Scribd
Hochladen
15 Ansichten107 Seiten

Bytes Codex

Das Dokument beschreibt ein Skript in Batch-Datei-Format, das zum Bereinigen von Computern von unerwünschter Software entwickelt wurde. Das Skript führt eine Reihe von Schritten aus, wie das Entfernen von Dateien aus bestimmten Ordnern und das Entfernen der Attributen, um versteckte Dateien sichtbar zu machen.

Hochgeladen von

FREDY ALEXANDER SANTIESTEBAN VARGAS (FREDLEX SANTIVARG)
Copyright
© All Rights Reserved
Wir nehmen die Rechte an Inhalten ernst. Wenn Sie vermuten, dass dies Ihr Inhalt ist, beanspruchen Sie ihn hier.
Verfügbare Formate
Als TXT, PDF, TXT herunterladen oder online auf Scribd lesen
15 Ansichten107 Seiten

Bytes Codex

Das Dokument beschreibt ein Skript in Batch-Datei-Format, das zum Bereinigen von Computern von unerwünschter Software entwickelt wurde. Das Skript führt eine Reihe von Schritten aus, wie das Entfernen von Dateien aus bestimmten Ordnern und das Entfernen der Attributen, um versteckte Dateien sichtbar zu machen.

Hochgeladen von

FREDY ALEXANDER SANTIESTEBAN VARGAS (FREDLEX SANTIVARG)
Copyright
© All Rights Reserved
Wir nehmen die Rechte an Inhalten ernst. Wenn Sie vermuten, dass dies Ihr Inhalt ist, beanspruchen Sie ihn hier.
Verfügbare Formate
Als TXT, PDF, TXT herunterladen oder online auf Scribd lesen

::ProgramW6432

::CommonProgramW6432
:: Esta Script Es Creada Por: Jean Carlos Larreal Silva
@echo off
color 0b
Title (c) Bytes_Codex 10.9.0

:CargandoProyecto
@mode con cols=80 lines=23

:: Variables De Configuraciones
rem ~~~~~~~~~~~~~~~~~~~~~~~~~~~~>
set "Init=@echo off"
set "Color=color 0b"
set "Titulo=title (c) Bytes_Codex 10.9.0"
set "TituloXD=Bytes_Codex 10.9.0"
set "Limp=cls"
set "Ft=echo("
set "ps=pause"
set "Env=Goto"
set "Arc=DEL /F/Q"
set "Carp=DEL /S/Q"
set "Des=attrib /s /d -r -h -s -a
rem ~~~~~~~~~~~~~~~~~~~~~~~~~~~~>
%Limp%
::Variables De Señales
rem ~~~~~~~~~~~~~~~~~~~~~~~~~~~~>
set "Sef=-------------------------------------------------------------------------"
set "Seft=echo( -----------------------------------------------"
set "Ast="
rem ~~~~~~~~~~~~~~~~~~~~~~~~~~~~>
%Limp%

::Variables De Rutas
rem ~~~~~~~~~~~~~~~~~~~~~~~~~~~~>
set "Exp=%appdata%\Datos_Cp\Recursos\Bin002\I_Explorer"
set "lnk=%appdata%\Datos_Cp\Recursos\lnk_Url"
set "Naw=%appdata%\Datos_Cp\Recursos\W2-Navegador"
set "Dte=%appdata%\Datos_Cp\Recursos\DataBase\DataBase-Desocultar\App-Desocultado"
set "DatBs=%appdata%\Datos_Cp\Recursos\DataBase\DataBase-Desocultar"
set "Esc=%appdata%\Datos_Cp"
set "Esc2=%appdata%\Datos_Cp\Recursos"
set "Esc3=%appdata%\Datos_Cp\AppData"
set "Rp=%appdata%\Datos_Cp\Recursos\Bin001
set "Rp1=%appdata%\Datos_Cp\Recursos\Bin002
set "NIRCMD=%appdata%\Datos_Cp\Recursos\Data_Cmd.DAT"
set "SED=%appdata%\Datos_Cp\Recursos\Data_S.DAT"
set "GREP=%appdata%\Datos_Cp\Recursos\CptData\Data_G.DAT"
set "UNIQ=%appdata%\Datos_Cp\Recursos\UNIQ\[Link]"
SET "CUT=%appdata%\Datos_Cp\Recursos\Dta-Es\[Link]"
SET "SHORTCUT=%appdata%\Datos_Cp\Recursos\Dta-Es\[Link]"
SET "WGET=%appdata%\Datos_Cp\Recursos\Dta-Es\[Link]"
set "SORT_=%appdata%\Datos_Cp\Recursos\Bin004\[Link]"
set "Basedb=%appdata%\Datos_Cp\Recursos\DataBase"
set "Cuarp=%appdata%\Datos_Cp\Cuarentena"
set "RutaG=%systemdrive%"
set "Desk=%userprofile%\Desktop"
set "QUICKLAUNCHALL=%appdata%\Microsoft\Internet Explorer\Quick Launch"
set "PROGRAMS1ALL=%allusersprofile%\Start Menu\Programs"
set "PROGRAMS2ALL=%userprofile%\Start Menu\Programs"
if exist "%windir%\Sysnative\[Link]" ( SET "SYS32=%windir%\Sysnative" ) else ( SET
"SYS32=%windir%\System32" )
set "TASKS=%windir%\Tasks"
REM ~~~~~~~~~~~~~~~~~~~~~~~~>
if exist %windir%\syswow64 ( set ARCH=x64 ) else ( set ARCH=x86 )
if %ARCH%==x64 (
SET "SYSWOW64=%windir%\SysWOW64"
)
REM ~~~~~~~~~~~~~~~~~~~~~~~~>
FOR /F "tokens=2*" %%A IN ('REG QUERY
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ComputerName\ActiveComputerNam
e" /v ComputerName 2^>NUL') DO SET COMPUTERNAME=%%B
FOR /F "tokens=2*" %%A IN ('REG QUERY "HKLM\SOFTWARE\Microsoft\Windows
NT\CurrentVersion" /v ProductName 2^>NUL') DO SET OS=%%B
ECHO %OS%|FIND "Windows XP" >NUL
IF %ERRORLEVEL% EQU 0 (
set "LOCALA=%userprofile%\Local Settings\Application Data"
set "MYDOCS=%userprofile%\My Documents"
set "MYDLS=%userprofile%\My Documents\Downloads"
set "MYMUSIC=%userprofile%\My Documents\My Music"
set "LNK1XP=%allusersprofile%\Start Menu"
set "LNK2XP=%userprofile%\Start Menu"
set "STARTU=%userprofile%\Start Menu\Programs\Startup"
set "DRM=%allusersprofile%\DRM"
set "Wxps=%systemdrive%\Documents and Settings\Administrador\Menú
Inicio\Programas\Inicio"
set "TIFS=%systemdrive%\Documents and Settings\LocalService\Local
Settings\Temporary Internet Files\Content.IE5"
set "TIFS2=%windir%\System32\config\systemprofile\Local Settings\Temporary Internet
Files\Content.IE5"
) ELSE (
set "LOCALA=%localappdata%"
set "LOCALLOW=%userprofile%\Appdata\LocalLow"
set "MYDOCS=%userprofile%\Documents"
set "MYDLS=%userprofile%\Downloads"
set "MYMUSIC=%userprofile%\Music"
set "PUBDESKTOP=%systemdrive%\Users\Public\Desktop"
set "PUBDOCS=%systemdrive%\users\Public\Documents"
set "PUBLIC=%systemdrive%\Users\Public"
set "syswow64=%windir%\syswow64"
set "QUICKLAUNCH17=%appdata%\Microsoft\Internet Explorer\Quick Launch\User
Pinned\StartMenu"
set "QUICKLAUNCH27=%appdata%\Microsoft\Internet Explorer\Quick Launch\User
Pinned\TaskBar"
set "PROGRAMS17=%allusersprofile%\Microsoft\Windows\Start Menu\Programs"
set "PROGRAMS27=%appdata%\Microsoft\Windows\Start Menu\Programs"
set "STARTMENU17=%allusersprofile%\Microsoft\windows\Start Menu"
set "STARTMENU27=%appdata%\Microsoft\Windows\Start Menu"
set "STARTU=%appdata%\Microsoft\Windows\Start Menu\Programs\Startup"
set "DRM=%allusersprofile%\Microsoft\DRM"
set "TIFS=%localappdata%\Microsoft\Windows\Temporary Internet Files\Content.IE5"
set "TIFS2=%windir
%\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet
Files\Content.IE5"
set "STARTUP=%appdata%\Microsoft\Windows\Start Menu\Programs\Startup"
set "Wxps=%systemdrive%\Documents and Settings\Administrador\Menú
Inicio\Programas\Inicio"
)
rem ~~~~~~~~~~~~~~~~~~~~~~~~~~~~>
%Limp%

::Actualizaciones
rem ~~~~~~~~~~~~~~~~~~~~~~~~~~~~>
rem ~~~~~~~~~~~~~~~~~~~~~~~~~~~~>
%Limp%

:: Inicio Sin Administrador...


REM ~~~~~~~~~~~~~~~~~~~~~~~~>
net session >NUL 2>&1
IF %ERRORLEVEL% EQU 0 ( SET USERSTATUS=Administrator) else (
%Limp%
echo( %Sef%
Echo( Este Programa Nesesita Privilegios De Administrador Para Iniciar
echo.
Echo( Si desea ejecutar con privilegios de administrador, cierre esta ventana.
echo.
Echo( Dele Segundo Click Al Programa y a La Opcion ejecutar como administrador.
echo.
echo( %Sef%
SET USERSTATUS=Limited
pause
exit
)
%Limp%
REM ~~~~~~~~~~~~~~~~~~~~~~~~>

:InicioXDt1
%Init%
%Color%
%Titulo%
%Limp%

::Cargando Desolcutador De Datos


%Ft% ______________________________________________________________________________
%Ft%
%Ft% [ Desocultando Archivos (%%18) ] Por Favor Espere ..
%Ft% ______________________________________________________________________________
ping -n 3 [Link] > nul

for /f "usebackq delims=" %%i in ("%DatBs%\DataBase_Inicio7.Pr") do (


DIR "%STARTUP%\%%i" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
set/a x= x+1 %%i >NUL 2>&1
%Des% "%STARTUP%\%%i" >NUL 2>&1
DIR "%STARTUP%\%%i" >NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Desocultado Con Exito: "%STARTUP%\%%i" ^(Virus
Desocultado^)>>"%Dte%\[Link]" ) ELSE ( ECHO(Error Al Desocultar:
"%STARTUP%\%%i" ^(Virus Desocultado^)>>"%Dte%\[Link]" )
)
)
%Limp%

%Ft% ______________________________________________________________________________
%Ft%
%Ft% [ Desocultando Archivos (%%31) ] Por Favor Espere ..
%Ft% ______________________________________________________________________________
ping -n 1 [Link] > nul
for /f "usebackq delims=" %%i in ("%DatBs%\DataBase_InicioXP.Pr") do (
DIR "%Wxps%\%%i" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
set/a x= x+1 %%i >NUL 2>&1
%Des% "%Wxps%\%%i" >NUL 2>&1
DIR "%Wxps%\%%i" >NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Desocultado Con Exito: "%Wxps%\%%i" ^(Virus
Desocultado^)>>"%Dte%\[Link]" ) ELSE ( ECHO(Error Al Desocultar: "%Wxps
%\%%i" ^(Virus Desocultado^)>>"%Dte%\[Link]" )
)
)
%Limp%

%Ft% ______________________________________________________________________________
%Ft%
%Ft% [ Desocultando Archivos (%%56) ] Por Favor Espere ..
%Ft% ______________________________________________________________________________
ping -n 4 [Link] > nul

DEL /F/Q "%Esc3%\*.*"


DEL /F/Q "%Esc%\*.*"
%Limp%

%Ft% ______________________________________________________________________________
%Ft%
%Ft% [ Desocultando Archivos (%%72) ] Por Favor Espere ..
%Ft% ______________________________________________________________________________
ping -n 1 [Link] > nul

for /f "usebackq delims=" %%i in ("%DatBs%\DataBase_Temp.Pr") do (


DIR "%temp%\%%i" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
set/a x= x+1 %%i >NUL 2>&1
%Des% "%temp%\%%i" >NUL 2>&1
DIR "%temp%\%%i" >NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Desocultado Con Exito: "%temp%\%%i" ^(Virus
Desocultado^)>>"%Dte%\[Link]" ) ELSE ( ECHO(Error Al Desocultar: "%temp%\%
%i" ^(Virus Desocultado^)>>"%Dte%\[Link]" )
)
)
%Limp%

%Ft% ______________________________________________________________________________
%Ft%
%Ft% [ Desocultando Archivos (%%89) ] Por Favor Espere ..
%Ft% ______________________________________________________________________________
ping -n 1 [Link] > nul

for /f "usebackq delims=" %%i in ("%DatBs%\[Link]") do (


DIR "%appdata%\%%i" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
set/a x= x+1 %%i >NUL 2>&1
%Des% "%appdata%\%%i" >NUL 2>&1
DIR "%appdata%\%%i" >NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Desocultado Con Exito: "%appdata%\%%i" ^(Virus
Desocultado^)>>"%Dte%\[Link]" ) ELSE ( ECHO(Error Al Desocultar:
"%appdata%\%%i" ^(Virus Desocultado^)>>"%Dte%\[Link]" )
)
)
%Limp%

%Ft% ______________________________________________________________________________
%Ft%
%Ft% [ Desocultando Archivos (%%100) ] Por Favor Espere ..
%Ft% ______________________________________________________________________________
ping -n 3 [Link] > nul

%Limp%

::Inicio Principal
%Init%
%Color%
%Titulo%
%Limp%
%Ft% ______________________________________________________________________________
%Ft%
%Ft% [ Esta Script Esta En Su Version: 5.6.3 Creada para La Perfecta Eliminacion ]

%Ft% [ De Softwares Mal Intencionado Facil y Rapido..... ]


%Ft%
%Ft% Por Favor Espere .. [ %%1 ] Configurando Datos Para Su Uso ..
%Ft% ______________________________________________________________________________
%Ft%
ping -n 3 [Link] > nul

if exist "%appdata%\Datos_Cp\AppData\Datos_De_Procesos_Detenidos" (goto P1) else


(goto S1)
:P1
DEL /F/Q %appdata%\Datos_Cp\AppData\*.*
%Limp%
:S1
%Limp%
%Ft% ______________________________________________________________________________
%Ft%
%Ft% [ Esta Script Esta En Su Version: 5.6.3 Creada para La Perfecta Eliminacion ]

%Ft% [ De Softwares Mal Intencionado Facil y Rapido..... ]


%Ft%
%Ft% Por Favor Espere .. [ %%47 ] Leyendo DataBase ..
%Ft% ______________________________________________________________________________
%Ft%
ping -n 3 [Link] > nul

if exist "%appdata%\Datos_Cp\Recursos\DataBase\DataBase_Temp.[Link]" (goto P2) else


(goto S2)
%Limp%

:S2
%Limp%
Echo( __________________________________________
Echo(
Echo( [ Error En DataBase #0x0056290 ]
Echo( __________________________________________
pause
exit
:P2
%Limp%
%Ft% ______________________________________________________________________________
%Ft%
%Ft% [ Esta Script Esta En Su Version: 5.6.3 Creada para La Perfecta Eliminacion ]

%Ft% [ De Softwares Mal Intencionado Facil y Rapido..... ]


%Ft%
%Ft% Por Favor Espere .. [ %%62 ] Leyendo Configuraciones
%Ft% ______________________________________________________________________________
%Ft%
ping -n 3 [Link] > nul

if exist "%appdata%\Datos_Cp\Recursos\Data_Cmd.DAT" (goto P3) else (goto S3)


%Limp%

:S3
%Limp%
Echo(
Echo( Error En Data_Cmd #0x0043514
pause
exit

:P3
%Limp%
%Ft% ______________________________________________________________________________
%Ft%
%Ft% [ Esta Script Esta En Su Version: 5.6.3 Creada para La Perfecta Eliminacion ]

%Ft% [ De Softwares Mal Intencionado Facil y Rapido..... ]


%Ft%
%Ft% Por Favor Espere .. [ %%93 ] Borrando Tmp Del Programa ..
%Ft% ______________________________________________________________________________
%Ft%
ping -n 3 [Link] > nul

DEL /F/Q "%Cuarp%\null"


DEL /F/Q "%appdata%\null"
DEL /F/Q "%appdata%\Datos_Cp\AppReport\null"
DEL /F/Q "%Esc%\Reporte_Data\*.*"
%Limp%

%Ft% ______________________________________________________________________________
%Ft%
%Ft% [ Esta Script Esta En Su Version: 5.6.3 Creada para La Perfecta Eliminacion ]

%Ft% [ De Softwares Mal Intencionado Facil y Rapido..... ]


%Ft%
%Ft% Por Favor Espere .. [ %%100 ] Iniciando Programa ..
%Ft% ______________________________________________________________________________
%Ft%
ping -n 3 [Link] > nul

%Limp%
%Env% Correr

:Correr
%Init%
%Color%
%Titulo%
%Limp%
%Ft%
%Ft% _____________________________________________________________________________
%Ft% )
%Ft% [ Bienvenido a %TituloXD% ] )
%Ft% )
%Ft% [ Elija Una Opcion ] )
%Ft% )
%Ft% [1]. Analizar Computadora .. )
%Ft% )
%Ft% [2]. Analizar Dispocitivos .. )
%Ft% )
%Ft% [3]. Abrir Cuarentena .. )
%Ft% )
%Ft% [4]. Crear Un Reporte Completo .. )
%Ft% )
%Ft% [5]. Modulos Instalados En %TituloXD% .. )
%Ft% )
%Ft% [6]. Cerrar La Script .. )
%Ft% )
%Ft% _____________________________________________________________________________)
%Ft%
set/p unidad21=Elija Una Opcion:
if %unidad21%== 1 goto c
if %unidad21%== 2 goto a
if %unidad21%== 3 goto Cua
if %unidad21%== 4 goto Repor
if %unidad21%== 5 goto Config
if %unidad21%== 6 goto SalirXD
goto Correr

:Repor
%Init%
%Color%
%Titulo%
%Limp%
cd %appdata%\Datos_Cp\AppReport
start Crear_Reporte.bat
%Limp%
%Ft%
%Ft% ______________________________________________________________________________
%Ft%
%Ft% [ Nota: Cuando El Programa Se Cierre Solo, Presione Una Tecla Para Copiar ]
%Ft% [ Su Reporte a Su Escritorio..... ]
%Ft%
%Ft% Presione Una Tecla Para Continuar ..
%Ft% ______________________________________________________________________________
%Ft%
pause>null
%Limp%
COPY /Y "%appdata%\Datos_Cp\Reporte_Data\Reporte_pc.txt" "%USERPROFILE
%\Desktop\Reporte_pc.txt" >NUL 2>&1
Goto Copiar

:Copiar
%Limp%
%Ft%
%Ft% ______________________________________________________________________________
%Ft%
%Ft% [ Su Reporte Se a Copiado Con Exito .. ]
%Ft%
%Ft% [ Por Favor Enviarlo al hotmail: [Link]@[Link] ]
%Ft%
%Ft% Presione Una Tecla Para Continuar ..
%Ft% ______________________________________________________________________________
%Ft%
pause>null
%Limp%
Goto Correr

:Config
%Init%
%Color%
%Titulo%
%Limp%
%Ft%
%Ft% ______________________________________________________________________________
%Ft%
%Ft% 1) Modo Auto-Solucion De Errores [Activado]
%Ft%
%Ft% 2) Modo Auto-Eliminacion De Amenazas [Activado]
%Ft%
%Ft% 3) Modo Auto-Protector De Claves Mal Intencionadas En Regedit [Activado]
%Ft%
%Ft% 4) Modo Auto-Actualizaciones [Activado]
%Ft%
%Ft% 5) Modo Auto-Protector De Paginas Wed Mal Intencionadas [Activado]
%Ft%
%Ft% ______________________________________________________________________________
%Ft%
pause
goto Correr

:ListaXDaCT
REN "%appdata%\Datos_Cp\Cuarentena"\Documentos.{2559a1f2-21d7-11d4-bdaf-
00c04f60b9f0} Documentos
%Arc% %Cuarp%\[Link]
DEL /F/Q "%Cuarp%\Documentos\null"
dir /b /s %Cuarp%\Documentos > %Cuarp%\[Link]
REN "%appdata%\Datos_Cp\Cuarentena"\Documentos Documentos.{2559a1f2-21d7-11d4-bdaf-
00c04f60b9f0}
%Limp%
Goto Cua

:Cua
%Init%
%Color%
%Titulo%
cls
%Ft%
%Ft% [ Cuarentena ]
%Ft% ______________________________________________________________________________
%Ft%
type %Cuarp%\[Link]
%Ft% ______________________________________________________________________________
%Ft%
%Ft% 1)Salir De Cuarentena 2)Sacar Un Archivo De Cuarentena 3)Limpiar Cuarentena
%Ft%
%Ft% 4)Actualizar Cuarentena ..
%Ft% ______________________________________________________________________________
set/p unidad21=Elija Una Opcion:
if %unidad21%== 1 goto Correr
if %unidad21%== 2 goto Quee
if %unidad21%== 3 goto LimpCua
if %unidad21%== 4 goto ListaXDaCT
Goto Cua

:Quee
%Init%
%Color%
%Titulo%
REN "%appdata%\Datos_Cp\Cuarentena"\Documentos.{2559a1f2-21d7-11d4-bdaf-
00c04f60b9f0} Documentos
cls
%Ft%
%Ft% [ Cuarentena ]
%Ft% ______________________________________________________________________________
%Ft%
type %Cuarp%\[Link]
%Ft% ______________________________________________________________________________
set /p var=Escriba El Nombre Del Archivo:
move /y "%Cuarp%\Documentos\%var%" "%USERPROFILE%\Desktop\%var%" >NUL 2>&1
REN "%appdata%\Datos_Cp\Cuarentena"\Documentos Documentos.{2559a1f2-21d7-11d4-bdaf-
00c04f60b9f0}
Goto Listo

:Listo
%Limp%
%Ft% ______________________________________________________________________________
%Ft%
%Ft% [ El Archivo %var% Se Ha Desencriptado y Se a movido Al Escritorio ]
%Ft% ______________________________________________________________________________
pause
Goto Cua

:LimpCua
REN "%appdata%\Datos_Cp\Cuarentena"\Documentos.{2559a1f2-21d7-11d4-bdaf-
00c04f60b9f0} Documentos
%Arc% %Cuarp%\Documentos\*.*
%Arc% %Cuarp%\[Link]
REN "%appdata%\Datos_Cp\Cuarentena"\Documentos Documentos.{2559a1f2-21d7-11d4-bdaf-
00c04f60b9f0}
%Limp%
%Ft% ______________________________________________________________________________
%Ft%
%Ft% [ Su Cuarentena Se Ha Limpiado Con Exito .. ]
%Ft% ______________________________________________________________________________
pause
%Limp%
Goto Correr

:a
%Init%
%Color%
%Titulo%
IF NOT EXIST %SYS32%\[Link] GOTO :Sb23
TASKLIST /FO CSV /NH 2>NUL|FIND /I ".exe">"%Esc3%\ProcesosDetenidos"
FINDSTR /IVG:"%Esc2%\[Link]" "%Esc3%\ProcesosDetenidos"
2>NUL>"%Esc3%\Datos_De_Procesos_Detenidos"
"%SED%" "s/\.[EeXx].*/\.exe/g;s/^.//"
"%Esc3%\Datos_De_Procesos_Detenidos">"%Esc3%\ProcesosDetenidos"
IF NOT EXIST %SYS32%\[Link] (
for /f "usebackq delims=" %%i in ("%Esc3%\ProcesosDetenidos") do (
"%NIRCMD%" KILLPROCESS "%%i" >NUL 2>&1
)
) ELSE (
for /f "usebackq delims=" %%i in ("%Esc3%\ProcesosDetenidos") do (
TASKKILL /F /IM "%%i" >NUL 2>&1
)
)
:Sb23
%Limp%
::XDD
set band= FALSE
%Ft%
%Ft% ______________________________________________________________________________
%Ft%
%Ft% [ Unidades Conectadas.. ]
for %%i in (B C D E F G H I J K L M N O P Q R S T U V W X Y Z) do (
if exist %%i:\ (
if %%i: NEQ %systemdrive% (
set band= TRUE
%Ft%
%Ft% [ %%i: ] )))
%Ft%
if %band% EQU FALSE ( goto Error_Exit )
%Ft% ______________________________________________________________________________
%Ft%
set/p unidad=Escriba La Letra De La Unidad^>

::Empesando Desicfeccion De Unidades


REM ~~~~~~~~~~~~~~~~~~~~~~~~>
Attrib -r -a -s -h %unidad%:\*.* /s /d
IF NOt EXIST %unidad%:/ goto ErrorUnidad

set virus=0

REN "%appdata%\Datos_Cp\Cuarentena"\Documentos.{2559a1f2-21d7-11d4-bdaf-
00c04f60b9f0} Documentos

if exist %unidad%:\*.lnk del %unidad%:\*.lnk

if exist %unidad%:\"ÿ" ren %unidad%:\"ÿ" "Archivos_Recuperados" & msg Aviso Se


Borro Un Virus Que Ocultaba Tus Datos Pero Se Recuperaron y Se Moviero a Una
Carpeta Llamada: Archivos_Recuperados ..
if exist "%unidad%:\Archivos_Recuperados" del "%unidad
%:\Archivos_Recuperados\*.ini"

for %%i in (
"%unidad%:\Archivos_Recuperados\*.lnk"
"%unidad%:\Archivos_Recuperados\*.sys"
"%unidad%:\Archivos_Recuperados\*.1"
"%unidad%:\Archivos_Recuperados\*.2"
"%unidad%:\Archivos_Recuperados\*.gen"
"%unidad%:\Archivos_Recuperados\*.vbs"
"%unidad%:\Archivos_Recuperados\*.inf"
"%unidad%:\Archivos_Recuperados\*.001"
"%unidad%:\Archivos_Recuperados\49644L~1.*"
"%unidad%:\[Link]"
"%unidad%:\[Link]"
"%unidad%:\[Link]"
"%unidad%:\[Link]"
"%unidad%:\[Link]"
"%unidad%:\[Link]"
"%unidad%:\[Link]"
"%unidad%:\[Link]"
"%unidad%:\[Link]"
"%unidad%:\49644L~1.*"
"%unidad%:\[Link]"
"%unidad%:\[Link]"
"%unidad%:\[Link]"
"%unidad%:\[Link]"
"%unidad%:\[Link]"
"%unidad%:\[Link]"
"%unidad%:\[Link]"
"%unidad%:\[Link]"
"%unidad%:\Mugen.*"
"%unidad%:\[Link]"
"%unidad%:\*.sys"
"%unidad%:\*.001"
"%unidad%:\*.xxl"
"%unidad%:\*.db"
"%unidad%:\*.gen"
"%unidad%:\*.tmp"
"%unidad%:\*.pptx"
"%unidad%:\*.shs"
"%unidad%:\*.scn"
"%unidad%:\[Link]"
"%unidad%:\todo\*.sys"
"%unidad%:\todo\*.001"
"%unidad%:\todo\*.xxl"
"%unidad%:\todo\*.db"
"%unidad%:\todo\*.gen"
"%unidad%:\todo\*.tmp"
"%unidad%:\todo\*.pptx"
"%unidad%:\todo\*.shs"
"%unidad%:\todo\*.scn"
"%unidad%:\todo\[Link]"
"%unidad%:\todo\*.vbs"
"%unidad%:\virus\*.sys"
"%unidad%:\virus\*.001"
"%unidad%:\virus\*.xxl"
"%unidad%:\virus\*.db"
"%unidad%:\virus\*.gen"
"%unidad%:\virus\*.tmp"
"%unidad%:\virus\*.pptx"
"%unidad%:\virus\*.shs"
"%unidad%:\virus\*.scn"
"%unidad%:\virus\[Link]"
"%unidad%:\virus\*.vbs"
"%unidad%:\Nueva carpeta (2)\*.inf
"%unidad%:\Nueva carpeta (2)\*.ini
"%unidad%:\Nueva carpeta (2)\*.init
"%unidad%:\Nueva carpeta (2)\*.vbs
"%unidad%:\Nueva carpeta (2)\*.bat
"%unidad%:\Nueva carpeta (2)\*.reg
"%unidad%:\Nueva carpeta\*.inf
"%unidad%:\Nueva carpeta\*.ini
"%unidad%:\Nueva carpeta\*.init
"%unidad%:\Nueva carpeta\*.vbs
"%unidad%:\Nueva carpeta\*.bat
"%unidad%:\Nueva carpeta\*.reg
"%unidad%:\8585485\*.exe"
"%unidad%:\8585485\*.ini"
"%unidad%:\8585485\*.init"
"%unidad%:\8585485\*.inf"
"%unidad%:\8585485\*.vbs"
"%unidad%:\*.init"
"%unidad%:\ice\fire\*.ini"
"%unidad%:\ice\fire\*.init"
"%unidad%:\ice\fire\*.inf"
"%unidad%:\ice\fire\*.vbs"
"%unidad%:\ice\fire\*.exe"
"%unidad%:\ice\fire\*.bat"
"%unidad%:\Removable\Device\*.ini"
"%unidad%:\Removable\Device\*.init"
"%unidad%:\Removable\Device\*.inf"
"%unidad%:\Removable\Device\*.vbs"
"%unidad%:\Removable\Device\*.exe"
"%unidad%:\[Link]"
"%unidad%:\[Link]"
"%unidad%:\[Link]"
) DO (
IF EXIST %%i (
set /a virus+=1 %%i >NUL 2>&1
%Arc% %%i >NUL 2>&1
IF EXIST %%i ( ECHO(Error Al Eliminar: %%i ^(Virus^)>>"%Esc
%\Reporte_Usb.txt" ) ELSE ( ECHO(Eliminado Con Exito: %%i ^(Virus^)>>"%Esc
%\Reporte_Usb.txt" )
)
)
for /f "usebackq delims=" %%i in ("%Basedb%\[Link]") do (
DIR "%unidad%:\%%i" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
%Arc% "%unidad%:\%%i" >NUL 2>&1
DIR "%unidad%:\%%i" >NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito: "%unidad%:\%%i" ^(Virus^)>>"%Esc
%\Reporte_Usb.txt" ) ELSE ( ECHO(Error Al Eliminar: "%unidad%:\%%i"
^(Virus^)>>"%Esc%\Reporte_Usb.txt" )
)
)
for %%i in (
"%unidad%:\$[Link]"
"%unidad%:\System Volume Information"
"%unidad%:\RESYCLER"
"%unidad%:\RESTORE"
"%unidad%:\RECYCLED"
"%unidad%:\RESYCLED"
"%unidad%:\CONFIG"
"%unidad%:\.Trashes"
"%unidad%:\VOLUME"
"%unidad%:\TEMP"
"%unidad%:\FOUND.000"
"%unidad%:\[Link]"
"%unidad%:\sysusb"
"%unidad%:\UNUCI"
"%unidad%:\RECYCLER"
"%unidad%:\RECYCLE"
"%unidad%:\RECYCLER32"
"%unidad%:\qazwsx"
"%unidad%:\pera"
"%unidad%:\HOJIJOJ"
"%unidad%:\DrivesGuideInfo"
"%unidad%:\8585485"
"%unidad%:\ice\fire"
"%unidad%:\ice"
"%unidad%:\Removable\Device"
"%unidad%:\Removable"
) DO (
IF EXIST %%i (
set /a virus+=1 %%i >NUL 2>&1
%Carp% %%i >NUL 2>&1
IF EXIST %%i ( ECHO(Error Al Eliminar: %%i ^(Carpeta^)>>"%Esc
%\Reporte_Usb.txt" ) ELSE ( ECHO(Eliminado Con Exito: %%i ^(Carpeta^)>>"%Esc
%\Reporte_Usb.txt" )
)
)

:: Archivos Sospechosos En Usb [Link]


for %%i in (
"%unidad%:\[Link]"
"%unidad%:\Autorun.1"
) DO (
IF EXIST %%i (
set /a virus+=1 %%i >NUL 2>&1
move /y "%%i" "%Cuarp%\Documentos" >NUL 2>&1
IF EXIST %%i ( ECHO(Error Al Mover a Cuarentena: %%i
^(Sospechoso^)>>"%Esc%\Reporte_Usb.txt" ) ELSE ( ECHO(Movido a Cuarentena: %%i
^(Sospechoso^)>>"%Esc%\Reporte_Usb.txt" )
)
)

cd %Cuarp%
dir /b /s %Cuarp%\Documentos > %Cuarp%\[Link]
DEL /F/Q "%Cuarp%\Documentos\null"
::EncriptandoXD
REN "%appdata%\Datos_Cp\Cuarentena"\Documentos Documentos.{2559a1f2-21d7-11d4-bdaf-
00c04f60b9f0}

::Analizis Terminado ..
%Init%
%Color%
%Titulo%
%Limp%
%Ft%
%Ft% _________________________________________________________________________
%Ft%
%Ft% [Analizis Terminado]
%Ft%
%Ft% Amenazas Encontrados %virus%
%Ft% _________________________________________________________________________
%Ft%
%Ft% Presione Una Tecla Crear Un Reporte ..
pause>null
%Limp%

::Creando Reporte
%Limp%
Set R_Malwares="%Esc%\Reporte_Usb.txt"
Set /a _LinesM=0
For /f %%j in ('Type %R_Malwares% 2^>nul^|Find "" /v /c') Do Set /a _LinesM=%%j
echo.>>"%Esc%\R_REPORT.txt"
echo.>>"%Esc%\R_REPORT.txt"
ECHO(Virus En El Dispocitivo^: %_LinesM% >>"%Esc%\R_REPORT.txt"
echo.>>"%Esc%\R_REPORT.txt"
IF EXIST "%Esc%\Reporte_Usb.txt" (
SORT "%Esc%\Reporte_Usb.txt" /O "%Esc%\Reporte_Usb_T.txt" >NUL 2>&1
type "%Esc%\Reporte_Usb_T.txt">>"%Esc%\R_REPORT.txt"
)
echo.>>"%Esc%\R_REPORT.txt"
echo.>>"%Esc%\R_REPORT.txt"
echo.>>"%Esc%\R_REPORT.txt"
echo.>>"%Esc%\R_REPORT.txt"
COPY /Y "%Esc%\R_REPORT.txt" "%Esc3%\Reporte_Data\Reporte_Dispocitivo.txt" >NUL
2>&1
%Limp%
%Init%
%Color%
%Titulo%
%Limp%
%Ft% ______________________________________________________________________________
%Ft%
%Ft% [ Reporte Creado .. ]
%Ft%
%Ft% [ Presione Una Tecla Para Ver Su Reporte .. ]
%Ft%
%Ft% ______________________________________________________________________________
%Ft%
%Ft% Presione Una Tecla Para Continuar ..
pause>null
%Limp%
@mode con cols=200 lines=100
Goto UsbLp

:UsbLp
%Init%
%Color%
%Titulo%
%Limp%
%Ft% ______________________________________________________________________________
%Ft%
type %appdata%\Datos_Cp\Reporte_Usb.txt
%Ft% ______________________________________________________________________________
%Ft%
%Ft% Presione Una Tecla Para Continuar ..
pause>null
DEL /F/Q "%appdata%\Datos_Cp\*.txt"
Goto CargandoProyecto

:c
::Virus De Inicio De Windows 7
REM ~~~~~~~~~~~~~~~~~~~~~~~~>
%Init%
%Color%
%Titulo%
set/a x= 0+0
IF NOT EXIST %SYS32%\[Link] GOTO :Sb23
TASKLIST /FO CSV /NH 2>NUL|FIND /I ".exe">"%Esc3%\ProcesosDetenidos"
FINDSTR /IVG:"%Esc2%\[Link]" "%Esc3%\ProcesosDetenidos"
2>NUL>"%Esc3%\Datos_De_Procesos_Detenidos"
"%SED%" "s/\.[EeXx].*/\.exe/g;s/^.//"
"%Esc3%\Datos_De_Procesos_Detenidos">"%Esc3%\ProcesosDetenidos"
IF NOT EXIST %SYS32%\[Link] (
for /f "usebackq delims=" %%i in ("%Esc3%\ProcesosDetenidos") do (
"%NIRCMD%" KILLPROCESS "%%i" >NUL 2>&1
)
) ELSE (
for /f "usebackq delims=" %%i in ("%Esc3%\ProcesosDetenidos") do (
TASKKILL /F /IM "%%i" >NUL 2>&1
)
)
:Sb23
%Limp%

IF NOT EXIST %SYS32%\[Link] GOTO :Tasks


REG QUERY "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows" /V
APPINIT_DLLs 2>NUL>"%Esc3%\App_inicial"
if %ARCH%==x64 (
REG QUERY "HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Windows"
/V APPINIT_DLLs 2>NUL>>"%Esc3%\App_inicial"
)
FINDSTR /V "[Link] REG_MULTI_SZ" "%Esc3%\App_inicial" 2>NUL>"%Esc3%\App_inicial2"
FC "%Esc3%\App_inicial2" "%Rp%\null" >NUL 2>&1
IF %ERRORLEVEL% NEQ 1 ( GOTO :Logon_0 )
FINDSTR /IG:"%Rp1%\Aplicasiones_ini.Win" "%Esc3%\App_inicial2"
2>NUL>"%Esc3%\App_inicial_T"
FC "%Esc3%\App_inicial_T" "%Rp%\null" >NUL 2>&1
IF %ERRORLEVEL% NEQ 1 ( GOTO :Logon_0 )
IF %ARCH%==x64 (
REG ADD "HKLM\Software\Wow6432Node\Microsoft\Windows
NT\CurrentVersion\Windows" /V APPINIT_DLLs /d "" /F >NUL 2>&1
ECHO(Reparado Con Exito: HKLM\Software\Wow6432Node\Microsoft\Windows
NT\CurrentVersion\Windows\\APPINIT_DLLs ^(Evaluador Del Registro^)>>"%Esc
%\[Link]"
)
REG ADD "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows" /V APPINIT_DLLs
/d "" /F >NUL 2>&1
ECHO(Reparado Con Exito: HKLM\Software\Microsoft\Windows
NT\CurrentVersion\Windows\\APPINIT_DLLs ^(Evaluador Del Registro^)>>"%Esc
%\[Link]"
:Logon_0
REG QUERY HKCU\Software\Microsoft\Windows\CurrentVersion\Run
2>NUL>"%Esc3%\Ini_Regedit"
REG QUERY HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce
2>NUL>>"%Esc3%\Ini_Regedit"
REG QUERY HKLM\Software\Microsoft\Windows\CurrentVersion\Run
2>NUL>>"%Esc3%\Ini_Regedit"
if %ARCH%==x64 (
REG QUERY HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run
2>NUL>>"%Esc3%\Ini_Regedit"
)
FC "%Esc3%\Ini_Regedit" "%Rp%\null" >NUL 2>&1
IF %ERRORLEVEL% NEQ 1 ( GOTO :Tasks )
"%SED%" "/^\s*$/d" "%Esc3%\Ini_Regedit">"%Esc3%\Ini_Regedit2"
FINDSTR "REG_SZ" "%Esc3%\Ini_Regedit2">"%Esc3%\Ini_Regedit"
SORT "%Esc3%\Ini_Regedit" 2>NUL|"%UNIQ%">"%Esc3%\Ini_Regedit2"
"%SED%" "s/^....//;s/REG_SZ.*//g;s/\s*$//g"
"%Esc3%\Ini_Regedit2">"%Esc3%\Ini_Regedit"
"%GREP%" -i -P "^\w+_\w{2} browser plugin (loader|loader 64)$|^\w+ search scope
monitor$|^\w+ EPM Support$|^\w+ AppIntegrator (32|64)-bit$|
^ConduitFloatingPlugin_.*|^GoogleChromeAutoLaunch_.*|^SaferAutoLaunch_.*|
^shopperz\d{5,}$|^groover\d{5,}$|^firstOffer\d{5,}$|^[a-z]{3,6}_[a-z]{2}_\d{2,9}$|
^tmp[0-9A-F]{4}$|^updater\d{5}$|^[0-9a-f]{32}$|^\d{8}$|^[a-z]{1}utoauto$|^ ?
maintance$|^ ?qqpctray$|^sun\d{1}$" "%Esc3%\Ini_Regedit"
2>NUL>"%Esc3%\Ini_Regedit_H"
"%GREP%" -i -x -f "%Rp1%\Evaluador_Regedit_Run.Dat" "%Esc3%\Ini_Regedit"
2>NUL>>"%Esc3%\Ini_Regedit_H"
FC "%Esc3%\Ini_Regedit_H" "%Rp%\null" >NUL 2>&1
IF %ERRORLEVEL% NEQ 1 ( GOTO :Tasks )
SORT "%Esc3%\Ini_Regedit_H" 2>NUL|"%UNIQ%">"%Esc3%\Ini_Regedit_T"
for /f "usebackq delims=" %%i in ("%Esc3%\Ini_Regedit_T") do (
REG QUERY HKCU\Software\Microsoft\Windows\CurrentVersion\Run /V "%%i" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
REG DELETE HKCU\Software\Microsoft\Windows\CurrentVersion\Run /V "%%i" /F >NUL
2>&1
REG QUERY HKCU\Software\Microsoft\Windows\CurrentVersion\Run /V "%%i" >NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito:
"HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\%%i" ^(Evaluador Del
Registro^)>>"%Esc%\[Link]" ) ELSE ( ECHO(Error Al Eliminar:
"HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\%%i" ^(Evaluador Del
Registro^)>>"%Esc%\[Link]" )
)
REG QUERY HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce /V "%%i" >NUL
2>&1
IF NOT ERRORLEVEL 1 (
REG DELETE HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce /V "%%i" /F
>NUL 2>&1
REG QUERY HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce /V "%%i" >NUL
2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito:
"HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce\\%%i" ^(Evaluador Del
Registro^)>>"%Esc%\[Link]" ) ELSE ( ECHO(Error Al Eliminar:
"HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce\\%%i" ^(Evaluador Del
Registro^)>>"%Esc%\[Link]" )
)
REG QUERY HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run /V "%%i"
>NUL 2>&1
IF NOT ERRORLEVEL 1 (
REG DELETE HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run /V "%
%i" /F >NUL 2>&1
REG QUERY HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run /V "%
%i" >NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito:
"HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\\%%i" ^(Evaluador
Del Registro^)>>"%Esc%\[Link]" ) ELSE ( ECHO(Error Al Eliminar:
"HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\\%%i" ^(Evaluador
Del Registro^)>>"%Esc%\[Link]" )
)
REG QUERY HKLM\Software\Microsoft\Windows\CurrentVersion\Run /V "%%i" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
REG DELETE HKLM\Software\Microsoft\Windows\CurrentVersion\Run /V "%%i" /F >NUL
2>&1
REG QUERY HKLM\Software\Microsoft\Windows\CurrentVersion\Run /V "%%i" >NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito:
"HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\%%i" ^(Evaluador Del
Registro^)>>"%Esc%\[Link]" ) ELSE ( ECHO(Error Al Eliminar:
"HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\%%i" ^(Evaluador Del
Registro^)>>"%Esc%\[Link]" )
)
)
:Tasks
%Limp%
DIR /B/A:-D "%TASKS%\*.JOB" 2>NUL>"%Esc3%\TASKS"
FINDSTR /IVG:"%Rp1%\Procesos_Kill2.Win" "%Esc3%\TASKS" 2>NUL>"%Esc3%\ProcesosXD"
FC "%Esc3%\ProcesosXD" "%Rp%\null" >NUL 2>&1
IF %ERRORLEVEL% NEQ 1 ( GOTO :Tasks_0 )
"%GREP%" -P "^\d{4}avUpdateInfo.*\.job$|^newSI_\d{1,5}\.job$|^At\d{1,4}\.job$|
^\d{4}tb_RML\.job$|^ava[a-z]{1}v[a-z]{2}(v|x|y)[a-z]{1,3}\.job$|^bvxv[a-z]{1}(v|x)
[a-z]{1,3}\.job$|^[A-Z]{16}\.job$|^[A-Z]{5,10}1\.job$|^[A-Z]{10}\.job$|^0$\.job|
^MS\.job$|^blockerpro\.job$|^Security Center Update - \d{9,}\.job$|^GoogleUp\.job$|
^impo\.job$|^win\.job$|^import\.job$|^Googleuptodate\.job$|^Google Update\.job$|
^EssentialUpdateMachine\.job$|^Lanwifi\.job$|^Systemhi\.job$|^rdf\d{4}\.job$|
^RunAtStartup\.job$|^[A-Za-z]{10,}V2\.job$|^sys\.job$|^patch1\.job$"
"%Esc3%\ProcesosXD" 2>NUL>"%Esc3%\TASKS_H"
"%GREP%" -i -P "^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]
{12}-\d{1,}.*\.job$" "%Esc3%\ProcesosXD" 2>NUL>>"%Esc3%\TASKS_H"
"%GREP%" -i -f "%Rp1%\Procesos_Kill.Win" "%Esc3%\ProcesosXD"
2>NUL>>"%Esc3%\TASKS_H"
FC "%Esc3%\Procesos_H" "%Rp%\null" >NUL 2>&1
IF %ERRORLEVEL% NEQ 1 ( GOTO :Tasks_0 )
SORT "%Esc3%\Procesos_H" 2>NUL|"%UNIQ%">"%Esc3%\Procesos_T"
for /f "usebackq delims=" %%i in ("%Esc3%\Procesos_T" ) do (
DEL /F/Q "%TASKS%\%%i" >NUL 2>&1
IF EXIST "%TASKS%\%%i" ( ECHO(Error Al Eliminar: "%TASKS%\%%i" ^(Proceso Con
Inicio De Windows^)>>"%Esc%\[Link]" ) ELSE ( ECHO(Eliminado Con Exito: "%TASKS
%\%%i" ^(Proceso Con Inicio De Windows^)>>"%Esc%\[Link]" )
)
:Tasks_0
ECHO %OS%|FIND "Windows XP" >NUL
IF %ERRORLEVEL% EQU 0 ( GOTO :Services )
IF NOT EXIST %SYS32%\[Link] GOTO :Services
DIR /B/A:-D "%SYS32%\Tasks" 2>NUL>"%Esc3%\SysProcesos"
FINDSTR /IVG:"%Rp1%\Procesos_Kill2.Win" "%Esc3%\SysProcesos"
2>NUL>"%Esc3%\SYSProcesosXD"
FC "%Esc3%\SYSProcesosXD" "%Rp%\null" >NUL 2>&1
IF %ERRORLEVEL% NEQ 1 ( GOTO :Services )
"%GREP%" -P "^\d{4}avUpdateInfo.*|^newSI_\d{1,5}$|^At\d{1,4}$|^\d{4}tb_RML$|^ava[a-
z]{1}v[a-z]{2}(v|x|y)[a-z]{1,3}$|^bvxv[a-z]{1}(v|x)[a-z]{1,3}$|^[A-Z]{16}$|^[A-Z]
{5,10}1$|^[A-Z]{10}$|^0$|^MS$|^blockerpro$|^Security Center Update - \d{9,}$|
^GoogleUp$|^impo$|^win$|^import$|^Googleuptodate$|^Google Update$|
^EssentialUpdateMachine$|^Lanwifi$|^Systemhi$|^rdf\d{4}$|^RunAtStartup$|^[A-Za-z]
{10,}V2$|^sys$|^patch1$" "%Esc3%\SYSProcesosXD">"%Esc3%\SysProcesos_H"
"%GREP%" -i -P "^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]
{12}-\d{1,}.*" "%Esc3%\SYSProcesosXD">>"%Esc3%\SysProcesos_H"
"%GREP%" -i -f "%Rp1%\Procesos_Kill.Win"
"%Esc3%\SYSProcesosXD">>"%Esc3%\SysProcesos_H"
FC "%Esc3%\SysProcesos_H" "%Rp%\null" >NUL 2>&1
IF %ERRORLEVEL% NEQ 1 ( GOTO :Services )
SORT "%Esc3%\SysProcesos_H" 2>NUL|"%UNIQ%">"%Esc3%\SysProcesos_T"
for /f "usebackq delims=" %%i in ("%Esc3%\SysProcesos_T" ) do (
SCHTASKS /DELETE /TN "%%i" /F >NUL 2>&1
ECHO(Eliminado Con Exito: "%SYS32%\Tasks\%%i" ^(Proceso Con Inicio De
Windows^)>>"%Esc%\[Link]"
)
:Services

::EmpesandoXD
REM ~~~~~~~~~~~~~~~~~~~~~~~~>
REN "%appdata%\Datos_Cp\Cuarentena"\Documentos.{2559a1f2-21d7-11d4-bdaf-
00c04f60b9f0} Documentos
%Limp%
%Ft% _________________________________________________________________________
%Ft%
%Ft% [ Buscando Virus En El Systema ] Por Favor Espere ..
%Ft% _________________________________________________________________________
%Ft%
for %%i in (
"%locallow%\microsoft\silverlight\outofbrowser\index\[Link]"
"%locallow%\[Link]"
"%pubdocs%\[Link]"
"%pubdocs%\[Link]"
"%public%\[Link]"
"%syswow64%\fap????.tmp"
"%syswow64%\ren????.tmp"
"%syswow64%\roboot*"
"%syswow64%\sho????.tmp"
"%syswow64%\votprx*"
"%syswow64%\xenwul*"
"%programw6432%\[Link]"
"%syswow64%\[Link]"
"%syswow64%\[Link]"
"%syswow64%\[Link]"
"%syswow64%\[Link]"
"%syswow64%\[Link]"
"%syswow64%\[Link]"
"%syswow64%\[Link]"
"%syswow64%\dds_trash_log.cmd"
"%syswow64%\[Link]"
"%syswow64%\drivers\[Link]"
"%syswow64%\drivers\[Link]"
"%syswow64%\drivers\[Link]"
"%syswow64%\drivers\[Link]"
"%syswow64%\drivers\[Link]"
"%syswow64%\drivers\[Link]"
"%syswow64%\drivers\[Link]"
"%syswow64%\drivers\[Link]"
"%syswow64%\drivers\[Link]"
"%syswow64%\drivers\[Link]"
"%syswow64%\drivers\[Link]"
"%syswow64%\drivers\[Link]"
"%syswow64%\drivers\[Link]"
"%syswow64%\drivers\umdf\en-us\[Link]"
"%syswow64%\drivers\umdf\[Link]"
"%syswow64%\drivers\[Link]"
"%syswow64%\[Link]"
"%syswow64%\[Link]"
"%syswow64%\[Link]"
"%syswow64%\[Link]"
"%syswow64%\[Link]"
"%syswow64%\[Link]"
"%syswow64%\[Link]"
"%syswow64%\[Link]"
"%syswow64%\[Link]"
"%syswow64%\[Link]"
"%syswow64%\[Link]"
"%syswow64%\[Link]"
"%syswow64%\[Link]"
"%syswow64%\[Link]"
"%syswow64%\[Link]"
"%syswow64%\[Link]"
"%syswow64%\[Link]"
"%syswow64%\[Link]"
"%syswow64%\[Link]"
"%syswow64%\[Link]"
"%syswow64%\[Link]"
"%syswow64%\[Link]"
"%syswow64%\[Link]"
"%syswow64%\[Link]"
"%syswow64%\[Link]"
"%syswow64%\[Link]"
"%syswow64%\[Link]"
"%syswow64%\[Link]"
"%sys32%\000?????.tmp"
"%sys32%\cpuminer-*"
"%sys32%\drivers\msft_kernel_webtinstmktn*.wdf"
"%sys32%\drivers\webtinstmktn*.sys"
"%sys32%\ocl????.tmp"
"%sys32%\rad?????.tmp"
"%sys32%\ren????.tmp"
"%sys32%\roboot*"
"%sys32%\sho????.tmp"
"%sys32%\votprx*"
"%sys32%\xenwul*"
"%STARTUP%\49644L~[Link]"
"%temp%\49644L~[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\dllhost(1).exe"
"%STARTUP%\dllhost(2).exe"
"%STARTUP%\dllhost(3).exe"
"%STARTUP%\dllhost - [Link]"
"%STARTUP%\dllhost - copia (1).exe"
"%STARTUP%\dllhost - copia (2).exe"
"%STARTUP%\dllhost - copia (3).exe"
"%STARTUP%\dllhost - copia (4).exe"
"%temp%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\conhost(1).exe"
"%STARTUP%\conhost(2).exe"
"%STARTUP%\conhost(3).exe"
"%STARTUP%\conhost - [Link]"
"%STARTUP%\conhost - copia (1).exe"
"%STARTUP%\conhost - copia (2).exe"
"%STARTUP%\conhost - copia (3).exe"
"%STARTUP%\conhost - copia (4).exe"
"%temp%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\Ati2evxx(1).exe"
"%STARTUP%\Ati2evxx(2).exe"
"%STARTUP%\Ati2evxx(3).exe"
"%STARTUP%\Ati2evxx - [Link]"
"%STARTUP%\Ati2evxx - copia (1).exe"
"%STARTUP%\Ati2evxx - copia (2).exe"
"%STARTUP%\Ati2evxx - copia (3).exe"
"%STARTUP%\Ati2evxx - copia (4).exe"
"%allusersprofile%\*detectpcmgrdllex*"
"%allusersprofile%\sectaskman\*safeguard*"
"%allusersprofile%\spl????.tmp"
"%allusersprofile%\system32\*safeguard*"
"%allusersprofile%\trz????.tmp"
"%appdata%\*.[Link]"
"%appdata%\*.[Link]"
"%appdata%\appdata*.bin"
"%appdata%\fe????.tmp"
"%drm%\??.tmp"
"%drm%\????.tmp"
"%drm%\????.[Link]"
"%locala%\*_uninst.exe"
"%locala%\*ns*.tmp*"
"%locala%\funmoods*"
"%locala%\google\chrome\user data\default\ext_*"
"%locala%\mysearchdial*"
"%locala%\[Link]*"
"%locala%\windowssys*.exe"
"%programfiles%\gum????.tmp"
"%programfiles%\gut????.tmp"
"%programfiles%\mozilla firefox\browser\defaults\preferences\!vitruvian-*"
"%programfiles%\mozilla firefox\browser\searchplugins\*.js"
"%programfiles%\mozilla firefox\vitruvian-*"
"%programfiles%\[Link]"
"%public%\trz????.tmp"
"%systemdrive%\a\????????.bat"
"%systemdrive%\a\????????????????????.exe"
"%systemdrive%\a\internetport*.exe"
"%systemdrive%\users\default\trz???.tmp"
"%systemdrive%\users\default\trz????.tmp"
"%temp%\vitruvian-installer-*"
"%userprofile%\trz????.tmp"
"%windir%\allpcoptimizer*"
"%windir%\prefetch\*24x7*.pf"
"%windir%\prefetch\*babylon*.pf"
"%windir%\prefetch\*lyrics*.pf"
"%windir%\prefetch\*optimizer*.pf"
"%windir%\prefetch\*toolbar*.pf"
"%windir%\prefetch\apnstub*.pf"
"%windir%\prefetch\ask*.pf"
"%windir%\prefetch\barbroker*.pf"
"%windir%\prefetch\dealply*.pf"
"%windir%\prefetch\driver*.pf"
"%windir%\prefetch\handlebrowser*.pf"
"%windir%\prefetch\hao123*.pf"
"%windir%\prefetch\kmp3*.exe*.pf"
"%windir%\prefetch\speedup*.pf"
"%windir%\prefetch\v9*.exe*.pf"
"%sys32%\${logfile}"
"%sys32%\[Link]"
"%sys32%\[Link]"
"%sys32%\[Link]"
"%sys32%\br media [Link]"
"%sys32%\[Link]"
"%sys32%\codecs\[Link]"
"%sys32%\[Link]"
"%sys32%\[Link]"
"%sys32%\[Link]"
"%sys32%\dds_trash_log.cmd"
"%sys32%\[Link]"
"%sys32%\drivers\[Link]"
"%sys32%\drivers\[Link]"
"%sys32%\drivers\[Link]"
"%sys32%\drivers\[Link]"
"%sys32%\drivers\[Link]"
"%sys32%\drivers\[Link]"
"%sys32%\drivers\[Link]"
"%sys32%\drivers\[Link]"
"%sys32%\drivers\[Link]"
"%sys32%\drivers\[Link]"
"%sys32%\drivers\[Link]"
"%sys32%\drivers\[Link]"
"%sys32%\drivers\[Link]"
"%sys32%\drivers\[Link]"
"%sys32%\drivers\[Link]"
"%sys32%\drivers\[Link]"
"%sys32%\drivers\[Link]"
"%sys32%\drivers\nscp_cnb.sys"
"%sys32%\drivers\[Link]"
"%sys32%\drivers\[Link]"
"%sys32%\drivers\[Link]"
"%sys32%\drivers\[Link]"
"%sys32%\drivers\[Link]"
"%sys32%\drivers\[Link]"
"%sys32%\drivers\[Link]"
"%sys32%\drivers\[Link]"
"%sys32%\drivers\[Link]"
"%sys32%\drivers\[Link]"
"%sys32%\drivers\[Link]"
"%sys32%\drivers\[Link]"
"%sys32%\drivers\[Link]"
"%sys32%\drivers\[Link]"
"%sys32%\drivers\[Link]"
"%sys32%\express\[Link]"
"%sys32%\ezsp_px.exe"
"%sys32%\[Link]"
"%sys32%\[Link]"
"%sys32%\[Link]"
"%sys32%\[Link]"
"%sys32%\grouppolicy\machine\r"
"%sys32%\grouppolicy\user\scripts\logon\[Link]"
"%sys32%\[Link]"
"%sys32%\[Link]"
"%sys32%\[Link]"
"%sys32%\[Link]"
"%sys32%\[Link]"
"%sys32%\[Link]"
"%sys32%\[Link]"
"%sys32%\newsoft"
"%sys32%\[Link]"
"%sys32%\[Link]"
"%sys32%\[Link]"
"%sys32%\[Link]"
"%sys32%\[Link]"
"%sys32%\[Link]"
"%sys32%\[Link]"
"%sys32%\windowspowershell\[Link]"
"%sys32%\[Link]"
"%sys32%\[Link]"
"%sys32%\[Link]"
"%sys32%\[Link]"
"%sys32%\[Link]"
"%sys32%\[Link]"
"%sys32%\[Link]"
"%sys32%\[Link]"
"%temp%\[Link]"
"%temp%\Cookies\[Link]"
"%temp%\Temporary Internet Files\Content.IE5\[Link]"
"%temp%\Temporary Internet Files\Content.IE5\[Link]"
"%Wxps%\[Link]"
"%appdata%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\SysDrivers(1).vbs"
"%Wxps%\SysDrivers(2).vbs"
"%Wxps%\SysDrivers(3).vbs"
"%Wxps%\SysDrivers - [Link]"
"%Wxps%\SysDrivers - copia (1).vbs"
"%Wxps%\SysDrivers - copia (2).vbs"
"%Wxps%\SysDrivers - copia (3).vbs"
"%Wxps%\SysDrivers - copia (4).vbs"
"%Wxps%\[Link]"
"%Wxps%\MataVirus(1).vbs"
"%Wxps%\MataVirus(2).vbs"
"%Wxps%\MataVirus(3).vbs"
"%Wxps%\MataVirus - [Link]"
"%Wxps%\MataVirus - copia (1).vbs"
"%Wxps%\MataVirus - copia (2).vbs"
"%Wxps%\MataVirus - copia (3).vbs"
"%Wxps%\MataVirus - copia (4).vbs"
"%Wxps%\[Link]"
"%Wxps%\MataViru(1).vbs"
"%Wxps%\MataViru(2).vbs"
"%Wxps%\MataViru(3).vbs"
"%Wxps%\MataViru - [Link]"
"%Wxps%\MataViru - copia (1).vbs"
"%Wxps%\MataViru - copia (2).vbs"
"%Wxps%\MataViru - copia (3).vbs"
"%Wxps%\MataViru - copia (4).vbs"
"%Wxps%\[Link]"
"%Wxps%\Virus(1).vbs"
"%Wxps%\Virus(2).vbs"
"%Wxps%\Virus(3).vbs"
"%Wxps%\Virus - [Link]"
"%Wxps%\Virus - copia (1).vbs"
"%Wxps%\Virus - copia (2).vbs"
"%Wxps%\Virus - copia (3).vbs"
"%Wxps%\Virus - copia (4).vbs"
"%Wxps%\[Link]"
"%Wxps%\Viru(1).vbs"
"%Wxps%\Viru(2).vbs"
"%Wxps%\Viru(3).vbs"
"%Wxps%\Viru - [Link]"
"%Wxps%\Viru - copia (1).vbs"
"%Wxps%\Viru - copia (2).vbs"
"%Wxps%\Viru - copia (3).vbs"
"%Wxps%\Viru - copia (4).vbs"
"%Wxps%\[Link]"
"%Wxps%\autorun(1).vbs"
"%Wxps%\autorun(2).vbs"
"%Wxps%\autorun(3).vbs"
"%Wxps%\autorun - [Link]"
"%Wxps%\autorun - copia (1).vbs"
"%Wxps%\autorun - copia (2).vbs"
"%Wxps%\autorun - copia (3).vbs"
"%Wxps%\autorun - copia (4).vbs"
"%Wxps%\[Link]"
"%Wxps%\Malwares(1).vbs"
"%Wxps%\Malwares(2).vbs"
"%Wxps%\Malwares(3).vbs"
"%Wxps%\Malwares - [Link]"
"%Wxps%\Malwares - copia (1).vbs"
"%Wxps%\Malwares - copia (2).vbs"
"%Wxps%\Malwares - copia (3).vbs"
"%Wxps%\Malwares - copia (4).vbs"
"%Wxps%\[Link]"
"%Wxps%\Malware(1).vbs"
"%Wxps%\Malware(2).vbs"
"%Wxps%\Malware(3).vbs"
"%Wxps%\Malware - [Link]"
"%Wxps%\Malware - copia (1).vbs"
"%Wxps%\Malware - copia (2).vbs"
"%Wxps%\Malware - copia (3).vbs"
"%Wxps%\Malware - copia (4).vbs"
"%Wxps%\[Link]"
"%Wxps%\iloveyou(1).vbs"
"%Wxps%\iloveyou(2).vbs"
"%Wxps%\iloveyou(3).vbs"
"%Wxps%\iloveyou - [Link]"
"%Wxps%\iloveyou - copia (1).vbs"
"%Wxps%\iloveyou - copia (2).vbs"
"%Wxps%\iloveyou - copia (3).vbs"
"%Wxps%\iloveyou - copia (4).vbs"
"%Wxps%\[Link]"
"%Wxps%\MUGEN(1).vbs"
"%Wxps%\MUGEN(2).vbs"
"%Wxps%\MUGEN(3).vbs"
"%Wxps%\MUGEN - [Link]"
"%Wxps%\MUGEN - copia (1).vbs"
"%Wxps%\MUGEN - copia (2).vbs"
"%Wxps%\MUGEN - copia (3).vbs"
"%Wxps%\MUGEN - copia (4).vbs"
"%Wxps%\[Link]"
"%Wxps%\MUGEM(1).vbs"
"%Wxps%\MUGEM(2).vbs"
"%Wxps%\MUGEM(3).vbs"
"%Wxps%\MUGEM - [Link]"
"%Wxps%\MUGEM - copia (1).vbs"
"%Wxps%\MUGEM - copia (2).vbs"
"%Wxps%\MUGEM - copia (3).vbs"
"%Wxps%\MUGEM - copia (4).vbs"
"%Wxps%\.vbs"
"%Wxps%\MUGEM(1).vbs"
"%Wxps%\MUGEM(2).vbs"
"%Wxps%\MUGEM(3).vbs"
"%Wxps%\MUGEM - [Link]"
"%Wxps%\MUGEM - copia (1).vbs"
"%Wxps%\MUGEM - copia (2).vbs"
"%Wxps%\MUGEM - copia (3).vbs"
"%Wxps%\MUGEM - copia (4).vbs"
"%Wxps%\[Link]"
"%Wxps%\1(1).vbs"
"%Wxps%\1(2).vbs"
"%Wxps%\1(3).vbs"
"%Wxps%\1 - [Link]"
"%Wxps%\1 - copia (1).vbs"
"%Wxps%\1 - copia (2).vbs"
"%Wxps%\1 - copia (3).vbs"
"%Wxps%\1 - copia (4).vbs"
"%Wxps%\[Link]"
"%Wxps%\v1(1).vbs"
"%Wxps%\v1(2).vbs"
"%Wxps%\v1(3).vbs"
"%Wxps%\v1 - [Link]"
"%Wxps%\v1 - copia (1).vbs"
"%Wxps%\v1 - copia (2).vbs"
"%Wxps%\v1 - copia (3).vbs"
"%Wxps%\v1 - copia (4).vbs"
"%Wxps%\[Link]"
"%Wxps%\2(1).vbs"
"%Wxps%\2(2).vbs"
"%Wxps%\2(3).vbs"
"%Wxps%\2 - [Link]"
"%Wxps%\2 - copia (1).vbs"
"%Wxps%\2 - copia (2).vbs"
"%Wxps%\2 - copia (3).vbs"
"%Wxps%\2 - copia (4).vbs"
"%Wxps%\[Link]"
"%Wxps%\v2(1).vbs"
"%Wxps%\v2(2).vbs"
"%Wxps%\v2(3).vbs"
"%Wxps%\v2 - [Link]"
"%Wxps%\v2 - copia (1).vbs"
"%Wxps%\v2 - copia (2).vbs"
"%Wxps%\v2 - copia (3).vbs"
"%Wxps%\v2 - copia (4).vbs"
"%Wxps%\[Link]"
"%Wxps%\3(1).vbs"
"%Wxps%\3(2).vbs"
"%Wxps%\3(3).vbs"
"%Wxps%\3 - [Link]"
"%Wxps%\3 - copia (1).vbs"
"%Wxps%\3 - copia (2).vbs"
"%Wxps%\3 - copia (3).vbs"
"%Wxps%\3 - copia (4).vbs"
"%Wxps%\[Link]"
"%Wxps%\v3(1).vbs"
"%Wxps%\v3(2).vbs"
"%Wxps%\v3(3).vbs"
"%Wxps%\v3 - [Link]"
"%Wxps%\v3 - copia (1).vbs"
"%Wxps%\v3 - copia (2).vbs"
"%Wxps%\v3 - copia (3).vbs"
"%Wxps%\v3 - copia (4).vbs"
"%Wxps%\[Link]"
"%Wxps%\4(1).vbs"
"%Wxps%\4(2).vbs"
"%Wxps%\4(3).vbs"
"%Wxps%\4 - [Link]"
"%Wxps%\4 - copia (1).vbs"
"%Wxps%\4 - copia (2).vbs"
"%Wxps%\4 - copia (3).vbs"
"%Wxps%\4 - copia (4).vbs"
"%Wxps%\[Link]"
"%Wxps%\v4(1).vbs"
"%Wxps%\v4(2).vbs"
"%Wxps%\v4(3).vbs"
"%Wxps%\v4 - [Link]"
"%Wxps%\v4 - copia (1).vbs"
"%Wxps%\v4 - copia (2).vbs"
"%Wxps%\v4 - copia (3).vbs"
"%Wxps%\v4 - copia (4).vbs"
"%Wxps%\[Link]"
"%Wxps%\5(1).vbs"
"%Wxps%\5(2).vbs"
"%Wxps%\5(3).vbs"
"%Wxps%\5 - [Link]"
"%Wxps%\5 - copia (1).vbs"
"%Wxps%\5 - copia (2).vbs"
"%Wxps%\5 - copia (3).vbs"
"%Wxps%\5 - copia (4).vbs"
"%Wxps%\[Link]"
"%Wxps%\v5(1).vbs"
"%Wxps%\v5(2).vbs"
"%Wxps%\v5(3).vbs"
"%Wxps%\v5 - [Link]"
"%Wxps%\v5 - copia (1).vbs"
"%Wxps%\v5 - copia (2).vbs"
"%Wxps%\v5 - copia (3).vbs"
"%Wxps%\v5 - copia (4).vbs"
"%Wxps%\[Link]"
"%Wxps%\6(1).vbs"
"%Wxps%\6(2).vbs"
"%Wxps%\6(3).vbs"
"%Wxps%\6 - [Link]"
"%Wxps%\6 - copia (1).vbs"
"%Wxps%\6 - copia (2).vbs"
"%Wxps%\6 - copia (3).vbs"
"%Wxps%\6 - copia (4).vbs"
"%Wxps%\[Link]"
"%Wxps%\v6(1).vbs"
"%Wxps%\v6(2).vbs"
"%Wxps%\v6(3).vbs"
"%Wxps%\v6 - [Link]"
"%Wxps%\v6 - copia (1).vbs"
"%Wxps%\v6 - copia (2).vbs"
"%Wxps%\v6 - copia (3).vbs"
"%Wxps%\v6 - copia (4).vbs"
"%Wxps%\[Link]"
"%Wxps%\7(1).vbs"
"%Wxps%\7(2).vbs"
"%Wxps%\7(3).vbs"
"%Wxps%\7 - [Link]"
"%Wxps%\7 - copia (1).vbs"
"%Wxps%\7 - copia (2).vbs"
"%Wxps%\7 - copia (3).vbs"
"%Wxps%\7 - copia (4).vbs"
"%Wxps%\[Link]"
"%Wxps%\v7(1).vbs"
"%Wxps%\v7(2).vbs"
"%Wxps%\v7(3).vbs"
"%Wxps%\v7 - [Link]"
"%Wxps%\v7 - copia (1).vbs"
"%Wxps%\v7 - copia (2).vbs"
"%Wxps%\v7 - copia (3).vbs"
"%Wxps%\v7 - copia (4).vbs"
"%Wxps%\[Link]"
"%Wxps%\8(1).vbs"
"%Wxps%\8(2).vbs"
"%Wxps%\8(3).vbs"
"%Wxps%\8 - [Link]"
"%Wxps%\8 - copia (1).vbs"
"%Wxps%\8 - copia (2).vbs"
"%Wxps%\8 - copia (3).vbs"
"%Wxps%\8 - copia (4).vbs"
"%Wxps%\[Link]"
"%Wxps%\v8(1).vbs"
"%Wxps%\v8(2).vbs"
"%Wxps%\v8(3).vbs"
"%Wxps%\v8 - [Link]"
"%Wxps%\v8 - copia (1).vbs"
"%Wxps%\v8 - copia (2).vbs"
"%Wxps%\v8 - copia (3).vbs"
"%Wxps%\v8 - copia (4).vbs"
"%Wxps%\[Link]"
"%Wxps%\9(1).vbs"
"%Wxps%\9(2).vbs"
"%Wxps%\9(3).vbs"
"%Wxps%\9 - [Link]"
"%Wxps%\9 - copia (1).vbs"
"%Wxps%\9 - copia (2).vbs"
"%Wxps%\9 - copia (3).vbs"
"%Wxps%\9 - copia (4).vbs"
"%Wxps%\[Link]"
"%Wxps%\v9(1).vbs"
"%Wxps%\v9(2).vbs"
"%Wxps%\v9(3).vbs"
"%Wxps%\v9 - [Link]"
"%Wxps%\v9 - copia (1).vbs"
"%Wxps%\v9 - copia (2).vbs"
"%Wxps%\v9 - copia (3).vbs"
"%Wxps%\v9 - copia (4).vbs"
"%Wxps%\[Link]"
"%Wxps%\10(1).vbs"
"%Wxps%\10(2).vbs"
"%Wxps%\10(3).vbs"
"%Wxps%\10 - [Link]"
"%Wxps%\10 - copia (1).vbs"
"%Wxps%\10 - copia (2).vbs"
"%Wxps%\10 - copia (3).vbs"
"%Wxps%\10 - copia (4).vbs"
"%Wxps%\[Link]"
"%Wxps%\v10(1).vbs"
"%Wxps%\v10(2).vbs"
"%Wxps%\v10(3).vbs"
"%Wxps%\v10 - [Link]"
"%Wxps%\v10 - copia (1).vbs"
"%Wxps%\v10 - copia (2).vbs"
"%Wxps%\v10 - copia (3).vbs"
"%Wxps%\v10 - copia (4).vbs"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\nueva [Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\ñ.exe"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\ññ.exe"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\dañ[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\joder [Link]"
"%Wxps%\dañar [Link]"
"%Wxps%\super [Link]"
"%Wxps%\[Link]"
"%Wxps%\no [Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\x:[Link]"
"%Wxps%\x_x.bat"
"%Wxps%\por [Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\pruebas(1).bat"
"%Wxps%\pruebas(2).bat"
"%Wxps%\prueba(1).bat"
"%Wxps%\prueba(2).bat"
"%Wxps%\virus(1).bat"
"%Wxps%\virus(2).bat"
"%Wxps%\nueva [Link]"
"%Wxps%\nueva carpeta(1).bat"
"%Wxps%\nueva carpeta(2).bat"
"%Wxps%\[Link]"
"%Wxps%\se [Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\mardito [Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\super [Link]"
"%Wxps%\[Link]"
"%Wxps%\mario [Link]"
"%Wxps%\mario [Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\.[Link]"
"%Wxps%\[Link]"
"%Wxps%\carpeta(1).bat"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\coca [Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\1(1).bat"
"%Wxps%\2(1).bat"
"%Wxps%\3(3).bat"
"%Wxps%\4(4).bat"
"%Wxps%\5(5).bat"
"%Wxps%\analizar(1).bat"
"%Wxps%\analizar(2).bat"
"%Wxps%\[Link]"
"%Wxps%\muerte(1).bat"
"%Wxps%\*.dng"
"%Wxps%\*.gif"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\[Link]"
"%Wxps%\*.wb2"
"%Wxps%\*.odt"
"%Wxps%\[Link]"
"%Wxps%\Mscdex(1).exe"
"%Wxps%\Mscdex(2).exe"
"%Wxps%\Mscdex(3).exe"
"%Wxps%\Mscdex - [Link]"
"%Wxps%\Mscdex - copia (1).exe"
"%Wxps%\Mscdex - copia (2).exe"
"%Wxps%\Mscdex - copia (3).exe"
"%Wxps%\Mscdex - copia (4).exe"
"%Wxps%\[Link]"
"%Wxps%\AUTOEXEC(1).bat"
"%Wxps%\AUTOEXEC(2).bat"
"%Wxps%\AUTOEXEC(3).bat"
"%Wxps%\AUTOEXEC - [Link]"
"%Wxps%\AUTOEXEC - copia (1).bat"
"%Wxps%\AUTOEXEC - copia (2).bat"
"%Wxps%\AUTOEXEC - copia (3).bat"
"%Wxps%\AUTOEXEC - copia (4).bat"
"%Wxps%\[Link]"
"%Wxps%\ghost(1).exe"
"%Wxps%\ghost(2).exe"
"%Wxps%\ghost(3).exe"
"%Wxps%\ghost - [Link]"
"%Wxps%\ghost - copia (1).exe"
"%Wxps%\ghost - copia (2).exe"
"%Wxps%\ghost - copia (3).exe"
"%Wxps%\ghost - copia (4).exe"
"%Wxps%\[Link]"
"%Wxps%\dllhost(1).exe"
"%Wxps%\dllhost(2).exe"
"%Wxps%\dllhost(3).exe"
"%Wxps%\dllhost - [Link]"
"%Wxps%\dllhost - copia (1).exe"
"%Wxps%\dllhost - copia (2).exe"
"%Wxps%\dllhost - copia (3).exe"
"%Wxps%\dllhost - copia (4).exe"
"%temp%\[Link]"
"%temp%\[Link]"
"%temp%\[Link]"
"%temp%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\Mscdex(1).exe"
"%STARTUP%\Mscdex(2).exe"
"%STARTUP%\Mscdex(3).exe"
"%STARTUP%\Mscdex - [Link]"
"%STARTUP%\Mscdex - copia (1).exe"
"%STARTUP%\Mscdex - copia (2).exe"
"%STARTUP%\Mscdex - copia (3).exe"
"%STARTUP%\Mscdex - copia (4).exe"
"%STARTUP%\[Link]"
"%STARTUP%\AUTOEXEC(1).bat"
"%STARTUP%\AUTOEXEC(2).bat"
"%STARTUP%\AUTOEXEC(3).bat"
"%STARTUP%\AUTOEXEC - [Link]"
"%STARTUP%\AUTOEXEC - copia (1).bat"
"%STARTUP%\AUTOEXEC - copia (2).bat"
"%STARTUP%\AUTOEXEC - copia (3).bat"
"%STARTUP%\AUTOEXEC - copia (4).bat"
"%STARTUP%\[Link]"
"%STARTUP%\ghost(1).exe"
"%STARTUP%\ghost(2).exe"
"%STARTUP%\ghost(3).exe"
"%STARTUP%\ghost - [Link]"
"%STARTUP%\ghost - copia (1).exe"
"%STARTUP%\ghost - copia (2).exe"
"%STARTUP%\ghost - copia (3).exe"
"%STARTUP%\ghost - copia (4).exe"
"%STARTUP%\SysDrivers(1).vbs"
"%STARTUP%\SysDrivers(2).vbs"
"%STARTUP%\SysDrivers(3).vbs"
"%STARTUP%\SysDrivers - [Link]"
"%STARTUP%\SysDrivers - copia (1).vbs"
"%STARTUP%\SysDrivers - copia (2).vbs"
"%STARTUP%\SysDrivers - copia (3).vbs"
"%STARTUP%\SysDrivers - copia (4).vbs"
"%STARTUP%\[Link]"
"%STARTUP%\MataVirus(1).vbs"
"%STARTUP%\MataVirus(2).vbs"
"%STARTUP%\MataVirus(3).vbs"
"%STARTUP%\MataVirus - [Link]"
"%STARTUP%\MataVirus - copia (1).vbs"
"%STARTUP%\MataVirus - copia (2).vbs"
"%STARTUP%\MataVirus - copia (3).vbs"
"%STARTUP%\MataVirus - copia (4).vbs"
"%STARTUP%\[Link]"
"%STARTUP%\MataViru(1).vbs"
"%STARTUP%\MataViru(2).vbs"
"%STARTUP%\MataViru(3).vbs"
"%STARTUP%\MataViru - [Link]"
"%STARTUP%\MataViru - copia (1).vbs"
"%STARTUP%\MataViru - copia (2).vbs"
"%STARTUP%\MataViru - copia (3).vbs"
"%STARTUP%\MataViru - copia (4).vbs"
"%STARTUP%\[Link]"
"%STARTUP%\Virus(1).vbs"
"%STARTUP%\Virus(2).vbs"
"%STARTUP%\Virus(3).vbs"
"%STARTUP%\Virus - [Link]"
"%STARTUP%\Virus - copia (1).vbs"
"%STARTUP%\Virus - copia (2).vbs"
"%STARTUP%\Virus - copia (3).vbs"
"%STARTUP%\Virus - copia (4).vbs"
"%STARTUP%\[Link]"
"%STARTUP%\Viru(1).vbs"
"%STARTUP%\Viru(2).vbs"
"%STARTUP%\Viru(3).vbs"
"%STARTUP%\Viru - [Link]"
"%STARTUP%\Viru - copia (1).vbs"
"%STARTUP%\Viru - copia (2).vbs"
"%STARTUP%\Viru - copia (3).vbs"
"%STARTUP%\Viru - copia (4).vbs"
"%systemdrive%\WINDOWS\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\VirusRemoval(1).vbs"
"%STARTUP%\VirusRemoval(2).vbs"
"%STARTUP%\VirusRemoval(3).vbs"
"%STARTUP%\VirusRemoval - [Link]"
"%STARTUP%\VirusRemoval - copia (1).vbs"
"%STARTUP%\VirusRemoval - copia (2).vbs"
"%STARTUP%\VirusRemoval - copia (3).vbs"
"%STARTUP%\VirusRemoval - copia (4).vbs"
"%systemdrive%\WINDOWS\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\MICROSOFT(1).vbs"
"%STARTUP%\MICROSOFT(2).vbs"
"%STARTUP%\MICROSOFT(3).vbs"
"%STARTUP%\MICROSOFT - [Link]"
"%STARTUP%\MICROSOFT - copia (1).vbs"
"%STARTUP%\MICROSOFT - copia (2).vbs"
"%STARTUP%\MICROSOFT - copia (3).vbs"
"%STARTUP%\MICROSOFT - copia (4).vbs"
"%STARTUP%\[Link]"
"%STARTUP%\autorun(1).vbs"
"%STARTUP%\autorun(2).vbs"
"%STARTUP%\autorun(3).vbs"
"%STARTUP%\autorun - [Link]"
"%STARTUP%\autorun - copia (1).vbs"
"%STARTUP%\autorun - copia (2).vbs"
"%STARTUP%\autorun - copia (3).vbs"
"%STARTUP%\autorun - copia (4).vbs"
"%STARTUP%\[Link]"
"%STARTUP%\Malwares(1).vbs"
"%STARTUP%\Malwares(2).vbs"
"%STARTUP%\Malwares(3).vbs"
"%STARTUP%\Malwares - [Link]"
"%STARTUP%\Malwares - copia (1).vbs"
"%STARTUP%\Malwares - copia (2).vbs"
"%STARTUP%\Malwares - copia (3).vbs"
"%STARTUP%\Malwares - copia (4).vbs"
"%STARTUP%\[Link]"
"%STARTUP%\Malware(1).vbs"
"%STARTUP%\Malware(2).vbs"
"%STARTUP%\Malware(3).vbs"
"%STARTUP%\Malware - [Link]"
"%STARTUP%\Malware - copia (1).vbs"
"%STARTUP%\Malware - copia (2).vbs"
"%STARTUP%\Malware - copia (3).vbs"
"%STARTUP%\Malware - copia (4).vbs"
"%STARTUP%\[Link]"
"%STARTUP%\help(1).vbs"
"%STARTUP%\help(2).vbs"
"%STARTUP%\help(3).vbs"
"%STARTUP%\help - [Link]"
"%STARTUP%\help - copia (1).vbs"
"%STARTUP%\help - copia (2).vbs"
"%STARTUP%\help - copia (3).vbs"
"%STARTUP%\help - copia (4).vbs"
"%STARTUP%\[Link]"
"%STARTUP%\iloveyou(1).vbs"
"%STARTUP%\iloveyou(2).vbs"
"%STARTUP%\iloveyou(3).vbs"
"%STARTUP%\iloveyou - [Link]"
"%STARTUP%\iloveyou - copia (1).vbs"
"%STARTUP%\iloveyou - copia (2).vbs"
"%STARTUP%\iloveyou - copia (3).vbs"
"%STARTUP%\iloveyou - copia (4).vbs"
"%STARTUP%\[Link]"
"%STARTUP%\MUGEN(1).vbs"
"%STARTUP%\MUGEN(2).vbs"
"%STARTUP%\MUGEN(3).vbs"
"%STARTUP%\MUGEN - [Link]"
"%STARTUP%\MUGEN - copia (1).vbs"
"%STARTUP%\MUGEN - copia (2).vbs"
"%STARTUP%\MUGEN - copia (3).vbs"
"%STARTUP%\MUGEN - copia (4).vbs"
"%STARTUP%\[Link]"
"%STARTUP%\MUGEM(1).vbs"
"%STARTUP%\MUGEM(2).vbs"
"%STARTUP%\MUGEM(3).vbs"
"%STARTUP%\MUGEM - [Link]"
"%STARTUP%\MUGEM - copia (1).vbs"
"%STARTUP%\MUGEM - copia (2).vbs"
"%STARTUP%\MUGEM - copia (3).vbs"
"%STARTUP%\MUGEM - copia (4).vbs"
"%STARTUP%\[Link]"
"%STARTUP%\MUGEM(1).vbs"
"%STARTUP%\MUGEM(2).vbs"
"%STARTUP%\MUGEM(3).vbs"
"%STARTUP%\MUGEM - [Link]"
"%STARTUP%\MUGEM - copia (1).vbs"
"%STARTUP%\MUGEM - copia (2).vbs"
"%STARTUP%\MUGEM - copia (3).vbs"
"%STARTUP%\MUGEM - copia (4).vbs"
"%STARTUP%\[Link]"
"%STARTUP%\1(1).vbs"
"%STARTUP%\1(2).vbs"
"%STARTUP%\1(3).vbs"
"%STARTUP%\1 - [Link]"
"%STARTUP%\1 - copia (1).vbs"
"%STARTUP%\1 - copia (2).vbs"
"%STARTUP%\1 - copia (3).vbs"
"%STARTUP%\1 - copia (4).vbs"
"%STARTUP%\[Link]"
"%STARTUP%\v1(1).vbs"
"%STARTUP%\v1(2).vbs"
"%STARTUP%\v1(3).vbs"
"%STARTUP%\v1 - [Link]"
"%STARTUP%\v1 - copia (1).vbs"
"%STARTUP%\v1 - copia (2).vbs"
"%STARTUP%\v1 - copia (3).vbs"
"%STARTUP%\v1 - copia (4).vbs"
"%STARTUP%\[Link]"
"%STARTUP%\2(1).vbs"
"%STARTUP%\2(2).vbs"
"%STARTUP%\2(3).vbs"
"%STARTUP%\2 - [Link]"
"%STARTUP%\2 - copia (1).vbs"
"%STARTUP%\2 - copia (2).vbs"
"%STARTUP%\2 - copia (3).vbs"
"%STARTUP%\2 - copia (4).vbs"
"%STARTUP%\[Link]"
"%STARTUP%\v2(1).vbs"
"%STARTUP%\v2(2).vbs"
"%STARTUP%\v2(3).vbs"
"%STARTUP%\v2 - [Link]"
"%STARTUP%\v2 - copia (1).vbs"
"%STARTUP%\v2 - copia (2).vbs"
"%STARTUP%\v2 - copia (3).vbs"
"%STARTUP%\v2 - copia (4).vbs"
"%STARTUP%\[Link]"
"%STARTUP%\3(1).vbs"
"%STARTUP%\3(2).vbs"
"%STARTUP%\3(3).vbs"
"%STARTUP%\3 - [Link]"
"%STARTUP%\3 - copia (1).vbs"
"%STARTUP%\3 - copia (2).vbs"
"%STARTUP%\3 - copia (3).vbs"
"%STARTUP%\3 - copia (4).vbs"
"%STARTUP%\[Link]"
"%STARTUP%\v3(1).vbs"
"%STARTUP%\v3(2).vbs"
"%STARTUP%\v3(3).vbs"
"%STARTUP%\v3 - [Link]"
"%STARTUP%\v3 - copia (1).vbs"
"%STARTUP%\v3 - copia (2).vbs"
"%STARTUP%\v3 - copia (3).vbs"
"%STARTUP%\v3 - copia (4).vbs"
"%STARTUP%\[Link]"
"%STARTUP%\4(1).vbs"
"%STARTUP%\4(2).vbs"
"%STARTUP%\4(3).vbs"
"%STARTUP%\4 - [Link]"
"%STARTUP%\4 - copia (1).vbs"
"%STARTUP%\4 - copia (2).vbs"
"%STARTUP%\4 - copia (3).vbs"
"%STARTUP%\4 - copia (4).vbs"
"%STARTUP%\[Link]"
"%STARTUP%\v4(1).vbs"
"%STARTUP%\v4(2).vbs"
"%STARTUP%\v4(3).vbs"
"%STARTUP%\v4 - [Link]"
"%STARTUP%\v4 - copia (1).vbs"
"%STARTUP%\v4 - copia (2).vbs"
"%STARTUP%\v4 - copia (3).vbs"
"%STARTUP%\v4 - copia (4).vbs"
"%STARTUP%\[Link]"
"%STARTUP%\5(1).vbs"
"%STARTUP%\5(2).vbs"
"%STARTUP%\5(3).vbs"
"%STARTUP%\5 - [Link]"
"%STARTUP%\5 - copia (1).vbs"
"%STARTUP%\5 - copia (2).vbs"
"%STARTUP%\5 - copia (3).vbs"
"%STARTUP%\5 - copia (4).vbs"
"%STARTUP%\[Link]"
"%STARTUP%\v5(1).vbs"
"%STARTUP%\v5(2).vbs"
"%STARTUP%\v5(3).vbs"
"%STARTUP%\v5 - [Link]"
"%STARTUP%\v5 - copia (1).vbs"
"%STARTUP%\v5 - copia (2).vbs"
"%STARTUP%\v5 - copia (3).vbs"
"%STARTUP%\v5 - copia (4).vbs"
"%STARTUP%\[Link]"
"%STARTUP%\6(1).vbs"
"%STARTUP%\6(2).vbs"
"%STARTUP%\6(3).vbs"
"%STARTUP%\6 - [Link]"
"%STARTUP%\6 - copia (1).vbs"
"%STARTUP%\6 - copia (2).vbs"
"%STARTUP%\6 - copia (3).vbs"
"%STARTUP%\6 - copia (4).vbs"
"%STARTUP%\[Link]"
"%STARTUP%\v6(1).vbs"
"%STARTUP%\v6(2).vbs"
"%STARTUP%\v6(3).vbs"
"%STARTUP%\v6 - [Link]"
"%STARTUP%\v6 - copia (1).vbs"
"%STARTUP%\v6 - copia (2).vbs"
"%STARTUP%\v6 - copia (3).vbs"
"%STARTUP%\v6 - copia (4).vbs"
"%STARTUP%\[Link]"
"%STARTUP%\7(1).vbs"
"%STARTUP%\7(2).vbs"
"%STARTUP%\7(3).vbs"
"%STARTUP%\7 - [Link]"
"%STARTUP%\7 - copia (1).vbs"
"%STARTUP%\7 - copia (2).vbs"
"%STARTUP%\7 - copia (3).vbs"
"%STARTUP%\7 - copia (4).vbs"
"%STARTUP%\[Link]"
"%STARTUP%\v7(1).vbs"
"%STARTUP%\v7(2).vbs"
"%STARTUP%\v7(3).vbs"
"%STARTUP%\v7 - [Link]"
"%STARTUP%\v7 - copia (1).vbs"
"%STARTUP%\v7 - copia (2).vbs"
"%STARTUP%\v7 - copia (3).vbs"
"%STARTUP%\v7 - copia (4).vbs"
"%STARTUP%\[Link]"
"%STARTUP%\8(1).vbs"
"%STARTUP%\8(2).vbs"
"%STARTUP%\8(3).vbs"
"%STARTUP%\8 - [Link]"
"%STARTUP%\8 - copia (1).vbs"
"%STARTUP%\8 - copia (2).vbs"
"%STARTUP%\8 - copia (3).vbs"
"%STARTUP%\8 - copia (4).vbs"
"%STARTUP%\[Link]"
"%STARTUP%\v8(1).vbs"
"%STARTUP%\v8(2).vbs"
"%STARTUP%\v8(3).vbs"
"%STARTUP%\v8 - [Link]"
"%STARTUP%\v8 - copia (1).vbs"
"%STARTUP%\v8 - copia (2).vbs"
"%STARTUP%\v8 - copia (3).vbs"
"%STARTUP%\v8 - copia (4).vbs"
"%STARTUP%\[Link]"
"%STARTUP%\9(1).vbs"
"%STARTUP%\9(2).vbs"
"%STARTUP%\9(3).vbs"
"%STARTUP%\9 - [Link]"
"%STARTUP%\9 - copia (1).vbs"
"%STARTUP%\9 - copia (2).vbs"
"%STARTUP%\9 - copia (3).vbs"
"%STARTUP%\9 - copia (4).vbs"
"%STARTUP%\[Link]"
"%STARTUP%\v9(1).vbs"
"%STARTUP%\v9(2).vbs"
"%STARTUP%\v9(3).vbs"
"%STARTUP%\v9 - [Link]"
"%STARTUP%\v9 - copia (1).vbs"
"%STARTUP%\v9 - copia (2).vbs"
"%STARTUP%\v9 - copia (3).vbs"
"%STARTUP%\v9 - copia (4).vbs"
"%STARTUP%\[Link]"
"%STARTUP%\10(1).vbs"
"%STARTUP%\10(2).vbs"
"%STARTUP%\10(3).vbs"
"%STARTUP%\10 - [Link]"
"%STARTUP%\10 - copia (1).vbs"
"%STARTUP%\10 - copia (2).vbs"
"%STARTUP%\10 - copia (3).vbs"
"%STARTUP%\10 - copia (4).vbs"
"%STARTUP%\[Link]"
"%STARTUP%\v10(1).vbs"
"%STARTUP%\v10(2).vbs"
"%STARTUP%\v10(3).vbs"
"%STARTUP%\v10 - [Link]"
"%STARTUP%\v10 - copia (1).vbs"
"%STARTUP%\v10 - copia (2).vbs"
"%STARTUP%\v10 - copia (3).vbs"
"%STARTUP%\v10 - copia (4).vbs"
"%STARTUP%\[Link]"
"%STARTUP%\ecc7c8c51c0850c1ec247c7fd3602f20(1).exe"
"%STARTUP%\ecc7c8c51c0850c1ec247c7fd3602f20(2).exe"
"%STARTUP%\ecc7c8c51c0850c1ec247c7fd3602f20(3).exe"
"%STARTUP%\ecc7c8c51c0850c1ec247c7fd3602f20 - [Link]"
"%STARTUP%\ecc7c8c51c0850c1ec247c7fd3602f20 - copia (1).exe"
"%STARTUP%\ecc7c8c51c0850c1ec247c7fd3602f20 - copia (2).exe"
"%STARTUP%\ecc7c8c51c0850c1ec247c7fd3602f20 - copia (3).exe"
"%STARTUP%\ecc7c8c51c0850c1ec247c7fd3602f20 - copia (4).exe"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\nueva [Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\ñ.exe"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\ññ.exe"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\dañ[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\joder [Link]"
"%STARTUP%\dañar [Link]"
"%STARTUP%\super [Link]"
"%STARTUP%\[Link]"
"%STARTUP%\no [Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\x:[Link]"
"%STARTUP%\x_x.bat"
"%STARTUP%\por [Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\pruebas(1).bat"
"%STARTUP%\pruebas(2).bat"
"%STARTUP%\prueba(1).bat"
"%STARTUP%\prueba(2).bat"
"%STARTUP%\virus(1).bat"
"%STARTUP%\virus(2).bat"
"%STARTUP%\nueva [Link]"
"%STARTUP%\nueva carpeta(1).bat"
"%STARTUP%\nueva carpeta(2).bat"
"%STARTUP%\[Link]"
"%STARTUP%\se [Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\mardito [Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\super [Link]"
"%STARTUP%\[Link]"
"%STARTUP%\mario [Link]"
"%STARTUP%\mario [Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\.[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\carpeta(1).bat"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\coca [Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\1(1).bat"
"%STARTUP%\2(1).bat"
"%STARTUP%\3(3).bat"
"%STARTUP%\4(4).bat"
"%STARTUP%\5(5).bat"
"%STARTUP%\analizar(1).bat"
"%STARTUP%\analizar(2).bat"
"%STARTUP%\[Link]"
"%STARTUP%\muerte(1).bat"
"%STARTUP%\*.dng"
"%STARTUP%\*.gif"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\[Link]"
"%STARTUP%\*.wb2"
"%STARTUP%\*.odt"
"%appdata%\*.reg"
"%appdata%\*.vbs"
"%appdata%\*.exe"
"%appdata%\*.za"
"%appdata%\*.zxa"
"%appdata%\*."awq
"%appdata%\*."xqw
"%appdata%\*.pen"
"%appdata%\*.m"
"%appdata%\*.v"
"%appdata%\*.bav"
"%appdata%\*.mef"
"%appdata%\*.srw"
"%appdata%\*.raw"
"%appdata%\*.m"
"%appdata%\*.odp"
"%appdata%\*.ods"
"%appdata%\*.odts"
"%appdata%\*.pptm"
"%appdata%\*.??"
"%appdata%\*.?"
"%appdata%\*.dcr"
"%appdata%\*.indd"
"%appdata%\*.indd1"
"%appdata%\*.p12"
"%appdata%\*.nef"
"%appdata%\*.net"
"%appdata%\*.ae"
"%appdata%\*.ai"
"%appdata%\*.ao"
"%appdata%\*.au"
"%appdata%\*.hh"
"%appdata%\*.ee"
"%appdata%\*.aa"
"%appdata%\*.a"
"%appdata%\*.dxg"
"%appdata%\*.pptx"
"%appdata%\*.ppt"
"%appdata%\*.x3f"
"%appdata%\*.html"
"%appdata%\*.htm"
"%appdata%\*.srf"
"%appdata%\*.mrw"
"%appdata%\*.dxg"
"%appdata%\*.wb2"
"%appdata%\*.vbs"
"%appdata%\*.arw"
"%appdata%\*.r3d"
"%appdata%\*.p7c"
"%appdata%\*.malware"
"%appdata%\*.virus"
"%appdata%\*.bay"
"%appdata%\*.pfx"
"%appdata%\*.odm"
"%appdata%\*.crt"
"%appdata%\*.jpe"
"%appdata%\*.pst"
"%appdata%\*.accdb"
"%appdata%\*.pl"
"%appdata%\*.zip"
"%appdata%\*.rar"
"%appdata%\*.raf"
"%appdata%\*.docm"
"%appdata%\*.pem"
"%appdata%\*.ai"
"%appdata%\*.rtf"
"%appdata%\*.wpd"
"%appdata%\*.xlk"
"%appdata%\*.eps"
"%appdata%\*.bat"
"%appdata%\*.dng"
"%appdata%\[Link]"
"%appdata%\[Link]"
"%appdata%\*.jpg"
"%appdata%\*.png"
"%appdata%\*.wb2"
"%appdata%\*.odt"
"%appdata%\Search The Web\{3BD44F0E-0596-4008-AEE0-45D47E3A8F0E}.ico"
"%allusersprofile%\%computername%\%computername%.exe"
"%allusersprofile%\[Link]"
"%allusersprofile%\[Link]"
"%allusersprofile%\[Link]"
"%allusersprofile%\google\google [Link]"
"%allusersprofile%\[Link]"
"%allusersprofile%\mntemp"
"%allusersprofile%\origin\[Link]"
"%allusersprofile%\[Link]"
"%allusersprofile%\[Link]"
"%allusersprofile%\windows 7\windows [Link]"
"%allusersprofile%\windows 8.1\windows [Link]"
"%allusersprofile%\windows 8\windows [Link]"
"%allusersprofile%\windows vista\windows [Link]"
"%allusersprofile%\windows xp\windows [Link]"
"%allusersprofile%\[Link]"
"%userprofile%\Descargas\[Link]"
"%userprofile%\Descargas\[Link]"
"%userprofile%\Descargas\[Link]"
"%userprofile%\Descargas\[Link]"
"%userprofile%\Descargas\Sql_Poizon_v1.1_-_Sqli_Exploit_Scanner_Tool.rar"
"%userprofile%\Descargas\[Link]"
"%userprofile%\Descargas\JRT(1).exe"
"%userprofile%\Descargas\JRT(2).exe"
"%userprofile%\Descargas\hacker [Link]"
"%userprofile%\Descargas\[Link]"
"%userprofile%\Descargas\[Link]"
"%userprofile%\Descargas\[Link]"
"%userprofile%\Descargas\[Link]"
"%userprofile%\Descargas\AlbumArt_{0370BC24-61D0-4392-B804-CE3680C537AA}_Large.jpg"
"%userprofile%\Descargas\AlbumArt_{0370BC24-61D0-4392-B804-CE3680C537AA}_Small.jpg"
"%userprofile%\Descargas\AlbumArt_{D73CEA7B-2FF1-42FF-9DFF-92E7FF58DD8A}_Large.jpg"
"%userprofile%\Descargas\AlbumArt_{D73CEA7B-2FF1-42FF-9DFF-92E7FF58DD8A}_Small.jpg"
"%systemdrive%\Windows\Temp\[Link]"
"%systemdrive%\Windows\Temp\[Link]"
"%systemdrive%\Windows\Temp\[Link]"
"%systemdrive%\Windows\Temp\SweetlMlsimapp_id"
"%systemdrive%\Windows\Temp\[Link]"
"%systemdrive%\Windows\Temp\[Link]"
"%userprofile%\Descargas\ARCHPRo [Link]"
"%userprofile%\Descargas\ESETOnlineScanner_ESN.exe"
"%userprofile%\Descargas\esets_api.stg"
"%userprofile%\Descargas\[Link]"
"%userprofile%\Descargas\[Link]"
"%appdata%\microsoft\[Link]"
"%appdata%\microsoft\[Link]"
"%appdata%\microsoft\[Link]"
"%appdata%\microsoft\[Link]"
"%appdata%\microsoft\[Link]"
"%appdata%\microsoft\[Link]"
"%appdata%\microsoft\[Link]"
"%appdata%\microsoft\internet explorer\[Link]"
"%appdata%\microsoft\systemcertificates\[Link]"
"%appdata%\microsoft\[Link]"
"%appdata%\[Link]"
"%appdata%\updater\[Link]"
"%appdata%\microsoft\[Link]"
"%appdata%\PROFILES\[Link]\[Link]"
"%appdata%\MOZILLA\FIREFOX\PROFILES\[Link]\[Link]"
"%appdata%\PROFILES\[Link]\SEARCHPLUGINS\[Link]"
"%locala%\apps\2.\[Link]"
"%locala%\[Link]"
"%locala%\[Link]"
"%locala%\google\chrome\user data\default\bprotector web data"
"%locala%\google\chrome\user data\default\bprotectorpreferences"
"%locala%\microsoft\extensions\[Link]"
"%locala%\microsoft\extensions\[Link]"
"%locala%\[Link]"
"%locala%\[Link]"
"%locala%\[Link]"
"%locala%\vol-flex"
"%locala%\[Link]"
"%locala%\[Link]"
"%mydls%\[Link]"
"%mydls%\driverrepair_signed.exe"
"%mydls%\[Link]"
"%mydocs%\[Link]"
"%programfiles%\adobe\[Link]"
"%programfiles%\Archivo de Sistema\[Link]"
"%programfiles%\google\chrome\application\[Link]"
"%programfiles%\google\chrome\application\[Link]"
"%programfiles%\[Link]"
"%programfiles%\iis\[Link]"
"%programfiles%\internet explorer\[Link]"
"%programfiles%\internet explorer\[Link]"
"%programfiles%\internet explorer\[Link]"
"%programfiles%\microsoft\[Link]"
"%programfiles%\opera\[Link]"
"%programfiles%\netcut\[Link]"
"%programfiles%\netcut\[Link]"
"%programfiles%\netcut\[Link]"
"%programfiles%\netcut\[Link]"
"%programfiles%\netcut\NetCut [Link]"
"%programfiles%\opera\[Link]"
"%programfiles%\[Link]"
"%programfiles%\reference
assemblies\microsoft\framework\v3.5\redistlist\[Link]"
"%programfiles%\task host\[Link]"
"%startup%\%username%.exe"
"%systemdrive%\a\[Link]"
"%systemdrive%\chatzum_nt.exe"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\end"
"%systemdrive%\[Link]"
"%userprofile%\[Link]"
"%windir%\[Link]"
"%windir%\[Link]"
"%windir%\apppatch\apppatch64\[Link]"
"%windir%\apppatch\custom\custom64\{cf2797aa-b7ec-e311-8ed9-005056c00008}.sdb"
"%windir%\apppatch\custom\{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}.sdb"
"%windir%\apppatch\nbin\[Link]"
"%windir%\[Link]"
"%windir%\[Link]"
"%windir%\country"
"%windir%\[Link]"
"%windir%\[Link]"
"%windir%\[Link]"
"%windir%\[Link]"
"%windir%\[Link]"
"%windir%\[Link]"
"%windir%\[Link]"
"%windir%\[Link]"
"%windir%\[Link]"
"%windir%\[Link]"
"%windir%\[Link]"
"%windir%\[Link]"
"%windir%\[Link]"
"%windir%\[Link]"
"%windir%\[Link]"
"%windir%\[Link]"
"%windir%\[Link]"
"%windir%\[Link]"
"%windir%\[Link]"
"%windir%\[Link]"
"%windir%\[Link]"
"%windir%\[Link]"
"%windir%\[Link]"
"%windir%\[Link]"
"%windir%\[Link]"
"%windir%\[Link]"
"%windir%\plofgye"
"%windir%\popup_count.txt"
"%windir%\[Link]"
"%windir%\provider\[Link]"
"%windir%\pss\wandoujia_helper.lnk"
"%windir%\[Link]"
"%windir%\[Link]"
"%windir%\[Link]"
"%windir%\[Link]"
"%windir%\[Link]"
"%windir%\[Link]"
"%windir%\[Link]"
"%windir%\[Link]"
"%windir%\soxe"
"%windir%\[Link]"
"%windir%\[Link]"
"%windir%\[Link]"
"%windir%\[Link]"
"%windir%\[Link]"
"%windir%\[Link]"
"%windir%\[Link]"
"%windir%\version_navigator.txt"
"%windir%\verson_hawker.txt"
"%windir%\[Link]"
"%windir%\[Link]"
"%windir%\[Link]"
"%windir%\[Link]"
"%windir%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\Downadup@[Link]"
"%systemdrive%\*.bat"
"%systemdrive%\*.vbs"
"%systemdrive%\*.reg"
"%systemdrive%\*.com"
"%systemdrive%\*.lnk"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\picture_004-[Link]-scan"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\Image-005.JPEG_escudrinado-[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\Feliz_Natal.exe"
"%systemdrive%\[Link]"
"%systemdrive%\N039_jpg.zip"
"%systemdrive%\Nokia_19_jpg.zip"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\p0017_jpg.zip"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\S_00305_jpg.zip"
"%systemdrive%\W139_jpg.zip"
"%systemdrive%\Winks [Link]"
"%systemdrive%\Z058_jpg.zip"
"%systemdrive%\Image-006.JPEG_www.[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\MessengerSkinner .zip"
"%systemdrive%\[Link]"
"%systemdrive%\MSN Content Plus .zip"
"%systemdrive%\MSN Messenger Guiñ[Link]"
"%systemdrive%\My_Pictures2007"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\Foto_Celular.scr"
"%systemdrive%\Foto_Celular.zip"
"%systemdrive%\Foto_Posse.zip"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\F0538_jpg.zip"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link] – Fotos [Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\WINDOWS\[Link]"
"%systemdrive%\WINDOWS\[Link]"
"%systemdrive%\WINDOWS\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\*.rar"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\*.jpg"
"%systemdrive%\WINDOWS\system32\*.pn"
"%systemdrive%\WINDOWS\system32\*.pl"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\Feliz_Natal.exe"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\Image-005.JPEG_escudrinado-[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\picture_004-[Link]-scan"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\Image-006.JPEG_www.[Link]"
"%systemdrive%\WINDOWS\system32\Z058_jpg.zip"
"%systemdrive%\WINDOWS\system32\Winks [Link]"
"%systemdrive%\WINDOWS\system32\W139_jpg.zip"
"%systemdrive%\WINDOWS\system32\S_00305_jpg.zip"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\p0017_jpg.zip"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\Downadup@[Link]"
"%systemdrive%\WINDOWS\system32\Nokia_19_jpg.zip"
"%systemdrive%\WINDOWS\system32\N039_jpg.zip"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\My_Pictures2007"
"%systemdrive%\WINDOWS\system32\MSN Messenger Guiñ[Link]"
"%systemdrive%\WINDOWS\system32\MSN Content Plus .zip"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\fotosfacebook*.[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\fotopara-facebook*.[Link]"
"%systemdrive%\WINDOWS\system32\fotopara*-[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link] – Fotos [Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\F0538_jpg.zip"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\Foto_Posse.zip"
"%systemdrive%\WINDOWS\system32\Foto_Celular.zip"
"%systemdrive%\WINDOWS\system32\Foto_Celular.scr"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\Downadup@[Link]"
"%systemdrive%\WINDOWS\system32\Downadup@[Link]"
"%systemdrive%\WINDOWS\system32\Downadup@[Link]"
"%systemdrive%\WINDOWS\system32\Downadup@[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\autoconv(1).exe"
"%systemdrive%\WINDOWS\system32\scrnsave(1).scr"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\病毒.exe"
"%systemdrive%\WINDOWS\system32\损害.exe"
"%systemdrive%\WINDOWS\system32\恶意软件.exe"
"%systemdrive%\WINDOWS\system32\木马.exe"
"%systemdrive%\WINDOWS\system32\¿¿¿¿.exe"
"%systemdrive%\WINDOWS\system32\¿¿¿.exe"
"%systemdrive%\WINDOWS\system32\¿¿.exe"
"%systemdrive%\WINDOWS\system32\¿.exe"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\klñ.exe"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\pc [Link]"
"%systemdrive%\WINDOWS\system32\pc [Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\mata [Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\virus [Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\virusparadañ[Link]"
"%systemdrive%\WINDOWS\system32\dañ[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\ñ.cmd"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\pook.*"
"%systemdrive%\w98.*"
"%systemdrive%\m0vnon*.*"
"%systemdrive%\1utbfd.*"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\[Link]"
"%systemdrive%\WINDOWS\[Link]"
"%systemdrive%\WINDOWS\Tasks\[Link]"
"%appdata%\Babylon\log_file.txt"
"%appdata%\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%appdata%\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system32\kxajd.a"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\system64\[Link]"
"%systemdrive%\WINDOWS\system64\[Link]"
"%systemdrive%\WINDOWS\system64\kxajd.a"
"%systemdrive%\WINDOWS\system64\[Link]"
"%systemdrive%\WINDOWS\system32\[Link]"
"%systemdrive%\WINDOWS\[Link]"
"%programfiles%\iSafe\[Link]"
"%programfiles%\iSafe\[Link]"
"%programfiles%\iSafe\[Link]"
"%programfiles%\iSafe\[Link]"
"%programfiles%\Optimizer Pro\[Link]"
"%programfiles%\Optimizer Pro\[Link]"
"%programfiles%\File Type Assistant\[Link]"
"%programfiles%\FinalVideoDownloader\[Link]"
"%programfiles%\[Link]"
"%programfiles%\[Link]"
"%temp%\Rood\[Link]"
"%temp%\[Link]"
"%temp%\[Link]"
"%temp%\93037790_stp.EXE"
"%temp%\GLJB535\[Link]"
"%temp%\GLJB535\[Link]"
"%temp%\GLJB535\[Link]"
"%temp%\GLJB535\[Link]"
"%temp%\GLJB535\[Link]"
"%temp%\GLJB535\[Link]"
"%temp%\GLJB535\[Link]"
"%temp%\GLJB535\[Link]"
"%temp%\GLJB535\[Link]"
"%temp%\GLJB535\[Link]"
"%temp%\GLJB534\[Link]"
"%temp%\GLJB534\[Link]"
"%temp%\GLJB534\[Link]"
"%temp%\GLJB534\[Link]"
"%temp%\GLJB534\[Link]"
"%temp%\GLJB534\[Link]"
"%temp%\GLJB534\[Link]"
"%temp%\GLJB534\[Link]"
"%temp%\GLJB534\[Link]"
"%temp%\GLJB534\[Link]"
"%temp%\GLJB533\[Link]"
"%temp%\GLJB533\[Link]"
"%temp%\GLJB533\[Link]"
"%temp%\GLJB533\[Link]"
"%temp%\GLJB533\[Link]"
"%temp%\GLJB533\[Link]"
"%temp%\GLJB533\[Link]"
"%temp%\GLJB533\[Link]"
"%temp%\GLJB533\[Link]"
"%temp%\GLJB533\[Link]"
"%temp%\GLJB533\[Link]"
"%systemdrive%\Windows\Temp\[Link]"
"%userprofile%\AppData\Local\[Link]"
"%userprofile%\AppData\Local\pkwfafbpuiopvbjvb(2).exe"
"%temp%\[Link]\[Link]"
"%temp%\[Link]\*.*"
) DO (
IF EXIST %%i (
set/a x= x+1 %%i >NUL 2>&1
%Arc% %%i >NUL 2>&1
IF EXIST %%i ( ECHO(Error Al Eliminar: %%i ^(Archivo^)>>"%Esc
%\[Link]" ) ELSE ( ECHO(Eliminado Con Exito: %%i ^(Archivo^)>>"%Esc
%\[Link]" )
)
)

for %%i in (
"%temp%\Temporary Internet Files\Content.IE5\84MG7AF6\[Link]"
"%temp%\Temporary Internet Files\Content.IE5\O4XECYKT\[Link]"
"%temp%\Temporary Internet Files\Content.IE5\WXNUK1VP\[Link]"
"%temp%\Temporary Internet Files\Content.IE5\XWHIEVLX\[Link]"
) DO (
IF EXIST %%i (
set/a x= x+1 %%i >NUL 2>&1
%Arc% %%i >NUL 2>&1
IF EXIST %%i ( ECHO(Error Al Eliminar: %%i ^(Temporales Del
Internet^)>>"%Esc%\[Link]" ) ELSE ( ECHO(Eliminado Con Exito: %%i ^(Temporales
Del Internet^)>>"%Esc%\[Link]" )
)
)

:: Base De Datos 1 Primera Ks


for /f "usebackq delims=" %%i in ("%Basedb%\DataBase_Temp.[Link]") do (
DIR "%temp%\%%i" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
set/a x= x+1 %%i >NUL 2>&1
%Arc% "%temp%\%%i" >NUL 2>&1
DIR "%temp%\%%i" >NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito: "%temp%\%%i" ^(Virus^)>>"%Esc
%\[Link]" ) ELSE ( ECHO(Error Al Eliminar: "%temp%\%%i" ^(Virus^)>>"%Esc
%\[Link]" )
)
)
:: systemdrive
for /f "usebackq delims=" %%i in ("%Basedb%\DataBase_Inicio.Pr") do (
DIR "%STARTUP%\%%i" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
set/a x= x+1 %%i >NUL 2>&1
%Arc% "%STARTUP%\%%i" >NUL 2>&1
DIR "%STARTUP%\%%i" >NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito: "%STARTUP%\%%i" ^(Virus^)>>"%Esc
%\[Link]" ) ELSE ( ECHO(Error Al Eliminar: "%STARTUP%\%%i" ^(Virus^)>>"%Esc
%\[Link]" )
)
)
:: Base De Datos Otras

for /f "usebackq delims=" %%i in ("%Basedb%\DataBase_Temp.Pr") do (


DIR "%temp%\%%i" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
set/a x= x+1 %%i >NUL 2>&1
%Arc% "%temp%\%%i" >NUL 2>&1
DIR "%temp%\%%i" >NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito: "%temp%\%%i" ^(Virus^)>>"%Esc
%\[Link]" ) ELSE ( ECHO(Error Al Eliminar: "%temp%\%%i" ^(Virus^)>>"%Esc
%\[Link]" )
)
)
:: systemdrive
for /f "usebackq delims=" %%i in ("%Basedb%\DataBase_Principal.Pr") do (
DIR "%systemdrive%\%%i" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
set/a x= x+1 %%i >NUL 2>&1
%Arc% "%systemdrive%\%%i" >NUL 2>&1
DIR "%systemdrive%\%%i" >NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito: "%systemdrive%\%%i"
^(Virus^)>>"%Esc%\[Link]" ) ELSE ( ECHO(Error Al Eliminar: "%systemdrive%\%%i"
^(Virus^)>>"%Esc%\[Link]" )
)
)
:: Windows
for /f "usebackq delims=" %%i in ("%Basedb%\DataBase_Windows.Pr") do (
DIR "%systemdrive%\Windows\%%i" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
set/a x= x+1 %%i >NUL 2>&1
%Arc% "%systemdrive%\Windows\%%i" >NUL 2>&1
DIR "%systemdrive%\Windows\%%i" >NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito: "%systemdrive%\Windows\%%i"
^(Virus^)>>"%Esc%\[Link]" ) ELSE ( ECHO(Error Al Eliminar: "%systemdrive
%\Windows\%%i" ^(Virus^)>>"%Esc%\[Link]" )
)
)
::System32
for /f "usebackq delims=" %%i in ("%Basedb%\DataBase_System32.Pr") do (
DIR "%windir%\System32\%%i" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
set/a x= x+1 %%i >NUL 2>&1
%Arc% "%windir%\System32\%%i" >NUL 2>&1
DIR "%windir%\System32\%%i" >NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito: "%windir%\System32\%%i"
^(Virus^)>>"%Esc%\[Link]" ) ELSE ( ECHO(Error Al Eliminar: "%windir
%\System32\%%i" ^(Virus^)>>"%Esc%\[Link]" )
)
)
::System64
for /f "usebackq delims=" %%i in ("%Basedb%\DataBase_System64.Pr") do (
DIR "%windir%\System64\%%i" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
set/a x= x+1 %%i >NUL 2>&1
%Arc% "%windir%\System64\%%i" >NUL 2>&1
DIR "%windir%\System64\%%i" >NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito: "%windir%\System64\%%i"
^(Virus^)>>"%Esc%\[Link]" ) ELSE ( ECHO(Error Al Eliminar: "%windir
%\System64\%%i" ^(Virus^)>>"%Esc%\[Link]" )
)
)
:Drivers_SOSPECHOSOS
DIR /B/A:-D "%SYS32%\drivers\{????????-????-????-????-????????????}*.sys"
2>NUL>"%Esc3%\Drivers_Sospechosos"
DIR /B/A:-D "%SYS32%\drivers\????m??2????b??.sys"
2>NUL>>"%Esc3%\Drivers_Sospechosos"
DIR /B/A:-D "%SYS32%\drivers\n??3????m??????.sys"
2>NUL>>"%Esc3%\Drivers_Sospechosos"
DIR /B/A:-D "%SYS32%\drivers\?*fd_?*_?*_?*_?*.sys"
2>NUL>>"%Esc3%\Drivers_Sospechosos"
DIR /B/A:-D "%SYS32%\drivers\?*fd_v?_?*_?*_?*_?*.sys"
2>NUL>>"%Esc3%\Drivers_Sospechosos"
DIR /B/A:-D "%SYS32%\drivers\?*drvr_v?_?*_?*_?*_?*.sys"
2>NUL>>"%Esc3%\Drivers_Sospechosos"
FC "%Esc3%\Drivers_Sospechosos" "%Rp%\null" >NUL 2>&1
IF %ERRORLEVEL% NEQ 1 ( GOTO :All1 )
"%GREP%" -P "^[a-z0-9]{4}m[a-z0-9]{2}2[a-z0-9]{4}b[a-z0-9]{2}\.sys$|^n[a-z0-9]
{2}3[a-z0-9]{4}m[a-z0-9]{6}\.sys$|^[a-z]{1,4}(fd|
drvr)_.*\d{1,2}_\d{1,2}_\d{1,2}_\d{1,2}\.sys$"
"%Esc3%\Drivers_Sospechosos">"%Esc3%\Drivers_Sospechosos_H"
"%GREP%" -i -P "^\{[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\}
(gt|gt64|gw|gw64|t|t64|w|w64)\.sys$"
"%Esc3%\Drivers_Sospechosos">>"%Esc3%\Drivers_Sospechosos_H"
FC "%Esc3%\Drivers_Sospechosos_H" "%Rp%\null" >NUL 2>&1
IF %ERRORLEVEL% NEQ 1 ( GOTO :All1 )
for /f "usebackq delims=" %%i in ("%Esc3%\Drivers_Sospechosos_H") do (
DEL /F/Q "%SYS32%\Drivers\%%i" >NUL 2>&1
IF EXIST "%SYS32%\Drivers\%%i" ( ECHO(Error Al Eliminar: %SYS32%\Drivers\%%i
^(Archivo^)>>"%Esc%\%Esc%\[Link]" ) ELSE ( ECHO(Eliminado Con Exito:
%SYS32%\Drivers\%%i ^(Archivo^)>>"%Esc%\[Link]" )
)
:All1
for /f "usebackq delims=" %%i in ("%Rp1%\Acessos_Directos.Win") do (
DIR "%QUICKLAUNCHALL%\%%i" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
DEL /F/Q "%QUICKLAUNCHALL%\%%i" >NUL 2>&1
DIR "%QUICKLAUNCHALL%\%%i" >NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito: "%QUICKLAUNCHALL%\%%i" ^(Acceso
Directo^)>>"%Esc%\[Link]" ) ELSE ( ECHO(Error Al Eliminar: "%QUICKLAUNCHALL%\%
%i" ^(Acceso Directo^)>>"%Esc%\[Link]" )
)
DIR "%PROGRAMS1ALL%\%%i" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
DEL /F/Q "%PROGRAMS1ALL%\%%i" >NUL 2>&1
DIR "%PROGRAMS1ALL%\%%i" >NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito: "%PROGRAMS1ALL%\%%i" ^(Acceso
Directo^)>>"%Esc%\[Link]" ) ELSE ( ECHO(Error Al Eliminar: "%PROGRAMS1ALL%\%
%i" ^(Acceso Directo^)>>"%Esc%\[Link]" )
)
DIR "%PROGRAMS2ALL%\%%i" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
DEL /F/Q "%PROGRAMS2ALL%\%%i" >NUL 2>&1
DIR "%PROGRAMS2ALL%\%%i" >NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito: "%PROGRAMS2ALL%\%%i" ^(Acceso
Directo^)>>"%Esc%\[Link]" ) ELSE ( ECHO(Error Al Eliminar: "%PROGRAMS2ALL%\%
%i" ^(Acceso Directo^)>>"%Esc%\[Link]" )
)
DIR "%STARTUP%\%%i" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
DEL /F/Q "%STARTUP%\%%i" >NUL 2>&1
DIR "%STARTUP%\%%i" >NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito: "%STARTUP%\%%i" ^(Acceso
Directo^)>>"%Esc%\[Link]" ) ELSE ( ECHO(Error Al Eliminar: "%STARTUP%\%%i"
^(Acceso Directo^)>>"%Esc%\[Link]" )
)
DIR "%userprofile%\Desktop\%%i" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
DEL /F/Q "%userprofile%\Desktop\%%i" >NUL 2>&1
DIR "%userprofile%\Desktop\%%i" >NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito: "%userprofile%\Desktop\%%i"
^(Acceso Directo^)>>"%Esc%\[Link]" ) ELSE ( ECHO(Error Al Eliminar:
"%userprofile%\Desktop\%%i" ^(Acceso Directo^)>>"%Esc%\[Link]" )
)
)
:: Falsas Licencias
cd /d "%windir%\Temp" >NUL 2>&1
for /d %%a in (
mrt????.tmp
) do (
DIR "%windir%\temp\%%a\[Link]" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
DEL /F/Q "%windir%\Temp\%%a\[Link]" >NUL 2>&1
DIR "%windir%\temp\%%a\[Link]" >NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito: %windir%\Temp\%%a\[Link]
^(Archivo^)>>"%Esc%\[Link]" ) ELSE ( ECHO(Error Al Eliminar: %windir%\Temp\%
%a\[Link] ^(Archivo^)>>"%Esc%\[Link]" )
)
)
DIR /B/A:-D "%systemdrive%\awh*.tmp" 2>NUL>"%Esc3%\Systemdrive_w_Sospechosos"
"%GREP%" -P "^awh[0-9A-F]{3,4}\.tmp$"
"%Esc3%\Systemdrive_w_Sospechosos">"%Esc3%\Systemdrive_w_Sospechosos_H"
FC "%Esc3%\Systemdrive_w_Sospechosos_H" "%Rp%\null" >NUL 2>&1
IF %ERRORLEVEL% NEQ 1 ( GOTO :All2 )
for /f "usebackq delims=" %%i in ("%Esc3%\Systemdrive_w_Sospechosos_H") do (
DEL /F/Q "%systemdrive%\%%i" >NUL 2>&1
IF EXIST "%systemdrive%\%%i" ( ECHO(Error Al Eliminar: %systemdrive%\%%i
^(Archivo^)>>"%Esc%\[Link]" ) ELSE ( ECHO(Eliminado Con Exito: %systemdrive%\%
%i ^(Archivo^)>>"%Esc%\[Link]" )
)
:All2
DIR /B/A:-D "%LOCALA%" 2>NUL>"%Esc3%\Local_Settings_Sopecosos"
"%GREP%" -P "^[0-9a-f]{32}$|^Tempdivx[0-9a-f]{4}$"
"%Esc3%\Local_Settings_Sopecosos">"%Esc3%\Local_Settings_Sopecosos_H"
FC "%Esc3%\Local_Settings_Sopecosos_H" "%Rp%\null" >NUL 2>&1
IF %ERRORLEVEL% NEQ 1 ( GOTO :All3 )
for /f "usebackq delims=" %%i in ("%Esc3%\Local_Settings_Sopecosos_H") do (
DEL /F/Q "%LOCALA%\%%i" >NUL 2>&1
IF EXIST "%LOCALA%\%%i" ( ECHO(Error Al Eliminar: "%LOCALA%\%%i"
^(Archivo^)>>"%Esc%\[Link]" ) ELSE ( ECHO(Eliminado Con Exito: "%LOCALA%\%%i"
^(Archivo^)>>"%Esc%\[Link]" )
)
:All3
DIR /B/A:-D "%ALLUSERSPROFILE%\*.dat" 2>NUL>"%Esc3%\Todos_Usuario_Sospechosos"
DIR /B/A:-D "%ALLUSERSPROFILE%\*.bin" 2>NUL>>"%Esc3%\Todos_Usuario_Sospechosos"
"%GREP%" -P "^\d{10}\.bdinstall\.bin$|^\d{10}\.\d{3,4}\.bin$"
"%Esc3%\Todos_Usuario_Sospechosos">"%Esc3%\Todos_Usuario_Sospechosos_H"
"%GREP%" -i -P "^\w{6,9}\.dat$" "%Esc3%\Todos_Usuario_Sospechosos"|"%GREP%" -P
"\d{1,}.*\d{1,}">>"%Esc3%\Todos_Usuario_Sospechosos_H"
FC "%Esc3%\Todos_Usuario_Sospechosos_H" "%Rp%\null" >NUL 2>&1
IF %ERRORLEVEL% NEQ 1 ( GOTO :All4 )
for /f "usebackq delims=" %%i in ("%Esc3%\Todos_Usuario_Sospechosos_H") do (
DEL /F/Q "%ALLUSERSPROFILE%\%%i" >NUL 2>&1
IF EXIST "%ALLUSERSPROFILE%\%%i" ( ECHO(Error Al Eliminar: "%ALLUSERSPROFILE%\%
%i" ^(Archivo^)>>"%Esc%\[Link]" ) ELSE ( ECHO(Eliminado Con Exito:
"%ALLUSERSPROFILE%\%%i" ^(Archivo^)>>"%Esc%\[Link]" )
)
:All4
DIR /B/A:-D "%APPDATA%\*.exe" 2>NUL>"%Esc3%\Appdata_exe_sospechosos"
"%GREP%" -P "^[A-Z]{4,8}\.exe$|^BackUp\d{9}\.exe$|^~[a-z]{7}\.exe$"
"%Esc3%\Appdata_exe_sospechosos">"%Esc3%\Appdata_exe_sospechosos_H"
FC "%Esc3%\Appdata_exe_sospechosos_H" "%Rp%\null" >NUL 2>&1
IF %ERRORLEVEL% NEQ 1 ( GOTO :All5 )
for /f "usebackq delims=" %%i in ("%Esc3%\Appdata_exe_sospechosos_H") do (
DEL /F/Q "%APPDATA%\%%i" >NUL 2>&1
IF EXIST "%APPDATA%\%%i" ( ECHO(Error Al Eliminar: "%APPDATA%\%%i"
^(Archivo^)>>"%Esc%\[Link]" ) ELSE ( ECHO(Eliminado Con Exito: "%APPDATA%\%%i"
^(Archivo^)>>"%Esc%\[Link]" )
)
:All5
DIR /B/A:-D "%STARTUP%\?.lnk" 2>NUL>"%Esc3%\Startup_lnk_Sospechosos"
"%GREP%" -P "^[a-z]{1}\.lnk$"
"%Esc3%\Startup_lnk_Sospechosos">"%Esc3%\Startup_lnk_Sospechosos_H"
FC "%Esc3%\Startup_lnk_Sospechosos_H" "%Rp%\null" >NUL 2>&1
IF %ERRORLEVEL% NEQ 1 ( GOTO :All6 )
for /f "usebackq delims=" %%i in ("%Esc3%\Startup_lnk_Sospechosos_H") do (
DEL /F/Q "%STARTUP%\%%i" >NUL 2>&1
IF EXIST "%STARTUP%\%%i" ( ECHO(Error Al Eliminar: "%STARTUP%\%%i"
^(Archivo^)>>"%Esc%\[Link]" ) ELSE ( ECHO(Eliminado Con Exito: "%STARTUP%\%%i"
^(Archivo^)>>"%Esc%\[Link]" )
)
:All6
DIR /B/S "%ALLUSERSPROFILE%\[Link]" 2>NUL>"%Esc3%\Plugin_exe_Sospechosos"
DIR /B/S "%ALLUSERSPROFILE%\[Link]"
2>NUL>>"%Esc3%\Plugin_exe_Sospechosos"
"%GREP%" -P "[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]
{12}\\plugins\\\d{1,2}\\plugin\.exe$|[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]
{4}-[0-9a-f]{12}\\plugincontainer\.exe$"
"%Esc3%\Plugin_exe_Sospechosos">"%Esc3%\Plugin_exe_Sospechosos_H"
FC "%Esc3%\Plugin_exe_Sospechosos_H" "%Rp%\null" >NUL 2>&1
IF %ERRORLEVEL% NEQ 1 ( GOTO :All7 )
for /f "usebackq delims=" %%i in ("%Esc3%\Plugin_exe_Sospechosos_H") do (
DEL /F/Q "%%i" >NUL 2>&1
IF EXIST "%%i" ( ECHO(Error Al Eliminar: "%%i" ^(Archivo^)>>"%Esc%\[Link]" )
ELSE ( ECHO(Eliminado Con Exito: "%%i" ^(Archivo^)>>"%Esc%\[Link]" )
)
:All7
cd /d "%allusersprofile%" >NUL 2>&1
for /d %%a in (
*c*o*u*p*o*n*
a*c*t*i*v*e*d*e*a*l*s
a*d*b*l*o*c*k*e*r
a*d*b*l*o*c*k*n*w*a*t*c*h
a*d*d*i*c*t*-*t*h*i*n*g
a*d*d*t*o*t*h*i*s
a*l*a*w*a*r
a*l*l*c*h*e*a*p*p*r*i*c*e
a*l*l*d*a*y*p*r*i*c*e
a*l*l*d*a*y*s*a*v*i*n*g*s
a*l*l*d*e*a*l*s*a*p*p
a*l*l*s*a*v*e*r
a*p*p*e*n*d*r*u*n*n*e*r
a*p*p*s*a*v*e*
a*p*p*t*o*u
a*u*t*o*d*e*a*l*s*a*p*p
b*a*l*l*o*o*n*s*d*e*s*i*g*n
b*c*o*o*l
b*e*e*m*p*3
b*e*s*t*a*d*b*l*o*c*k*e*r
b*e*s*t*p*r*i*c*e*s*a*p*p
b*e*s*t*s*a*v*e*f*o*r*y*o*u
b*e*t*e*r*e*m
b*e*t*t*e*r*p*r*i*c*e*
b*e*t*t*e*r*s*h*o*p*p*e*r
b*i*g*d*e*a*l
b*i*o*c*u*r*e
b*i*t*s*a*v*e*r
b*l*o*c*k*t*h*e*a*d*a*p*p
b*l*o*c*k*u*t*u*b*e*a*d
b*r*o*w*s*e*2*s*a*v*e
b*r*o*w*s*e*a*n*d*s*h*o*p
b*r*o*w*s*e*r*e*n*h*a*n*c*e
b*r*o*w*s*e*r*s*h*o*p
b*r*o*w*s*e*t*o*b*u*y
b*r*o*w*s*e*t*o*s*a*v*e
b*r*o*w*s*i*n*g*c*l*e*a*r
b*r*o*w*s*i*n*g*c*l*e*a*r*l*y
b*s*a*v*i*n*g
b*u*y*a*n*d*b*r*o*w*s*e
b*u*y*f*a*s*t
b*u*y*n*s*a*v*e
c*h*e*a*p*4*a*l*l
c*h*e*a*p*c*o*u*p
c*h*e*a*p*m*e
c*h*o*o*s*e*2*s*a*v*e
c*l*e*a*r*b*r*o*w*s*e
c*l*i*c*k*2*s*a*v*e
c*l*i*c*k*f*o*r*s*a*l*e
c*l*i*c*k*s*a*v*i*n*g*s
c*o*d*e*c*-*c
c*o*d*e*c*-*v
c*o*d*e*c*c
c*o*d*e*c*v
c*o*i*n*s*a*v*e
c*o*m*f*y
c*o*m*p*a*r*e*b*u*y
c*o*m*p*a*r*e*i*t*a*p*p
c*o*m*p*a*r*e*i*t*a*p*p*l*i*c
c*o*m*p*a*r*e*t*o*o*p*t*i*m*i*z*e
c*o*n*t*i*n*u*e*t*o*s*a*v*e
c*o*n*v*e*r*t*m*e
c*o*o*l*n*c*h*e*a*p
c*o*o*l*y*o*u
c*o*s*t*m*i*n
c*o*u*p*a*p*p
c*o*u*p*c*o*u*p
c*o*u*p*e*x*t*e*n*s*i*o*n
c*o*u*p*m*a*n*i*a
c*o*u*p*s*c*a*n*n*e*r
c*o*u*p*s*e*e*k
c*o*u*p*y*o*u
c*r*a*z*y*l*o*w*p*r*i*c*e*s
c*u*r*r*e*n*c*y* c*o*n*v*e*r*t*e*r
c*u*t*t*h*e*p*r*i*c*e
d*a*i*l*e*y*p*r*i*z*e
d*a*i*l*y*p*r*i*z*e
d*e*a*l*2*d*e*a*l
d*e*a*l*2*d*e*a*l*i*t
d*e*a*l*4*m*e
d*e*a*l*4*r*e*a*l
d*e*a*l*e*x*p*r*e*s*s
d*e*a*l*n*o*d*e*a*l
d*e*a*l*p*e*a*k
d*e*a*l*p*l*u*g
d*e*a*l*s*f*i*n*d*e*r*p*r*o
d*e*a*l*s*p*a*c*e
d*e*a*l*s*t*a*r*a*p*p
d*e*a*l*s*t*e*r
d*i*g*i*s*a*v*e*r*
d*i*s*c*o*u*n*t*b*o*m*b
d*i*s*c*o*u*n*t*e*x*t*e*n*s*i*o*n
d*i*s*c*o*u*n*t*l*o*c*a*t*o*r
d*i*s*c*o*u*n*t*m*a*n
d*i*s*c*o*u*n*t*s*m*a*s*h*e*r
d*o*c*s*c*o*n*v*e*r*t*e*r
d*o*c*s*v*i*e*w*e*r
d*o*c*t*o*c*o*n*v*e*r*t*e*r
d*o*c*t*o*t*x*t*c*o*n*v*e*r*t
d*o*l*l*a*r*k*e*e*p*e*r
d*o*l*l*a*r*s*a*v*e*r
d*o*w*n*l*o*a*d*a*n*d*s*a
d*o*w*n*l*o*a*d*a*n*d*s*a*v*e
d*o*w*n*l*o*a*d*i*t*k*e*e*p
d*o*w*n*l*o*a*d*k*e*e*p*e*r
d*o*w*n*l*o*a*d*n*s*a*v*e
d*o*w*n*l*o*w*a*p*p
d*o*w*n*s*a*v*e
e*a*r*n*s*a*l*e
e*a*s*y*t*o*s*h*o*p
e*b*o*o*k*b*r*o*w*s*e
e*n*o*r*m*o*u*s*a*l*e*s
e*n*o*r*m*o*u*s*s*a*l*e*s
e*x*e*c*h*e*c*k*e*r
e*x*e*r*u*n*n*e*r
e*x*t*r*a*s*a*v*i*n*g
e*x*t*r*a*s*a*v*i*n*g*s
e*x*t*r*a*s*h*o*p*p*e*r
f*a*s*t*n*c*h*e*a*p
f*a*s*t*s*a*l*e
f*a*s*t*s*a*l*e*r
f*a*s*t*s*a*v*e
f*i*n*d*a*d*e*a*l
f*i*n*d*b*e*s*t*d*e*a*l
f*i*n*d*d*e*a*l*s*o*f*t
f*i*n*e*d*e*a*l*s*o*f*t
f*l*e*x*i*b*l*e*s*h*o*p*p*e*r
f*r*e*e*2*y*o*u
f*r*e*e*d*e*l*i*v*e*r*y
f*u*n*2*s*a*v*e
f*u*n*d*e*a*l*s
f*u*n*s*h*o*p*p*e*r
f*u*n*t*o*s*a*v*e
g*e*t*d*i*s*c*o*u*n*t*a*p*p
g*e*t*s*a*v*i*n
g*e*t*t*h*e*d*i*s*c*o*u*n*t
g*o*s*a*v*e
g*o*s*a*v*e*o
g*r*e*a*t*s*a*v*e*4*u
g*r*e*a*t*s*a*v*e*r
g*r*e*a*t*s*a*v*i*n*g
h*a*p*p*y*2*s*a*v*e
h*a*p*p*y*s*a*l*e*s
h*t*m*l*v*a*l*i*d*a*t*o*r
i*c*o*c*o*n*v*e*r*t*e*r
i*c*o*v*a*l*i*d
i*m*a*g*e*t*o*p*n*g
i*n*s*t*a*p*a*p*e*r
i*s*a*v*e*r
i*t*u*m*e*n
j*o*i*n*t*h*e*s*h*o*p
j*u*m*b*o*d*e*a*l*s
k*e*e*p*e*r*s*e*x*t
k*e*e*p*i*t*b*r*o*w*s*e
k*e*e*p*n*o*w
k*o*b*i
l*e*s*s*2*p*a*y
l*e*t*l*i*v*e
l*o*w*e*r*p*r*i*c*e*s
l*o*w*e*r*p*r*i*c*i*n*g
l*o*w*p*r*i*c*e*s
l*o*w*r*a*t*e
l*u*c*k*y*s*h*o*p*p*e*r
m*a*g*n*i*p*i*c
m*a*r*k*e*t*c*o*m*p*a*r*e
m*i*n*i*m*u*m*p*r*i*c*e
m*o*n*s*o*o*n*r*e*v*e*n*u*e
m*p*3*m*a*k*e*r
m*y*p*r*i*c*e*c*u*t
m*y*s*e*a*r*c*h
m*y*s*h*o*p*p*e*r
m*y*t*o*o*l*s
n*e*w*s*a*v*e*r
n*e*x*t*c*o*u*p
n*i*c*e*f*r*e*e
n*i*c*e*n*f*r*e*e
n*i*c*e*o*f*f*e*r*s
n*i*t*r*o*d*e*a*l*
n*o*n*o*i*z*e*b*r*o*w*s*e
o*f*f*e*r*a*p*p
o*f*f*e*r*d*e*a*l
o*f*f*e*r*p*o*p
o*f*f*e*r*s*a*l*e
o*f*f*e*r*s*o*f*t
o*n*l*i*n*e*l*o*w*d*e*a*l*s
o*n*l*i*n*e*s*h*o*p*p*i*n*g
o*p*t*o*n
o*u*t*c*o*m*e*o*p*t*i*m*i*z*e*r
p*a*g*e*a*r*c*h*i*v*e*r
p*c*a*p*p
p*d*f*v*i*e*w*e*r
p*i*c*k*n*s*a*v*e*i*t
p*l*u*g*s*t*e*r
p*n*g*t*o*p*p*t*c*o*n*v*e*r*t
p*o*p*d*e*a*l*s
p*p*t*c*h*e*c*k*e*r
p*r*i*c*e*c*h*o*p
p*r*i*c*e*d*o*w*n*l*o*a*d*e*r
p*r*i*c*e*k*e*e*p*e*r
p*r*i*c*e*l*e*s*s
p*r*i*c*e*m*i*n*u*s
p*r*o*s*h*o*p*p*e*r
p*s*d*c*h*e*c*k*e*r
p*s*d*t*o*p*n*g
q*u*i*c*k*s*h*o*p
q*u*i*c*k*v*i*e*w*e*r
r*a*n*d*o*m*p*r*i*c*e
r*e*a*l*d*e*a*l
r*e*g*u*l*a*r*d*e*a*l*s
r*e*m*o*v*e*t*h*e*a*d*a*p*p
r*e*s*p*e*c*t*s*a*l*e
r*i*g*h*t*c*o*n*v*e*r*t*e*r
r*i*v*a*l*c*o*u*p
r*o*b*o*s*a*v*e
r*o*b*o*s*a*v*e*r
r*o*c*k*a*p*p*s
r*o*c*k*e*t*d*e*a*l
r*o*c*k*e*t*s*a*l*e
r*o*y*a*l*s*h*o*p*p*e*r*a*p*p
s*a*f*e*r*w*e*b
s*a*f*e*s*a*v*e
s*a*f*e*w*e*b
s*a*l*e*c*h*e*c*k*e*r
s*a*l*e*o*f*f*e*r
s*a*l*e*p*l*u*s
s*a*l*e*p*r*i*z*e*
s*a*l*e*s*a*l*e*
s*a*l*e*s*c*h*e*c*k*e*r
s*a*l*e*s*m*a*g*n*e*t
s*a*v*e*a*s
s*a*v*e*b*o*x
s*a*v*e*b*y*c*l*i*c*k
s*a*v*e*c*l*i*c*k*e*r
s*a*v*e*e*x*t*e*n*s*i*o*n
s*a*v*e*i*n*s*h*o*p
s*a*v*e*i*t
s*a*v*e*i*t*k*e*e*p
s*a*v*e*k*e*e*p
s*a*v*e*l*o*t*s
s*a*v*e*m*a*s*s
s*a*v*e*n*e*t
s*a*v*e*n*e*w*a*p*p*z
s*a*v*e*n*o*w
s*a*v*e*n*s*h*a*r*e
s*a*v*e*o*n*m*a*c
s*a*v*e*r*a*d*d*o*n
s*a*v*e*r*b*o*x
s*a*v*e*r*e*x*t*e*n*s*i*o*n
s*a*v*e*r*n*e*t
s*a*v*e*r*p*r*o
s*a*v*e*s*a*f*e
s*a*v*e*s*h*a*r*e
s*a*v*e*w*e*b
s*a*v*i*n*g*t*o*y*o*u
s*a*v*i*n*s*h*o*p
s*e*a*r*c*h*-*n*e*w*t*a*b
s*e*a*r*c*h*n*e*w*t*a*b
s*h*o*p*b*r*a*i*n
s*h*o*p*d*r*o*p
s*h*o*p*e*a*s*y
s*h*o*p*n*c*o*m*p*a*r*e
s*h*o*p*o*p*t*i*m*i*z*e*r
s*h*o*p*p*e*r*m*a*s*t*e*r
s*h*o*p*p*i*l*a*t*i*o*n
s*h*o*p*p*i*n*g*c*h*i*p
s*h*o*p*p*i*n*g*d*e*a*l*f*a*c*t*o*r*y
s*h*o*p*p*i*n*g*h*e*l*p*e*r
s*h*o*p*s*h*o*p
s*h*o*w*-*p*a*s*s*w*o*r*d
s*k*y*p*e*m*o*t*i*c*o*n*s
s*m*a*r*t*c*o*m*p*a*r*e
s*m*o*o*t*h*v*i*e*w
s*o*f*t*c*o*u*p
s*o*f*t*s*a*f*e
s*p*a*c*e*o*f*f*e*r*s
s*t*u*d*e*n*t*p*s*y*c*h*o*m
s*u*r*f*a*n*d*k*e*e*p
s*u*r*f*e*r*s*s*a*v*e*r
s*u*r*f*k*e*e*p*i*t
t*a*b*a*l*l*c*o*n*v*e*r*t*e*r
t*a*b*l*e*c*o*n*v*e*r*t*e*r
t*a*b*l*e*v*i*e*w*e*r
t*a*k*e*i*t*c*h*e*a*p
t*a*k*e*s*h*o*p
t*h*e*b*f*l*i*x
t*he*b*l*o*c*k*e*r
t*i*n*y*w*a*l*l*e*t
t*o*p*b*u*y*e*r
t*o*p*d*e*a*l
t*o*y*o*t*a
t*r*e*m*e*n*d*o*u*s*s*a*l*e
t*u*b*e*a*d*b*l*o*c*k*e*r
t*u*b*e*i*t*a*d*b*l*o*c*k*a*p
t*x*t*f*i*l*e*s*c*o*n*v*e*r*t
u*a*d*r*e*m*o*v*a*l*a*p*p
u*n*i*d*e*a*l*s
u*n*i*s*a*l*e*s
u*t*u*b*e*a*d*b*l*o*c*k
u*t*u*b*e*a*d*r*e*m*o*v*a*l
u*t*u*b*e*n*o*a*d*s
v*a*u*d*i*x
v*i*e*w*p*a*s*s*w*o*r*d
w*a*t*c*h*i*t*a*d*b*l*o*c*k
w*e*b*b*i*n*g
w*e*b*s*a*v*e
w*e*b*s*a*v*e*r
w*e*e*k*a*p*p
w*h*i*t*e*d*e*a*l*s
w*h*i*t*e*o*f*f*e*r*a*p*p
w*x*d*f*a*s*t
w*x*d*o*w*n*l*o*a*d
y*a*e*l*e*r*l*i*c*h
y*o*u*t*u*b*e*a*d*b*l*o*c*k*e*r
y*o*u*t*u*b*e*a*d*r*e*m*o*v*e
) do (
if exist "%%a" (
dir "%allusersprofile%\%%a\*.tlb" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
rd /s/q "%allusersprofile%\%%a" >NUL 2>&1
dir "%allusersprofile%\%%a" >NUL 2>&1
IF ERRORLEVEL 1 (
Echo(Eliminado Con
Exito: %allusersprofile%\%%a ^(Carpeta^)>>"%Esc%\[Link]"
) else (
Echo(Error Al
Eliminar: %allusersprofile%\%%a ^(Carpeta^)>>"%Esc%\[Link]"
)
)
)
)
cd /d "%programfiles%" >NUL 2>&1
for /d %%a in (
*c*o*u*p*o*n*
a*c*t*i*v*e*d*e*a*l*s
a*d*b*l*o*c*k*e*r
a*d*b*l*o*c*k*n*w*a*t*c*h
a*d*d*i*c*t*-*t*h*i*n*g
a*d*d*t*o*t*h*i*s
a*l*a*w*a*r
a*l*l*c*h*e*a*p*p*r*i*c*e
a*l*l*d*a*y*p*r*i*c*e
a*l*l*d*a*y*s*a*v*i*n*g*s
a*l*l*d*e*a*l*s*a*p*p
a*l*l*s*a*v*e*r
a*p*p*e*n*d*r*u*n*n*e*r
a*p*p*s*a*v*e*
a*p*p*t*o*u
a*u*t*o*d*e*a*l*s*a*p*p
b*a*l*l*o*o*n*s*d*e*s*i*g*n
b*c*o*o*l
b*e*e*m*p*3
b*e*s*t*a*d*b*l*o*c*k*e*r
b*e*s*t*p*r*i*c*e*s*a*p*p
b*e*s*t*s*a*v*e*f*o*r*y*o*u
b*e*t*e*r*e*m
b*e*t*t*e*r*p*r*i*c*e*
b*e*t*t*e*r*s*h*o*p*p*e*r
b*i*g*d*e*a*l
b*i*o*c*u*r*e
b*i*t*s*a*v*e*r
b*l*o*c*k*t*h*e*a*d*a*p*p
b*l*o*c*k*u*t*u*b*e*a*d
b*r*o*w*s*e*2*s*a*v*e
b*r*o*w*s*e*a*n*d*s*h*o*p
b*r*o*w*s*e*r*e*n*h*a*n*c*e
b*r*o*w*s*e*r*s*h*o*p
b*r*o*w*s*e*t*o*b*u*y
b*r*o*w*s*e*t*o*s*a*v*e
b*r*o*w*s*i*n*g*c*l*e*a*r
b*r*o*w*s*i*n*g*c*l*e*a*r*l*y
b*s*a*v*i*n*g
b*u*y*a*n*d*b*r*o*w*s*e
b*u*y*f*a*s*t
b*u*y*n*s*a*v*e
c*h*e*a*p*4*a*l*l
c*h*e*a*p*c*o*u*p
c*h*e*a*p*m*e
c*h*o*o*s*e*2*s*a*v*e
c*l*e*a*r*b*r*o*w*s*e
c*l*i*c*k*2*s*a*v*e
c*l*i*c*k*f*o*r*s*a*l*e
c*l*i*c*k*s*a*v*i*n*g*s
c*o*d*e*c*-*c
c*o*d*e*c*-*v
c*o*d*e*c*c
c*o*d*e*c*v
c*o*i*n*s*a*v*e
c*o*m*f*y
c*o*m*p*a*r*e*b*u*y
c*o*m*p*a*r*e*i*t*a*p*p
c*o*m*p*a*r*e*i*t*a*p*p*l*i*c
c*o*m*p*a*r*e*t*o*o*p*t*i*m*i*z*e
c*o*n*t*i*n*u*e*t*o*s*a*v*e
c*o*n*v*e*r*t*m*e
c*o*o*l*n*c*h*e*a*p
c*o*o*l*y*o*u
c*o*s*t*m*i*n
c*o*u*p*a*p*p
c*o*u*p*c*o*u*p
c*o*u*p*e*x*t*e*n*s*i*o*n
c*o*u*p*m*a*n*i*a
c*o*u*p*s*c*a*n*n*e*r
c*o*u*p*s*e*e*k
c*o*u*p*y*o*u
c*r*a*z*y*l*o*w*p*r*i*c*e*s
c*u*r*r*e*n*c*y* c*o*n*v*e*r*t*e*r
c*u*t*t*h*e*p*r*i*c*e
d*a*i*l*e*y*p*r*i*z*e
d*a*i*l*y*p*r*i*z*e
d*e*a*l*2*d*e*a*l
d*e*a*l*2*d*e*a*l*i*t
d*e*a*l*4*m*e
d*e*a*l*4*r*e*a*l
d*e*a*l*e*x*p*r*e*s*s
d*e*a*l*n*o*d*e*a*l
d*e*a*l*p*e*a*k
d*e*a*l*p*l*u*g
d*e*a*l*s*f*i*n*d*e*r*p*r*o
d*e*a*l*s*p*a*c*e
d*e*a*l*s*t*a*r*a*p*p
d*e*a*l*s*t*e*r
d*i*g*i*s*a*v*e*r*
d*i*s*c*o*u*n*t*b*o*m*b
d*i*s*c*o*u*n*t*e*x*t*e*n*s*i*o*n
d*i*s*c*o*u*n*t*l*o*c*a*t*o*r
d*i*s*c*o*u*n*t*m*a*n
d*i*s*c*o*u*n*t*s*m*a*s*h*e*r
d*o*c*s*c*o*n*v*e*r*t*e*r
d*o*c*s*v*i*e*w*e*r
d*o*c*t*o*c*o*n*v*e*r*t*e*r
d*o*c*t*o*t*x*t*c*o*n*v*e*r*t
d*o*l*l*a*r*k*e*e*p*e*r
d*o*l*l*a*r*s*a*v*e*r
d*o*w*n*l*o*a*d*a*n*d*s*a
d*o*w*n*l*o*a*d*a*n*d*s*a*v*e
d*o*w*n*l*o*a*d*i*t*k*e*e*p
d*o*w*n*l*o*a*d*k*e*e*p*e*r
d*o*w*n*l*o*a*d*n*s*a*v*e
d*o*w*n*l*o*w*a*p*p
d*o*w*n*s*a*v*e
e*a*r*n*s*a*l*e
e*a*s*y*t*o*s*h*o*p
e*b*o*o*k*b*r*o*w*s*e
e*n*o*r*m*o*u*s*a*l*e*s
e*n*o*r*m*o*u*s*s*a*l*e*s
e*x*e*c*h*e*c*k*e*r
e*x*e*r*u*n*n*e*r
e*x*t*r*a*s*a*v*i*n*g
e*x*t*r*a*s*a*v*i*n*g*s
e*x*t*r*a*s*h*o*p*p*e*r
f*a*s*t*n*c*h*e*a*p
f*a*s*t*s*a*l*e
f*a*s*t*s*a*l*e*r
f*a*s*t*s*a*v*e
f*i*n*d*a*d*e*a*l
f*i*n*d*b*e*s*t*d*e*a*l
f*i*n*d*d*e*a*l*s*o*f*t
f*i*n*e*d*e*a*l*s*o*f*t
f*l*e*x*i*b*l*e*s*h*o*p*p*e*r
f*r*e*e*2*y*o*u
f*r*e*e*d*e*l*i*v*e*r*y
f*u*n*2*s*a*v*e
f*u*n*d*e*a*l*s
f*u*n*s*h*o*p*p*e*r
f*u*n*t*o*s*a*v*e
g*e*t*d*i*s*c*o*u*n*t*a*p*p
g*e*t*s*a*v*i*n
g*e*t*t*h*e*d*i*s*c*o*u*n*t
g*o*s*a*v*e
g*o*s*a*v*e*o
g*r*e*a*t*s*a*v*e*4*u
g*r*e*a*t*s*a*v*e*r
g*r*e*a*t*s*a*v*i*n*g
h*a*p*p*y*2*s*a*v*e
h*a*p*p*y*s*a*l*e*s
h*t*m*l*v*a*l*i*d*a*t*o*r
i*c*o*c*o*n*v*e*r*t*e*r
i*c*o*v*a*l*i*d
i*m*a*g*e*t*o*p*n*g
i*n*s*t*a*p*a*p*e*r
i*s*a*v*e*r
i*t*u*m*e*n
j*o*i*n*t*h*e*s*h*o*p
j*u*m*b*o*d*e*a*l*s
k*e*e*p*e*r*s*e*x*t
k*e*e*p*i*t*b*r*o*w*s*e
k*e*e*p*n*o*w
k*o*b*i
l*e*s*s*2*p*a*y
l*e*t*l*i*v*e
l*o*w*e*r*p*r*i*c*e*s
l*o*w*e*r*p*r*i*c*i*n*g
l*o*w*p*r*i*c*e*s
l*o*w*r*a*t*e
l*u*c*k*y*s*h*o*p*p*e*r
m*a*g*n*i*p*i*c
m*a*r*k*e*t*c*o*m*p*a*r*e
m*i*n*i*m*u*m*p*r*i*c*e
m*o*n*s*o*o*n*r*e*v*e*n*u*e
m*p*3*m*a*k*e*r
m*y*p*r*i*c*e*c*u*t
m*y*s*e*a*r*c*h
m*y*s*h*o*p*p*e*r
m*y*t*o*o*l*s
n*e*w*s*a*v*e*r
n*e*x*t*c*o*u*p
n*i*c*e*f*r*e*e
n*i*c*e*n*f*r*e*e
n*i*c*e*o*f*f*e*r*s
n*i*t*r*o*d*e*a*l*
n*o*n*o*i*z*e*b*r*o*w*s*e
o*f*f*e*r*a*p*p
o*f*f*e*r*d*e*a*l
o*f*f*e*r*p*o*p
o*f*f*e*r*s*a*l*e
o*f*f*e*r*s*o*f*t
o*n*l*i*n*e*l*o*w*d*e*a*l*s
o*n*l*i*n*e*s*h*o*p*p*i*n*g
o*p*t*o*n
o*u*t*c*o*m*e*o*p*t*i*m*i*z*e*r
p*a*g*e*a*r*c*h*i*v*e*r
p*c*a*p*p
p*d*f*v*i*e*w*e*r
p*i*c*k*n*s*a*v*e*i*t
p*l*u*g*s*t*e*r
p*n*g*t*o*p*p*t*c*o*n*v*e*r*t
p*o*p*d*e*a*l*s
p*p*t*c*h*e*c*k*e*r
p*r*i*c*e*c*h*o*p
p*r*i*c*e*d*o*w*n*l*o*a*d*e*r
p*r*i*c*e*k*e*e*p*e*r
p*r*i*c*e*l*e*s*s
p*r*i*c*e*m*i*n*u*s
p*r*o*s*h*o*p*p*e*r
p*s*d*c*h*e*c*k*e*r
p*s*d*t*o*p*n*g
q*u*i*c*k*s*h*o*p
q*u*i*c*k*v*i*e*w*e*r
r*a*n*d*o*m*p*r*i*c*e
r*e*a*l*d*e*a*l
r*e*g*u*l*a*r*d*e*a*l*s
r*e*m*o*v*e*t*h*e*a*d*a*p*p
r*e*s*p*e*c*t*s*a*l*e
r*i*g*h*t*c*o*n*v*e*r*t*e*r
r*i*v*a*l*c*o*u*p
r*o*b*o*s*a*v*e
r*o*b*o*s*a*v*e*r
r*o*c*k*a*p*p*s
r*o*c*k*e*t*d*e*a*l
r*o*c*k*e*t*s*a*l*e
r*o*y*a*l*s*h*o*p*p*e*r*a*p*p
s*a*f*e*r*w*e*b
s*a*f*e*s*a*v*e
s*a*f*e*w*e*b
s*a*l*e*c*h*e*c*k*e*r
s*a*l*e*o*f*f*e*r
s*a*l*e*p*l*u*s
s*a*l*e*p*r*i*z*e*
s*a*l*e*s*a*l*e*
s*a*l*e*s*c*h*e*c*k*e*r
s*a*l*e*s*m*a*g*n*e*t
s*a*v*e*a*s
s*a*v*e*b*o*x
s*a*v*e*b*y*c*l*i*c*k
s*a*v*e*c*l*i*c*k*e*r
s*a*v*e*e*x*t*e*n*s*i*o*n
s*a*v*e*i*n*s*h*o*p
s*a*v*e*i*t
s*a*v*e*i*t*k*e*e*p
s*a*v*e*k*e*e*p
s*a*v*e*l*o*t*s
s*a*v*e*m*a*s*s
s*a*v*e*n*e*t
s*a*v*e*n*e*w*a*p*p*z
s*a*v*e*n*o*w
s*a*v*e*n*s*h*a*r*e
s*a*v*e*o*n*m*a*c
s*a*v*e*r*a*d*d*o*n
s*a*v*e*r*b*o*x
s*a*v*e*r*e*x*t*e*n*s*i*o*n
s*a*v*e*r*n*e*t
s*a*v*e*r*p*r*o
s*a*v*e*s*a*f*e
s*a*v*e*s*h*a*r*e
s*a*v*e*w*e*b
s*a*v*i*n*g*t*o*y*o*u
s*a*v*i*n*s*h*o*p
s*e*a*r*c*h*-*n*e*w*t*a*b
s*e*a*r*c*h*n*e*w*t*a*b
s*h*o*p*b*r*a*i*n
s*h*o*p*d*r*o*p
s*h*o*p*e*a*s*y
s*h*o*p*n*c*o*m*p*a*r*e
s*h*o*p*o*p*t*i*m*i*z*e*r
s*h*o*p*p*e*r*m*a*s*t*e*r
s*h*o*p*p*i*l*a*t*i*o*n
s*h*o*p*p*i*n*g*c*h*i*p
s*h*o*p*p*i*n*g*d*e*a*l*f*a*c*t*o*r*y
s*h*o*p*p*i*n*g*h*e*l*p*e*r
s*h*o*p*s*h*o*p
s*h*o*w*-*p*a*s*s*w*o*r*d
s*k*y*p*e*m*o*t*i*c*o*n*s
s*m*a*r*t*c*o*m*p*a*r*e
s*m*o*o*t*h*v*i*e*w
s*o*f*t*c*o*u*p
s*o*f*t*s*a*f*e
s*p*a*c*e*o*f*f*e*r*s
s*t*u*d*e*n*t*p*s*y*c*h*o*m
s*u*r*f*a*n*d*k*e*e*p
s*u*r*f*e*r*s*s*a*v*e*r
s*u*r*f*k*e*e*p*i*t
t*a*b*a*l*l*c*o*n*v*e*r*t*e*r
t*a*b*l*e*c*o*n*v*e*r*t*e*r
t*a*b*l*e*v*i*e*w*e*r
t*a*k*e*i*t*c*h*e*a*p
t*a*k*e*s*h*o*p
t*h*e*b*f*l*i*x
t*he*b*l*o*c*k*e*r
t*i*n*y*w*a*l*l*e*t
t*o*p*b*u*y*e*r
t*o*p*d*e*a*l
t*o*y*o*t*a
t*r*e*m*e*n*d*o*u*s*s*a*l*e
t*u*b*e*a*d*b*l*o*c*k*e*r
t*u*b*e*i*t*a*d*b*l*o*c*k*a*p
t*x*t*f*i*l*e*s*c*o*n*v*e*r*t
u*a*d*r*e*m*o*v*a*l*a*p*p
u*n*i*d*e*a*l*s
u*n*i*s*a*l*e*s
u*t*u*b*e*a*d*b*l*o*c*k
u*t*u*b*e*a*d*r*e*m*o*v*a*l
u*t*u*b*e*n*o*a*d*s
v*a*u*d*i*x
v*i*e*w*p*a*s*s*w*o*r*d
w*a*t*c*h*i*t*a*d*b*l*o*c*k
w*e*b*b*i*n*g
w*e*b*s*a*v*e
w*e*b*s*a*v*e*r
w*e*e*k*a*p*p
w*h*i*t*e*d*e*a*l*s
w*h*i*t*e*o*f*f*e*r*a*p*p
w*x*d*f*a*s*t
w*x*d*o*w*n*l*o*a*d
y*a*e*l*e*r*l*i*c*h
y*o*u*t*u*b*e*a*d*b*l*o*c*k*e*r
y*o*u*t*u*b*e*a*d*r*e*m*o*v*e
) do (
if exist "%%a" (
set "line=%%a"
setlocal EnableDelayedExpansion
dir "!programfiles!\!line!\*.tlb" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
rd /s/q "!programfiles!\!line!" >NUL
2>&1
dir "!programfiles!\!line!" >NUL 2>&1
IF ERRORLEVEL 1 (
Echo(Eliminado Con Exito: "!
programfiles!\!line!" ^(Carpeta^)>>"!Esc!\[Link]"
) else (
Echo(Error Al
Eliminar: "!programfiles!\!line!" ^(Carpeta^)>>"!Esc!\[Link]"
)
)
)
endlocal
)
cd /d "%programfiles%" >NUL 2>&1
for /d %%a in (
"*lyrics*"
"advanced system optimizer*"
"bucksbee loyalty plugin*"
"cinem* plus*"
"com notifications*"
"freeven*"
"ftdownloader*"
"hd cinema*"
"hd plus*"
"hdv*"
"hq-video*"
"hqcinema*"
"mixidj*"
"mybrowser*v*"
"optimizer pro*"
"oryte*"
"plus-hd*"
"pricora*"
"savepass*"
"shop to win*"
"shopperreport*"
"speed test*"
"speedanalysis*"
"speedtest*"
"superplusradio*"
"sweetpacks*"
"toolbar*"
"torntv*"
"videos_mediaplayers*"
"wse_*"
"xvidly*"
*hohobnd*
*lyrics*
00000000-0000-0000-0000-000000000000
arudaenttibiward*
atabugh*
blekkotb*
bowdomphocather*
browserv*
cinema_plus*
cinemaplus*
cineplus*
cinplus_*
ciplus-*
cknather*
cladikchhose*
clagosemerzos*
cleversearch*
dpcc_??_*
dply_??_*
efas_??_*
eorezo*
freeven*
fst_??_*
ftdownloader*
gititysabpy*
gmsd_??_*
gohd*
gtfpoquott*
hd-quality*
hdqual-*
hofight
hq-video*
infonaut*
keybar*
linkwiz*
maintenance software
majtuto4pc_??_*
maxcomputercleaner*
mbot_??_*
mediaplayervid*
mediawatchv*
mixidj*
mlekgrocach*
mpck_??_*
oasi_??_*
oryte*
ospd_??_*
phrasefinder*
phraseprofessor*
platoward*
plus-hd*
pricora*
quickref*
quicksurf*
rapidreader*
rec_??_*
reucition*
savepass*
shociph*
shopperreport*
shopperz*
shuqogeclaale*
spacesondpro*
speedanalysis*
speedtest*
stv_??_*
sunnyday?
superclick_*
superplusradio*
sweetpacks*
swiftsearch*
termblazer*
termtrident*
terpotion*
tiqichqehile*
toolbar*
torntv*
Reerjale*
tuto4pc_??_*
updater1*
updater2*
upfst_??_*
upgmsd_??_*
ver*blockandsurf*
ver*speeditup*
version*checkmeup*
version*ineedspeed
videoplayerv*
videos_mediaplayers*
win_??_*
wordanchor*
wordfly*
wordinator*
wordshark*
wordwizard*
wse_*
wutaingjlaph*
xvidly*
yessearches-*
zmghtnaduse*
) do (
if exist %%a (
set "line=%%a"
setlocal EnableDelayedExpansion
dir "!programfiles!\!line!" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
rd /s/q "!programfiles!\!line!" >NUL 2>&1
dir "!programfiles!\!line!" >NUL 2>&1
IF ERRORLEVEL 1 (
Echo(Eliminado Con Exito: "!
programfiles!\!line!" ^(Carpeta^)>>"!Esc!\[Link]"
) else (
Echo(Error Al
Eliminar: "!programfiles!\!line!" ^(Carpeta^)>>"!Esc!\[Link]"
)
)
)
endlocal
)
cd /d "%APPDATA%" >NUL 2>&1
for /d %%a in (
FCTB*
MarketSamurai*
) do (
if exist %%a (
DIR "%APPDATA%\%%a" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
RD /S/Q "%APPDATA%\%%a" >NUL 2>&1
DIR "%APPDATA%\%%a" >NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con
Exito: "%APPDATA%\%%a" ^(Carpeta^)>>"%Esc%\[Link]" ) ELSE ( ECHO(Error Al
Eliminar: "%APPDATA%\%%a" ^(Carpeta^)>>"%Esc%\[Link]" )
)
)
)
cd /d "%LOCALA%" >NUL 2>&1
for /d %%a in (
bitoptimiser??
cinplus_*
csdi_monetize*
destinyhoroscopes*
dpcc_??_*
dply_??_*
drive_backup\driverpro.exe_url_*
efas_??_*
eorezo_??_*
fst_??_*
gmsd_??_*
majtuto4pc_??_*
mbot_??_*
mpck_??_*
oasi_??_*
one10_pc_cleaner*
ospd_??_*
pcmaticplus*
rec_??_*
stv_??_*
sunny?
tuto4pc_??_*
tuto_monetize*
upfst_??_*
upgmsd_??_*
win_??_*
yayzap*
) do (
if exist %%a (
DIR "%LOCALA%\%%a" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
RD /S/Q "%LOCALA%\%%a" >NUL 2>&1
DIR "%LOCALA%\%%a" >NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con
Exito: "%LOCALA%\%%a" ^(Carpeta^)>>"%Esc%\[Link]" ) ELSE ( ECHO(Error Al
Eliminar: "%LOCALA%\%%a" ^(Carpeta^)>>"%Esc%\[Link]" )
)
)
)
cd /d "%LOCALA%" >NUL 2>&1
for /d %%a in (
????????-??????????-????-????-????????????
) do (
dir "%LOCALA%\%%a\*ns*.tmp*" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
RD /S/Q "%LOCALA%\%%a" >NUL 2>&1
DIR "%LOCALA%\%%a" >NUL 2>&1
IF ERRORLEVEL 1 (
Echo(Eliminado Con Exito: "%LOCALA%\%
%a" ^(Carpeta^)>>"%Esc%\[Link]"
) else (
Echo(Error Al Eliminar: "%LOCALA
%\%%a" ^(Carpeta^)>>"%Esc%\[Link]"
)
)
)
DIR /B/A:D "%APPDATA%" 2>NUL>"%Esc3%\Appdata_D_Sospechosos"
"%GREP%" -P "^newSI_\d{1,5}$|^\d{4}$|^StormFall\d{3}$|^TheSettlersOnline\d{3}$|
^Pirates\d{3}$|^InfiniteCrisis\d{3}$|^WorldofTanks\d{3}$|^n[a-z0-9]{2}3[a-z0-9]
{4}m[a-z0-9]{6}$|^[a-z0-9]{4}m[a-z0-9]{2}2[a-z0-9]{4}b[a-z]{2}$|^uiksdl\d{7,}$"
"%Esc3%\Appdata_D_Sospechosos">"%Esc3%\Appdata_D_Sospechosos_H"
"%GREP%" -i -P "^(0|1)\w{1}1\w{1}1\w{5}1.*"
"%Esc3%\Appdata_D_Sospechosos">>"%Esc3%\Appdata_D_Sospechosos_H"
FC "%Esc3%\Appdata_D_Sospechosos_H" "%Rp%\null" >NUL 2>&1
IF %ERRORLEVEL% NEQ 1 ( GOTO :All8 )
for /f "usebackq delims=" %%i in ("%Esc3%\Appdata_D_Sospechosos_H") do (
RD /S/Q "%APPDATA%\%%i" >NUL 2>&1
IF EXIST "%APPDATA%\%%i" ( ECHO(Error Al Eliminar: "%APPDATA%\%%i"
^(Carpeta^)>>"%Esc%\[Link]" ) ELSE ( ECHO(Eliminado Con Exito: "%APPDATA%\%%i"
^(Carpeta^)>>"%Esc%\[Link]" )
)
:All8
DIR /B/A:D "%ALLUSERSPROFILE%" 2>NUL>"%Esc3%\AllusersProfile_D_Sospecosos"
"%GREP%" -P "^\d{18,20}$|^[0-9a-f]{16,40}$|^\d{6}$|^Avg_Update_\d{4}av$|
^Service\d{4}$|^\d{20}[A-Z]{2}$|^[A-Za-z0-9]{1}WinManPro[A-Za-z0-9]{1}$|^[A-Za-z0-
9]{1}WdsManPro[A-Za-z0-9]{1}$|^[A-Za-z0-9]{1}MiniPro[A-Za-z0-9]{1}$|^[a-p]{32}$|
^MaintainerSvc\d{1}\.\d{2}\..*|^AppMgr\d{1}\.\d{2}\..*|^uiksdl\d{7,}$|^\{?[a-f0-9]
{8}-[a-f0-9]{4}-\d{1}\}?$|^[a-f0-9]{8}$"
"%Esc3%\AllusersProfile_D_Sospecosos">"%Esc3%\AllusersProfile_D_Sospecosos_H"
FC "%Esc3%\AllusersProfile_D_Sospecosos_H" "%Rp%\null" >NUL 2>&1
IF %ERRORLEVEL% NEQ 1 ( GOTO :All9 )
for /f "usebackq delims=" %%i in ("%Esc3%\AllusersProfile_D_Sospecosos_H") do (
RD /S/Q "%ALLUSERSPROFILE%\%%i" >NUL 2>&1
IF EXIST "%ALLUSERSPROFILE%\%%i" ( ECHO(Error Al Eliminar: "%ALLUSERSPROFILE%\%
%i" ^(Carpeta^)>>"%Esc%\[Link]" ) ELSE ( ECHO(Eliminado Con Exito:
"%ALLUSERSPROFILE%\%%i" ^(Carpeta^)>>"%Esc%\[Link]" )
)
:All9
DIR /B/A:D "%LOCALA%" 2>NUL>"%Esc3%\Local_Settings_Sospecosos"
"%GREP%" -P "^\d{4,5}$|^ava(a|b)v[a-z]{2}v[a-z]{1,3}$|^n[a-z0-9]{2}3[a-z0-9]{4}m[a-
z0-9]{6}$|^[a-z0-9]{4}m[a-z0-9]{2}2[a-z0-9]{4}b[a-z]{2}$|^bvxvy(x|v)[a-z]{1,}$"
"%Esc3%\Local_Settings_Sospecosos">"%Esc3%\Local_Settings_Sospecosos_H"
FC "%Esc3%\Local_Settings_Sospecosos_H" "%Rp%\null" >NUL 2>&1
IF %ERRORLEVEL% NEQ 1 ( GOTO :All10 )
for /f "usebackq delims=" %%i in ("%Esc3%\Local_Settings_Sospecosos_H") do (
RD /S/Q "%LOCALA%\%%i" >NUL 2>&1
IF EXIST "%LOCALA%\%%i" ( ECHO(Error Al Eliminar: "%LOCALA%\%%i"
^(Carpeta^)>>"%Esc%\[Link]" ) ELSE ( ECHO(Eliminado Con Exito: "%LOCALA%\%%i"
^(Carpeta^)>>"%Esc%\[Link]" )
)
:All10
DIR /B/A:D "%COMMONPROGRAMFILES%" 2>NUL>"%Esc3%\Common_D_Sospecosos"
"%GREP%" -i -P "^[0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12,13}$"
"%Esc3%\Common_D_Sospecosos">"%Esc3%\Common_D_Sospecosos_H"
FC "%Esc3%\Common_D_Sospecosos_H" "%Rp%\null" >NUL 2>&1
IF %ERRORLEVEL% NEQ 1 ( GOTO :All11 )
for /f "usebackq delims=" %%i in ("%Esc3%\Common_D_Sospecosos_H") do (
set "line=%%i"
SETLOCAL EnableDelayedExpansion
DIR "!COMMONPROGRAMFILES!\!line!" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
RD /S/Q "!COMMONPROGRAMFILES!\!line!" >NUL 2>&1
DIR "!COMMONPROGRAMFILES!\!line!" >NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito: !COMMONPROGRAMFILES!\!line!
^(Carpeta^)>>"!Esc!\[Link]" ) ELSE ( ECHO(Error Al Eliminar: !
COMMONPROGRAMFILES!\!line! ^(Carpeta^)>>"!Esc!\[Link]" )
)
ENDLOCAL
)
:All11
DIR /B/A:D "%PROGRAMFILES%" 2>NUL>"%Esc3%\Prorgramfiles_D_Sospechosos"
"%GREP%" -P "^n[a-z0-9]{2}3[a-z0-9]{4}m[a-z0-9]{6}$|^[a-z0-9]{4}m[a-z0-9]{2}2[a-z0-
9]{4}b[a-z]{2}$"
"%Esc3%\Prorgramfiles_D_Sospechosos">"%Esc3%\Prorgramfiles_D_Sospechosos_H"
FC "%Esc3%\Prorgramfiles_D_Sospechosos_H" "%Rp%\null" >NUL 2>&1
IF %ERRORLEVEL% NEQ 1 ( GOTO :All12 )
for /f "usebackq delims=" %%i in ("%Esc3%\Prorgramfiles_D_Sospechosos_H") do (
set "line=%%i"
SETLOCAL EnableDelayedExpansion
DIR "!PROGRAMFILES!\!line!" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
RD /S/Q "!PROGRAMFILES!\!line!" >NUL 2>&1
DIR "!PROGRAMFILES!\!line!" >NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito: !PROGRAMFILES!\!line!
^(Carpeta^)>>"!Esc!\[Link]" ) ELSE ( ECHO(Error Al Eliminar: !PROGRAMFILES!\!
line! ^(Carpeta^)>>"!Esc!\[Link]" )
)
ENDLOCAL
)
:All12
DIR /B/A:D "%WINDIR%" 2>NUL>"%Esc3%\Windir_D_Sospechosos"
"%GREP%" -i -P "^mintcast_\d{8,}$|^Shell&ServicesEngine_\d{8,}$|^NTSRV_\d{8,}$|
^hwopt_\d{8,}$|^Media Manager_\d{8,}$|^bigworldsearch_\d{8,}$|^digisearch_?\d{8,}$"
"%Esc3%\Windir_D_Sospechosos">"%Esc3%\Windir_D_Sospechosos_H"
FC "%Esc3%\Windir_D_Sospechosos_H" "%Rp%\null" >NUL 2>&1
IF %ERRORLEVEL% NEQ 1 ( GOTO :All13 )
for /f "usebackq delims=" %%i in ("%Esc3%\Windir_D_Sospechosos_H") do (
RD /S/Q "%WINDIR%\%%i" >NUL 2>&1
IF EXIST "%WINDIR%\%%i" ( ECHO(Error Al Eliminar: "%WINDIR%\%%i"
^(Carpeta^)>>"%Esc%\[Link]" ) ELSE ( ECHO(Eliminado Con Exito: "%WINDIR%\%%i"
^(Carpeta^)>>"%Esc%\[Link]" )
)
:All13
DIR /B/A:D "%TIFS%\????????" 2>NUL>"%Esc3%\[Link]"
DIR /B/A:D "%TIFS2%\????????" 2>NUL>>"%Esc3%\[Link]"
FC "%Esc3%\[Link]" "%Rp%\null" >NUL 2>&1
IF %ERRORLEVEL% NEQ 1 ( GOTO :All14 )
"%GREP%" -P "[A-Z0-9]{8}"
"%Esc3%\[Link]">"%Esc3%\Content.IE5.Sospechosos_H"
FC "%Esc3%\Content.IE5.Sospechosos_H" "%Rp%\null" >NUL 2>&1
IF %ERRORLEVEL% NEQ 1 ( GOTO :All14 )
for /f "usebackq delims=" %%i in ("%Esc3%\Content.IE5.Sospechosos_H") do (
RD /S/Q "%TIFS%\%%i" >NUL 2>&1
IF EXIST "%TIFS%\%%i" ( ECHO(Error Al Eliminar: %TIFS%\%%i ^(Archivos y Carpetas
Temporales Del Internet^)>>"%Esc%\[Link]" ) ELSE ( ECHO(Eliminado Con Exito:
%TIFS%\%%i ^(Archivos y Carpetas Temporales Del Internet^)>>"%Esc%\[Link]" )
RD /S/Q "%TIFS2%\%%i" >NUL 2>&1
IF EXIST "%TIFS2%\%%i" ( ECHO(Error Al Eliminar: %TIFS2%\%%i ^(Archivos y
Carpetas Temporales Del Internet^)>>"%Esc%\[Link]" ) ELSE ( ECHO(Eliminado Con
Exito: %TIFS2%\%%i ^(Archivos y Carpetas Temporales Del Internet^)>>"%Esc
%\[Link]" )
)
:All14
IF NOT EXIST %SYS32%\[Link] GOTO :All15
REG QUERY
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates>"%Esc3%\
Certificado_R_Sospechosos"
for /f "usebackq delims=" %%i in ("%Esc3%\Certificado_R_Sospechosos") do (
REG QUERY %%i 2>NUL|"%GREP%" -q "0.7A64656E67696E65.0"
IF NOT ERRORLEVEL 1 (
REG DELETE %%i /F >NUL 2>&1
REG QUERY %%i >NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito: %%i ^(Llave del Registro -
Certificado Falso^)>>"%Esc%\[Link]" ) ELSE ( ECHO(Error Al Eliminar: %%i
^(Llave del Registro - Certificado Falso^)>>"%Esc%\[Link]" )
)
)
:All15
for /f "usebackq delims=" %%i in ("%Rp1%\Carpetas_B.Win") do (
set "line=%%i"
SETLOCAL EnableDelayedExpansion
DIR "!PROGRAMFILES!\!line!" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
RD /S/Q "!PROGRAMFILES!\!line!" >NUL 2>&1
DIR "!PROGRAMFILES!\!line!" >NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito: !PROGRAMFILES!\!line!
^(Carpeta^)>>"!Esc!\[Link]" ) ELSE ( ECHO(Error Al Eliminar: !PROGRAMFILES!\!
line! ^(Carpeta^)>>"!Esc!\[Link]" )
)
ENDLOCAL
)
for /f "usebackq delims=" %%i in ("%Rp1%\Carpetas_A.Win") do (
set "line=%%i"
SETLOCAL EnableDelayedExpansion
DIR "!COMMONPROGRAMFILES!\!line!" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
RD /S/Q "!COMMONPROGRAMFILES!\!line!" >NUL 2>&1
DIR "!COMMONPROGRAMFILES!\!line!" >NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito: !COMMONPROGRAMFILES!\!line!
^(Carpeta^)>>"!Esc!\[Link]" ) ELSE ( ECHO(Error Al Eliminar: !
COMMONPROGRAMFILES!\!line! ^(Carpeta^)>>"!Esc!\[Link]" )
)
ENDLOCAL
)
for /f "usebackq delims=" %%i in ("%Rp1%\Carpetas_B.Win") do (
DIR "%APPDATA%\%%i" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
RD /S/Q "%APPDATA%\%%i" >NUL 2>&1
DIR "%APPDATA%\%%i" >NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito: "%APPDATA%\%%i" ^(Carpeta^)>>"%Esc
%\[Link]" ) ELSE ( ECHO(Error Al Eliminar: "%APPDATA%\%%i" ^(Carpeta^)>>"%Esc
%\[Link]" )
)
)
for /f "usebackq delims=" %%i in ("%Rp1%\Carpetas_B.Win") do (
DIR "%programfiles%\%%i" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
RD /S/Q "%programfiles%\%%i" >NUL 2>&1
DIR "%programfiles%\%%i" >NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito: "%programfiles%\%%i"
^(Carpeta^)>>"%Esc%\[Link]" ) ELSE ( ECHO(Error Al Eliminar: "%programfiles%\%
%i" ^(Carpeta^)>>"%Esc%\[Link]" )
)
)
for /f "usebackq delims=" %%i in ("%Rp1%\Carpetas_B.Win") do (
DIR "%STARTUP%\%%i" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
RD /S/Q "%STARTUP%\%%i" >NUL 2>&1
DIR "%STARTUP%\%%i" >NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito: "%STARTUP%\%%i" ^(Carpeta^)>>"%Esc
%\[Link]" ) ELSE ( ECHO(Error Al Eliminar: "%STARTUP%\%%i" ^(Carpeta^)>>"%Esc
%\[Link]" )
)
)
for /f "usebackq delims=" %%i in ("%Rp1%\Carpetas_B.Win") do (
DIR "%ALLUSERSPROFILE%\%%i" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
RD /S/Q "%ALLUSERSPROFILE%\%%i" >NUL 2>&1
DIR "%ALLUSERSPROFILE%\%%i" >NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito: "%ALLUSERSPROFILE%\%%i"
^(Carpeta^)>>"%Esc%\[Link]" ) ELSE ( ECHO(Error Al Eliminar: "%ALLUSERSPROFILE
%\%%i" ^(Carpeta^)>>"%Esc%\[Link]" )
)
)
for /f "usebackq delims=" %%i in ("%Rp1%\Carpetas_B.Win") do (
DIR "%LOCALA%\%%i" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
RD /S/Q "%LOCALA%\%%i" >NUL 2>&1
DIR "%LOCALA%\%%i" >NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito: "%LOCALA%\%%i" ^(Carpeta^)>>"%Esc
%\[Link]" ) ELSE ( ECHO(Error Al Eliminar: "%LOCALA%\%%i" ^(Carpeta^)>>"%Esc
%\[Link]" )
)
)
for /f "usebackq delims=" %%i in ("%Rp1%\Carpetas_C.Win") do (
DIR "%PROGRAMS1ALL%\%%i" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
RD /S/Q "%PROGRAMS1ALL%\%%i" >NUL 2>&1
DIR "%PROGRAMS1ALL%\%%i" >NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito: "%PROGRAMS1ALL%\%%i"
^(Carpeta^)>>"%Esc%\[Link]" ) ELSE ( ECHO(Error Al Eliminar: "%PROGRAMS1ALL%\%
%i" ^(Carpeta^)>>"%Esc%\[Link]" )
)
)
for /f "usebackq delims=" %%i in ("%Rp1%\Carpetas_C.Win") do (
DIR "%PROGRAMS2ALL%\%%i" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
RD /S/Q "%PROGRAMS2ALL%\%%i" >NUL 2>&1
DIR "%PROGRAMS2ALL%\%%i" >NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito: "%PROGRAMS2ALL%\%%i"
^(Carpeta^)>>"%Esc%\[Link]" ) ELSE ( ECHO(Error Al Eliminar: "%PROGRAMS2ALL%\%
%i" ^(Carpeta^)>>"%Esc%\[Link]" )
)
)
for %%i in (
"%allusersprofile%\dvf"
"%allusersprofile%\microsoft\windows\windowsaccmanager"
"%allusersprofile%\microsoft\windows\windowsaccountmanager"
"%allusersprofile%\program status"
"%allusersprofile%\schedule"
"%allusersprofile
%\C__Users_Usuario_AppData_Local_Temp_ir_ext_temp_1_AutoPlay_Docs_RealHideIP.exe"
"%allusersprofile%\Avira"
"%allusersprofile%\AutoUpdate"
"%allusersprofile%\Fighters"
"%allusersprofile%\TEMP"
"%allusersprofile%\123"
"%allusersprofile%\1234"
"%allusersprofile%\12345"
"%allusersprofile%\123456"
"%allusersprofile%\unknown"
"%allusersprofile%\updater"
"%appdata%\event monitor"
"%appdata%\Microsoft\*.exe"
"%appdata%\Microsoft\*.vbs"
"%appdata%\Microsoft\Document Building Blocks"
"%appdata%\Microsoft\Windows\Start Menu\Programs\Vectra Media"
"%appdata%\Microsoft\Windows\Start Menu\Programs\ElcomSoft"
"%appdata%\Microsoft\Windows\Start Menu\Programs\MagicDisc"
"%appdata%\Microsoft\Windows\Start Menu\Programs\Roblox"
"%appdata%\oygecjf"
"%appdata%\EurekaLog"
"%appdata%\MPC-HC"
"%appdata%\Microsoft\IME12"
"%appdata%\Microsoft\IMJP8_1"
"%appdata%\Microsoft\IMJP9_0"
"%appdata%\Microsoft\IMJP12"
"%appdata%\Microsoft\Vault"
"%appdata%\Microsoft\Prueba"
"%appdata%\Microsoft\MMC"
"%appdata%\QuickScan"
"%appdata
%\C__Users_Usuario_AppData_Local_Temp_ir_ext_temp_1_AutoPlay_Docs_RealHideIP.exe"
"%appdata%\Woweward"
"%appdata%\network checker"
"%appdata%\store\windapp"
"%appdata%\system"
"%userprofile%\Descargas\[Link]"
"%userprofile%\Descargas\[Link]"
"%userprofile%\Descargas\[Link]"
"%userprofile%\Descargas\[Link]"
"%userprofile%\Descargas\Sql_Poizon_v1.1_-_Sqli_Exploit_Scanner_Tool.rar"
"%userprofile%\Descargas\[Link]"
"%userprofile%\Descargas\JRT(1).exe"
"%userprofile%\Descargas\JRT(2).exe"
"%userprofile%\Descargas\hacker [Link]"
"%userprofile%\Descargas\[Link]"
"%userprofile%\Descargas\[Link]"
"%userprofile%\Descargas\[Link]"
"%userprofile%\Descargas\[Link]"
"%userprofile%\Descargas\AlbumArt_{0370BC24-61D0-4392-B804-CE3680C537AA}_Large.jpg"
"%userprofile%\Descargas\AlbumArt_{0370BC24-61D0-4392-B804-CE3680C537AA}_Small.jpg"
"%userprofile%\Descargas\AlbumArt_{D73CEA7B-2FF1-42FF-9DFF-92E7FF58DD8A}_Large.jpg"
"%userprofile%\Descargas\AlbumArt_{D73CEA7B-2FF1-42FF-9DFF-92E7FF58DD8A}_Small.jpg"
"%userprofile%\Descargas\ARCHPRo [Link]"
"%userprofile%\Descargas\ESETOnlineScanner_ESN.exe"
"%userprofile%\Descargas\esets_api.stg"
"%userprofile%\Descargas\[Link]"
"%userprofile%\Descargas\[Link]"
"%locala%\iconnect"
"%locala%\installer"
"%locala%\microsoft\evt"
"%locala%\mscupdate"
"%locala%\programs\[Link]"
"%appdata%\add-in express"
"%appdata%\alawarwrapper"
"%appdata%\cyber tech expert_1-855-907-2767"
"%appdata%\dev360 cleaner"
"%appdata%\downloaded installers"
"%appdata%\driver maximizer"
"%appdata%\guid"
"%appdata%\maxcomputercleaner"
"%appdata%\my pagemanager"
"%appdata%\optimizer pro"
"%appdata%\pc faster"
"%appdata%\pc health kit"
"%appdata%\pc system boost"
"%appdata%\pcprivacydock"
"%appdata%\pcspeedup"
"%appdata%\probit software"
"%appdata%\propccleaner"
"%appdata%\smart pc cleaner"
"%appdata%\startup maximizer"
"%appdata%\super optimizer"
"%appdata%\ultimatepcoptimizer"
"%appdata%\ytahelper"
"%mymusic%\qtrax media library"
"%appdata%\add-in express"
"%appdata%\alawarwrapper"
"%appdata%\cyber tech expert_1-855-907-2767"
"%appdata%\dev360 cleaner"
"%appdata%\downloaded installers"
"%appdata%\driver maximizer"
"%appdata%\guid"
"%appdata%\maxcomputercleaner"
"%appdata%\my pagemanager"
"%appdata%\optimizer pro"
"%appdata%\pc faster"
"%appdata%\pc health kit"
"%appdata%\pc system boost"
"%appdata%\pcprivacydock"
"%appdata%\pcspeedup"
"%appdata%\probit software"
"%appdata%\propccleaner"
"%appdata%\smart pc cleaner"
"%appdata%\startup maximizer"
"%appdata%\super optimizer"
"%appdata%\ultimatepcoptimizer"
"%appdata%\ytahelper"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\add-in express"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\alawarwrapper"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\cyber tech expert_1-
855-907-2767"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\dev360 cleaner"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\downloaded installers"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\driver maximizer"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\guid"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\maxcomputercleaner"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\my pagemanager"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\optimizer pro"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\pc faster"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\pc health kit"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\pc system boost"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\pcprivacydock"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\pcspeedup"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\probit software"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\propccleaner"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\smart pc cleaner"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\startup maximizer"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\super optimizer"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\ultimatepcoptimizer"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\ytahelper"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\add-in express"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\alawarwrapper"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\cyber tech expert_1-
855-907-2767"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\dev360 cleaner"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\downloaded installers"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\driver maximizer"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\guid"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\maxcomputercleaner"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\my pagemanager"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\optimizer pro"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\pc faster"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\pc health kit"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\pc system boost"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\pcprivacydock"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\pcspeedup"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\probit software"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\propccleaner"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\smart pc cleaner"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\startup maximizer"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\super optimizer"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\ultimatepcoptimizer"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\ytahelper"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\BfcData"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\add-in express"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\alawarwrapper"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\cyber tech expert_1-855-
907-2767"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\dev360 cleaner"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\downloaded installers"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\driver maximizer"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\guid"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\maxcomputercleaner"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\my pagemanager"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\optimizer pro"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\pc faster"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\pc health kit"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\pc system boost"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\pcprivacydock"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\pcspeedup"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\probit software"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\propccleaner"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\smart pc cleaner"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\startup maximizer"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\super optimizer"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\ultimatepcoptimizer"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\ytahelper"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\add-in express"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\alawarwrapper"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\cyber tech expert_1-855-
907-2767"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\dev360 cleaner"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\downloaded installers"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\driver maximizer"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\guid"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\maxcomputercleaner"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\my pagemanager"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\optimizer pro"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\pc faster"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\pc health kit"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\pc system boost"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\pcprivacydock"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\pcspeedup"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\probit software"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\propccleaner"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\smart pc cleaner"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\startup maximizer"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\super optimizer"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\ultimatepcoptimizer"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\BfcData"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\qtrax media library"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\add-in express"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\alawarwrapper"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\cyber tech expert_1-855-
907-2767"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\dev360 cleaner"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\downloaded installers"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\driver maximizer"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\guid"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\maxcomputercleaner"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\my pagemanager"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\optimizer pro"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\pc faster"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\pc health kit"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\pc system boost"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\pcprivacydock"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\pcspeedup"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\probit software"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\propccleaner"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\smart pc cleaner"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\startup maximizer"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\super optimizer"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\ultimatepcoptimizer"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\ytahelper"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\add-in express"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\alawarwrapper"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\cyber tech expert_1-855-
907-2767"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\dev360 cleaner"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\downloaded installers"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\driver maximizer"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\guid"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\maxcomputercleaner"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\my pagemanager"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\optimizer pro"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\pc faster"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\pc health kit"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\pc system boost"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\pcprivacydock"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\pcspeedup"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\probit software"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\propccleaner"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\smart pc cleaner"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\startup maximizer"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\super optimizer"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\ultimatepcoptimizer"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\BfcData"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\add-in express"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\alawarwrapper"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\cyber tech expert_1-855-
907-2767"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\dev360 cleaner"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\downloaded installers"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\driver maximizer"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\guid"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\maxcomputercleaner"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\my pagemanager"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\optimizer pro"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\pc faster"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\pc health kit"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\pc system boost"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\pcprivacydock"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\pcspeedup"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\probit software"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\propccleaner"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\smart pc cleaner"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\startup maximizer"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\super optimizer"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\ultimatepcoptimizer"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\ytahelper"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\add-in express"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\alawarwrapper"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\cyber tech expert_1-855-
907-2767"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\dev360 cleaner"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\downloaded installers"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\driver maximizer"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\guid"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\maxcomputercleaner"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\my pagemanager"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\optimizer pro"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\pc faster"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\pc health kit"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\pc system boost"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\pcprivacydock"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\pcspeedup"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\probit software"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\propccleaner"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\smart pc cleaner"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\startup maximizer"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\super optimizer"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\ultimatepcoptimizer"
"%appdata%\Microsoft\Windows\Libraries\[Link]-ms\BfcData"
"%mydocs%\add-in express"
"%mydocs%\alawarwrapper"
"%mydocs%\cyber tech expert_1-855-907-2767"
"%mydocs%\dev360 cleaner"
"%mydocs%\downloaded installers"
"%mydocs%\driver maximizer"
"%mydocs%\guid"
"%mydocs%\maxcomputercleaner"
"%mydocs%\my pagemanager"
"%mydocs%\optimizer pro"
"%mydocs%\pc faster"
"%mydocs%\pc health kit"
"%mydocs%\pc system boost"
"%mydocs%\pcprivacydock"
"%mydocs%\pcspeedup"
"%mydocs%\probit software"
"%mydocs%\propccleaner"
"%mydocs%\smart pc cleaner"
"%mydocs%\startup maximizer"
"%mydocs%\super optimizer"
"%mydocs%\ultimatepcoptimizer"
"%mydocs%\ytahelper"
"%mymusic%\qtrax media library"
"%mydocs%\add-in express"
"%mydocs%\alawarwrapper"
"%mydocs%\cyber tech expert_1-855-907-2767"
"%mydocs%\dev360 cleaner"
"%mydocs%\downloaded installers"
"%mydocs%\driver maximizer"
"%mydocs%\guid"
"%mydocs%\maxcomputercleaner"
"%mydocs%\my pagemanager"
"%mydocs%\optimizer pro"
"%mydocs%\pc faster"
"%mydocs%\pc health kit"
"%mydocs%\pc system boost"
"%mydocs%\pcprivacydock"
"%mydocs%\pcspeedup"
"%mydocs%\probit software"
"%mydocs%\propccleaner"
"%mydocs%\smart pc cleaner"
"%mydocs%\startup maximizer"
"%mydocs%\super optimizer"
"%mydocs%\ultimatepcoptimizer"
"%mydocs%\ytahelper"
"%mymusic%\qtrax media library"
"%mydocs2%\add-in express"
"%mydocs2%\alawarwrapper"
"%mydocs2%\cyber tech expert_1-855-907-2767"
"%mydocs2%\dev360 cleaner"
"%mydocs2%\downloaded installers"
"%mydocs2%\driver maximizer"
"%mydocs2%\guid"
"%mydocs2%\maxcomputercleaner"
"%mydocs2%\my pagemanager"
"%mydocs2%\optimizer pro"
"%mydocs2%\pc faster"
"%mydocs2%\pc health kit"
"%mydocs2%\pc system boost"
"%mydocs2%\pcprivacydock"
"%mydocs2%\pcspeedup"
"%mydocs2%\probit software"
"%mydocs2%\propccleaner"
"%mydocs2%\smart pc cleaner"
"%mydocs2%\startup maximizer"
"%mydocs2%\super optimizer"
"%mydocs2%\ultimatepcoptimizer"
"%mydocs2%\ytahelper"
"%mymusic2%\qtrax media library"
"%mydocs2%\add-in express"
"%mydocs2%\alawarwrapper"
"%mydocs2%\cyber tech expert_1-855-907-2767"
"%mydocs2%\dev360 cleaner"
"%mydocs2%\downloaded installers"
"%mydocs2%\driver maximizer"
"%mydocs2%\guid"
"%mydocs2%\maxcomputercleaner"
"%mydocs2%\my pagemanager"
"%mydocs2%\optimizer pro"
"%mydocs2%\pc faster"
"%mydocs2%\pc health kit"
"%mydocs2%\pc system boost"
"%mydocs2%\pcprivacydock"
"%mydocs2%\pcspeedup"
"%mydocs2%\probit software"
"%mydocs2%\propccleaner"
"%mydocs2%\smart pc cleaner"
"%mydocs2%\startup maximizer"
"%mydocs2%\super optimizer"
"%mydocs2%\ultimatepcoptimizer"
"%mydocs2%\ytahelper"
"%mymusic2%\qtrax media library"
"%programfiles%\microsoft games\windows games"
"%programfiles%\product key"
"%programfiles%\software\scrollup"
"%programfiles%\windows\error file remover"
"%systemdrive%\ai_recyclebin"
"%systemdrive%\breakingnewsalert"
"%systemdrive%\logo"
"%systemdrive%\Cuarentena"
"%systemdrive%\iqiyi video"
"%systemdrive%\nava labs"
"%systemdrive%\rei"
"%systemdrive%\terasgames"
"%systemdrive%\xiaomi"
"%userprofile%\funshion"
"%userprofile%\qtrax"
"%windir%\book source"
"%windir%\buzzsocialpointschecker"
"%windir%\free youtube downloader"
"%windir%\freecorder"
"%windir%\joberphlusisp"
"%windir%\microsoft\system update kb70007"
"%windir%\pcbhdnw"
"%windir%\provider"
"%windir%\provider32"
"%windir%\snail translator"
) DO (
IF EXIST %%i (
RD /S/Q %%i >NUL 2>&1
IF EXIST %%i ( ECHO(Error Al Eliminar: %%i ^(Carpeta^)>>"%Esc
%\[Link]" ) ELSE ( ECHO(Eliminado Con Exito: %%i ^(Carpeta^)>>"%Esc
%\[Link]" )
)
)
for %%i in (
"%sys32%\abis"
"%sys32%\ai_recyclebin"
"%sys32%\arfc"
"%sys32%\c2mp"
"%sys32%\cacl"
"%sys32%\dfrg"
"%sys32%\itruscert"
"%sys32%\jmdp"
"%sys32%\ljkb"
"%sys32%\popupalert"
"%sys32%\wnlt"
) DO (
IF EXIST %%i (
RD /S/Q %%i >NUL 2>&1
IF EXIST %%i ( ECHO(Error Al Eliminar: %%i ^(Carpeta^)>>"%Esc
%\[Link]" ) ELSE ( ECHO(Eliminado Con Exito: %%i ^(Carpeta^)>>"%Esc
%\[Link]" )
)
)
:: LOCALA Carpetas
cd /d "%LOCALA%\{????????-????-????-????-????????????}" >NUL 2>&1
IF %ERRORLEVEL% NEQ 0 ( GOTO :OS64_0 )
cd /d "%LOCALA%" >NUL 2>&1
for /f "delims=" %%i in ('DIR /B/A:D "%LOCALA%\
{????????-????-????-????-????????????}" ^| SORT') do (
RD "%%i" >NUL 2>&1
DIR "%%i" >NUL 2>&1
IF ERRORLEVEL 1 (
Echo(Eliminado Con Exito: "%LOCALA%\%%i" ^(Empty Folder^)>>"%Esc
%\[Link]"
) else (
REM Fallará si NO vacío. NO HAGA NADA.
)
)
:OS64_0

:CarpetasPublicas
ECHO %OS%|FIND "Windows XP" >NUL
IF %ERRORLEVEL% EQU 0 ( GOTO :OSXP_Files )
for /f "usebackq delims=" %%i in ("%Rp1%\A_Archivos.Win") do (
DIR "%PUBDESKTOP%\%%i" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
DEL /F/Q "%PUBDESKTOP%\%%i" >NUL 2>&1
DIR "%PUBDESKTOP%\%%i" >NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito: "%PUBDESKTOP%\%%i" ^(Acceso
Directo^)>>"%Esc%\[Link]" ) ELSE ( ECHO(Error Al Eliminar: "%PUBDESKTOP%\%%i"
^(Acceso Directo^)>>"%Esc%\[Link]" )
)
DIR "%QUICKLAUNCH17%\%%i" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
DEL /F/Q "%QUICKLAUNCH17%\%%i" >NUL 2>&1
DIR "%QUICKLAUNCH17%\%%i" >NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito: "%QUICKLAUNCH17%\%%i" ^(Acceso
Directo^)>>"%Esc%\[Link]" ) ELSE ( ECHO(Error Al Eliminar: "%QUICKLAUNCH17%\%
%i" ^(Acceso Directo^)>>"%Esc%\[Link]" )
)
DIR "%QUICKLAUNCH27%\%%i" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
DEL /F/Q "%QUICKLAUNCH27%\%%i" >NUL 2>&1
DIR "%QUICKLAUNCH27%\%%i" >NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito: "%QUICKLAUNCH27%\%%i" ^(Acceso
Directo^)>>"%Esc%\[Link]" ) ELSE ( ECHO(Error Al Eliminar: "%QUICKLAUNCH27%\%
%i" ^(Acceso Directo^)>>"%Esc%\[Link]" )
)
DIR "%PROGRAMS17%\%%i" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
DEL /F/Q "%PROGRAMS17%\%%i" >NUL 2>&1
DIR "%PROGRAMS17%\%%i" >NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito: "%PROGRAMS17%\%%i" ^(Acceso
Directo^)>>"%Esc%\[Link]" ) ELSE ( ECHO(Error Al Eliminar: "%PROGRAMS17%\%%i"
^(Acceso Directo^)>>"%Esc%\[Link]" )
)
DIR "%PROGRAMS27%\%%i" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
DEL /F/Q "%PROGRAMS27%\%%i" >NUL 2>&1
DIR "%PROGRAMS27%\%%i" >NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito: "%PROGRAMS27%\%%i" ^(Acceso
Directo^)>>"%Esc%\[Link]" ) ELSE ( ECHO(Error Al Eliminar: "%PROGRAMS27%\%%i"
^(Acceso Directo^)>>"%Esc%\[Link]" )
)
DIR "%STARTMENU17%\%%i" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
DEL /F/Q "%STARTMENU17%\%%i" >NUL 2>&1
DIR "%STARTMENU17%\%%i" >NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito: "%STARTMENU17%\%%i" ^(Acceso
Directo^)>>"%Esc%\[Link]" ) ELSE ( ECHO(Error Al Eliminar: "%STARTMENU17%\%%i"
^(Acceso Directo^)>>"%Esc%\[Link]" )
)
DIR "%STARTMENU27%\%%i" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
DEL /F/Q "%STARTMENU27%\%%i" >NUL 2>&1
DIR "%STARTMENU27%\%%i" >NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito: "%STARTMENU27%\%%i" ^(Acceso
Directo^)>>"%Esc%\[Link]" ) ELSE ( ECHO(Error Al Eliminar: "%STARTMENU27%\%%i"
^(Acceso Directo^)>>"%Esc%\[Link]" )
)
)
for /f "usebackq delims=" %%i in ("%Rp1%\Carpetas_B.Win") do (
DIR "%LOCALLOW%\%%i" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
RD /S/Q "%LOCALLOW%\%%i" >NUL 2>&1
DIR "%LOCALLOW%\%%i" >NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito: "%LOCALLOW%\%%i" ^(Carpeta^)>>"%Esc
%\[Link]" ) ELSE ( ECHO(Error Al Eliminar: "%LOCALLOW%\%%i" ^(Carpeta^)>>"%Esc
%\[Link]" )
)
)
cd /d "%LOCALLOW%" >NUL 2>&1
for /d %%a in (
FCTB*
*toolbar*
) do (
if exist %%a (
DIR "%LOCALLOW%\%%a" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
RD /S/Q "%LOCALLOW%\%%a" >NUL 2>&1
DIR "%LOCALLOW%\%%a" >NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con
Exito: "%LOCALLOW%\%%a" ^(Carpeta^)>>"%Esc%\[Link]" ) ELSE ( ECHO(Error Al
Eliminar: "%LOCALLOW%\%%a" ^(Carpeta^)>>"%Esc%\[Link]" )
)
)
)
IF NOT EXIST %SYS32%\[Link] GOTO :Shortcuts
REG QUERY "HKCU\Software\Microsoft\Internet Explorer\SearchScopes" 2>NUL|"%GREP%"
-iP "\\SearchScopes\\{[a-f0-9]+-.*}$">"%Esc3%\IE_SS"
if %ARCH%==x64 (
REG QUERY "HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes"
2>NUL|"%GREP%" -iP "\\SearchScopes\\{[a-f0-9]+-.*}$">>"%Esc3%\IE_SS"
)
REG QUERY "HKLM\Software\Microsoft\Internet Explorer\SearchScopes" 2>NUL|"%GREP%"
-iP "\\SearchScopes\\{[a-f0-9]+-.*}$">>"%Esc3%\IE_SS"
FC "%Esc3%\IE_SS" "%Rp%\null" >NUL 2>&1
IF %ERRORLEVEL% NEQ 1 ( GOTO :Browsers_0 )
"%SORT_%" -f -u <"%Esc3%\IE_SS" >"%Esc3%\IE_SS2"
FC "%Esc3%\IE_SS2" "%Rp%\null" >NUL 2>&1
IF %ERRORLEVEL% NEQ 1 ( GOTO :Browsers_0 )
for /f "usebackq delims=" %%i in ("%Esc3%\IE_SS2") do (
REG QUERY "%%i" /V URL >NUL 2>&1
IF ERRORLEVEL 1 (
REG DELETE "%%i" /F >NUL 2>&1
ECHO(Eliminado Con Exito: %%i ^(Llave Del Registro^)>>"%Esc%\[Link]"
)
)
for /f "usebackq delims=" %%i in ("%Esc3%\IE_SS2") do (
REG QUERY "%%i" 2>NUL|FINDSTR /IG:"%Naw%\[Link]" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
REG DELETE "%%i" /F >NUL 2>&1
ECHO(Eliminado Con Exito: %%i ^(Llave Del Registro^)>>"%Esc%\[Link]"
)
)
:Browsers_0
REG QUERY "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper
Objects" 2>NUL|"%GREP%" -iP "\\Browser Helper Objects\\{[a-f0-9]+-.*}
$">"%Esc3%\I_Waw"
if %ARCH%==x64 (
REG QUERY
"HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper
Objects" 2>NUL|"%GREP%" -iP "\\Browser Helper Objects\\{[a-f0-9]+-.*}
$">>"%Esc3%\I_Waw"
)
FC "%Esc3%\I_Waw" "%Rp%\null" >NUL 2>&1
IF %ERRORLEVEL% NEQ 1 ( GOTO :Browsers_1 )
"%SORT_%" -f -u <"%Esc3%\I_Waw" >"%Esc3%\I_Waw2"
FC "%Esc3%\I_Waw2" "%Rp%\null" >NUL 2>&1
IF %ERRORLEVEL% NEQ 1 ( GOTO :Browsers_1 )
FINDSTR /IVG:"%Exp%\I_Explorer.Dat" "%Esc3%\I_Waw2">"%Esc3%\I_Waw_T"
FC "%Esc3%\I_Waw_T" "%Rp%\null" >NUL 2>&1
IF %ERRORLEVEL% NEQ 1 ( GOTO :Browsers_1 )
for /f "usebackq delims=" %%i in ("%Esc3%\I_Waw_T") do (
REG DELETE "%%i" /F >NUL 2>&1
ECHO(Eliminado Con Exito: %%i ^(Llave Del Registro^)>>"%Esc%\[Link]"
)
)
:Browsers_1
REG QUERY "HKCU\Software\Microsoft\Internet Explorer\Toolbar" 2>NUL|"%GREP%" -iP
"{[a-f0-9]+-.*}">"%Esc3%\I_Toolbar"
if %ARCH%==x64 (
REG QUERY "HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Toolbar"
2>NUL|"%GREP%" -iP "{[a-f0-9]+-.*}">>"%Esc3%\I_Toolbar"
)
REG QUERY "HKLM\Software\Microsoft\Internet Explorer\Toolbar" 2>NUL|"%GREP%" -iP
"{[a-f0-9]+-.*}">>"%Esc3%\I_Toolbar"
REG QUERY "HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser"
2>NUL|"%GREP%" -iP "{[a-f0-9]+-.*}">>"%Esc3%\I_Toolbar"
FC "%Esc3%\I_Toolbar" "%Rp%\null" >NUL 2>&1
IF %ERRORLEVEL% NEQ 1 ( GOTO :Browsers_2 )
"%SORT_%" -f -u <"%Esc3%\I_Toolbar" >"%Esc3%\I_Toolbar2"
REM '/^\s*$/d' Se Elimino Un Virus Potencialmente Peliroso
"%SED%" -r "s/^\s{4}//;s/}\s+REG_.*/}/;/^\s*$/d" <"%Esc3%\I_Toolbar"
>"%Esc3%\I_Toolbar2"
FINDSTR /IVG:"%Naw%\T_Barras.Naw" "%Esc3%\I_Toolbar2">"%Esc3%\I_Toolbar_T"
FC "%Esc3%\I_Toolbar_T" "%Rp%\null" >NUL 2>&1
IF %ERRORLEVEL% NEQ 1 ( GOTO :Browsers_2 )
for /f "usebackq delims=" %%i in ("%Esc3%\I_Toolbar_T") do (
REG QUERY "HKCU\Software\Microsoft\Internet Explorer\Toolbar" /V "%%i" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
REG DELETE "HKCU\Software\Microsoft\Internet Explorer\Toolbar" /V "%%i" /F >NUL
2>&1
REG QUERY "HKCU\Software\Microsoft\Internet Explorer\Toolbar" /V "%%i" >NUL
2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito: HKCU\Software\Microsoft\Internet
Explorer\Toolbar\\%%i ^(Evaluador Del Registro^)>>"%Esc%\[Link]" ) ELSE
( ECHO(Eliminado Con Exito: HKCU\Software\Microsoft\Internet Explorer\Toolbar\\%%i
^(Evaluador Del Registro^)>>"%Esc%\[Link]" )
)
REG QUERY "HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Toolbar" /V "%
%i" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
REG DELETE "HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Toolbar" /V
"%%i" /F >NUL 2>&1
REG QUERY "HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Toolbar" /V "%
%i" >NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito:
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\%%i ^(Evaluador Del
Registro^)>>"%Esc%\[Link]" ) ELSE ( ECHO(Eliminado Con Exito:
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\%%i ^(Evaluador Del
Registro^)>>"%Esc%\[Link]" )
)
REG QUERY "HKLM\Software\Microsoft\Internet Explorer\Toolbar" /V "%%i" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
REG DELETE "HKLM\Software\Microsoft\Internet Explorer\Toolbar" /V "%%i" /F >NUL
2>&1
REG QUERY "HKLM\Software\Microsoft\Internet Explorer\Toolbar" /V "%%i" >NUL
2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito: HKLM\Software\Microsoft\Internet
Explorer\Toolbar\\%%i ^(Evaluador Del Registro^)>>"%Esc%\[Link]" ) ELSE
( ECHO(Eliminado Con Exito: HKLM\Software\Microsoft\Internet Explorer\Toolbar\\%%i
^(Evaluador Del Registro^)>>"%Esc%\[Link]" )
)
REG QUERY "HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser" /V "%%i"
>NUL 2>&1
IF NOT ERRORLEVEL 1 (
REG DELETE "HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser" /V "%
%i" /F >NUL 2>&1
REG QUERY "HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser" /V "%
%i" >NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito: HKCU\Software\Microsoft\Internet
Explorer\Toolbar\WebBrowser\\%%i ^(Evaluador Del Registro^)>>"%Esc%\[Link]" )
ELSE ( ECHO(Eliminado Con Exito: HKCU\Software\Microsoft\Internet
Explorer\Toolbar\WebBrowser\\%%i ^(Evaluador Del Registro^)>>"%Esc%\[Link]" )
)
)
:Browsers_2
REG QUERY "HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks" 2>NUL|"%GREP%"
-iP "{[a-f0-9]+-.*}">"%Esc3%\I_Busqueda"
if %ARCH%==x64 (
REG QUERY "HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\URLSearchHooks"
2>NUL|"%GREP%" -iP "{[a-f0-9]+-.*}">>"%Esc3%\I_Busqueda"
)
REG QUERY "HKLM\Software\Microsoft\Internet Explorer\URLSearchHooks" 2>NUL|"%GREP%"
-iP "{[a-f0-9]+-.*}">>"%Esc3%\I_Busqueda"
FC "%Esc3%\I_Busqueda" "%Rp%\null" >NUL 2>&1
IF %ERRORLEVEL% NEQ 1 ( GOTO :Browsers_3 )
"%SORT_%" -f -u <"%Esc3%\I_Busqueda" >"%Esc3%\I_Busqueda2"
FINDSTR /IG:"%Naw%\[Link]" "%Esc3%\I_Busqueda2">"%Esc3%\I_Busqueda_T"
FC "%Esc3%\I_Busqueda_T" "%Rp%\null" >NUL 2>&1
IF %ERRORLEVEL% NEQ 1 ( GOTO :Browsers_3 )
"%GREP%" -i -P "\{.*\}" -o "%Esc3%\I_Busqueda_T">"%Esc3%\I_Busqueda_H"
for /f "usebackq delims=" %%i in ("%Esc3%\I_Busqueda_H") do (
REG QUERY "HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks" /V "%%i"
>NUL 2>&1
IF NOT ERRORLEVEL 1 (
REG DELETE "HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks" /V "%
%i" /F >NUL 2>&1
REG QUERY "HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks" /V "%%i"
>NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito: HKCU\Software\Microsoft\Internet
Explorer\URLSearchHooks\\%%i ^(Evaluador Del Registro^)>>"%Esc%\[Link]" ) ELSE
( ECHO(Eliminado Con Exito: HKCU\Software\Microsoft\Internet
Explorer\URLSearchHooks\\%%i ^(Evaluador Del Registro^)>>"%Esc%\[Link]" )
)
REG QUERY "HKLM\Software\Wow6432Node\Microsoft\Internet
Explorer\URLSearchHooks" /V "%%i" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
REG DELETE "HKLM\Software\Wow6432Node\Microsoft\Internet
Explorer\URLSearchHooks" /V "%%i" /F >NUL 2>&1
REG QUERY "HKLM\Software\Wow6432Node\Microsoft\Internet
Explorer\URLSearchHooks" /V "%%i" >NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito:
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\URLSearchHooks\\%%i
^(Evaluador Del Registro^)>>"%Esc%\[Link]" ) ELSE ( ECHO(Eliminado Con Exito:
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\URLSearchHooks\\%%i
^(Evaluador Del Registro^)>>"%Esc%\[Link]" )
)
REG QUERY "HKLM\Software\Microsoft\Internet Explorer\URLSearchHooks" /V "%%i"
>NUL 2>&1
IF NOT ERRORLEVEL 1 (
REG DELETE "HKLM\Software\Microsoft\Internet Explorer\URLSearchHooks" /V "%
%i" /F >NUL 2>&1
REG QUERY "HKLM\Software\Microsoft\Internet Explorer\URLSearchHooks" /V "%%i"
>NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito: HKLM\Software\Microsoft\Internet
Explorer\URLSearchHooks\\%%i ^(Evaluador Del Registro^)>>"%Esc%\[Link]" ) ELSE
( ECHO(Eliminado Con Exito: HKLM\Software\Microsoft\Internet
Explorer\URLSearchHooks\\%%i ^(Evaluador Del Registro^)>>"%Esc%\[Link]" )
)
)
:Browsers_3
REG QUERY "HKCU\Software\Microsoft\Internet Explorer\Main" 2>NUL|"%GREP%" -iP
"REG_.*SZ\s+http">"%Esc3%\I_Main"
REG QUERY "HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main" 2>NUL|"%GREP
%" -iP "REG_.*SZ\s+http">>"%Esc3%\I_Main"
REG QUERY "HKLM\Software\Microsoft\Internet Explorer\Main" 2>NUL|"%GREP%" -iP
"REG_.*SZ\s+http">>"%Esc3%\I_Main"
FC "%Esc3%\I_Main" "%Rp%\null" >NUL 2>&1
IF %ERRORLEVEL% NEQ 1 ( GOTO :Browsers_4 )
"%SORT_%" -f -u <"%Esc3%\I_Main" >"%Esc3%\I_Main2"
FC "%Esc3%\I_Main2" "%Rp%\null" >NUL 2>&1
IF %ERRORLEVEL% NEQ 1 ( GOTO :Browsers_4 )
FINDSTR /IG:"%Naw%\[Link]" "%Esc3%\I_Main2">"%Esc3%\I_Main_T"
FC "%Esc3%\I_Main_T" "%Rp%\null" >NUL 2>&1
IF %ERRORLEVEL% NEQ 1 ( GOTO :Browsers_4 )
"%SED%" -r "s/^\s{4}//;s/\s+REG_SZ\s+.*//" "%Esc3%\I_Main_T">"%Esc3%\I_Main_H"
for /f "usebackq delims=" %%i in ("%Esc3%\I_Main_H") do (
REG QUERY "HKCU\Software\Microsoft\Internet Explorer\Main" /V "%%i" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
REG DELETE "HKCU\Software\Microsoft\Internet Explorer\Main" /V "%%i" /F >NUL
2>&1
REG QUERY "HKCU\Software\Microsoft\Internet Explorer\Main" /V "%%i" >NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito: HKCU\Software\Microsoft\Internet
Explorer\Main\\%%i ^(Evaluador Del Registro^)>>"%Esc%\[Link]" ) ELSE
( ECHO(Eliminado Con Exito: HKCU\Software\Microsoft\Internet Explorer\Main\\%%i
^(Evaluador Del Registro^)>>"%Esc%\[Link]" )
)
REG QUERY "HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main" /V "%%i"
>NUL 2>&1
IF NOT ERRORLEVEL 1 (
REG DELETE "HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main" /V "%
%i" /F >NUL 2>&1
REG QUERY "HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main" /V "%%i"
>NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito:
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\%%i ^(Evaluador Del
Registro^)>>"%Esc%\[Link]" ) ELSE ( ECHO(Eliminado Con Exito:
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\%%i ^(Evaluador Del
Registro^)>>"%Esc%\[Link]" )
)
REG QUERY "HKLM\Software\Microsoft\Internet Explorer\Main" /V "%%i" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
REG DELETE "HKLM\Software\Microsoft\Internet Explorer\Main" /V "%%i" /F >NUL
2>&1
REG QUERY "HKLM\Software\Microsoft\Internet Explorer\Main" /V "%%i" >NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito: HKLM\Software\Microsoft\Internet
Explorer\Main\\%%i ^(Evaluador Del Registro^)>>"%Esc%\[Link]" ) ELSE
( ECHO(Eliminado Con Exito: HKLM\Software\Microsoft\Internet Explorer\Main\\%%i
^(Evaluador Del Registro^)>>"%Esc%\[Link]" )
)
)
:Browsers_4
REG QUERY "HKCU\Software\Microsoft\Internet Explorer\Search" 2>NUL|"%GREP%" -iP
"REG_.*SZ\s+http">"%Esc3%\I_Search"
REG QUERY "HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Search"
2>NUL|"%GREP%" -iP "REG_.*SZ\s+http">>"%Esc3%\I_Search"
REG QUERY "HKLM\Software\Microsoft\Internet Explorer\Search" 2>NUL|"%GREP%" -iP
"REG_.*SZ\s+http">>"%Esc3%\I_Search"
FC "%Esc3%\I_Search" "%Rp%\null" >NUL 2>&1
IF %ERRORLEVEL% NEQ 1 ( GOTO :Browsers_5 )
"%SORT_%" -f -u <"%Esc3%\I_Search">"%Esc3%\I_Search2"
FC "%Esc3%\I_Search2" "%Rp%\null" >NUL 2>&1
IF %ERRORLEVEL% NEQ 1 ( GOTO :Browsers_5 )
FINDSTR /IG:"%Naw%\[Link]" "%Esc3%\I_Search2">"%Esc3%\I_Search_T"
FC "%Esc3%\I_Search_T" "%Rp%\null" >NUL 2>&1
IF %ERRORLEVEL% NEQ 1 ( GOTO :Browsers_5 )
"%SED%" "s/^....//;s/REG_SZ.*//g;s/\s*$//g" "%Esc3%\I_Search_T">"%Esc3%\I_Search_H"
for /f "usebackq delims=" %%i in ("%Esc3%\I_Search_H") do (
REG QUERY "HKCU\Software\Microsoft\Internet Explorer\Search" /V "%%i" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
REG DELETE "HKCU\Software\Microsoft\Internet Explorer\Search" /V "%%i" /F >NUL
2>&1
REG QUERY "HKCU\Software\Microsoft\Internet Explorer\Search" /V "%%i" >NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito: HKCU\Software\Microsoft\Internet
Explorer\Search\\%%i ^(Evaluador Del Registro^)>>"%Esc%\[Link]" ) ELSE
( ECHO(Eliminado Con Exito: HKCU\Software\Microsoft\Internet Explorer\Search\\%%i
^(Evaluador Del Registro^)>>"%Esc%\[Link]" )
)
REG QUERY "HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Search" /V "%%i"
>NUL 2>&1
IF NOT ERRORLEVEL 1 (
REG DELETE "HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Search" /V "%
%i" /F >NUL 2>&1
REG QUERY "HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Search" /V "%
%i" >NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito:
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Search\\%%i ^(Evaluador Del
Registro^)>>"%Esc%\[Link]" ) ELSE ( ECHO(Eliminado Con Exito:
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Search\\%%i ^(Evaluador Del
Registro^)>>"%Esc%\[Link]" )
)
REG QUERY "HKLM\Software\Microsoft\Internet Explorer\Search" /V "%%i" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
REG DELETE "HKLM\Software\Microsoft\Internet Explorer\Search" /V "%%i" /F >NUL
2>&1
REG QUERY "HKLM\Software\Microsoft\Internet Explorer\Search" /V "%%i" >NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito: HKLM\Software\Microsoft\Internet
Explorer\Search\\%%i ^(Evaluador Del Registro^)>>"%Esc%\[Link]" ) ELSE
( ECHO(Eliminado Con Exito: HKLM\Software\Microsoft\Internet Explorer\Search\\%%i
^(Evaluador Del Registro^)>>"%Esc%\[Link]" )
)
)
:Browsers_5
REG QUERY "HKCU\Software\Microsoft\Internet Explorer\SearchUrl" 2>NUL|FINDSTR
"http">"%Esc3%\I_SearchURL"
REG QUERY "HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchUrl" 2>NUL|
FINDSTR "http">>"%Esc3%\I_SearchURL"
REG QUERY "HKLM\Software\Microsoft\Internet Explorer\SearchUrl" 2>NUL|FINDSTR
"http">>"%Esc3%\I_SearchURL"
FC "%Esc3%\I_SearchURL" "%Rp%\null" >NUL 2>&1
IF %ERRORLEVEL% NEQ 1 ( GOTO :Browsers_6 )
"%SORT_%" -f -u <"%Esc3%\I_SearchURL" >"%Esc3%\I_SearchURL2"
FC "%Esc3%\I_SearchURL2" "%Rp%\null" >NUL 2>&1
IF %ERRORLEVEL% NEQ 1 ( GOTO :Browsers_6 )
FINDSTR /IG:"%Naw%\[Link]" "%Esc3%\I_SearchURL">"%Esc3%\I_SearchURL_T"
FC "%Esc3%\I_SearchURL_T" "%Rp%\null" >NUL 2>&1
IF %ERRORLEVEL% NEQ 1 ( GOTO :Browsers_6 )
"%SED%" "s/^....//;s/REG_SZ.*//g;s/\s*$//g"
"%Esc3%\I_SearchURL_T">"%Esc3%\I_SearchURL_H"
for /f "usebackq delims=" %%i in ("%Esc3%\I_SearchURL_H") do (
REG QUERY "HKCU\Software\Microsoft\Internet Explorer\SearchUrl" /V "%%i" >NUL
2>&1
IF NOT ERRORLEVEL 1 (
REG DELETE "HKCU\Software\Microsoft\Internet Explorer\SearchUrl" /V "%%i" /F
>NUL 2>&1
REG QUERY "HKCU\Software\Microsoft\Internet Explorer\SearchUrl" /V "%%i" >NUL
2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito: HKCU\Software\Microsoft\Internet
Explorer\SearchUrl\\%%i ^(Evaluador Del Registro^)>>"%Esc%\[Link]" ) ELSE
( ECHO(Eliminado Con Exito: HKCU\Software\Microsoft\Internet Explorer\SearchUrl\\%
%i ^(Evaluador Del Registro^)>>"%Esc%\[Link]" )
)
REG QUERY "HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchUrl" /V "%
%i" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
REG DELETE "HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchUrl" /V
"%%i" /F >NUL 2>&1
REG QUERY "HKLM\Software\Microsoft\Wow6432Node\Internet Explorer\SearchUrl" /V
"%%i" >NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito:
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchUrl\\%%i ^(Evaluador
Del Registro^)>>"%Esc%\[Link]" ) ELSE ( ECHO(Eliminado Con Exito:
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchUrl\\%%i ^(Evaluador
Del Registro^)>>"%Esc%\[Link]" )
)
REG QUERY "HKLM\Software\Microsoft\Internet Explorer\SearchUrl" /V "%%i" >NUL
2>&1
IF NOT ERRORLEVEL 1 (
REG DELETE "HKLM\Software\Microsoft\Internet Explorer\SearchUrl" /V "%%i" /F
>NUL 2>&1
REG QUERY "HKLM\Software\Microsoft\Internet Explorer\SearchUrl" /V "%%i" >NUL
2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito: HKLM\Software\Microsoft\Internet
Explorer\SearchUrl\\%%i ^(Evaluador Del Registro^)>>"%Esc%\[Link]" ) ELSE
( ECHO(Eliminado Con Exito: HKLM\Software\Microsoft\Internet Explorer\SearchUrl\\%
%i ^(Evaluador Del Registro^)>>"%Esc%\[Link]" )
)
)
:Browsers_6
REG QUERY "HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\AboutURLs" 2>NUL|
FINDSTR "http">>"%Esc3%\Internet_AboutURLs"
REG QUERY "HKLM\Software\Microsoft\Internet Explorer\AboutURLs" 2>NUL|FINDSTR
"http">>"%Esc3%\Internet_AboutURLs"
FC "%Esc3%\Internet_AboutURLs" "%Rp%\null" >NUL 2>&1
IF %ERRORLEVEL% NEQ 1 ( GOTO :FireFox_0 )
FINDSTR /IG:"%Naw%\[Link]" "%Esc3%\Internet_AboutURLs"
2>NUL>"%Esc3%\Internet_AboutURLs_Sospechosos"
FC "%Esc3%\Internet_AboutURLs_Sospechosos" "%Rp%\null" >NUL 2>&1
IF %ERRORLEVEL% NEQ 1 ( GOTO :FireFox_0 )
"%SED%" "s/^....//;s/REG_SZ.*//g;s/\s*$//g"
"%Esc3%\Internet_AboutURLs_Sospechosos">"%Esc3%\Internet_AboutURLs_H"
"%SORT_%" -f -u <"%Esc3%\Internet_AboutURLs_H" >"%Esc3%\Internet_AboutURLs_T"
for /f "usebackq delims=" %%i in ("%Esc3%\Internet_AboutURLs_T") do (
REG QUERY "HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\AboutURLs" /V "%
%i" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
REG DELETE "HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\AboutURLs" /V
"%%i" /F >NUL 2>&1
REG QUERY "HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\AboutURLs" /V
"%%i" >NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito:
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\AboutURLs\\%%i ^(Evaluador
Del Registro^)>>"%Esc%\[Link]" ) ELSE ( ECHO(Eliminado Con Exito:
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\AboutURLs\\%%i ^(Evaluador
Del Registro^)>>"%Esc%\[Link]" )
)
REG QUERY "HKLM\Software\Microsoft\Internet Explorer\AboutURLs" /V "%%i" >NUL
2>&1
IF NOT ERRORLEVEL 1 (
REG DELETE "HKLM\Software\Microsoft\Internet Explorer\AboutURLs" /V "%%i" /F
>NUL 2>&1
REG QUERY "HKLM\Software\Microsoft\Internet Explorer\AboutURLs" /V "%%i" >NUL
2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito: HKLM\Software\Microsoft\Internet
Explorer\AboutURLs\\%%i ^(Evaluador Del Registro^)>>"%Esc%\[Link]" ) ELSE
( ECHO(Eliminado Con Exito: HKLM\Software\Microsoft\Internet Explorer\AboutURLs\\%
%i ^(Evaluador Del Registro^)>>"%Esc%\[Link]" )
)
)
:FireFox_0
DIR /B/S/A:-D "%PROGRAMFILES%\Mozilla Firefox" 2>NUL>"%Esc3%\FIREFOX_F_PROG"
FC "%Esc3%\FIREFOX_F_PROG" "%Rp%\null" >NUL 2>&1
IF %ERRORLEVEL% NEQ 1 ( GOTO :FireFox_1 )
for %%i in (
"%programfiles%\mozilla firefox\defaults\pref\[Link]"
"%programfiles%\mozilla firefox\defaults\pref\[Link]"
"%programfiles%\mozilla firefox\[Link]"
"%programfiles%\mozilla firefox\plugins\npclntax_clickpotatolitesa.dll"
"%programfiles%\mozilla firefox\plugins\[Link]"
"%programfiles%\mozilla firefox\plugins\[Link]"
"%programfiles%\mozilla firefox\plugins\[Link]"
"%programfiles%\mozilla firefox\plugins\[Link]"
"%programfiles%\mozilla firefox\plugins\[Link]"
"%programfiles%\mozilla firefox\plugins\[Link]"
"%programfiles%\mozilla firefox\plugins\[Link]"
"%programfiles%\mozilla firefox\plugins\[Link]"
) DO (
IF EXIST %%i (
DEL /F/Q %%i >NUL 2>&1
IF EXIST %%i ( ECHO(Eliminado Con Exito: %%i ^(Archivo^)>>"%Esc
%\[Link]" ) ELSE ( ECHO(Eliminado Con Exito: %%i ^(Archivo^)>>"%Esc
%\[Link]" )
)
)
FINDSTR /I "\.XML$" "%Esc3%\FIREFOX_F_PROG" 2>NUL>"%Esc3%\FIREFOX_F_PROGXML"
FC "%Esc3%\FIREFOX_F_PROGXML" "%Rp%\null" >NUL 2>&1
IF %ERRORLEVEL% NEQ 1 ( GOTO :FireFox_1 )
for /f "usebackq delims=" %%i in ("%Naw%\[Link]") do (
DIR "%PROGRAMFILES%\Mozilla Firefox\searchplugins\%%i" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
DEL /F/Q "%PROGRAMFILES%\Mozilla Firefox\searchplugins\%%i" >NUL 2>&1
DIR "%PROGRAMFILES%\Mozilla Firefox\searchplugins\%%i" >NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito: "%PROGRAMFILES%\Mozilla
Firefox\searchplugins\%%i" ^(Archivo^)>>"%Esc%\[Link]" ) ELSE ( ECHO(Eliminado
Con Exito: "%PROGRAMFILES%\Mozilla Firefox\searchplugins\%%i" ^(Archivo^)>>"%Esc
%\[Link]" )
)
)
:FireFox_1
DIR /B/A:D "%PROGRAMFILES%\Mozilla Firefox\browser\extensions"
2>NUL>"%Esc3%\FIREFOX_D_PROG"
FC "%Esc3%\FIREFOX_D_PROG" "%Rp%\null" >NUL 2>&1
IF %ERRORLEVEL% NEQ 1 ( GOTO :FireFox_3 )
"%GREP%" -i -P "^ffxtlbr@.*|^\w{2}ffxtbr@.*_\w{2}\.com$|^\d{3}$|^[0-9a-f]
{21,30}@[0-9a-f]{24,29}\.com$|^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-
9a-f]{12}@[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\.com$"
"%Esc3%\FIREFOX_D_PROG">"%Esc3%\FIREFOX_D_PROG_H"
FC "%Esc3%\FIREFOX_D_PROG_H" "%Rp%\null" >NUL 2>&1
IF %ERRORLEVEL% NEQ 1 ( GOTO :FireFox_2 )
for /f "usebackq delims=" %%i in ("%Esc3%\FIREFOX_D_PROG_H") do (
DIR "%PROGRAMFILES%\Mozilla Firefox\browser\extensions\%%i" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
RD /S/Q "%PROGRAMFILES%\Mozilla Firefox\browser\extensions\%%i" >NUL 2>&1
DIR "%PROGRAMFILES%\Mozilla Firefox\browser\extensions\%%i" >NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito: "%PROGRAMFILES%\Mozilla
Firefox\browser\extensions\%%i" ^(Carpeta^)>>"%Esc%\[Link]" ) ELSE
( ECHO(Eliminado Con Exito: "%PROGRAMFILES%\Mozilla Firefox\browser\extensions\%%i"
^(Carpeta^)>>"%Esc%\[Link]" )
)
REG QUERY HKCU\Software\Mozilla\Firefox\Extensions /V "%%i" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
REG DELETE HKCU\Software\Mozilla\Firefox\Extensions /V "%%i" /F >NUL 2>&1
REG QUERY HKCU\Software\Mozilla\Firefox\Extensions /V "%%i" >NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito:
"HKCU\Software\Mozilla\Firefox\Extensions\\%%i" ^(Evaluador Del Registro^)>>"%Esc
%\[Link]" ) ELSE ( ECHO(Eliminado Con Exito:
"HKCU\Software\Mozilla\Firefox\Extensions\\%%i" ^(Evaluador Del Registro^)>>"%Esc
%\[Link]" )
)
REG QUERY HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions /V "%%i" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
REG DELETE HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions /V "%%i" /F
>NUL 2>&1
REG QUERY HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions /V "%%i" >NUL
2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito:
"HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\%%i" ^(Evaluador Del
Registro^)>>"%Esc%\[Link]" ) ELSE ( ECHO(Eliminado Con Exito:
"HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\%%i" ^(Evaluador Del
Registro^)>>"%Esc%\[Link]" )
)
REG QUERY HKLM\Software\Mozilla\Firefox\Extensions /V "%%i" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
REG DELETE HKLM\Software\Mozilla\Firefox\Extensions /V "%%i" /F >NUL 2>&1
REG QUERY HKLM\Software\Mozilla\Firefox\Extensions /V "%%i" >NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito:
"HKLM\Software\Mozilla\Firefox\Extensions\\%%i" ^(Evaluador Del Registro^)>>"%Esc
%\[Link]" ) ELSE ( ECHO(Eliminado Con Exito:
"HKLM\Software\Mozilla\Firefox\Extensions\\%%i" ^(Evaluador Del Registro^)>>"%Esc
%\[Link]" )
)
)
:FireFox_2
for /f "usebackq delims=" %%i in ("%Naw%\[Link]") do (
DIR "%PROGRAMFILES%\Mozilla Firefox\browser\extensions\%%i" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
RD /S/Q "%PROGRAMFILES%\Mozilla Firefox\browser\extensions\%%i" >NUL 2>&1
DIR "%PROGRAMFILES%\Mozilla Firefox\browser\extensions\%%i" >NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito: "%PROGRAMFILES%\Mozilla
Firefox\browser\extensions\%%i" ^(Carpeta^)>>"%Esc%\[Link]" ) ELSE
( ECHO(Eliminado Con Exito: "%PROGRAMFILES%\Mozilla Firefox\browser\extensions\%%i"
^(Carpeta^)>>"%Esc%\[Link]" )
)
REG QUERY HKCU\Software\Mozilla\Firefox\Extensions /V "%%i" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
REG DELETE HKCU\Software\Mozilla\Firefox\Extensions /V "%%i" /F >NUL 2>&1
REG QUERY HKCU\Software\Mozilla\Firefox\Extensions /V "%%i" >NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito:
"HKCU\Software\Mozilla\Firefox\Extensions\\%%i" ^(Evaluador Del Registro^)>>"%Esc
%\[Link]" ) ELSE ( ECHO(Eliminado Con Exito:
"HKCU\Software\Mozilla\Firefox\Extensions\\%%i" ^(Evaluador Del Registro^)>>"%Esc
%\[Link]" )
)
REG QUERY HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions /V "%%i" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
REG DELETE HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions /V "%%i" /F
>NUL 2>&1
REG QUERY HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions /V "%%i" >NUL
2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito:
"HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\%%i" ^(Evaluador Del
Registro^)>>"%Esc%\[Link]" ) ELSE ( ECHO(Eliminado Con Exito:
"HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\%%i" ^(Evaluador Del
Registro^)>>"%Esc%\[Link]" )
)
REG QUERY HKLM\Software\Mozilla\Firefox\Extensions /V "%%i" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
REG DELETE HKLM\Software\Mozilla\Firefox\Extensions /V "%%i" /F >NUL 2>&1
REG QUERY HKLM\Software\Mozilla\Firefox\Extensions /V "%%i" >NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito:
"HKLM\Software\Mozilla\Firefox\Extensions\\%%i" ^(Evaluador Del Registro^)>>"%Esc
%\[Link]" ) ELSE ( ECHO(Eliminado Con Exito:
"HKLM\Software\Mozilla\Firefox\Extensions\\%%i" ^(Evaluador Del Registro^)>>"%Esc
%\[Link]" )
)
)
:FireFox_3
DIR /B/S/A:-D "%APPDATA%\Mozilla\Firefox\Profiles" 2>NUL>"%Esc3%\FIREFOX_F_APPDATA"
FC "%Esc3%\FIREFOX_F_APPDATA" "%Rp%\null" >NUL 2>&1
IF %ERRORLEVEL% NEQ 1 ( GOTO :FireFox_5 )
"%GREP%" -P "user\.js$|firefox@www\.[a-z]{10,}\.(com|net)\.xpi$"
"%Esc3%\FIREFOX_F_APPDATA">"%JTEMP%\FIREFOX_F_APPDATA_H"
"%GREP%" -i -P "(bprotector|browsermngr)_.*\..*$|[Link]$|\d{3}\.xpi$"
"%Esc3%\FIREFOX_F_APPDATA">>"%Esc3%\FIREFOX_F_APPDATA_H"
FINDSTR /IG:"%Naw%\[Link]" "%Esc3%\FIREFOX_F_APPDATA"
2>NUL>>"%Esc3%\FIREFOX_F_APPDATA_H"
"%GREP%" -v -P ".*\\gm_scripts\\.*|.*\\foxmarks@kei\.com\\.*"
"%Esc3%\FIREFOX_F_APPDATA_H">"%Esc3%\FIREFOX_F_APPDATA_H_WL"
FC "%Esc3%\FIREFOX_F_APPDATA_H_WL" "%Rp%\null" >NUL 2>&1
IF %ERRORLEVEL% NEQ 1 ( GOTO :FireFox_4 )
for /f "usebackq delims=" %%i in ("%Esc3%\FIREFOX_F_APPDATA_H_WL") do (
DEL /F/Q "%%i" >NUL 2>&1
IF EXIST "%%i" ( ECHO(Eliminado Con Exito: "%%i" ^(Archivo^)>>"%Esc%\[Link]"
) ELSE ( ECHO(Eliminado Con Exito: "%%i" ^(Archivo^)>>"%Esc%\[Link]" )
)
:FireFox_4
FINDSTR /I "\.XML$" "%Esc3%\FIREFOX_F_APPDATA" 2>NUL>"%Esc3%\FIREFOX_F_APPDATAXML"
FC "%Esc3%\FIREFOX_F_APPDATAXML" "%Rp%\null" >NUL 2>&1
IF %ERRORLEVEL% NEQ 1 ( GOTO :FireFox_5 )
FINDSTR /IG:"%Naw%\[Link]" "%Esc3%\FIREFOX_F_APPDATAXML"
2>NUL>"%Esc3%\FIREFOX_F_APPDATAXML_H"
FC "%Esc3%\FIREFOX_F_APPDATAXML_H" "%Rp%\null" >NUL 2>&1
IF %ERRORLEVEL% NEQ 1 ( GOTO :FireFox_5 )
for /f "usebackq delims=" %%i in ("%Esc3%\FIREFOX_F_APPDATAXML_H") do (
DEL /F/Q "%%i" >NUL 2>&1
IF EXIST "%%i" ( ECHO(Eliminado Con Exito: "%%i" ^(Archivo^)>>"%Esc%\[Link]"
) ELSE ( ECHO(Eliminado Con Exito: "%%i" ^(Archivo^)>>"%Esc%\[Link]" )
)
:FireFox_5
"%GREP%" -i -P "\\Firefox\\Profiles\\.*\.default.*\\[Link]$"
"%Esc3%\FIREFOX_F_APPDATA" 2>NUL>"%Esc3%\FIREFOX_F_APPDATAJS"
FC "%Esc3%\FIREFOX_F_APPDATAJS" "%Rp%\null" >NUL 2>&1
IF %ERRORLEVEL% NEQ 1 ( GOTO :FireFox_6 )
for /f "usebackq delims=" %%i in ("%Esc3%\FIREFOX_F_APPDATAJS") do (
COPY /Y "%%i" "%Esc3%\[Link]" >NUL 2>&1
)
IF NOT EXIST "%Esc3%\[Link]" GOTO :FireFox_6
SET /p FFJS=<"%Esc3%\FIREFOX_F_APPDATAJS"
FINDSTR /IG:"%Naw%\[Link]" "%Esc3%\[Link]" 2>NUL|"%CUT%" -c1-
175>"%Esc3%\FIREFOX_PREFS_BAD"
FINDSTR /IVG:"%Naw%\[Link]" "%Esc3%\FIREFOX_PREFS_BAD"
2>NUL>"%Esc3%\FIREFOX_PREFS_BAD_WL"
FC "%JTEMP%\FIREFOX_PREFS_BAD_WL" "%Rp%\null" >NUL 2>&1
IF %ERRORLEVEL% NEQ 1 ( GOTO :FireFox_6 )
FINDSTR /IVG:"%Esc3%\FIREFOX_PREFS_BAD_WL" "%Esc3%\[Link]"
2>NUL>"%Esc3%\FIREFOX_PREFS_CLEAN.js"
COPY /Y "%Esc3%\FIREFOX_PREFS_CLEAN.js" "%FFJS%" >NUL 2>&1
TYPE "%Esc3%\FIREFOX_PREFS_BAD_WL">"%Esc3%\R_FireFox.txt"
:FireFox_6
DIR /B/S/A:D "%APPDATA%\Mozilla\Firefox\Profiles" 2>NUL>"%Esc3%\FIREFOX_D_APPDATA"
FC "%Esc3%\FIREFOX_D_APPDATA" "%Rp%\null" >NUL 2>&1
IF %ERRORLEVEL% NEQ 1 ( GOTO :Chrome )
FINDSTR "\\extensions\\" "%Esc3%\FIREFOX_D_APPDATA"
2>NUL>"%Esc3%\FIREFOX_D_APPDATAEXT"
FC "%Esc3%\FIREFOX_D_APPDATAEXT" "%Rp%\null" >NUL 2>&1
IF %ERRORLEVEL% NEQ 1 ( GOTO :FireFox_7 )
"%GREP%" -i -P "ffxtlbr@.*|\d{3}$|[0-9a-f]{21,30}@[0-9a-f]{24,29}\.com$|[0-9a-f]
{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}@[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-
f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\.com$"
"%Esc3%\FIREFOX_D_APPDATAEXT">"%Esc3%\FIREFOX_D_APPDATAEXT_H"
FINDSTR /IELG:"%Naw%\[Link]" "%Esc3%\FIREFOX_D_APPDATAEXT"
2>NUL>>"%Esc3%\FIREFOX_D_APPDATAEXT_H"
"%GREP%" -v -P ".*\\https-everywhere.*|.*\\[a-z]{2}_\d{3}$"
"%Esc3%\FIREFOX_D_APPDATAEXT_H">"%Esc3%\FIREFOX_D_APPDATAEXT_H_WL"
FC "%Esc3%\FIREFOX_D_APPDATAEXT_H_WL" "%Rp%\null" >NUL 2>&1
IF %ERRORLEVEL% NEQ 1 ( GOTO :FireFox_7 )
"%SORT_%" -f -u <"%Esc3%\FIREFOX_D_APPDATAEXT_H_WL"
>"%Esc3%\FIREFOX_D_APPDATAEXT_T"
for /f "usebackq delims=" %%i in ("%Esc3%\FIREFOX_D_APPDATAEXT_T") do (
RD /S/Q "%%i" >NUL 2>&1
IF EXIST "%%i" ( ECHO(Eliminado Con Exito: "%%i" ^(Carpeta^)>>"%Esc%\[Link]"
) ELSE ( ECHO(Eliminado Con Exito: "%%i" ^(Carpeta^)>>"%Esc%\[Link]" )
)
:FireFox_7
REG QUERY "HKLM\Software\MozillaPlugins" >NUL 2>&1
IF ERRORLEVEL 1 GOTO FireFox_8
for /f "usebackq delims=" %%i in ("%Naw%\[Link]") do (
REG QUERY "HKLM\Software\MozillaPlugins\%%i" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
REG DELETE "HKLM\Software\MozillaPlugins\%%i" /F >NUL 2>&1
REG QUERY "HKLM\Software\MozillaPlugins\%%i" >NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito: "HKLM\Software\MozillaPlugins\%%i"
^(Llave Del Registro^)>>"%Esc%\[Link]" ) ELSE ( ECHO(Eliminado Con Exito:
"HKLM\Software\MozillaPlugins\%%i" ^(Llave Del Registro^)>>"%Esc%\[Link]" )
)
)
:FireFox_8
REG QUERY "HKLM\Software\Wow6432Node\MozillaPlugins" >NUL 2>&1
IF ERRORLEVEL 1 GOTO Chrome
for /f "usebackq delims=" %%i in ("%Naw%\[Link]") do (
REG QUERY "HKLM\Software\Wow6432Node\MozillaPlugins\%%i" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
REG DELETE "HKLM\Software\Wow6432Node\MozillaPlugins\%%i" /F >NUL 2>&1
REG QUERY "HKLM\Software\Wow6432Node\MozillaPlugins\%%i" >NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito:
"HKLM\Software\Wow6432Node\MozillaPlugins\%%i" ^(Llave Del Registro^)>>"%Esc
%\[Link]" ) ELSE ( ECHO(Eliminado Con Exito:
"HKLM\Software\Wow6432Node\MozillaPlugins\%%i" ^(Llave Del Registro^)>>"%Esc
%\[Link]" )
)
)
:Chrome
CD /D "%LOCALA%\Google\Chrome\User Data\Default\Local Storage" >NUL 2>&1
IF %ERRORLEVEL% NEQ 0 ( GOTO :Chrome_0 )
for /f "usebackq delims=" %%i in ("%Naw%\Storage_Chrome.Naw") do (
DIR "%LOCALA%\Google\Chrome\User Data\Default\Local Storage\%%i" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
DEL /F/Q "%LOCALA%\Google\Chrome\User Data\Default\Local Storage\%%i" >NUL 2>&1
DIR "%LOCALA%\Google\Chrome\User Data\Default\Local Storage\%%i" >NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito: "%LOCALA%\Google\Chrome\User
Data\Default\Local Storage\%%i" ^(Archivo^)>>"%Esc%\[Link]" ) ELSE
( ECHO(Eliminado Con Exito: "%LOCALA%\Google\Chrome\User Data\Default\Local
Storage\%%i" ^(Archivo^)>>"%Esc%\[Link]" )
)
DIR "%LOCALA%\Google\Chrome\User Data\Default\Local Storage\%%i-journal" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
DEL /F/Q "%LOCALA%\Google\Chrome\User Data\Default\Local Storage\%%i-journal"
>NUL 2>&1
DIR "%LOCALA%\Google\Chrome\User Data\Default\Local Storage\%%i-journal" >NUL
2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito: "%LOCALA%\Google\Chrome\User
Data\Default\Local Storage\%%i-journal" ^(Archivo^)>>"%Esc%\[Link]" ) ELSE
( ECHO(Eliminado Con Exito: "%LOCALA%\Google\Chrome\User Data\Default\Local
Storage\%%i-journal" ^(Archivo^)>>"%Esc%\[Link]" )
)
)
:Chrome_0
CD /D "%LOCALA%\Google\Chrome\User Data\Default\Extensions" >NUL 2>&1
IF %ERRORLEVEL% NEQ 0 ( GOTO :Shortcuts )
for /f "usebackq delims=" %%i in ("%Naw%\[Link]") do (
DIR "%LOCALA%\Google\Chrome\User Data\Default\Extensions\%%i" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
RD /S/Q "%LOCALA%\Google\Chrome\User Data\Default\Extensions\%%i" >NUL 2>&1
DIR "%LOCALA%\Google\Chrome\User Data\Default\Extensions\%%i" >NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito: "%LOCALA%\Google\Chrome\User
Data\Default\Extensions\%%i" ^(Carpeta^)>>"%Esc%\[Link]" ) ELSE
( ECHO(Eliminado Con Exito: "%LOCALA%\Google\Chrome\User Data\Default\Extensions\%
%i" ^(Carpeta^)>>"%Esc%\[Link]" )
)
DIR "%LOCALA%\Google\Chrome\User Data\Default\Local Extension Settings\%%i" >NUL
2>&1
IF NOT ERRORLEVEL 1 (
RD /S/Q "%LOCALA%\Google\Chrome\User Data\Default\Local Extension Settings\%%i"
>NUL 2>&1
DIR "%LOCALA%\Google\Chrome\User Data\Default\Local Extension Settings\%%i"
>NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito: "%LOCALA%\Google\Chrome\User
Data\Default\Local Extension Settings\%%i" ^(Carpeta^)>>"%Esc%\[Link]" ) ELSE
( ECHO(Eliminado Con Exito: "%LOCALA%\Google\Chrome\User Data\Default\Local
Extension Settings\%%i" ^(Carpeta^)>>"%Esc%\[Link]" )
)
REG QUERY "HKCU\Software\Google\Chrome\Extensions\%%i" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
REG DELETE "HKCU\Software\Google\Chrome\Extensions\%%i" /F >NUL 2>&1
REG QUERY "HKCU\Software\Google\Chrome\Extensions\%%i" >NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito:
"HKCU\Software\Google\Chrome\Extensions\%%i" ^(Llave Del Registro^)>>"%Esc
%\[Link]" ) ELSE ( ECHO(Eliminado Con Exito:
"HKCU\Software\Google\Chrome\Extensions\%%i" ^(Llave Del Registro^)>>"%Esc
%\[Link]" )
)
REG QUERY "HKLM\Software\Google\Chrome\Extensions\%%i" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
REG DELETE "HKLM\Software\Google\Chrome\Extensions\%%i" /F >NUL 2>&1
REG QUERY "HKLM\Software\Google\Chrome\Extensions\%%i" >NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito:
"HKLM\Software\Google\Chrome\Extensions\%%i" ^(Llave Del Registro^)>>"%Esc
%\[Link]" ) ELSE ( ECHO(Eliminado Con Exito:
"HKLM\Software\Google\Chrome\Extensions\%%i" ^(Llave Del Registro^)>>"%Esc
%\[Link]" )
)
)
REG QUERY "HKLM\Software\Wow6432Node\Google\Chrome\Extensions" >NUL 2>&1
IF ERRORLEVEL 1 GOTO Shortcuts
for /f "usebackq delims=" %%i in ("%Naw%\[Link]") do (
REG QUERY "HKLM\Software\Wow6432Node\Google\Chrome\Extensions\%%i" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
REG DELETE "HKLM\Software\Wow6432Node\Google\Chrome\Extensions\%%i" /F >NUL
2>&1
REG QUERY "HKLM\Software\Wow6432Node\Google\Chrome\Extensions\%%i" >NUL 2>&1
IF ERRORLEVEL 1 ( ECHO(Eliminado Con Exito:
"HKLM\Software\Wow6432Node\Google\Chrome\Extensions\%%i" ^(Llave Del
Registro^)>>"%Esc%\[Link]" ) ELSE ( ECHO(Eliminado Con Exito:
"HKLM\Software\Wow6432Node\Google\Chrome\Extensions\%%i" ^(Llave Del
Registro^)>>"%Esc%\[Link]" )
)
)
:Shortcuts
IF NOT EXIST "%SYS32%\[Link]" GOTO CreateReport
DIR /B/S "%QUICKLAUNCHALL%\*.lnk" 2>NUL>"%Esc3%\Acessos-Directos"
DIR /B/S "%PROGRAMS1ALL%\*.lnk" 2>NUL>>"%Esc3%\Acessos-Directos"
DIR /B/S "%PROGRAMS2ALL%\*.lnk" 2>NUL>>"%Esc3%\Acessos-Directos"
DIR /B/S "%STARTUP%\*.lnk" 2>NUL>>"%Esc3%\Acessos-Directos"
DIR /B/S "%userprofile%\Desktop\*.lnk" 2>NUL>>"%Esc3%\Acessos-Directos"
ECHO %OS%|FIND "Windows XP" >NUL
IF %ERRORLEVEL% EQU 0 ( GOTO :Shortcuts_XP )
DIR /B/S "%PUBDESKTOP%\*.lnk" 2>NUL>>"%Esc3%\Acessos-Directos"
DIR /B/S "%QUICKLAUNCH17%\*.lnk" 2>NUL>>"%Esc3%\Acessos-Directos"
DIR /B/S "%QUICKLAUNCH27%\*.lnk" 2>NUL>>"%Esc3%\Acessos-Directos"
DIR /B/S "%PROGRAMS17%\*.lnk" 2>NUL>>"%Esc3%\Acessos-Directos"
DIR /B/S "%PROGRAMS27%\*.lnk" 2>NUL>>"%Esc3%\Acessos-Directos"
DIR /B/S "%STARTMENU17%\*.lnk" 2>NUL>>"%Esc3%\Acessos-Directos"
DIR /B/S "%STARTMENU27%\*.lnk" 2>NUL>>"%Esc3%\Acessos-Directos"
GOTO Shortcuts_0
:Shortcuts_XP
DIR /B/S "%LNK1XP%\*.lnk" 2>NUL>>"%Esc3%\Acessos-Directos"
DIR /B/S "%LNK2XP%\*.lnk" 2>NUL>>"%Esc3%\Acessos-Directos"
:Shortcuts_0
"%SORT_%" -f -u <"%Esc3%\Acessos-Directos" >"%Esc3%\Acessos-Directos_Sospechosos"
for /f "usebackq delims=" %%i in ("%Esc3%\Acessos-Directos_Sospechosos") do (
"%SHORTCUT%" /F:"%%i" /A:Q|FINDSTR /IG:"%lnk%\Url_lnk.Llnk" >NUL 2>&1
IF NOT ERRORLEVEL 1 (
SETLOCAL EnableDelayedExpansion
CSCRIPT //B //NOLOGO "!lnk!\Limp_lnk.vbs" "%%i" >NUL 2>&1
ECHO(Successfully repaired: "%%i" ^(Acessos-Directos^)>>"!
Esc3!\[Link]"
)
ENDLOCAL
)
REN "%appdata%\Datos_Cp\Cuarentena"\Documentos Documentos.{2559a1f2-21d7-11d4-bdaf-
00c04f60b9f0}
REM ~~~~~~~~~~~~~~~~~~~~~~~~>

::Analizis Terminado ..
%Init%
%Color%
%Titulo%
%Limp%
%Ft%
%Ft% [Analizis Terminado]
%Ft% _________________________________________________________________________
%Ft%
%Ft% Analizis Terminado Con Exito, Presione Una Tecla Para Crear Un Reporte..
%Ft% _________________________________________________________________________
%Ft%
%Ft% Presione Una Tecla Crear Un Reporte ..
pause>null
%Limp%
Goto Crear

:Nop
%Init%
%Color%
%Titulo%
%Limp%
%Ft%
%Ft% [Analizis Terminado]
%Ft% _________________________________________________________________________
%Ft%
%Ft% No Se Encontraron Amenazas ..
%Ft% _________________________________________________________________________
%Ft%
%Ft% Presione Una Tecla Para Salir ..
pause>null
exit

:Crear
%Ft% ___________________________________________________
%Ft%
%Ft% [ Creando Reporte ] Cargando Por Favor Espere [%%1]
%Ft% ___________________________________________________
ping -n 2 [Link] > nul

%Limp%

%Ft% ___________________________________________________
%Ft%
%Ft% Cargando Por Favor Espere [%%50]
%Ft% ___________________________________________________
ping -n 2 [Link] > nul

%Limp%

%Ft% ___________________________________________________
%Ft%
%Ft% Cargando Por Favor Espere [%%69]
%Ft% ___________________________________________________
ping -n 2 [Link] > nul

%Limp%

%Ft% ___________________________________________________
%Ft%
%Ft% Cargando Por Favor Espere [%%90]
%Ft% ___________________________________________________
ping -n 2 [Link] > nul
%Limp%

%Ft% ___________________________________________________
%Ft%
%Ft% Cargando Por Favor Espere [%%100]
%Ft% ___________________________________________________
ping -n 2 [Link] > nul

%Limp%

::Creando Reporte
Set R_Malwares="%Esc%\[Link]"
Set /a _LinesM=0
For /f %%j in ('Type %R_Malwares% 2^>nul^|Find "" /v /c') Do Set /a _LinesM=%%j
echo.>>"%Esc%\R_REPORT.txt"
ECHO(Datos Del Antivirus^: %_LinesM% >>"%Esc%\R_REPORT.txt"
echo.>>"%Esc%\R_REPORT.txt"
IF EXIST "%Esc%\[Link]" (
SORT "%Esc%\[Link]" /O "%Esc%\R_Malware_T.txt" >NUL 2>&1
type "%Esc%\R_Malware_T.txt">>"%Esc%\R_REPORT.txt"
)
echo.>>"%Esc%\R_REPORT.txt"
echo.>>"%Esc%\R_REPORT.txt"
echo.>>"%Esc%\R_REPORT.txt"
echo.>>"%Esc%\R_REPORT.txt"
COPY /Y "%Esc%\R_REPORT.txt" "%Esc3%\[Link]" >NUL 2>&1
COPY /Y "%Esc%\R_REPORT.txt" "%appdata%\Datos_Cp\Reporte_Data\[Link]" >NUL
2>&1
DEL /F/Q "%Esc%\*.*"
%Limp%

::Reporte CreadoXD...
%Init%
%Color%
%Titulo%
%Limp%
%Ft%
%Ft% [Reporte Creado Con Exito]
%Ft% _________________________________________________________________________
%Ft%
%Ft% Su Reporte Se a Creado Con Exito Presione Una Tecla Para Verlo ..
%Ft% _________________________________________________________________________
%Ft%
%Ft% Presione Una Tecla Para Ver El Reporte ..
pause>null
%Limp%
@mode con cols=200 lines=100
Goto VerRepotTE

:VerRepotTE
%Init%
%Color%
%Titulo%
%Limp%
%Ft% _________________________________________________________________________
%Ft%
Type %appdata%\Datos_Cp\Reporte_Data\[Link]
%Ft% _________________________________________________________________________
%Ft%
%Ft% Presione Una Tecla Para Reiniciar El Programa ..
pause>null
%Limp%
DEL /F/Q "%Esc%\Reporte_Data\[Link]"
%Limp%
Goto CargandoProyecto

:ErrorUnidad
%Init%
%Color%
%Titulo%
%Limp%
%Ft% ______________________________________________________________________________
%Ft%
%Ft% [ Error En La Unidad .. ]
%Ft%
%Ft% [ La Letra De La Unidad Que Escribio Es Invalida .. ]
%Ft%
%Ft% ______________________________________________________________________________
%Ft%
%Ft% Presione Una Tecla Para Volver a Intentarlo ..
pause>null
Goto a

:SalirXD
exit

Das könnte Ihnen auch gefallen