From: Jersey

Alert Name: S2CLEANER.EXE
Country Origin: INDONESIA on Dec 8 2008

Don't need to read any more than that

Sep 9, 2015 | 08:20 PM

#650

Whiskers

Go Giants

Joined: Aug 2004

Posts: 70,003

Likes: 1,260

From: PA

Rip

Sep 13, 2015 | 11:08 AM

#651

mcflyguy24

Suzuka Master

Joined: Feb 2007

Posts: 5,846

Likes: 24

From: Oreland, Pa

Quote:

Originally Posted by #1 STUNNA

I'm lucky enough to have a micro center retail location right near me. They have everything, however the store is a bit of a cluster-fuck inside.

Sep 14, 2015 | 05:10 PM

#652

#1 STUNNA

Sanest Florida Man

Joined: Aug 2007

Posts: 45,948

Likes: 11,748

From: Florida

Quote:

Originally Posted by doopstr

Alert Name: S2CLEANER.EXE
Country Origin: INDONESIA on Dec 8 2008

Don't need to read any more than that

Except it's a bat file

Here's the code if you want it

Code:

@echo off
REM Get the directory that this script is running in
set S2CLEANER_PATH=%~dp0

@echo off
title S2Cleaner V3.4 - S2Experts.com
color 1F

:begin
cls
echo.
echo  S2Cleaner
echo.
echo   The use of this program is at your own risk. Using this tool without the
echo   proper knowledge can be dangerous and render your computer useless. Always
echo   use the latest update at http://tiny.cc/s2cleaner. Don't forget to donate.
echo.
echo   Main Menu
echo.
echo    1. Automatic Mode (Virus Cleanup)
echo    2. Repair Tools
echo    3. Virus Tools
echo    x. Exit
echo.

set /p choice=  Choose A Selection:
if not '%choice%'== set %choice%=choice:~0,1%

if '%choice%'=='1' goto :runall
if '%choice%'=='2' goto :tools
if '%choice%'=='3' goto :virus
if '%choice%'=='x' goto :exit

cls
echo.
echo "%choice%" is not a valid answer.
echo.
goto begin

:exit
exit

REM Tools Menu ==================================================================

:tools
cls
@echo off
echo   Tools Menu
echo.
echo    1. Reset Winsock
echo    2. Reset Permissions
echo    3. Reset File Associations
echo    4. Reset Windows Update
echo    5. Reset Internet Explorer
echo    6. Reset Print Services (Must Reinstall Printers)
echo    7. Install MSI For (Safe Mode)
echo    8. Remove All BHO's (Toolbar's)
echo    9. Wallpaper Fix
echo    x. Back To Main Menu
echo.

set /p choice=  Choose A Service:
if not '%choice%'== set %choice%=choice:~0,1%

if '%choice%'=='1' goto :resetwinsock
if '%choice%'=='2' goto :resetperm
if '%choice%'=='3' goto :resetassoc
if '%choice%'=='4' goto :resetwu
if '%choice%'=='5' goto :resetie
if '%choice%'=='6' goto :resetprint
if '%choice%'=='7' goto :loadmsi
if '%choice%'=='8' goto :removebho
if '%choice%'=='9' goto :wpf
if '%choice%'=='x' goto :begin

cls
echo.
echo "%choice%" is not a valid answer.
echo.
goto tools

REM Virus Menu ==================================================================

:virus
cls
@echo off
echo   Virus Menu
echo.
echo    1. MS Recovery Repair
echo    2. Fix Start Menu
echo    3. Show System/Hidden Files
echo    4. Hide System/Hidden Files
echo    x. Back To Main Menu
echo.

set /p choice=  Choose A Service:
if not '%choice%'== set %choice%=choice:~0,1%

if '%choice%'=='1' goto :unhidefiles
if '%choice%'=='2' goto :fixsm
if '%choice%'=='3' goto :hidefiles
if '%choice%'=='4' goto :showfiles
if '%choice%'=='x' goto :begin

cls
echo.
echo "%choice%" is not a valid answer.
echo.
goto virus

:hidefiles
cls
@echo off
echo.
echo  Hiding System/Hidden Files
regedit.exe /s hide.reg
TASKKILL /F /IM explorer.exe
START explorer.exe
goto virus

:showfiles
cls
@echo off
echo.
echo  Showing System/Hidden Files
regedit.exe /s show.reg
TASKKILL /F /IM explorer.exe
START explorer.exe
goto virus

:unhidefiles
cls
@echo off
echo.
echo  Repairing MS Recovery Damage
attrib -H C:\*.* /s /d
echo.
goto virus

:fixsm
cls
@echo off
echo.
echo  Fixing The Start Menu
IF EXIST %Temp%\smtmp\1 goto :smyes
cls
echo.
echo.
echo  Oh no, looks like someone ran a temp file cleanup.
echo  I can't fix it now. Sorry :(
echo.
echo.
pause
goto virus

:smyes
cls
VER|find "Windows XP">NUL
IF NOT ERRORLEVEL 1 GOTO copysmxp
VER|find "Version 6">NUL
IF NOT ERRORLEVEL 1 GOTO copysmvista
VER|find "Version 7">NUL
IF NOT ERRORLEVEL 1 GOTO copysmvista
VER|find "Windows 95">NUL
IF NOT ERRORLEVEL 1 GOTO sorry
VER|find "Windows 98">NUL
IF NOT ERRORLEVEL 1 GOTO sorry
VER|find "Windows Millennium">NUL
IF NOT ERRORLEVEL 1 GOTO sorry
pause

:copysmxp
cls
@echo off
echo.
echo  Coping Files
xcopy %temp%\smtmp\1 /E /Y /H "%userprofile%\Start Menu\"
cls
echo.
echo.
echo  You should have your start menu back.
echo.
echo.
pause
goto virus

:copysmvista
cls
@echo off
echo.
echo  Coping Files
xcopy %temp%\smtmp\1 /E /Y /H "C:\ProgramData\Microsoft\Windows\Start Menu\"
cls
echo.
echo.
echo  You should have your start menu back.
echo.
echo.
pause
goto virus

:wpf
cls
@echo off
echo.
echo  Fixing Wallpaper
regedit.exe /s wallpaperfix.reg
goto tools

:resetwinsock
cls
VER|find "Windows XP">NUL
IF NOT ERRORLEVEL 1 GOTO resetwinsockxp
VER|find "Version 6">NUL
IF NOT ERRORLEVEL 1 GOTO resetwinsockvista
VER|find "Version 7">NUL
IF NOT ERRORLEVEL 1 GOTO resetwinsockvista
VER|find "Windows 95">NUL
IF NOT ERRORLEVEL 1 GOTO sorry
VER|find "Windows 98">NUL
IF NOT ERRORLEVEL 1 GOTO sorry
VER|find "Windows Millennium">NUL
IF NOT ERRORLEVEL 1 GOTO sorry

:removebho
cls
@echo off
echo.
echo  Removing BHO's (Toolbar's)
regedit.exe /s removebhos.reg
ping localhost -n 1 > nul
cls
GOTO tools

:loadmsi
cls
@echo off
echo.
echo  Installing MSI For Safe Mode
regedit.exe /s msistart.reg
ping localhost -n 1 > nul
net start msiserver
cls
GOTO tools

:resetwinsockxp
cls
@echo off
echo.
echo  Resetting Winsock
ping localhost -n 1 > nul
netsh firewall reset
netsh int ip reset winsockreset.txt
netsh winsock reset
ipconfig /flushdns
cls
GOTO tools

:resetwinsockvista
cls
@echo off
echo.
echo  Resetting Winsock
ping localhost -n 1 > nul
netsh advfirewall reset
netsh int ip reset winsockreset.txt
netsh winsock reset
ipconfig /flushdns
cls
GOTO tools

:resetperm
cls
@echo off
echo   Permissions Menu
echo.
echo    1. Quick Reset (Recommended)
echo    2. Full Reset  (This takes a while)
echo    x. Back To Tools Menu
echo.

set /p choice=  Choose A Service:
if not '%choice%'== set %choice%=choice:~0,1%

if '%choice%'=='1' goto :resetpermq
if '%choice%'=='2' goto :resetpermf
if '%choice%'=='x' goto :tools

cls
echo.
echo "%choice%" is not a valid answer.
echo.
goto tools

:resetpermq
cls
VER|find "Windows XP">NUL
IF NOT ERRORLEVEL 1 GOTO resetpermqxp
VER|find "Version 6">NUL
IF NOT ERRORLEVEL 1 GOTO resetpermqvista
VER|find "Version 7">NUL
IF NOT ERRORLEVEL 1 GOTO resetpermqvista
VER|find "Windows 95">NUL
IF NOT ERRORLEVEL 1 GOTO sorry
VER|find "Windows 98">NUL
IF NOT ERRORLEVEL 1 GOTO sorry
VER|find "Windows Millennium">NUL
IF NOT ERRORLEVEL 1 GOTO sorry

:resetpermqxp
cls
@echo off
echo.
echo  Resetting Windows Permissions (Quick)
ping localhost -n 1 > nul
secedit /configure /cfg %windir%\repair\secsetup.inf /db secsetup.sdb /verbose
goto :resetperm

:resetpermqvista
cls
@echo off
echo.
echo  Resetting Windows Permissions (Quick)
ping localhost -n 1 > nul
secedit /configure /cfg %windir%\inf\defltbase.inf /db defltbase.sdb /verbose
goto :resetperm

:resetpermf
cls
@echo off
echo.
echo  Resetting Windows Permissions (Full)

subinacl /subkeyreg HKEY_LOCAL_MACHINE /grant=administrators=f
subinacl /subkeyreg HKEY_CURRENT_USER /grant=administrators=f
subinacl /subkeyreg HKEY_CLASSES_ROOT /grant=administrators=f
subinacl /subdirectories %SystemDrive% /grant=administrators=f
subinacl /subkeyreg HKEY_LOCAL_MACHINE /grant=system=f
subinacl /subkeyreg HKEY_CURRENT_USER /grant=system=f
subinacl /subkeyreg HKEY_CLASSES_ROOT /grant=system=f
subinacl /subdirectories %SystemDrive% /grant=system=f
goto :resetperm

:resetassoc
cls
@echo off
echo   File Associations Menu
echo.
echo    1. Reset .HTML/.HTM
echo    2. Reset .LNK (shortcuts)
echo    3. Reset .URL
echo    x. Back To Tools Menu
echo.

set /p choice=  Choose A Service:
if not '%choice%'== set %choice%=choice:~0,1%

if '%choice%'=='1' goto :html
if '%choice%'=='2' goto :lnk
if '%choice%'=='3' goto :url
if '%choice%'=='x' goto :tools

cls
echo.
echo "%choice%" is not a valid answer.
echo.
goto :resetassoc


:html
cls
@echo off
echo.
echo  Resetting HTML Associations
ping localhost -n 1 > nul
regedit.exe /s HTM.reg
goto :resetassoc

:lnk
cls
@echo off
echo.
echo  Resetting LNK Associations
ping localhost -n 1 > nul
regedit.exe /s LNK.reg
goto :resetassoc

:url
cls
@echo off
echo.
echo  Resetting URL Associations
ping localhost -n 1 > nul
regedit.exe /s URL.reg
goto :resetassoc

:resetie
cls
@echo off
echo.
echo  Resetting Internet Explorer
regsvr32 /s /i browseui.dll
regsvr32 /s corpol.dll
regsvr32 /s dxtmsft.dll
regsvr32 /s dxtrans.dll
regsvr32 /s "%ProgramFiles%\internet explorer\hmmapi.dll"
regsvr32 /s ieaksie.dll
regsvr32 /s ieapfltr.dll
regsvr32 /s iedkcs32.dll
regsvr32 /s "%ProgramFiles%\internet explorer\iedvtool.dll"
regsvr32 /s iepeers.dll
regsvr32 /s "%ProgramFiles%\internet explorer\ieproxy.dll"
regsvr32 /s /i /n inetcpl.cpl
regsvr32 /s jscript.dll
regsvr32 /s licmgr10.dll
regsvr32 /s Shell32.dll
regsvr32 /s msdbg2.dll
regsvr32 /s Msjava.dll
regsvr32 /s mshtmled.dll
regsvr32 /s msident.dll
regsvr32 /s mstime.dll
regsvr32 /s "%ProgramFiles%\internet explorer\pdm.dll"
regsvr32 /s tdc.ocx
regsvr32 /s /i urlmon.dll
regsvr32 /s vbscript.dll
regsvr32 /s "%ProgramFiles%\microsoft shared\vgx\vgx.dll"
regsvr32 /s /i /n wininet.dll
regsvr32 /s extmgr.dll
regsvr32 /s mscoree.dll
regsvr32 /s oleacc.dll
regsvr32 /s ole32.dll
regsvr32 /s actxprxy.dll
regsvr32 /s asctrls.ocx
regsvr32 /s cdfview.dll
regsvr32 /s comcat.dll
regsvr32 /s /i /n comctl32.dll
regsvr32 /s cryptdlg.dll
regsvr32 /s /i /n digest.dll
regsvr32 /s dispex.dll
regsvr32 /s hlink.dll
regsvr32 /s mlang.dll
regsvr32 /s mobsync.dll
regsvr32 /s /i msieftp.dll
regsvr32 /s msr2c.dll
regsvr32 /s msxml.dll
regsvr32 /s oleaut32.dll
regsvr32 /s proctexe.ocx
regsvr32 /s /i scrobj.dll
regsvr32 /s shdocvw.dll
regsvr32 /s /i shdocvw.dll
regsvr32 /s sendmail.dll
regsvr32 /s /i ieframe.dll
regsvr32 /s /n /i inetcpl.cpl
regedit.exe /s ieset.reg
%systemroot%\SysWoW64\regsvr32.exe /s /i %systemroot%\SysWoW64\browseui.dll
%systemroot%\SysWoW64\regsvr32.exe /s %systemroot%\SysWoW64\corpol.dll
%systemroot%\SysWoW64\regsvr32.exe /s %systemroot%\SysWoW64\dxtmsft.dll
%systemroot%\SysWoW64\regsvr32.exe /s %systemroot%\SysWoW64\dxtrans.dll
%systemroot%\SysWoW64\regsvr32.exe /s "%ProgramFiles(x86)%\internet explorer\hmmapi.dll"
%systemroot%\SysWoW64\regsvr32.exe /s %systemroot%\SysWoW64\ieaksie.dll
%systemroot%\SysWoW64\regsvr32.exe /s %systemroot%\SysWoW64\ieapfltr.dll
%systemroot%\SysWoW64\regsvr32.exe /s %systemroot%\SysWoW64\iedkcs32.dll
%systemroot%\SysWoW64\regsvr32.exe /s "%ProgramFiles(x86)%\internet explorer\iedvtool.dll"
%systemroot%\SysWoW64\regsvr32.exe /s %systemroot%\SysWoW64\iepeers.dll
%systemroot%\SysWoW64\regsvr32.exe /s "%ProgramFiles(x86)%\internet explorer\ieproxy.dll"
%systemroot%\SysWoW64\iesetup.dll
%systemroot%\SysWoW64\imgutil.dll
%systemroot%\SysWoW64\regsvr32.exe /s /i /n %systemroot%\SysWoW64\inetcpl.cpl
%systemroot%\SysWoW64\regsvr32.exe /s %systemroot%\SysWoW64\jscript.dll
%systemroot%\SysWoW64\regsvr32.exe /s %systemroot%\SysWoW64\licmgr10.dll
%systemroot%\SysWoW64\msapsspc.dll
%systemroot%\SysWoW64\mshta.exe
%systemroot%\SysWoW64\regsvr32.exe /s %systemroot%\SysWoW64\msdbg2.dll
%systemroot%\SysWoW64\regsvr32.exe /s %systemroot%\SysWoW64\mshtmled.dll
%systemroot%\SysWoW64\regsvr32.exe /s %systemroot%\SysWoW64\msident.dll
%systemroot%\SysWoW64\regsvr32.exe /s %systemroot%\SysWoW64\mstime.dll
%systemroot%\SysWoW64\regsvr32.exe /s "%ProgramFiles(x86)%\internet explorer\pdm.dll"
%systemroot%\SysWoW64\regsvr32.exe /s %systemroot%\SysWoW64\tdc.ocx
%systemroot%\SysWoW64\regsvr32.exe /s /i %systemroot%\SysWoW64\urlmon.dll
%systemroot%\SysWoW64\regsvr32.exe /s %systemroot%\SysWoW64\vbscript.dll
%systemroot%\SysWoW64\regsvr32.exe /s "%CommonProgramFiles(x86)%\microsoft shared\vgx\vgx.dll"
%systemroot%\SysWoW64\regsvr32.exe /s /i /n %systemroot%\SysWoW64\wininet.dll
%systemroot%\SysWoW64\regsvr32.exe /s %systemroot%\SysWoW64\extmgr.dll
%systemroot%\SysWoW64\regsvr32.exe /s %systemroot%\SysWoW64\mscoree.dll
%systemroot%\SysWoW64\regsvr32.exe /s %systemroot%\SysWoW64\oleacc.dll
%systemroot%\SysWoW64\regsvr32.exe /s %systemroot%\SysWoW64\ole32.dll
%systemroot%\SysWoW64\regsvr32.exe /s %systemroot%\SysWoW64\actxprxy.dll
%systemroot%\SysWoW64\regsvr32.exe /s %systemroot%\SysWoW64\asctrls.ocx
%systemroot%\SysWoW64\regsvr32.exe /s %systemroot%\SysWoW64\cdfview.dll
%systemroot%\SysWoW64\regsvr32.exe /s %systemroot%\SysWoW64\comcat.dll
%systemroot%\SysWoW64\regsvr32.exe /s /i /n %systemroot%\SysWoW64\comctl32.dll
%systemroot%\SysWoW64\regsvr32.exe /s %systemroot%\SysWoW64\cryptdlg.dll
%systemroot%\SysWoW64\regsvr32.exe /s /i /n %systemroot%\SysWoW64\digest.dll
%systemroot%\SysWoW64\regsvr32.exe /s %systemroot%\SysWoW64\dispex.dll
%systemroot%\SysWoW64\regsvr32.exe /s %systemroot%\SysWoW64\hlink.dll
%systemroot%\SysWoW64\regsvr32.exe /s %systemroot%\SysWoW64\mlang.dll
%systemroot%\SysWoW64\regsvr32.exe /s %systemroot%\SysWoW64\mobsync.dll
%systemroot%\SysWoW64\regsvr32.exe /s /i %systemroot%\SysWoW64\msieftp.dll
%systemroot%\SysWoW64\regsvr32.exe /s %systemroot%\SysWoW64\msr2c.dll
%systemroot%\SysWoW64\regsvr32.exe /s %systemroot%\SysWoW64\msxml.dll
%systemroot%\SysWoW64\regsvr32.exe /s %systemroot%\SysWoW64\oleaut32.dll
%systemroot%\SysWoW64\regsvr32.exe /s %systemroot%\SysWoW64\proctexe.ocx
%systemroot%\SysWoW64\regsvr32.exe /s /i %systemroot%\SysWoW64\scrobj.dll
%systemroot%\SysWoW64\regsvr32.exe /s /i %systemroot%\SysWoW64\shdocvw.dll
%systemroot%\SysWoW64\regsvr32.exe /s %systemroot%\SysWoW64\sendmail.dll
ping localhost -n 1 > nul
cls
goto :tools

:resetprint
cls
@echo off
echo.
echo  Resetting Windows Printing
ping localhost -n 1 > nul
net stop spooler
regedit.exe /s printer.reg
del c:\%systemroot%\System32\spool\printers\*.* /s /f
rmdir C:\WINDOWS\system32\spool\drivers\w32x86\ /s /q
mkdir C:\WINDOWS\system32\spool\drivers\w32x86\
rmdir C:\WINDOWS\system32\spool\drivers\x64\ /s /q
mkdir C:\WINDOWS\system32\spool\drivers\x64\
net start spooler
goto :tools

:resetwu
cls
VER|find "Windows XP">NUL
IF NOT ERRORLEVEL 1 GOTO resetwuxp
VER|find "Version 6">NUL
IF NOT ERRORLEVEL 1 GOTO resetwuvista
VER|find "Version 7">NUL
IF NOT ERRORLEVEL 1 GOTO resetwuvista
VER|find "Windows 95">NUL
IF NOT ERRORLEVEL 1 GOTO sorry
VER|find "Windows 98">NUL
IF NOT ERRORLEVEL 1 GOTO sorry
VER|find "Windows Millennium">NUL
IF NOT ERRORLEVEL 1 GOTO sorry

:resetwuxp
cls
@echo off
echo.
echo  Resetting Windows Update
ping localhost -n 1 > nul
net stop wuauserv
regsvr32 /u wuapi.dll /s
regsvr32 /u wups.dll /s
regsvr32 /u wuaueng.dll /s
regsvr32 /u wuaueng1.dll /s
regsvr32 /u wucltui.dll /s
regsvr32 /u wuweb.dll /s
regsvr32 /u MSXML3.dll /s
regsvr32 /u qmgr.dll /s
regsvr32 /u qmgrprxy.dll /s
regsvr32 /u jscript.dll /s
regsvr32 /u wups2.dll /s
regsvr32 /u atl.dll /s
regsvr32 wuapi.dll /s
regsvr32 wups.dll /s
regsvr32 wuaueng.dll /s
regsvr32 wuaueng1.dll /s
regsvr32 wucltui.dll /s
regsvr32 wuweb.dll /s
regsvr32 MSXML3.dll /s
regsvr32 qmgr.dll /s
regsvr32 qmgrprxy.dll /s
regsvr32 jscript.dll /s
regsvr32 wups2.dll /s
regsvr32 atl.dll /s
cd %windir%
ren SoftwareDistribution SoftDist-old
net start wuauserv
goto :tools

:resetwuvista
cls
@echo off
echo.
echo  Resetting Windows Update
ping localhost -n 1 > nul
net stop wuauserv
net stop BITS
net stop cryptsvc
rd SoftwareDistribution.old /s /q
ren SoftwareDistribution SoftwareDistribution.old
regsvr32 C:\WINDOWS\system32\msi.dll /s
regsvr32 C:\WINDOWS\system32\msxml.dll /s
regsvr32 C:\WINDOWS\system32\msxml.dll /s
regsvr32 C:\WINDOWS\system32\msxml2.dll /s
regsvr32 C:\WINDOWS\system32\msxml2.dll /s
regsvr32 C:\WINDOWS\system32\msxml3.dll /s
regsvr32 C:\WINDOWS\system32\msxml3.dll /s
regsvr32 C:\WINDOWS\system32\qmgr.dll /s
regsvr32 C:\WINDOWS\system32\qmgr.dll /s
regsvr32 C:\WINDOWS\system32\qmgrprxy.dll /s
regsvr32 C:\WINDOWS\system32\qmgrprxy.dll /s
regsvr32 C:\WINDOWS\system32\winhttp.dll /s
regsvr32 C:\WINDOWS\system32\winhttp.dll /s
regsvr32 C:\WINDOWS\system32\wuapi.dll /s
regsvr32 C:\WINDOWS\system32\wuaueng.dll /s
regsvr32 C:\WINDOWS\system32\wuaueng.dll /s
regsvr32 C:\WINDOWS\system32\wuaueng1.dll /s
regsvr32 C:\WINDOWS\system32\wuaueng1.dll /s
regsvr32 C:\WINDOWS\system32\wucltui.dll /s
regsvr32 C:\WINDOWS\system32\wucltui.dll /s
regsvr32 C:\WINDOWS\system32\wups.dll /s
regsvr32 C:\WINDOWS\system32\wups.dll /s
regsvr32 C:\WINDOWS\system32\wups2.dll /s
regsvr32 C:\WINDOWS\system32\wups2.dll /s
regsvr32 C:\WINDOWS\system32\wuweb.dll /s
regsvr32 C:\WINDOWS\system32\wuweb.dll /s
regsvr32 C:\WINDOWS\system32\ole32.dll /s
cmd.exe /c rmdir /q /s C:\WINDOWS\system32\Catroot2
regsvr32 C:\WINDOWS\system32\cryptdlg.dll /s
regsvr32 C:\WINDOWS\system32\cryptdlg.dll /s
regsvr32 C:\WINDOWS\system32\cryptui.dll /s
regsvr32 C:\WINDOWS\system32\cryptui.dll /s
regsvr32 C:\WINDOWS\system32\cryptext.dll /s
regsvr32 C:\WINDOWS\system32\cryptext.dll /s
regsvr32 C:\WINDOWS\system32\dssenh.dll /s
regsvr32 C:\WINDOWS\system32\dssenh.dll /s
regsvr32 C:\WINDOWS\system32\gpkcsp.dll /s
regsvr32 C:\WINDOWS\system32\gpkcsp.dll /s
regsvr32 C:\WINDOWS\system32\initpki.dll /s
regsvr32 C:\WINDOWS\system32\initpki.dll /s
regsvr32 C:\WINDOWS\system32\licdll.dll /s
regsvr32 C:\WINDOWS\system32\licdll.dll /s
regsvr32 C:\WINDOWS\system32\mssign32.dll /s
regsvr32 C:\WINDOWS\system32\mssign32.dll /s
regsvr32 C:\WINDOWS\system32\mssip32.dll /s
regsvr32 C:\WINDOWS\system32\mssip32.dll /s
regsvr32 C:\WINDOWS\system32\scardssp.dll /s
regsvr32 C:\WINDOWS\system32\scardssp.dll /s
regsvr32 C:\WINDOWS\system32\sccbase.dll /s
regsvr32 C:\WINDOWS\system32\sccbase.dll /s
regsvr32 C:\WINDOWS\system32\scecli.dll /s
regsvr32 C:\WINDOWS\system32\scecli.dll /s
regsvr32 C:\WINDOWS\system32\softpub.dll /s
regsvr32 C:\WINDOWS\system32\softpub.dll /s
regsvr32 C:\WINDOWS\system32\slbcsp.dll /s
regsvr32 C:\WINDOWS\system32\slbcsp.dll /s
regsvr32 C:\WINDOWS\system32\regwizc.dll /s
regsvr32 C:\WINDOWS\system32\regwizc.dll /s
regsvr32 C:\WINDOWS\system32\rsaenh.dll /s
regsvr32 C:\WINDOWS\system32\rsaenh.dll /s
regsvr32 C:\WINDOWS\system32\winhttp.dll /s
regsvr32 C:\WINDOWS\system32\winhttp.dll /s
regsvr32 C:\WINDOWS\system32\wintrust.dll /s
regsvr32 C:\WINDOWS\system32\wintrust.dll /s
regsvr32 C:\WINDOWS\system32\acelpdec.ax /s
regsvr32 C:\WINDOWS\system32\actxprxy.dll /s
regsvr32 C:\WINDOWS\system32\asctrls.ocx /s
regsvr32 C:\WINDOWS\system32\daxctle.ocx /s
regsvr32 C:\WINDOWS\system32\hhctrl.ocx /s
regsvr32 C:\WINDOWS\system32\l3codecx.ax /s
regsvr32 C:\WINDOWS\system32\licmgr10.dll /s
regsvr32 C:\WINDOWS\system32\mpg4ds32.ax /s
regsvr32 C:\WINDOWS\system32\msdxm.ocx /s
regsvr32 C:\WINDOWS\system32\proctexe.ocx /s
regsvr32 C:\WINDOWS\system32\tdc.ocx /s
regsvr32 C:\WINDOWS\system32\wshom.ocx /s
regsvr32 C:\WINDOWS\system32\inetcpl.cpl /s
regsvr32 C:\WINDOWS\system32\appwiz.cpl /s
regsvr32 C:\WINDOWS\system32\appwiz.cpl /s
regsvr32 C:\WINDOWS\system32\nusrmgr.cpl /s
regsvr32 C:\WINDOWS\system32\nusrmgr.cpl /s
regsvr32 C:\WINDOWS\system32\quartz.dll /s
regsvr32 C:\WINDOWS\system32\danim.dll /s
regsvr32 C:\WINDOWS\system32\dmscript.dll /s
regsvr32 C:\WINDOWS\system32\dmstyle.dll /s
regsvr32 C:\WINDOWS\system32\dxmasf.dll /s
regsvr32 C:\WINDOWS\system32\dxtmsft.dll /s
regsvr32 C:\WINDOWS\system32\dxtrans.dll /s
regsvr32 C:\WINDOWS\system32\sbe.dll /s
regsvr32 C:\WINDOWS\system32\atl.dll /s
regsvr32 C:\WINDOWS\system32\corpol.dll /s
regsvr32 C:\WINDOWS\system32\jscript.dll /s
regsvr32 C:\WINDOWS\system32\dispex.dll /s
regsvr32 C:\WINDOWS\system32\scrrun.dll /s
regsvr32 C:\WINDOWS\system32\scrobj.dll /s
regsvr32 C:\WINDOWS\system32\vbscript.dll /s
regsvr32 C:\WINDOWS\system32\wshext.dll /s
regsvr32 C:\WINDOWS\system32\activeds.dll /s
regsvr32 C:\WINDOWS\system32\browseui.dll /s
regsvr32 C:\WINDOWS\system32\browseui.dll /s
regsvr32 C:\WINDOWS\system32\browsewm.dll /s
regsvr32 C:\WINDOWS\system32\cabview.dll /s
regsvr32 C:\WINDOWS\system32\cdfview.dll /s
regsvr32 C:\WINDOWS\system32\clbcatex.dll /s
regsvr32 C:\WINDOWS\system32\clbcatq.dll /s
regsvr32 C:\WINDOWS\system32\comcat.dll /s
regsvr32 C:\WINDOWS\system32\cscui.dll /s
regsvr32 C:\WINDOWS\system32\credui.dll /s
regsvr32 C:\WINDOWS\system32\datime.dll /s
regsvr32 C:\WINDOWS\system32\devmgr.dll /s
regsvr32 C:\WINDOWS\system32\dfsshlex.dll /s
regsvr32 C:\WINDOWS\system32\dmdlgs.dll /s
regsvr32 C:\WINDOWS\system32\dmdskmgr.dll /s
regsvr32 C:\WINDOWS\system32\dmloader.dll /s
regsvr32 C:\WINDOWS\system32\dmocx.dll /s
regsvr32 C:\WINDOWS\system32\dmview.ocx /s
regsvr32 C:\WINDOWS\system32\dsuiext.dll /s
regsvr32 C:\WINDOWS\system32\dsuiext.dll /s
regsvr32 C:\WINDOWS\system32\dsquery.dll /s
regsvr32 C:\WINDOWS\system32\dsquery.dll /s
regsvr32 C:\WINDOWS\system32\dskquoui.dll /s
regsvr32 C:\WINDOWS\system32\els.dll /s
regsvr32 C:\WINDOWS\system32\es.dll /s
regsvr32 C:\WINDOWS\system32\fontext.dll /s
regsvr32 C:\WINDOWS\system32\hlink.dll /s
regsvr32 C:\WINDOWS\system32\hnetcfg.dll /s
regsvr32 C:\WINDOWS\system32\iedkcs32.dll /s
regsvr32 C:\WINDOWS\system32\iepeers.dll /s
regsvr32 C:\WINDOWS\system32\iesetup.dll /s
regsvr32 C:\WINDOWS\system32\ils.dll /s
regsvr32 C:\WINDOWS\system32\imgutil.dll /s
regsvr32 C:\WINDOWS\system32\inetcfg.dll /s
regsvr32 C:\WINDOWS\system32\inetcomm.dll /s
regsvr32 C:\WINDOWS\system32\inseng.dll /s
regsvr32 C:\WINDOWS\system32\laprxy.dll /s
regsvr32 C:\WINDOWS\system32\lmrt.dll /s
regsvr32 C:\WINDOWS\system32\mlang.dll /s
regsvr32 C:\WINDOWS\system32\mmcndmgr.dll /s
regsvr32 C:\WINDOWS\system32\mmcshext.dll /s
regsvr32 C:\WINDOWS\system32\mscoree.dll /s
regsvr32 C:\WINDOWS\system32\mshtml.dll /s
regsvr32 C:\WINDOWS\system32\mshtmled.dll /s
regsvr32 C:\WINDOWS\system32\msieftp.dll /s
regsvr32 C:\WINDOWS\system32\msoeacct.dll /s
regsvr32 C:\WINDOWS\system32\msr2c.dll /s
regsvr32 C:\WINDOWS\system32\msrating.dll /s
regsvr32 C:\WINDOWS\system32\mydocs.dll /s
regsvr32 C:\WINDOWS\system32\mstime.dll /s
regsvr32 C:\WINDOWS\system32\netcfgx.dll /s
regsvr32 C:\WINDOWS\system32\netplwiz.dll /s
regsvr32 C:\WINDOWS\system32\netman.dll /s
regsvr32 C:\WINDOWS\system32\netshell.dll /s
regsvr32 C:\WINDOWS\system32\ntmsevt.dll /s
regsvr32 C:\WINDOWS\system32\ntmsmgr.dll /s
regsvr32 C:\WINDOWS\system32\ntmssvc.dll /s
regsvr32 C:\WINDOWS\system32\occache.dll /s
regsvr32 C:\WINDOWS\system32\ole32.dll /s
regsvr32 C:\WINDOWS\system32\oleaut32.dll /s
regsvr32 C:\WINDOWS\system32\oleacc.dll /s
regsvr32 C:\WINDOWS\system32\olepro32.dll /s
regsvr32 C:\WINDOWS\system32\photowiz.dll /s
regsvr32 C:\WINDOWS\system32\pngfilt.dll /s
regsvr32 C:\WINDOWS\system32\remotepg.dll /s
regsvr32 C:\WINDOWS\system32\rpcrt4.dll /s
regsvr32 C:\WINDOWS\system32\rshx32.dll /s
regsvr32 C:\WINDOWS\system32\sendmail.dll /s
regsvr32 C:\WINDOWS\system32\slayerxp.dll /s
regsvr32 C:\WINDOWS\system32\shdocvw.dll /s
regsvr32 C:\WINDOWS\system32\shell32.dll /s
regsvr32 C:\WINDOWS\system32\shmedia.dll /s
regsvr32 C:\WINDOWS\system32\shimgvw.dll /s
regsvr32 C:\WINDOWS\system32\shsvcs.dll /s
regsvr32 C:\WINDOWS\system32\srclient.dll /s
regsvr32 C:\WINDOWS\system32\stobject.dll /s
regsvr32 C:\WINDOWS\system32\stobject.dll /s
regsvr32 C:\WINDOWS\system32\themeui.dll /s
regsvr32 C:\WINDOWS\system32\twext.dll /s
regsvr32 C:\WINDOWS\system32\urlmon.dll /s
regsvr32 C:\WINDOWS\system32\userenv.dll /s
regsvr32 C:\WINDOWS\system32\webcheck.dll /s
regsvr32 C:\WINDOWS\system32\webvw.dll /s
regsvr32 C:\WINDOWS\system32\winhttp.dll /s
regsvr32 C:\WINDOWS\system32\wininet.dll /s
regsvr32 C:\WINDOWS\system32\zipfldr.dll /s
regsvr32 C:\Program Files\Common Files\system\Ole DB\msdadc.dll /s
regsvr32 C:\Program Files\Common Files\system\Ole DB\msdaenum.dll /s
regsvr32 C:\Program Files\Common Files\system\Ole DB\msdaer.dll /s
regsvr32 C:\Program Files\Common Files\system\Ole DB\msdaipp.dll /s
regsvr32 C:\Program Files\Common Files\system\Ole DB\msdaora.dll /s
regsvr32 C:\Program Files\Common Files\system\Ole DB\msdaosp.dll /s
regsvr32 C:\Program Files\Common Files\system\Ole DB\msdaps.dll /s
regsvr32 C:\Program Files\Common Files\system\Ole DB\msdasc.dll /s
regsvr32 C:\Program Files\Common Files\system\Ole DB\msdasql.dll /s
regsvr32 C:\Program Files\Common Files\system\Ole DB\msdatt.dll /s
regsvr32 C:\Program Files\Common Files\system\Ole DB\msdaurl.dll /s
regsvr32 C:\Program Files\Common Files\system\Ole DB\msxactps.dll /s
regsvr32 C:\Program Files\Common Files\system\Ole DB\oledb32.dll /s
regsvr32 C:\Program Files\Common Files\system\Ole DB\oledb32r.dll /s
regsvr32 C:\Program Files\Common Files\system\Ole DB\sqloledb.dll /s
regsvr32 C:\Program Files\Common Files\system\Ole DB\sqlxmlx.dll /s
regsvr32 comcat.dll /s
regsvr32 shdoc401.dll /s
regsvr32 shdoc401.dll /i /s
regsvr32 asctrls.ocx /s
regsvr32 oleaut32.dll /s
regsvr32 shdocvw.dll /I /s
regsvr32 shdocvw.dll /s
regsvr32 browseui.dll /s
regsvr32 browseui.dll /I /s 
regsvr32 msrating.dll /s
regsvr32 mlang.dll /s
regsvr32 hlink.dll /s
regsvr32 mshtmled.dll /s
regsvr32 urlmon.dll /s
regsvr32 plugin.ocx /s
regsvr32 sendmail.dll /s
regsvr32 scrobj.dll /s
regsvr32 mmefxe.ocx /s
regsvr32 corpol.dll /s
regsvr32 jscript.dll /s
regsvr32 msxml.dll /s
regsvr32 imgutil.dll /s
regsvr32 thumbvw.dll /s
regsvr32 cryptext.dll /s
regsvr32 rsabase.dll /s
regsvr32 inseng.dll /s
regsvr32 iesetup.dll /i /s
regsvr32 cryptdlg.dll /s
regsvr32 actxprxy.dll /s
regsvr32 dispex.dll /s
regsvr32 occache.dll /s
regsvr32 occache.dll /i /s
regsvr32 iepeers.dll /s
regsvr32 urlmon.dll /i /s
regsvr32 cdfview.dll /s
regsvr32 webcheck.dll /s
regsvr32 mobsync.dll /s
regsvr32 pngfilt.dll /s
regsvr32 licmgr10.dll /s
regsvr32 icmfilter.dll /s
regsvr32 hhctrl.ocx /s
regsvr32 inetcfg.dll /s
regsvr32 tdc.ocx /s
regsvr32 MSR2C.DLL /s
regsvr32 msident.dll /s
regsvr32 msieftp.dll /s
regsvr32 xmsconf.ocx /s
regsvr32 ils.dll /s
regsvr32 msoeacct.dll /s
regsvr32 inetcomm.dll /s
regsvr32 msdxm.ocx /s
regsvr32 dxmasf.dll /s
regsvr32 l3codecx.ax /s
regsvr32 acelpdec.ax /s
regsvr32 mpg4ds32.ax /s
regsvr32 voxmsdec.ax /s
regsvr32 danim.dll /s
regsvr32 Daxctle.ocx /s
regsvr32 lmrt.dll /s
regsvr32 datime.dll /s
regsvr32 dxtrans.dll /s
regsvr32 dxtmsft.dll /s
regsvr32 WEBPOST.DLL /s
regsvr32 WPWIZDLL.DLL /s
regsvr32 POSTWPP.DLL /s
regsvr32 CRSWPP.DLL /s
regsvr32 FTPWPP.DLL /s
regsvr32 FPWPP.DLL /s
regsvr32 WUAPI.DLL /s
regsvr32 WUAUENG.DLL /s
regsvr32 ATL.DLL /s
regsvr32 WUCLTUI.DLL /s
regsvr32 WUPS.DLL /s
regsvr32 WUWEB.DLL /s
regsvr32 wshom.ocx /s
regsvr32 wshext.dll /s
regsvr32 vbscript.dll /s
regsvr32 scrrun.dll mstinit.exe /setup /s
regsvr32 msnsspc.dll /SspcCreateSspiReg /s
regsvr32 msapsspc.dll /SspcCreateSspiReg /s
regsvr32 urlmon.dll /s
regsvr32 mshtml.dll /s
regsvr32 shdocvw.dll /s
regsvr32 browseui.dll /s
regsvr32 jscript.dll /s
regsvr32 vbscript.dll /s
regsvr32 scrrun.dll /s
regsvr32 msxml.dll /s
regsvr32 actxprxy.dll /s
regsvr32 softpub.dll /s
regsvr32 wintrust.dll /s
regsvr32 dssenh.dll /s
regsvr32 rsaenh.dll /s
regsvr32 gpkcsp.dll /s
regsvr32 sccbase.dll /s
regsvr32 slbcsp.dll /s
regsvr32 cryptdlg.dll /s
regsvr32 schannel.dll /s
regsvr32 oleaut32.dll /s
regsvr32 ole32.dll /s
regsvr32 shell32.dll /s
regsvr32 initpki.dll /s 
regsvr32 msscript.ocx /s
regsvr32 dispex.dll /s
regsvr32 jscript.dll /s
del %temp% /Q /F
del c:\wutemp /Q /F
net stop wuauserv 
ren %windir%\system32\catroot2 catroot2.old
cd /d %windir%\SoftwareDistribution 
rd /s DataStore /Q 
regsvr32 wuapi.dll /s
regsvr32 wups.dll /s 
regsvr32 wuaueng.dll /s
regsvr32 wucltui.dll /s
regsvr32 wuweb.dll /s
regsvr32 msxml.dll /s
regsvr32 msxml2.dll /s
regsvr32 msxml3.dll /s
regsvr32 urlmon.dll /s
ipconfig /flushdns
netsh reset winsock
net start wuauserv
net start cryptsvc
net start Bits
goto :tools

:runall
cls
echo.
echo -------------------------------------------------------------------------------
echo 			 Determining your operating system...
echo -------------------------------------------------------------------------------
echo.
VER|find "Windows XP">NUL
IF NOT ERRORLEVEL 1 GOTO xpbegin
VER|find "Version 6">NUL
IF NOT ERRORLEVEL 1 GOTO vistabegin
VER|find "Version 7">NUL
IF NOT ERRORLEVEL 1 GOTO vistabegin
VER|find "Windows 95">NUL
IF NOT ERRORLEVEL 1 GOTO sorry
VER|find "Windows 98">NUL
IF NOT ERRORLEVEL 1 GOTO sorry
VER|find "Windows Millennium">NUL
IF NOT ERRORLEVEL 1 GOTO sorry

:xpbegin
cls
echo.
echo -------------------------------------------------------------------------------
echo 		           Finding and Terminating Processes...
echo -------------------------------------------------------------------------------
echo.
@echo off
ATTRIB -h -s -r -a "%userprofile%\Local Settings\Application Data\ave.exe" >NUL
ATTRIB -h -s -r -a "%userprofile%\Local Settings\Application Data\av.exe" >NUL
ATTRIB -h -s -r -a "C:\Documents and Settings\All Users\Start Menu\Programs\Startup\desktop.ini" >NUL
ATTRIB -h -s -r -a "C:\Documents and Settings\All Users\Start Menu\Programs\desktop.ini" >NUL
ATTRIB -h -s -r -a "C:\Documents and Settings\All Users\Start Menu\desktop.ini" >NUL
ATTRIB -h -s -r -a "C:\Windows\bill106.exe" >NUL
ATTRIB -h -s -r -a "C:\Windows\bill107.exe" >NUL
ATTRIB -h -s -r -a "C:\Windows\bill107.exe" >NUL
IF EXIST "%userprofile%\Local Settings\Application Data\ave.exe" TSKILL ave
IF EXIST "%userprofile%\Local Settings\Application Data\av.exe" TSKILL av
IF EXIST "C:\Windows\bill103.exe" TSKILL bill103
IF EXIST "C:\Windows\bill106.exe" TSKILL bill106
IF EXIST "C:\Windows\bill107.exe" TSKILL bill107
IF EXIST "C:\Documents and Settings\All Users\Application Data\TabQuery\tabquery119.exe" TSKILL tabquery119
ping localhost -n 1 > nul
cls

echo.
echo -------------------------------------------------------------------------------
echo 		            Removing Known Infected Processes...
echo -------------------------------------------------------------------------------
echo.
@echo off
IF EXIST "%UserProfile%\Application Data\Best Malware Protection\" rmdir /s /q "%UserProfile%\Application Data\Best Malware Protection\"
IF EXIST "C:\fsqwr.bmp" del /q "C:\fsqwr.bmp"
IF EXIST "%userprofile%\Desktop\Security Tool.LNK" del /q "%userprofile%\Desktop\Security Tool.LNK"
IF EXIST "%userprofile%\Start Menu\Programs\Security Tool\" rmdir /s /q "%userprofile%\Start Menu\Programs\Security Tool\"
IF EXIST "%userprofile%\Start Menu\Programs\Windows Recovery\" rmdir /s /q "%userprofile%\Start Menu\Programs\Windows Recovery\"
IF EXIST "%UserProfile%\Application Data\Smart Internet Protection 2011" del /q "%UserProfile%\Application Data\Smart Internet Protection 2011"
IF EXIST "C:\Documents and Settings\All Users\Start Menu\Programs\Startup\desktop.ini" del /q "C:\Documents and Settings\All Users\Start Menu\Programs\Startup\desktop.ini"
IF EXIST "C:\Documents and Settings\All Users\Start Menu\Programs\desktop.ini" del /q "C:\Documents and Settings\All Users\Start Menu\Programs\desktop.ini"
IF EXIST "C:\Documents and Settings\All Users\Start Menu\desktop.ini" del /q "C:\Documents and Settings\All Users\Start Menu\desktop.ini"
IF EXIST "C:\Windows\bill103.exe" del /q "C:\Windows\bill103.exe"
IF EXIST "C:\Windows\bill103.exe" del /q "C:\Windows\bill106.exe"
IF EXIST "C:\Windows\bill103.exe" del /q "C:\Windows\bill107.exe"
IF EXIST "C:\Documents and Settings\All Users\Application Data\TabQuery\tabquery119.exe" del /q "C:\Documents and Settings\All Users\Application Data\TabQuery\tabquery119.exe"
IF EXIST "%userprofile%\Local Settings\Application Data\ave.exe" del /q "%userprofile%\Local Settings\Application Data\ave.exe"
IF EXIST "%userprofile%\Local Settings\Application Data\av.exe" del /q "%userprofile%\Local Settings\Application Data\av.exe"
IF EXIST "%userprofile%\Start Menu\Programs\Startup\Antimalware Doctor.lnk" del /q "%userprofile%\Start Menu\Programs\Startup\Antimalware Doctor.lnk"
IF EXIST "C:\Program Files\AV7" rmdir /s /q "C:\Program Files\AV7"
set THEDIR=%APPDATA%
set TMPFILE=test-%RANDOM%.tmp
dir "%THEDIR%" /b /ad > %TMPFILE%
for /f %%g in ('findstr "^[0-9][0-9].*$" "%TMPFILE%"') do rmdir /s /q "%appdata%\%%g"
del /q %TMPFILE%
set THEDIR=C:\Documents and Settings\All Users\Application Data\
set TMPFILE=test-%RANDOM%.tmp
dir "%THEDIR%" /b /ad > %TMPFILE%
for /f %%g in ('findstr "^[0-9][0-9].*$" "%TMPFILE%"') do rmdir /s /q "%THEDIR%\%%g"
del /q %TMPFILE%
set THEDIR=C:\Documents and Settings\All Users\Application Data\
set TMPFILE=test-%RANDOM%.tmp
dir "%THEDIR%" /b /ad > %TMPFILE%
for /f %%g in ('findstr "^[a-zA-Z][a-zA-Z]*[0-9][0-9]*[a-zA-Z0-9]*[0-9][0-9][0-9]*$" "%TMPFILE%"') do rmdir /s /q "%THEDIR%\%%g"
del /q %TMPFILE%
ATTRIB -h -s -r -a "C:\Documents and Settings\All Users\Application Data\*.avi" >NUL
ATTRIB -h -s -r -a "C:\Documents and Settings\All Users\Application Data\*.mkv" >NUL
ATTRIB -h -s -r -a "C:\Documents and Settings\All Users\Application Data\*.ico" >NUL
del /q "C:\Documents and Settings\All Users\Application Data\*.avi"
del /q "C:\Documents and Settings\All Users\Application Data\*.mkv"
del /q "C:\Documents and Settings\All Users\Application Data\*.ico"
ping localhost -n 1 > nul
cls

echo.
echo -------------------------------------------------------------------------------
echo 		                 Removing junk files...
echo -------------------------------------------------------------------------------
echo.
@echo off
ping localhost -n 1 > nul
del /f /q %systemdrive%\*.tmp
del /f /q %systemdrive%\*._mp
del /f /q %systemdrive%\*.log
del /f /q %systemdrive%\*.gid
del /f /q %systemdrive%\*.chk
del /f /q %systemdrive%\*.old
del "%SYSTEMROOT%\TEMP\*.*" /S /Q
del "%USERPROFILE%\Local Settings\Temp\*.*" /S /Q
del "%USERPROFILE%\Local Settings\Temporary Internet Files\*.*" /S /Q
cls

echo.
echo -------------------------------------------------------------------------------
echo 		                  Repairing Registry...
echo -------------------------------------------------------------------------------
echo.
@echo off
regedit.exe /s cu.reg
regedit.exe /s lm.reg
regedit.exe /s virus.reg
regedit.exe /s xpreset.reg
regedit.exe /s foldersettings.reg
regedit.exe /s ResetAppInitDLL.reg
regedit.exe /s ifeo.reg
regedit.exe /s proxyfix.reg
regedit.exe /s xp.reg
regedit.exe /s msiserver.reg
rundll32.exe setupapi,InstallHinfSection DefaultInstall 128 ./virusAlertReset.inf
ping localhost -n 1 > nul
cls

echo.
echo -------------------------------------------------------------------------------
echo 		                  Resetting Host File...
echo -------------------------------------------------------------------------------
echo.
@echo off

CACLS C:\WINDOWS\system32\drivers\etc\hosts /E /G Everyone:F
ATTRIB -h -s -r -a "%windir%\SYSTEM32\DRIVERS\ETC\hosts" >NUL
DEL /Q "%windir%\SYSTEM32\DRIVERS\ETC\hosts" >nul 2>&1

>%windir%\SYSTEM32\DRIVERS\ETC\HOSTS (
echo # Copyright © 1993-1999 Microsoft Corp.
echo #
echo # This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
echo #
echo # This file contains the mappings of IP addresses to host names. Each
echo # entry should be kept on an individual line. The IP address should
echo # be placed in the first column followed by the corresponding host name.
echo # The IP address and the host name should be separated by at least one
echo # space.
echo #
echo # Additionally, comments ^(such as these^) may be inserted on individual
echo # lines or following the machine name denoted by a "#" symbol.
echo #
echo # For example:
echo #
echo # 102.54.94.97 rhino.acme.com # source server
echo # 38.25.63.10 x.acme.com # x client host
echo #
echo 127.0.0.1 localhost
	)
ping localhost -n 1 > nul
cls

echo.
echo -------------------------------------------------------------------------------
echo 		                  Resetting Winsock...
echo -------------------------------------------------------------------------------
echo.
@echo off
netsh firewall reset
netsh int ip reset winsockreset.txt
netsh winsock reset
ipconfig /flushdns
cls

echo.
echo -------------------------------------------------------------------------------
echo 		               Fixing Internet Explorer...
echo -------------------------------------------------------------------------------
echo.
@echo off
regsvr32 /s /n /i inetcpl.cpl
regedit.exe /s ieset.reg
@echo off
echo Working... Shhh... No talking...
regsvr32 /s /i browseui.dll
regsvr32 /s corpol.dll
regsvr32 /s dxtmsft.dll
regsvr32 /s dxtrans.dll
regsvr32 /s "%ProgramFiles%\internet explorer\hmmapi.dll"
regsvr32 /s ieaksie.dll
regsvr32 /s ieapfltr.dll
regsvr32 /s iedkcs32.dll
regsvr32 /s "%ProgramFiles%\internet explorer\iedvtool.dll"
regsvr32 /s iepeers.dll
regsvr32 /s "%ProgramFiles%\internet explorer\ieproxy.dll"
regsvr32 /s /i /n inetcpl.cpl
regsvr32 /s jscript.dll
regsvr32 /s licmgr10.dll
regsvr32 /s Shell32.dll
regsvr32 /s msdbg2.dll
regsvr32 /s Msjava.dll
regsvr32 /s mshtmled.dll
regsvr32 /s msident.dll
regsvr32 /s mstime.dll
regsvr32 /s "%ProgramFiles%\internet explorer\pdm.dll"
regsvr32 /s tdc.ocx
regsvr32 /s /i urlmon.dll
regsvr32 /s vbscript.dll
regsvr32 /s "%ProgramFiles%\microsoft shared\vgx\vgx.dll"
regsvr32 /s /i /n wininet.dll
regsvr32 /s extmgr.dll
regsvr32 /s mscoree.dll
regsvr32 /s oleacc.dll
regsvr32 /s ole32.dll
regsvr32 /s actxprxy.dll
regsvr32 /s asctrls.ocx
regsvr32 /s cdfview.dll
regsvr32 /s comcat.dll
regsvr32 /s /i /n comctl32.dll
regsvr32 /s cryptdlg.dll
regsvr32 /s /i /n digest.dll
regsvr32 /s dispex.dll
regsvr32 /s hlink.dll
regsvr32 /s mlang.dll
regsvr32 /s mobsync.dll
regsvr32 /s /i msieftp.dll
regsvr32 /s msr2c.dll
regsvr32 /s msxml.dll
regsvr32 /s oleaut32.dll
regsvr32 /s proctexe.ocx
regsvr32 /s /i scrobj.dll
regsvr32 /s shdocvw.dll
regsvr32 /s /i shdocvw.dll
regsvr32 /s sendmail.dll
regsvr32 /s /i ieframe.dll
%systemroot%\SysWoW64\regsvr32.exe /s /i %systemroot%\SysWoW64\browseui.dll
%systemroot%\SysWoW64\regsvr32.exe /s %systemroot%\SysWoW64\corpol.dll
%systemroot%\SysWoW64\regsvr32.exe /s %systemroot%\SysWoW64\dxtmsft.dll
%systemroot%\SysWoW64\regsvr32.exe /s %systemroot%\SysWoW64\dxtrans.dll
%systemroot%\SysWoW64\regsvr32.exe /s "%ProgramFiles(x86)%\internet explorer\hmmapi.dll"
%systemroot%\SysWoW64\regsvr32.exe /s %systemroot%\SysWoW64\ieaksie.dll
%systemroot%\SysWoW64\regsvr32.exe /s %systemroot%\SysWoW64\ieapfltr.dll
%systemroot%\SysWoW64\regsvr32.exe /s %systemroot%\SysWoW64\iedkcs32.dll
%systemroot%\SysWoW64\regsvr32.exe /s "%ProgramFiles(x86)%\internet explorer\iedvtool.dll"
%systemroot%\SysWoW64\regsvr32.exe /s %systemroot%\SysWoW64\iepeers.dll
%systemroot%\SysWoW64\regsvr32.exe /s "%ProgramFiles(x86)%\internet explorer\ieproxy.dll"
%systemroot%\SysWoW64\iesetup.dll
%systemroot%\SysWoW64\imgutil.dll
%systemroot%\SysWoW64\regsvr32.exe /s /i /n %systemroot%\SysWoW64\inetcpl.cpl
%systemroot%\SysWoW64\regsvr32.exe /s %systemroot%\SysWoW64\jscript.dll
%systemroot%\SysWoW64\regsvr32.exe /s %systemroot%\SysWoW64\licmgr10.dll
%systemroot%\SysWoW64\msapsspc.dll
%systemroot%\SysWoW64\mshta.exe
%systemroot%\SysWoW64\regsvr32.exe /s %systemroot%\SysWoW64\msdbg2.dll
%systemroot%\SysWoW64\regsvr32.exe /s %systemroot%\SysWoW64\mshtmled.dll
%systemroot%\SysWoW64\regsvr32.exe /s %systemroot%\SysWoW64\msident.dll
%systemroot%\SysWoW64\regsvr32.exe /s %systemroot%\SysWoW64\mstime.dll
%systemroot%\SysWoW64\regsvr32.exe /s "%ProgramFiles(x86)%\internet explorer\pdm.dll"
%systemroot%\SysWoW64\regsvr32.exe /s %systemroot%\SysWoW64\tdc.ocx
%systemroot%\SysWoW64\regsvr32.exe /s /i %systemroot%\SysWoW64\urlmon.dll
%systemroot%\SysWoW64\regsvr32.exe /s %systemroot%\SysWoW64\vbscript.dll
%systemroot%\SysWoW64\regsvr32.exe /s "%CommonProgramFiles(x86)%\microsoft shared\vgx\vgx.dll"
%systemroot%\SysWoW64\regsvr32.exe /s /i /n %systemroot%\SysWoW64\wininet.dll
%systemroot%\SysWoW64\regsvr32.exe /s %systemroot%\SysWoW64\extmgr.dll
%systemroot%\SysWoW64\regsvr32.exe /s %systemroot%\SysWoW64\mscoree.dll
%systemroot%\SysWoW64\regsvr32.exe /s %systemroot%\SysWoW64\oleacc.dll
%systemroot%\SysWoW64\regsvr32.exe /s %systemroot%\SysWoW64\ole32.dll
%systemroot%\SysWoW64\regsvr32.exe /s %systemroot%\SysWoW64\actxprxy.dll
%systemroot%\SysWoW64\regsvr32.exe /s %systemroot%\SysWoW64\asctrls.ocx
%systemroot%\SysWoW64\regsvr32.exe /s %systemroot%\SysWoW64\cdfview.dll
%systemroot%\SysWoW64\regsvr32.exe /s %systemroot%\SysWoW64\comcat.dll
%systemroot%\SysWoW64\regsvr32.exe /s /i /n %systemroot%\SysWoW64\comctl32.dll
%systemroot%\SysWoW64\regsvr32.exe /s %systemroot%\SysWoW64\cryptdlg.dll
%systemroot%\SysWoW64\regsvr32.exe /s /i /n %systemroot%\SysWoW64\digest.dll
%systemroot%\SysWoW64\regsvr32.exe /s %systemroot%\SysWoW64\dispex.dll
%systemroot%\SysWoW64\regsvr32.exe /s %systemroot%\SysWoW64\hlink.dll
%systemroot%\SysWoW64\regsvr32.exe /s %systemroot%\SysWoW64\mlang.dll
%systemroot%\SysWoW64\regsvr32.exe /s %systemroot%\SysWoW64\mobsync.dll
%systemroot%\SysWoW64\regsvr32.exe /s /i %systemroot%\SysWoW64\msieftp.dll
%systemroot%\SysWoW64\regsvr32.exe /s %systemroot%\SysWoW64\msr2c.dll
%systemroot%\SysWoW64\regsvr32.exe /s %systemroot%\SysWoW64\msxml.dll
%systemroot%\SysWoW64\regsvr32.exe /s %systemroot%\SysWoW64\oleaut32.dll
%systemroot%\SysWoW64\regsvr32.exe /s %systemroot%\SysWoW64\proctexe.ocx
%systemroot%\SysWoW64\regsvr32.exe /s /i %systemroot%\SysWoW64\scrobj.dll
%systemroot%\SysWoW64\regsvr32.exe /s /i %systemroot%\SysWoW64\shdocvw.dll
%systemroot%\SysWoW64\regsvr32.exe /s %systemroot%\SysWoW64\sendmail.dll
ping localhost -n 1 > nul
cls

echo.
echo -------------------------------------------------------------------------------
echo 		               Performing system tune-up...
echo -------------------------------------------------------------------------------
echo.
@echo off
ping localhost -n 1 > nul
cls
goto begin

:vistabegin
cls
echo.
echo -------------------------------------------------------------------------------
echo 		             Finding and terminating processes...
echo -------------------------------------------------------------------------------
echo.
@echo off
regsvr32 tdc.ocx /s
ATTRIB -h -s -r -a "C:\Windows\System32\erokosvc.dll" >NUL
ATTRIB -h -s -r -a "C:\Windows\System32\drivers\imapioko.sys" >NUL
ATTRIB -h -s -r -a "%userprofile%\AppData\Local\ave.exe" >NUL
ATTRIB -h -s -r -a "%userprofile%\AppData\Roaming\ave.exe" >NUL
ATTRIB -h -s -r -a "%userprofile%\AppData\Roaming\hotfix.exe" >NUL
ATTRIB -h -s -r -a "%userprofile%\AppData\Local\av.exe" >NUL
ATTRIB -h -s -r -a "%userprofile%\AppData\Roaming\av.exe" >NUL
ATTRIB -h -s -r -a "C:\Windows\bill103.exe" >NUL
ATTRIB -h -s -r -a "%userprofile%\AppData\Roaming\windef.exe" >NUL
ATTRIB -h -s -r -a "C:\Windows\bill106.exe" >NUL
ATTRIB -h -s -r -a "C:\Windows\bill107.exe" >NUL
ATTRIB -h -s -r -a "C:\ProgramData\Partner\partner.dll" >NUL
ATTRIB -h -s -r -a "C:\ProgramData\Partner\partner.exe" >NUL
IF EXIST "%userprofile%\AppData\Local\ave.exe" TASKKILL /F /IM ave.exe
IF EXIST "%userprofile%\AppData\Roaming\ave.exe" TASKKILL /F /IM ave.exe
IF EXIST "%userprofile%\AppData\Roaming\hotfix.exe" TASKKILL /F /IM hotfix.exe
IF EXIST "%userprofile%\AppData\Local\av.exe" TASKKILL /F /IM av.exe
IF EXIST "%userprofile%\AppData\Roaming\av.exe" TASKKILL /F /IM av.exe
IF EXIST "%userprofile%\AppData\Roaming\windef.exe" TASKKILL /F /IM windef.exe
IF EXIST "C:\ProgramData\Partner\partner.exe" TASKKILL /F /IM partner.exe
IF EXIST "C:\ProgramData\Partner\partner.dll" regsvr32 /u /s "C:\ProgramData\Partner\partner.dll"
IF EXIST "C:\Windows\bill103.exe" TASKKILL /F /IM bill103.exe
IF EXIST "C:\Windows\bill106.exe" TASKKILL /F /IM bill106.exe
IF EXIST "C:\Windows\bill107.exe" TASKKILL /F /IM bill107.exe
ping localhost -n 1 > nul
cls

echo.
echo -------------------------------------------------------------------------------
echo 		              Removing infected processes...
echo -------------------------------------------------------------------------------
echo.
@echo off
IF EXIST "%AppData%\Defender.exe" del /q "%AppData%\Defender.exe"
IF EXIST "C:\fsqwr.bmp" del /q "C:\fsqwr.bmp"
IF EXIST "C:\Windows\System32\erokosvc.dll" del /q "C:\Windows\System32\erokosvc.dll"
IF EXIST "C:\Windows\System32\drivers\imapioko.sys" del /q "C:\Windows\System32\drivers\imapioko.sys"
IF EXIST "C:\Windows\bill103.exe" del /q "C:\Windows\bill103.exe"
IF EXIST "C:\Windows\bill106.exe" del /q "C:\Windows\bill106.exe"
IF EXIST "C:\Windows\bill107.exe" del /q "C:\Windows\bill107.exe"
IF EXIST "C:\Windows\bill107.exe" del /q "C:\Windows\bill107.exe"
IF EXIST "%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Best Malware Protection.lnk" del /q "%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Best Malware Protection.lnk"
IF EXIST "%userprofile%\AppData\Roaming\Best Malware Protection" rmdir /s /q "%userprofile%\AppData\Roaming\Best Malware Protection"
IF EXIST "%userprofile%\Desktop\Best Malware Protection.lnk" del /q "%userprofile%\Desktop\Best Malware Protection.lnk"
IF EXIST "%userprofile%\Desktop\Malware Protection.lnk" del /q "%userprofile%\Desktop\Malware Protection.lnk"
IF EXIST "%userprofile%\AppData\Roaming\Smart Internet Protection 2011" rmdir /s /q "%userprofile%\AppData\Roaming\Smart Internet Protection 2011"
IF EXIST "%userprofile%\AppData\Roaming\Internet Security Essentials" rmdir /s /q "%userprofile%\AppData\Roaming\Internet Security Essentials"
IF EXIST "%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Security Essentials.lnk" del /q "%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Security Essentials.lnk"
IF EXIST "%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tool" rmdir /s /q "%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tool"
IF EXIST "%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Recovery" rmdir /s /q "%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Recovery"
IF EXIST "%userprofile%\Desktop\Internet Security Essentials.lnk" del /q "%userprofile%\Desktop\Internet Security Essentials.lnk"
IF EXIST "%userprofile%\Desktop\Computer.lnk" del /q "%userprofile%\Desktop\Computer.lnk"
IF EXIST "%userprofile%\Desktop\Windows Recovery.lnk" del /q "%userprofile%\Desktop\Windows Recovery.lnk"
IF EXIST "%userprofile%\Desktop\Smart Internet Protection 2011.lnk" del /q "%userprofile%\Desktop\Smart Internet Protection 2011.lnk"
IF EXIST "%userprofile%\Desktop\System Tool 2011.lnk" del /q "%userprofile%\Desktop\System Tool 2011.lnk"
IF EXIST "%userprofile%\AppData\Roaming\windef.exe" del /q "%userprofile%\AppData\Roaming\windef.exe"
IF EXIST "%userprofile%\AppData\Roaming\hotfix.exe" del /q "%userprofile%\AppData\Roaming\hotfix.exe"
IF EXIST "%userprofile%\AppData\Roaming\ave.exe" del /q "%userprofile%\AppData\Roaming\ave.exe"
IF EXIST "%userprofile%\AppData\local\av.exe" del /q "%userprofile%\AppData\local\av.exe"
IF EXIST "%userprofile%\AppData\Roaming\av.exe" del /q "%userprofile%\AppData\Roaming\av.exe"
IF EXIST "C:\ProgramData\Partner\partner.exe" rmdir /s /q "C:\ProgramData\Partner"
IF EXIST "C:\ProgramData\Partner\partner.dll" rmdir /s /q "C:\ProgramData\Partner"
IF EXIST "C:\Program Files(x86)\System Defender" rmdir /s /q "C:\Program Files(x86)\System Defender"
IF EXIST "%userprofile%\Desktop\System Defender.lnk" del /q "%userprofile%\Desktop\System Defender.lnk"
set THEDIR=%APPDATA%
set TMPFILE=test-%RANDOM%.tmp
dir "%THEDIR%" /b /ad > %TMPFILE%
for /f %%g in ('findstr "^[0-9][0-9].*$" "%TMPFILE%"') do rmdir /s /q "%appdata%\%%g"
del /q %TMPFILE%
set THEDIR=C:\ProgramData
set TMPFILE=test-%RANDOM%.tmp
dir "%THEDIR%" /b /ad > %TMPFILE%
for /f %%g in ('findstr "^[a-zA-Z][a-zA-Z]*[0-9][0-9]*[a-zA-Z0-9]*[0-9][0-9][0-9]*$" "%TMPFILE%"') do echo "%%g"=- >> %S2CLEANER_PATH%badkeys.reg
dir "%THEDIR%" /b /ad > %TMPFILE%
for /f %%g in ('findstr "^[a-zA-Z][a-zA-Z]*[0-9][0-9]*[a-zA-Z0-9]*[0-9][0-9][0-9]*$" "%TMPFILE%"') do rmdir /s /q "%THEDIR%\%%g"
del /q %TMPFILE%
ATTRIB -h -s -r -a "c:\ProgramData\*.avi" >NUL
ATTRIB -h -s -r -a "c:\ProgramData\*.mkv" >NUL
ATTRIB -h -s -r -a "c:\ProgramData\*.ico" >NUL
del /q "c:\ProgramData\*.avi"
del /q "c:\ProgramData\*.mkv"
del /q "c:\ProgramData\*.ico"
START %S2CLEANER_PATH%badkeys.bat
del C:\ProgramData\???.exe /ah
del "%userprofile%\AppData\Local\???.exe" /ah
ping localhost -n 1 > nul
cls

echo.
echo -------------------------------------------------------------------------------
echo 		                Removing Junk Files...
echo -------------------------------------------------------------------------------
echo.
@echo off
ping localhost -n 1 > nul
subinacl /keyreg "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /grant=Everyone=F
subinacl /keyreg "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /grant=Everyone=F
subinacl /keyreg "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options" /grant=Everyone=F
subinacl /keyreg "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes" /grant=Everyone=F
del /f /q %systemdrive%\*.tmp
del /f /q %systemdrive%\*._mp
del /f /q %systemdrive%\*.log
del /f /q %systemdrive%\*.gid
del /f /q %systemdrive%\*.chk
del /f /q %systemdrive%\*.old
del /f /s /q "%appdata%\Microsoft\Windows\cookies\*.*"
del /f /s /q "%userprofile%\AppData\Local\Microsoft\Windows\Temporary Internet Files\*.*"
REM del /s /q "%userprofile%\AppData\Local\Temp\*.*"
del /f /s /q "%userprofile%\AppData\Roaming\Microsoft\Windows\Cookies\*.*"
del /f /s /q "%userprofile%\AppData\Local\Microsoft\Windows\History\*.*"
del /f /s /q "%appdata%\Microsoft\Windows\Recent\*.*"
del /f /q %windir%\*.bak
del /f /s /q %windir%\prefetch\*.*
del /f /s /q %windir%\SoftwareDistribution\Download\*.*
cls

echo.
echo -------------------------------------------------------------------------------
echo 		               Resetting Registry Keys...
echo -------------------------------------------------------------------------------
echo.
@echo off
regedit.exe /s cu.reg
regedit.exe /s lm.reg
regedit.exe /s virus.reg
regedit.exe /s foldersettings.reg
regedit.exe /s ResetAppInitDLL.reg
regedit.exe /s ifeo.reg
regedit.exe /s proxyfix.reg
regedit.exe /s vista.reg
regedit.exe /s msiserver.reg
ping localhost -n 1 > nul
cls

echo.
echo -------------------------------------------------------------------------------
echo 		                 Resetting Host File...
echo -------------------------------------------------------------------------------
echo.
@echo off

CACLS C:\WINDOWS\system32\drivers\etc\hosts /E /G Everyone:F
ATTRIB -h -s -r -a "%windir%\SYSTEM32\DRIVERS\ETC\hosts" >NUL
DEL /Q "%windir%\SYSTEM32\DRIVERS\ETC\hosts" >nul 2>&1

>%windir%\SYSTEM32\DRIVERS\ETC\HOSTS (
echo # Copyright © 1993-1999 Microsoft Corp.
echo #
echo # This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
echo #
echo # This file contains the mappings of IP addresses to host names. Each
echo # entry should be kept on an individual line. The IP address should
echo # be placed in the first column followed by the corresponding host name.
echo # The IP address and the host name should be separated by at least one
echo # space.
echo #
echo # Additionally, comments ^(such as these^) may be inserted on individual
echo # lines or following the machine name denoted by a "#" symbol.
echo #
echo # For example:
echo #
echo # 102.54.94.97 rhino.acme.com # source server
echo # 38.25.63.10 x.acme.com # x client host
echo #
echo 127.0.0.1 localhost
echo ::1       localhost
	)
ping localhost -n 1 > nul
cls

echo.
echo -------------------------------------------------------------------------------
echo 		                  Resetting Winsock...
echo -------------------------------------------------------------------------------
echo.
@echo off
netsh firewall reset
netsh advfirewall reset
netsh int ip reset winsockreset.txt
netsh winsock reset
ipconfig /flushdns
cls

echo.
echo -------------------------------------------------------------------------------
echo 		               Fixing Internet Explorer...
echo -------------------------------------------------------------------------------
echo.
@echo off
regsvr32 /s /n /i inetcpl.cpl
regedit.exe /s ieset.reg
@echo off
echo Working... Shhh... No talking...
regsvr32 /s /i browseui.dll
regsvr32 /s corpol.dll
regsvr32 /s dxtmsft.dll
regsvr32 /s dxtrans.dll
regsvr32 /s "%ProgramFiles(x86)%\internet explorer\hmmapi.dll"
regsvr32 /s ieaksie.dll
regsvr32 /s ieapfltr.dll
regsvr32 /s iedkcs32.dll
regsvr32 /s "%ProgramFiles(x86)%\internet explorer\iedvtool.dll"
regsvr32 /s iepeers.dll
regsvr32 /s "%ProgramFiles(x86)%\internet explorer\ieproxy.dll"
regsvr32 /s /i /n inetcpl.cpl
regsvr32 /s jscript.dll
regsvr32 /s licmgr10.dll
regsvr32 /s Shell32.dll
regsvr32 /s msdbg2.dll
regsvr32 /s Msjava.dll
regsvr32 /s mshtmled.dll
regsvr32 /s msident.dll
regsvr32 /s mstime.dll
regsvr32 /s "%ProgramFiles(x86)%\internet explorer\pdm.dll"
regsvr32 /s tdc.ocx
regsvr32 /s /i urlmon.dll
regsvr32 /s vbscript.dll
regsvr32 /s "%CommonProgramFiles%\microsoft shared\vgx\vgx.dll"
regsvr32 /s /i /n wininet.dll
regsvr32 /s extmgr.dll
regsvr32 /s mscoree.dll
regsvr32 /s oleacc.dll
regsvr32 /s ole32.dll
regsvr32 /s actxprxy.dll
regsvr32 /s asctrls.ocx
regsvr32 /s cdfview.dll
regsvr32 /s comcat.dll
regsvr32 /s /i /n comctl32.dll
regsvr32 /s cryptdlg.dll
regsvr32 /s /i /n digest.dll
regsvr32 /s dispex.dll
regsvr32 /s hlink.dll
regsvr32 /s mlang.dll
regsvr32 /s mobsync.dll
regsvr32 /s /i msieftp.dll
regsvr32 /s msr2c.dll
regsvr32 /s msxml.dll
regsvr32 /s oleaut32.dll
regsvr32 /s proctexe.ocx
regsvr32 /s /i scrobj.dll
regsvr32 /s shdocvw.dll
regsvr32 /s /i shdocvw.dll
regsvr32 /s sendmail.dll
regsvr32 /s /i ieframe.dll
ping localhost -n 1 > nul
cls

echo.
echo -------------------------------------------------------------------------------
echo 		               Performing System Tune-up...
echo -------------------------------------------------------------------------------
echo.
@echo off
FSUTIL behavior set disablelastaccess 1
ping localhost -n 1 > nul
cls
goto begin

:sorry
cls
echo.
echo.
echo  This tool is not compatible with your system.
echo.
echo.
echo.
pause
cls
exit

There's other files required with it, mostly .reg files and another bat file or two

Since this guy is in jail, fuck him, I've attached it below. I still think it's a good utility you can analyze the code yourself and find the bitcoin miner if you want but I haven't seen any evidence of it.

It's windows update reset was really good at fixing windows update after it was disabled by malware, as is it's full permission reset (when it works), it's automatic cleanup was pretty good though it reset the firewall which was an issue for us on PCs in which people accessed it remotely we had to go in and renable it along with any other programs

Attached Files

S2Cleaner.zip (480.5 KB, 0 views)

Last edited by #1 STUNNA; Sep 14, 2015 at 05:22 PM.

Sep 14, 2015 | 07:17 PM

#653

Whiskers

Go Giants

Joined: Aug 2004

Posts: 70,003

Likes: 1,260

From: PA

He wrote this before bitcoins were a thing. Its fine.

Sep 14, 2015 | 07:22 PM

#654

#1 STUNNA

Sanest Florida Man

Joined: Aug 2007

Posts: 45,948

Likes: 11,748

From: Florida

That's what I figured. Y'all should check it out, it's a good little utility to have, I've been using it for about 4 years now on hundreds of PCs with no issues

Sep 14, 2015 | 07:28 PM

#655

Whiskers

Go Giants

Joined: Aug 2004

Posts: 70,003

Likes: 1,260

From: PA

Works well for XP, Vista and 7. Doesnt really transfer to 8 and 10.

Sep 14, 2015 | 07:33 PM

#656

#1 STUNNA

Sanest Florida Man

Joined: Aug 2007

Posts: 45,948

Likes: 11,748

From: Florida

Thanks! I've not used it on 8+

Sep 15, 2015 | 12:03 AM

#657

nfnsquared

Race Director

Joined: Dec 2003

Posts: 12,521

Likes: 1,824

From: MAGA country

Quote:

Originally Posted by Whiskers

Works well for XP, Vista and 7. Doesnt really transfer to 8 and 10.

Huh?

Sep 15, 2015 | 07:53 AM

#658

Whiskers

Go Giants

Joined: Aug 2004

Posts: 70,003

Likes: 1,260

From: PA

Quote:

Originally Posted by nfnsquared

Huh?

huh huh?

Sep 15, 2015 | 09:22 AM

#659

Mizouse

Moderator

Joined: Oct 2004

Posts: 64,099

Likes: 3,347

From: Not Las Vegas (SF Bay Area)

Quote:

Originally Posted by Whiskers

huh huh?

Huh huh huh?

Sep 19, 2015 | 05:05 PM

#660

Beelzebub

Race Director

Joined: Jan 2003

Posts: 10,929

Likes: 1,051

From: Long Island, NY

Huh. The only word that exists in Every language on the planet.

Sep 20, 2015 | 07:13 PM

#661

#1 STUNNA

Sanest Florida Man

Joined: Aug 2007

Posts: 45,948

Likes: 11,748

From: Florida

So I'm a member of a local retro gamer group on FB and occasionally people try to sell swap old games, etc. Today this popped up

Dude was serious too, everyone was confused. One guy offered $110 and the seller declined

Sep 20, 2015 | 07:58 PM

#662

doopstr

Team Owner

Joined: Jan 2001

Posts: 25,967

Likes: 2,685

From: Jersey

Norton for DOS was awesome. After that, meh.

Sep 20, 2015 | 10:21 PM

#663

Majofo

Chapter Leader (Southern Region)

Joined: Sep 2008

Posts: 88,888

Likes: 11,846

From: Waffles, BU

It's only $5.98 on Amazon.. I'm going to buy it and resell for $110. I'm riiiichhhhhh bitttchhhhhh!!!

Amazon.com: Norton Utilities 3.0

Sep 20, 2015 | 11:00 PM

#664

#1 STUNNA

Sanest Florida Man

Joined: Aug 2007

Posts: 45,948

Likes: 11,748

From: Florida

^Someone posted the same thing in the group. But his is unopened!

Sep 21, 2015 | 10:15 AM

#665

srika

Thread Starter

Moderator Alumnus

Joined: Mar 2002

Posts: 64,037

Likes: 14,205

Norton Utilities

Sep 23, 2015 | 07:06 PM

#666

#1 STUNNA

Sanest Florida Man

Joined: Aug 2007

Posts: 45,948

Likes: 11,748

From: Florida

He says it was a joke now

Sep 23, 2015 | 07:12 PM

#667

#1 STUNNA

Sanest Florida Man

Joined: Aug 2007

Posts: 45,948

Likes: 11,748

From: Florida

Firefox 41 integrates WebRTC messaging app as it fights for relevance | Ars Technica

Quote:

Firefox 41 integrates WebRTC messaging app as it fights for relevance

As well as the usual array of bug fixes and standards conformance work, Firefox 41, released yesterday, has a new feature: integrated instant messaging, with voice and video, called Firefox Hello.
Hello was first included in Firefox betas in October last year. Though integrated into the browser, it uses the WebRTC specification for its audio and video features. This enables Web-based voice and video messaging between Firefox, Chrome, and Opera. Microsoft is working on a related spec, Object RTC, which is available in the most recent preview of the Edge browser This won't be directly compatible with WebRTC code, but opens the door to an interoperable implementation.

In Firefox 41, a new Hello button has been added to the toolbar, allowing conversations to be started immediately. The system doesn't require accounts or log-ins. Firefox users can start conversations from the toolbar button, and attendees in Firefox, Chrome, and Opera can join the conversation simply by visiting its URL in the browser.

The Hello feature was developed in conjunction with the phone operator Telefonica. In July of this year, Mozilla suggested that Firefox users would start to see more features of this kind, where development was done by third parties, including both community efforts and corporate partners like Telefonica. Calling the scheme "Best of the Web," Mozilla hopes that it will attract users back to the browser that once broke Internet Explorer's dominance, but now is in third place behind both Internet Explorer and Chrome.

Whether this will be effective, at east as far as Hello is concerned, is far from clear. We gave the feature a spin, and can't deny that it all worked. Voice and video conversations between two of us (both using Firefox) were trivial to set up and worked effortlessly, with decent quality. The person creating the conversation could share their browser tabs, or their entire desktop, with the other people in the conversation, though this capability didn't seem to extend to other participants.

What's less obvious is what kind of difference this is actually going to make to Firefox's userbase. Plugin freedom is nice, but we can't imagine that there's some great untapped userbase out there that's crying out for a new instant messaging app. As a showcase for WebRTC, Hello is certainly easy and convenient to use, but we suspect that virtually everyone who's in need of an instant messaging app already has one. In fact, we suspect that they already have many. This makes Hello a mildly interesting novelty, but it's Skype for the Web, which is still in development, that's actually exciting, as it liberates all the contacts that we already have, and puts them into a plugin free browser application.

But this alludes to a larger problem for Firefox: with a declining market share, how does it stay relevant? At its peak, about 20 percent of Web users used Firefox; that share has now fallen below 12 percent, with no clear signs of stabilizing. Mozilla is working to make it a better browser—it should soon have the same kind of multiprocess architecture, boosting stability and security, as found already in Internet Explorer, Chrome, Edge, Opera, and Safari—but this is coming at a high cost. In modernizing its architecture, Firefox is also moving away from the extension model that was arguably so important in attracting people to the browser in the first place.

The underlying work is arguably essential to give Firefox parity with its competition, but if it alienates a large part of the userbase by disabling their extensions, what's the point? But equally, that feature parity matters; it was one of the major things that drove your author away from Firefox and into Chrome's open arms.

Firefox rose against Internet Explorer by being the better browser; the browser that was actively maintained, that cared about Web standards, that included desirable user-facing features such as tabs and extensions. But that's no longer enough to make it stand out; it hasn't been for years. Internet Explorer, Edge, and Chrome are all arguably superior from a security perspective, and while Edge still lacks extensibility for the time being, there's no obvious sense in which Firefox is the better browser any more. Mozilla is also competing against developers with bigger budgets and many more advertising dollars. Microsoft and Google can (and do) both advertise their browsers far and wide, and get an added bonus from being able to make their browsers the default on two important platforms—Android and Windows. Mozilla simply can't match this. The organization tried to achieve a similar position with its Firefox OS platform, but this appears to have little traction.

But what is Mozilla to do? The world without Mozilla would be a worse place. The organization was arguably fundamental in creating the generation of browsers after Internet Explorer 6's era of early 2000s dominance. Mozilla is continuing to do interesting and important work in the browser space—the development of its Rust language and Servo rendering engine could meaningfully advance the security state of the art, showing that a high quality browser can be built in a language that's largely immune to many of the security flaws that continue to be a major problem today. But Mozilla's ability to do this work is contingent on being a relevant force in the browser space.

We can't believe that integrated instant messaging is going to be the key to securing Firefox's position. But then again, what is?

Sep 23, 2015 | 07:44 PM

#668

Mizouse

Moderator

Joined: Oct 2004

Posts: 64,099

Likes: 3,347

From: Not Las Vegas (SF Bay Area)

Ya, i haven't used FF in years. Switched to chrome and now using safari because Mac.

I do use chrome for certain things still.

Sep 23, 2015 | 08:07 PM

#669

Whiskers

Go Giants

Joined: Aug 2004

Posts: 70,003

Likes: 1,260

From: PA

Quote:

Originally Posted by #1 STUNNA

Bitcoin Ponzi scheme operator pleads guilty to fraud

Oct 2, 2015 | 11:05 AM

#670

stogie1020

Needs more Lemon Pledge

Joined: Mar 2005

Posts: 52,768

Likes: 2,000

From: Phoenix, AZ

Anyone else a OneNote user?

I love it on Windows but when I am on OSX it pretty much sucks... Disappointing.

Nov 4, 2015 | 08:15 PM

#671

stogie1020

Needs more Lemon Pledge

Joined: Mar 2005

Posts: 52,768

Likes: 2,000

From: Phoenix, AZ

Looking for a hard drive enclosure/adapter that will take any 2.5 or 3.5 SATA drive and put it directly on a Thunderbolt2 bus that I can attach to a MAC.

The only one I can find that is even close is kind of cheapo looking and only TB1 (and $200!):

Highpoint Technologies RocketStor 5212 Dual-Bay Storage Dock

I need to be able to swap drive in and out as needed, do the fixed drive ones are no good for me. $200 is fine, but it better be made of aluminum and have active cooling and a lock.

These area dime a dozen for USB3/esata/FW connections, but nothing around for TB2.

And yes, I realize a 7200rpm drive will not utilize TB2, but I don't care at this time (SSDs are in the near future for what I need).

Nov 4, 2015 | 08:27 PM

#672

Whiskers

Go Giants

Joined: Aug 2004

Posts: 70,003

Likes: 1,260

From: PA

I have a Seagate sled adapter which I use sometimes. But USB 3 is a lot cheaper and almost as fast.

Nov 5, 2015 | 11:41 AM

#673

stogie1020

Needs more Lemon Pledge

Joined: Mar 2005

Posts: 52,768

Likes: 2,000

From: Phoenix, AZ

Quote:

Originally Posted by Whiskers

I have a Seagate sled adapter which I use sometimes. But USB 3 is a lot cheaper and almost as fast.

Are you using the adapter designed for the backup drives?
SRD0001 Seagate GoFlex 10Gbps Thunderbolt Adapter External Storage Controller

I think you are right that USB3 is more practical, especially using 7200rpm drives.

OK, thanks for saving me $200-$300!

Nov 12, 2015 | 12:22 PM

#674

#1 STUNNA

Sanest Florida Man

Joined: Aug 2007

Posts: 45,948

Likes: 11,748

From: Florida

Heads up! KB3097877 is fucking shit up! MS released it Tuesday and it's crashed Outlook on two PCs and Publisher on two more that I've dealt with so far. Very late last night MS released an updated version that supposedly fixes the issue. But if a PC download the original version on Tuesday then

It's also causing a login issue, I just had to drive out to BFE because one of our clients couldn't login. System restore didn't work, couldn't login in safe mode either. I figured out that you actually had a very short period in time about 5 secs in which you could login. So after a couple attempts I was able to enter the admin PW quick enough to get in. From there I uninstalled the bad update and a restart fixed it and haven't seen login issues since.

Nov 12, 2015 | 12:32 PM

#675

Majofo

Chapter Leader (Southern Region)

Joined: Sep 2008

Posts: 88,888

Likes: 11,846

From: Waffles, BU

Fucking MS.. fix 1 thing, break 10 others, set it on fire, buy new computer, start new life in Mozambique.

Nov 12, 2015 | 05:01 PM

#676

doopstr

Team Owner

Joined: Jan 2001

Posts: 25,967

Likes: 2,685

From: Jersey

They F up a few times a year now. I wait two weeks to see if Stunna is bitching, then I install.

Nov 12, 2015 | 06:44 PM

#677

stogie1020

Needs more Lemon Pledge

Joined: Mar 2005

Posts: 52,768

Likes: 2,000

From: Phoenix, AZ

I just don't do the updates.

"Microsoft, get off my lawn!"

Nov 12, 2015 | 07:27 PM

#678

Whiskers

Go Giants

Joined: Aug 2004

Posts: 70,003

Likes: 1,260

From: PA

amatures.

Nov 13, 2015 | 09:07 PM

#679

Mizouse

Moderator

Joined: Oct 2004

Posts: 64,099

Likes: 3,347

From: Not Las Vegas (SF Bay Area)

I was looking up info about CDG airport and came across this.

really Windows 3.1??

at an airport????

O'rly at orly airport...

Failed Windows 3.1 system blamed for shutting down Paris airport | Ars Technica

Nov 14, 2015 | 06:24 PM

#680

stogie1020

Needs more Lemon Pledge

Joined: Mar 2005

Posts: 52,768

Likes: 2,000

From: Phoenix, AZ

A while back I was looking for a good storage solution for bare 3.5" hard drives and was having a hard time finding anything worthwhile.

I just found (and ordered 20) of these:

ORICO Hard Disk Drive HDD Protector, 3.5 inch Hard Disk Drive Protective Case/Storage Box Gray (PHP-35) - Newegg.com