Virus msn

Bonjour,
@echo off
rem Thanks for translation help / Merci pour l'aide apportée à la traduction

rem ÁcÅ餤¤å ... Credits ...¥§§J² nickjian@taiwan
rem Dutch ... Credits ...Luuk Bom
rem English ... Credits ...Jintan
rem Deutsch ... Credits ...Ruby
rem Italiano ... Credits ...LadyHawke
rem Svenska ... Credits ...Jonatan
rem Turkce ... Credits ...Alvin
rem Español ... Credits ...Christian D
rem Dane ... Credits ...?
rem ............................................................incl............................................................
rem ..............................................................................................................................
rem ...........................................................Process.exe
rem Process.exe by Craig.Peacock (http://www.beyondlogic.org)
rem ........................................................... swreg.exe
rem SteelWerX Registry Console Tool 2.0 (https://fstaal01.home.xs4all.nl/
rem Written by Bobbi Flekman 2006 (C)
rem ........................................................... zip.exe
rem http://infozip.sourceforge.net/
rem ........................................................... msnchk.exe
rem Malware Analysis & Diagnostic (http://secubox.aldria.com)
rem ..............................................................................................................................
rem ............................................................incl............................................................

title MSNFix
cd %~dp0
set winsys=%windir%\system32
incl\process.exe -k Strad.exe >NUL
incl\process.exe -k Zser.exe >NUL
incl\process.exe -k Xeyu.exe >NUL
incl\process.exe -k Xsfr.exe >NUL
incl\process.exe -k Cfreer.exe >NUL
incl\process.exe -k Nzil.exe >NUL
incl\process.exe -k Negdo.exe >NUL
incl\process.exe -k Juegs.exe >NUL
incl\process.exe -k Ttt.exe >NUL
incl\process.exe -k Avconsol.exe >NUL
incl\process.exe -k Zap.exe >NUL
incl\process.exe -k Hide32.exe >NUL
incl\process.exe -k avp.exe >NUL
incl\process.exe -k mgrs.exe >NUL
incl\process.exe -k Icon010.exe >NUL
incl\process.exe -k IEXPLORER.exe >NUL
incl\process.exe -k IEXPLORE.exe >NUL
incl\process.exe -k nvscvse.exe >NUL
incl\process.exe -k te32.exe >NUL
incl\process.exe -k FF.exe >NUL
incl\process.exe -k mssq.exe >NUL
incl\process.exe -k %temp%\*.exe >NUL
incl\process.exe -k syst.exe >NUL
incl\process.exe -k Mwsx.exe >NUL
incl\process.exe -k server.exe >NUL
incl\process.exe -k serverivy.exe >NUL
incl\process.exe -k %Temp%\svchost.exe >NUL
incl\process.exe -k msnworm.exe >NUL
incl\process.exe -k oddysee.exe >NUL
incl\process.exe -k tsorfib.exe >NUL
incl\process.exe -k BRISA.exe >NUL
incl\process.exe -k orgut.scr >NUL
incl\process.exe -k korn.scr >NUL
incl\process.exe -k directxd.exe >NUL
incl\process.exe -k dwwin.exe >NUL
incl\process.exe -k drwtsn32.exe >NUL
incl\process.exe -k win.scr >NUL
incl\process.exe -k winfp.exe >NUL
incl\process.exe -k svhostt32.exe >NUL
incl\process.exe -k WormList.exe >NUL
incl\process.exe -k Windows32.exe >NUL
incl\process.exe -k msnmsnr.scr >NUL
incl\process.exe -k bsyys.scr >NUL
incl\process.exe -k svhost.exe >NUL

set fix=MSNFix
rem ******************************************************** fin part 1 **************************************************************
set vers=1.536

rem ******************************************************** part 2 **************************************************************
set contact=contact@changelog.fr
set urlupload=http://upload.changelog.fr

VER|find "Windows 95">NUL
IF NOT ERRORLEVEL 1 set verwin=9x
VER|find "Windows 98">NUL
IF NOT ERRORLEVEL 1 set verwin=9x
VER|find "Windows Millennium">NUL
IF NOT ERRORLEVEL 1 set verwin=9x
ver|find "Windows XP">nul
IF NOT ERRORLEVEL 1 set verwin=NT
ver|find "Windows 2000">nul
IF NOT ERRORLEVEL 1 set verwin=NT
if %OS%==Windows_NT set verwin=NT

if not exist incl\MD5File.exe goto erroruse
if not exist incl\swreg.exe goto erroruse
if not exist incl\Process.exe goto erroruse
if not exist incl\zip.exe goto erroruse
if not exist incl\banker.reg goto erroruse

goto :testlang

:erroruse

color 1F
TITLE %fix% - erreur
cls
echo.
echo.
echo %fix% %vers%
echo.
echo Error ... Error .... Error .... Error
echo.
echo.
if not exist "%userprofile%\Bureau" (
echo Please Unzip MSNFix.zip
echo in recommended location %systemdrive%\MSNFix
echo before beginning
)
echo.
if exist "%userprofile%\Bureau" (
echo SVP Veuillez decompresser MSNFix.zip avant de commencer
echo il est recommende de le placer dans le dossier %systemdrive%\MSNFix
)
echo.
echo. ------------------------------------------------------------------------
echo. %auteur% Contact: %contact%
echo. ------------------------------------------------------------------------
echo.
echo %touchquitt%
pause >nul
goto fin


:testlang
if exist "%userprofile%\Bureau" goto fran
goto langue


:langue
TITLE %fix% - Language
color 1F
cls
echo %fix% %vers%
echo.
echo Choose language
echo.
echo.
echo A. ÁcÅ餤¤å
echo B. Dane
echo C. Espa¤ol
echo D. Dutch
echo E. English
echo F. Francais
echo G. Deutsch
echo I. Italiano
echo S. Svenska
echo T. Turkce
echo.
echo.
echo.
echo If you want translate in other language, please contact me
echo contact@changelog.fr
echo.
echo.
set menu=''
set /p menu=%sChoice% Choose your language and press enter
if "%menu%"=="f" goto fran
if "%menu%"=="F" goto fran
if "%menu%"=="e" goto eng
if "%menu%"=="E" goto eng
if "%menu%"=="i" goto itali
if "%menu%"=="I" goto itali
if "%menu%"=="d" goto dutch
if "%menu%"=="D" goto dutch
if "%menu%"=="t" goto turkce
if "%menu%"=="T" goto turkce
if "%menu%"=="A" goto chinese
if "%menu%"=="a" goto chinese
if "%menu%"=="s" goto swe
if "%menu%"=="S" goto swe
if "%menu%"=="g" goto german
if "%menu%"=="G" goto german
if "%menu%"=="b" goto danish
if "%menu%"=="B" goto danish
if "%menu%"=="c" goto spa
if "%menu%"=="C" goto spa
goto langue

:fran
set chx=Choisissez une action:
set forcnetreg=Nettoyer le registre et quitter
set prenet= Pressez une touche pour lancer le nettoyage
set rech=Rechercher
set quitt=Quitter
set avert=L'utilisation se fait … vos risques et p‚rils.
set scandate=Fix exécuté le
set mse=mode sans échec
set nommode=mode normal
set chfichpres=Recherche les fichiers présents
set nofich=Aucun Fichier trouvé
set chdospres=Recherche les dossiers présents
set nodoss=Aucun dossier trouvé
set infepres=Infection Pr‚sente
set nett=Nettoyage en cours
set aff=Afficher le rapport et Quitter
set infnopres=Infection Absente
set infnodetect=L'infection n'a pas ‚t‚ d‚tect‚e
set fichaprrede=Les fichiers encore présents seront supprimés au prochain redémarrage
set suppfich=Suppression des fichiers
set suppdoss=Suppression des dossiers
set netreg=Nettoyage du registre
set suspectfile=Fichiers suspects
set netpref=Nettoyage du dossier
set execdans=Executable dans le dossier
set avertcursor=ces fichiers nécessitent un avis expérimenté avant toute intervention
set infosauv=Les fichiers et clés de registre supprimés ont été sauvegardés dans le fichier
set verwinnosupp=Version de Windows non prise en charge
set signalhel=Veuillez le signaler … la personne vous ayant propos‚ ce fix
set touchquitt=Appuyez sur une touche pour quitter
set fichdossencpres=Des fichiers sont encore pr‚sents
set redemfin=Veuillez Red‚marrer votre ordinateur pour terminer le nettoyage
set auteur=Auteur : !aur3n7
set upload=SVP merci d'envoyer le fichier
set upload2=sur %urlupload%
goto crea

:spa
set chx=Elija una acci¢n:
set prenet=Pulse cualquier tecla para empezar la limpieza
set forcnetreg=Limpiar el registro y cerrar
set rech=Buscar
set quitt=Salir
set avert=Usa esta herramienta bajo tu propio riesgo.
set scandate=Escaneo finalizado el
set mse=Modo Seguro
set nommode=Modo Normal
set chfichpres=Comprobando Archivos
set nofich=No se ha encontrado ningún archivo
set chdospres=Comprobando carpetas
set nodoss=No se ha encontrado ninguna carpeta
set infepres=Programa malintencionado encontrado
set nett=Limpieza en progreso
set aff=Ver archivo log y cerrar
set infnopres=No encontrado
set infnodetect=No se ha encontrado ningún programa malintencionado
set fichaprrede=Algunos archivos se borrarán despues de reiniciar en el modo normal
set suppfich=Borrando archivos del programa malintencionado
set suppdoss=Borrando carpetas del programa malintencionado
set netreg=Limpiando el registro
set suspectfile=Archivos Sospechosos
set netpref=Limpiando Carpetas
set execdans=Se han encontrado archivos ejecutables en la carpeta
set avertcursor=Los archivos detectados deberían ser posteados en foros especializados antes de que los cambios se puedan hacer
set infosauv=Los archivos borrados y las modificaciones del registro se han guardado en el archivo
set verwinnosupp=No soporta esta versión de Windows
set signalhel=Por favor informa de esto a la persona que te sugirió esta herramienta
set touchquitt=Pulsa cualquier tecla para salir
set fichdossencpres=Algunos archivos aún son detectados
set redemfin=Por favor reinicia tu sistema en el modo normal para finalizar la limpieza
set auteur=Autor : !aur3n7
set upload=Por favor sube el archivo
set upload2= a %urlupload%
goto crea

:danish
set chx= Vælg en funktion :
set prenet= Tryk på en vilkårlig knap for at starte rengøringen
set forcnetreg= Tøm registeret og luk
set rech= Søg
set quitt= Exit
set avert= Brug af dette værktøj er på eget ansvar
set scandate= Scannet den
set mse= Sikker tilstand
set nommode= normal tilstand
set chfichpres= Checker filer
set nofich= Ingen filer fundet
set chdospres= Checker Mapper
set nodoss= Ingen Mapper fundet
set infepres= Malware Fundet
set nett= Rengøring igang
set aff= Vis logfil og luk
set infnopres= Ikke fundet
set infnodetect= Malware ikke fundet
set fichaprrede= Andre filer vil blive slettet efter genstart i normal tilstand
set suppfich= Sletter malware filer
set suppdoss= Sletter malware mapper
set netreg= Register rengøring
set suspectfile= Mistænkelige filer
set netpref= Mappe rengøring
set execdans= .exe filer fundet i mappe
set avertcursor= De fundne filer skal kontrolleres af en hjælper før andre handlinger udføres
set infosauv= De slettede Filer og Register er blevet gemt i
set verwinnosupp= Understøtter ikke denne Version af Windows
set signalhel= Informer det venligst til personen der foreslog dette værktøj til dig.
set touchquitt= Tryk på en vilkårlig knap for at lukke
set fichdossencpres= Filer stadig opdaget
set redemfin= Genstart venligst systemet i normal tilstand for at gøre rengøringen færdig
set auteur= Lavet af : !aur3n7
set upload= Upload venligst filen
set upload2= på http://upload.changelog.fr
goto crea

:german
set chx=Wähle eine Tätigkeit !
set prenet= Drücke auf irgendeine Taste, um die Reinigung zu beginnen
set forcnetreg=reinige die Registrierung und verlasse sie
set rech=Suche
set quitt= Exit
set avert=verwende dieses Programm auf eigenes Risiko
set scandate=Scan ausgeführt
set mse=abgesicherter Modus
set nommode=normaler Modus
set chfichpres=Datei Prüfung
set nofich=Keine Dateien gefunden
set chdospres=Verzeichnis Kontrolle
set nodoss=keine Verzeichnisse gefunden
set infepres=gefundene Malware
set nett=Reinigung läuft
set aff=Schau dir das Logfile an und exit
set infnopres=nicht gefunden
set infnodetect=Malware nicht gefunden
set fichaprrede=die anderen Dateien werden gelöscht, wenn der Rechner in den normalen Modus gestartet wird
set suppfich=die Malware Dateien werden gelöscht
set suppdoss=die Malware Verzeichnisse werden gelöscht
set netreg=Reinigung der Registrierung
set suspectfile=Verdächtige Dateien
set netpref=Reinigung der Verzeichnisse
set execdans=*.exe Dateien gefunden, im Ordner
set avertcursor=Die angegebenen Dateien müssen von einem Forums Mitarbeiter kontrolliert werden, bevor Änderungen durchgenommen werden dürfen.
set infosauv=Die gelöschten Dateien und Registrierungseinträge wurden gespeichert in
set verwinnosupp=unterstützt diese Version von Windows nicht
set signalhel=Bitte informiere den Helfer, der dir dieses Tool empfohlen hat.
set touchquitt=Drücke auf irgendeine Taste zum exit
set fichdossencpres=Es werden noch Dateien entdeckt
set redemfin=starte deinen Rechner in den normalen Modus, um die Reinigung zu beenden
set auteur=Hersteller : !aur3n7
set upload=Lade bitte die Datei hoch
set upload2= zu %urlupload%
goto crea


:swe
set chx=Valj funktion :
set prenet=Tryck valfri knapp for att borja sokningen
set forcnetreg=Rensa datorn och Avsluta
set rech=Ta bort
set quitt=Avsluta
set avert=Anvand pa egen risk.
set scandate=Sokningen var klar pa
set mse=Felsakert lage
set nommode=normalt lage
set chfichpres=Kollar filer
set nofich=Inga Filer Funna
set chdospres=Kollar mappar
set nodoss=Inga Mappar Funna
set infepres=Virus Hittat
set nett=Tar bort virus
set aff=Granska loggen och Avsluta
set infnopres=Kunde inte hitta nagot
set infnodetect=Kunde inte hitta nagot virus
set fichaprrede=Resten av filerna tas bort efter omstart
set suppfich=Tar bort virus filer
set suppdoss=Tar bort virus mappar
set netreg=Rensar registret
set suspectfile=Misstankta Filer
set netpref=Rensar Mappar
set execdans=.exe Filer funna i mappen
set avertcursor=Dem funna filerna maste kontrolleras innan borttagning
set infosauv=Filerna och Registernycklarna har sparats i karantan
set verwinnosupp=Programmet fungerar ej med denna Windowsversion
set signalhel=Var snall och tala om det for personen du fick detta program av
set touchquitt=Tryck pa valfri knapp for att Avsluta
set fichdossencpres=Filer hittas fortfarande
set redemfin=Var snall och starta om datorn for att ta bort rester av viruset.
set auteur=Gjord av : !aur3n7
set upload=Var snall och ladda upp filen
set upload2= on %urlupload%
goto crea

:turkce
set chx=Bir islem Secin :
set prenet=Temizlemeye baslamak icin herhangi bir tusa basin
set forcnetreg=Registry yi temizle ve cik
set rech=Dosyalari Ara ve Temizle
set quitt=Cikis
set avert=Bu programi kullanmak kendi insiyatifinizdedir.
set scandate=Temizleme tamamlandý
set mse=Güvenli mod
set nommode=Normal mode
set chfichpres=Dosyalar araniyor
set nofich=Dosya bulunamadi
set chdospres=Dizin kontrol ediliyor
set nodoss=Dizin bulunamadi
set infepres=Virus bulundu
set nett=Temizleniyor
set aff=Sonuclara bak ve cik
set infnopres=Bulunamadi
set infnodetect=Virus bulunamadi
set fichaprrede=Diger dosyalar bilgisayar yeniden basladiktan sonra silinecek.
set suppfich=Virus dosyalari siliniyor
set suppdoss=Virus dizinleri siliniyor
set netreg=Kayit defteri temizleniyor
set suspectfile=Supheli dosyalar
set netpref=Dizin temizleniyor
set execdans=.exe dosyalari bulundu. Dizin :
set avertcursor=Bulunanan dosyalar kontrol edilmeli
set infosauv=Dosyalar ve Kayýt duzenleyicinde silinen kayitlar asagidaki dizine kaydedildi
set verwinnosupp=Bu Windows versiyonu desteklenmiyor
set signalhel=Bu programi arkadaslariniza da önerin
set touchquitt=Cikmak icin bir tusa basin
set fichdossencpres=Viruslu dosyalar halen var
set redemfin=Lutfen temizlemeyi bitirmek icin bilgisayarinizi yeniden baslatin
set auteur=Autor : !aur3n7
set upload=Lutfen dosyayi upload edin
set upload2= on %urlupload%
goto crea

:Eng
set chx=Choose an action :
set prenet=Press any key to start cleaning
set forcnetreg=Clean the registry and quit
set rech=Search
set quitt=Exit
set avert=Use this tool at your own risk.
set scandate=Scan done at
set mse=Safe mode
set nommode=normal mode
set chfichpres=Checking Files
set nofich=No files found
set chdospres=Checking Folders
set nodoss=No Folders Found
set infepres=Malware Found
set nett=Cleaning in progress
set aff=View logfile and Exit
set infnopres=Not found
set infnodetect=Malware Not found
set fichaprrede=Others Files will be deleted after a reboot to normal mode
set suppfich=Deleting malware Files
set suppdoss=Deleting malware Folders
set netreg=Registry Cleaning
set suspectfile=Suspect Files
set netpref=Folder Cleaning
set execdans=.exe Files found in folder
set avertcursor=The detected files must be reviewed by a forum Helper before changes can be made
set infosauv=The File and Registry deletions have been saved in
set verwinnosupp=Doesn't support this Windows Version
set signalhel=Please tell this to the Helper who suggested this tool
set touchquitt=Press any key to Exit
set fichdossencpres=Files are still detected
set redemfin=Please reboot your system to normal mode to finish cleaning
set auteur=Author : !aur3n7
set upload=Please upload the file
set upload2= to %urlupload%
goto crea

:dutch
set chx=Kies een actie:
set prenet=Druk op een toets om het opschonen te starten
set forcnetreg=Schoon het register op en sluit af
set rech=Zoek
set quitt=Afsluiten
set avert=Gebruik van dit programma is voor eigen risico
set scandate=Scan voltooid op
set mse=Veilige modus
set nommode=Normale modus
set chfichpres=Controleren van bestanden
set nofich=Geen bestanden gevonden
set chdospres=Controleren van mappen
set nodoss=Geen map gevonden
set infepres=Malware gevonden
set nett=Bezig met opschonen
set aff=Bekijk logbestand en sluit af
set infnopres=Niet gevonden
set infnodetect=Malware niet gevonden
set fichaprrede=De resterende bestanden zullen worden verwijderd na
set herstarten in de normale modus
set suppfich=Verwijderen van malware bestanden
set suppdoss=Verwijderen van malware map
set netreg=Register Opschonen
set suspectfile=Verdachte bestanden
set netpref=Map Opschonen
set execdans=.exe-bestanden gevonden in map
set avertcursor=De gevonden bestanden moeten gecontroleerd worden door een
set helper voor er actie wordt ondernomen
set infosauv=De verwijderde bestanden en registersleutels zijn opgeslagen in
set verwinnosupp=Deze Windows-versie wordt niet ondersteund
set signalhel=Geef het door aan de persoon die dit programma aan u
set voorstelde
set touchquitt=Druk op een toets om af te sluiten
set fichdossencpres=Bestanden zijn nog steeds beschadigd
set redemfin=Herstart alstublieft de pc in normale modus
set auteur=Maker : !aur3n7
set upload=Upload het bestand alstublieft
set upload2=op http://upload.changelog.fr
goto crea

:itali
set chx=Scegliere una azione:
set forcnetreg=Ripulire il Registro e uscire
set prenet= Premere un tasto per lanciare la rimozione
set rech=Cercare
set quitt=Uscire
set avert=L'uso è fatto … vostro rischio e pericolo.
set scandate=Fix effettuato il
set mse=modalità sicura
set nommode=modalità normale
set chfichpres=Cercare i files presenti
set nofich=Nessun files trovato
set chdospres=Ricerca le cartelle presenti
set nodoss=Nessuna cartella trovata
set infepres=Infezione Presente
set nett=Rimozione in corso
set aff=Visualizzare il rapporto e uscire
set infnopres=Infezione non presente
set infnodetect=L'infezione non è stata trovata
set fichaprrede=I files ancora presenti saranno eliminati al prossimo riavvio
set suppfich=Eliminazione dei files
set suppdoss=Eliminazione delle cartelle
set netreg=Pulizia del Registro
set suspectfile=Files sospetti
set netpref=Pulizia delle cartelle
set execdans=Eseguibili nelle cartelle
set avertcursor=questi files necessitano di un parere esperto prima di qualsiasi intervento
set infosauv=I files e le chiavi di registro eliminati sono stati salvati nel file
set touchquitt=Premere un tasto per uscire
set fichdossencpres=Alcuni files sono ancora presenti
set redemfin=Riavviate il vostro computer per terminare la rimozione
set auteur=Auteur : !aur3n7
set upload=Vi saremo grati se vorrete inviare il file
set upload2= su %urlupload%
goto crea

:chinese
set chx=½Ð¿ï¾Ü°Ê§@ :
set prenet=?Ð?ö?ô?NÁä?}?l?R???f?r
set forcnetreg=?M???ù?UÀÉ?ÎÂ??}
set rech=?M?ä
set quitt=Â??}
set avert=?í?z?Ï?Î???nÅé?É?z?????Ó?ü?ä?Ò?a?Ó?i?à????ÀI.
set scandate=???y???ô?b
set mse=?w?þ?Ò??
set nommode=?@?ë?Ò??
set chfichpres=ÀË?dÀÉ??
set nofich=?S???o?{?ô?óÀÉ??
set chdospres=ÀË?d?Ø?ý
set nodoss=?S???o?{?ô?ó?Ø?ý
set infepres=?o?{?c?Ê?nÅé
set nett=ÀË?d???b?õ?æ???nÅé
set aff=ÀË?d?O?ýÀÉ?ÎÂ??}
set infnopres=?L?o?{
set infnodetect=?L?o?{?c?Ê?nÅé
set fichaprrede=?ä?í?z???}???Ã?Ñ?@?ë?Ò???i?J?@?~?A?LÀÉ???N?Q?R??
set suppfich=?R???c?ÊÀÉ??
set suppdoss=?R???c?Ê?Ø?ý
set netreg=?ù?UÀÉ?M????
set suspectfile=?j?M?i?à???f?r??ÀÉ??
set netpref=?Ø?ý?M????
set execdans=?b?Ø?ý???o?{ .exe ÀÉ??
set avertcursor=?b?z?Ï?Î?U?CÀÉ?????e?????Ï?Î?ä?L?nÅé?Ó?ó?U?T?{?A
set infosauv=?Q?R????ÀÉ???Î?ù?UÀÉ?NÀx?s?b
set verwinnosupp=???ä???o?Ó Windows ????
set signalhel=
set touchquitt=?ö?ô?NÁäÂ??}
set fichdossencpres=ÀÉ?????M?Q???ú?ì
set redemfin=?Ð???s?}???Ã?Ñ?@?ë?}???{?Ç?Ó?????M???Ê?@
set auteur=Autor : !aur3n7
set upload=?Ð?W?Ç??ÀÉ
set upload2= ?ì %urlupload%
goto crea

:crea

if "%verwin%"=="9x" goto noos

echo Option Explicit>GetPaths.vbs
echo.>>GetPaths.vbs
echo Dim Shell>>GetPaths.vbs
echo Dim KeyPath>>GetPaths.vbs
echo Dim ObjFileSystem>>GetPaths.vbs
echo Dim ObjOutputFile>>GetPaths.vbs
echo Dim ObjRegExp>>GetPaths.vbs
echo Dim File>>GetPaths.vbs
echo Dim TmpVar>>GetPaths.vbs
echo Dim Var>>GetPaths.vbs
echo Dim Accent>>GetPaths.vbs
echo.>>GetPaths.vbs
echo KeyPath = "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\">>GetPaths.vbs
echo File = "SetPaths.bat">>GetPaths.vbs
echo.>>GetPaths.vbs
echo Set Shell = WScript.CreateObject("WScript.Shell")>>GetPaths.vbs
echo Set ObjFileSystem = CreateObject("Scripting.fileSystemObject")>>GetPaths.vbs
echo Set ObjOutputFile = ObjFileSystem.CreateTextFile(File, TRUE)>>GetPaths.vbs
echo Set ObjRegExp = New RegExp>>GetPaths.vbs
echo.>>GetPaths.vbs
echo Function ShortFileName(Path)>>GetPaths.vbs
echo Dim f>>GetPaths.vbs
echo Set f = ObjFileSystem.GetFolder(Path)>>GetPaths.vbs
echo ShortFileName = f.ShortPath>>GetPaths.vbs
echo End Function>>GetPaths.vbs
echo Function Accents(Str)>>GetPaths.vbs
echo ObjRegExp.Pattern = "[^a-zA-Z_0-9\\: ]">>GetPaths.vbs
echo ObjRegExp.IgnoreCase = True>>GetPaths.vbs
echo ObjRegExp.Global = True>>GetPaths.vbs
echo Accents = ObjRegExp.Replace(Str, "?")>>GetPaths.vbs
echo End Function>>GetPaths.vbs
echo.>>GetPaths.vbs
echo TmpVar = Shell.RegRead (KeyPath ^& "Desktop")>>GetPaths.vbs
echo TmpVar = ShortFileName(TmpVar)>>GetPaths.vbs
echo Var = "Set desktop=" ^& TmpVar>>GetPaths.vbs
echo ObjOutputFile.WriteLine(Var)>>GetPaths.vbs
echo.>>GetPaths.vbs
echo TmpVar = Shell.RegRead (KeyPath ^& "Favorites")>>GetPaths.vbs
echo TmpVar = ShortFileName(TmpVar)>>GetPaths.vbs
echo Var = "Set favorites=" ^& TmpVar>>GetPaths.vbs
echo ObjOutputFile.WriteLine(Var)>>GetPaths.vbs
echo.>>GetPaths.vbs
echo TmpVar = Shell.RegRead (KeyPath ^& "Programs")>>GetPaths.vbs
echo TmpVar = ShortFileName(TmpVar)>>GetPaths.vbs
echo Var = "Set startprg=" ^& TmpVar>>GetPaths.vbs
echo ObjOutputFile.WriteLine(Var)>>GetPaths.vbs
echo.>>GetPaths.vbs
echo TmpVar = Shell.RegRead (KeyPath ^& "Start Menu")>>GetPaths.vbs
echo TmpVar = ShortFileName(TmpVar)>>GetPaths.vbs
echo Var = "Set startm=" ^& TmpVar>>GetPaths.vbs
echo ObjOutputFile.WriteLine(Var)>>GetPaths.vbs
echo.>>GetPaths.vbs
echo TmpVar = Shell.RegRead (KeyPath ^& "Startup")>>GetPaths.vbs
echo TmpVar = ShortFileName(TmpVar)>>GetPaths.vbs
echo Var = "Set startup=" ^& TmpVar>>GetPaths.vbs
echo ObjOutputFile.WriteLine(Var)>>GetPaths.vbs
echo.>>GetPaths.vbs
echo TmpVar = Shell.RegRead (KeyPath ^& "Cache")>>GetPaths.vbs
echo TmpVar = ShortFileName(TmpVar)>>GetPaths.vbs
echo Var = "Set usercache=" ^& TmpVar>>GetPaths.vbs
echo ObjOutputFile.WriteLine(Var)>>GetPaths.vbs
echo.>>GetPaths.vbs
echo TmpVar = Shell.RegRead (KeyPath ^& "Local AppData")>>GetPaths.vbs
echo TmpVar = ShortFileName(TmpVar)>>GetPaths.vbs
echo Var = "Set locuseappdata=" ^& TmpVar>>GetPaths.vbs
echo ObjOutputFile.WriteLine(Var)>>GetPaths.vbs
echo.>>GetPaths.vbs
echo KeyPath = "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\">>GetPaths.vbs
echo TmpVar = Shell.RegRead (KeyPath ^& "Common Desktop")>>GetPaths.vbs
echo TmpVar = ShortFileName(TmpVar)>>GetPaths.vbs
echo Var = "Set audesktop=" ^& TmpVar>>GetPaths.vbs
echo ObjOutputFile.WriteLine(Var)>>GetPaths.vbs
echo.>>GetPaths.vbs
echo TmpVar = Shell.RegRead (KeyPath ^& "Common Programs")>>GetPaths.vbs
echo TmpVar = ShortFileName(TmpVar)>>GetPaths.vbs
echo Var = "Set austartprg=" ^& TmpVar>>GetPaths.vbs
echo ObjOutputFile.WriteLine(Var)>>GetPaths.vbs
echo.>>GetPaths.vbs
echo TmpVar = Shell.RegRead (KeyPath ^& "Common Start Menu")>>GetPaths.vbs
echo TmpVar = ShortFileName(TmpVar)>>GetPaths.vbs
echo Var = "Set austartm=" ^& TmpVar>>GetPaths.vbs
echo ObjOutputFile.WriteLine(Var)>>GetPaths.vbs
echo.>>GetPaths.vbs
echo TmpVar = Shell.RegRead (KeyPath ^& "Common Startup")>>GetPaths.vbs
echo TmpVar = ShortFileName(TmpVar)>>GetPaths.vbs
echo Var = "Set austartup=" ^& TmpVar>>GetPaths.vbs
echo ObjOutputFile.WriteLine(Var)>>GetPaths.vbs
echo.>>GetPaths.vbs
echo TmpVar = Shell.RegRead (KeyPath ^& "Common AppData")>>GetPaths.vbs
echo TmpVar = ShortFileName(TmpVar)>>GetPaths.vbs
echo Var = "Set locallappdata=" ^& TmpVar>>GetPaths.vbs
echo ObjOutputFile.WriteLine(Var)>>GetPaths.vbs
echo.>>GetPaths.vbs
echo KeyPath = "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\">>GetPaths.vbs
echo TmpVar = Shell.RegRead (KeyPath ^& "ProgramFilesDir")>>GetPaths.vbs
echo TmpVar = ShortFileName(TmpVar)>>GetPaths.vbs
echo Var = "Set ProgFiles=" ^& TmpVar>>GetPaths.vbs
echo ObjOutputFile.WriteLine(Var)>>GetPaths.vbs
echo TmpVar = Shell.RegRead (KeyPath ^& "CommonFilesDir")>>GetPaths.vbs
echo TmpVar = ShortFileName(TmpVar)>>GetPaths.vbs
echo Var = "Set fichcommuns=" ^& TmpVar>>GetPaths.vbs
echo ObjOutputFile.WriteLine(Var)>>GetPaths.vbs
echo.>>GetPaths.vbs
echo ObjOutputFile.Close>>GetPaths.vbs
echo Set objFileSystem = Nothing>>GetPaths.vbs
echo Set Shell = Nothing>>GetPaths.vbs
echo Set ObjRegExp = nothing>>GetPaths.vbs
echo.>>GetPaths.vbs

cscript //I //nologo GetPaths.vbs
del GetPaths.vbs
Call SetPaths.bat
del SetPaths.bat
set winsys=%windir%\system32

rem ******************************************************** fin part 2 **************************************************************
> incl\upload.txt (
echo %temp%\GS4.tmp
echo %Windir%\freshphotos.zip
echo %Windir%\wordpad.pif
echo %winsys%\ahiclln.exe
echo %winsys%\svchon32.exe
)




> incl\fichier.txt (
echo %appdata%\addon.dat
echo %appdata%\inside.exe
echo %austartm%\carlton
echo %austartup%\Antivirus32.exe
echo %austartup%\ashDisp.exe
echo %austartup%\ashServ.exe
echo %austartup%\atimvex.exe
echo %austartup%\atrvmmx.exe
echo %austartup%\bios.exe
echo %austartup%\BRISA.exe
echo %austartup%\bsyys.exe
echo %austartup%\bsyys.scr
echo %austartup%\carlton
echo %austartup%\ccssrss.exe
echo %austartup%\cmd.exe
echo %austartup%\Computador.exe
echo %austartup%\Diup.exe
echo %austartup%\dll.exe
echo %austartup%\dllvirtual.exe
echo %austartup%\eixdrv.exe
echo %austartup%\ExAlien.exe
echo %austartup%\fbguad.exe
echo %austartup%\firefoxx.exe
echo %austartup%\Flash.exe
echo %austartup%\GbpSvc.exe
echo %austartup%\HelpDesk.exe
echo %austartup%\Hide32.exe
echo %austartup%\icpldrvx.exe
echo %austartup%\imglog.exe
echo %austartup%\InstallHelp.exe
echo %austartup%\javaupd.exe
echo %austartup%\javsu.exe
echo %austartup%\juchek.exe
echo %austartup%\jvasu.exe
echo %austartup%\JVM0.exe
echo %austartup%\jvms.exe
echo %austartup%\klpp.exe
echo %austartup%\logon.exe
echo %austartup%\lsssas.exe
echo %austartup%\mdll.exe
echo %austartup%\messengerr.exe
echo %austartup%\messenup.exe
echo %austartup%\messgrr.exe
echo %austartup%\mjavas.exe
echo %austartup%\msm.cmd
echo %austartup%\MSN_MSS.exe
echo %austartup%\msnconf.exe
echo %austartup%\MSNENVIA.exe
echo %austartup%\msnfile.exe
echo %austartup%\msng.exe
echo %austartup%\msnmsg.exe
echo %austartup%\msnmsgr.exe
echo %austartup%\msnsgs.exe
echo %austartup%\mxjxde.exe
echo %austartup%\My_Love.exe
echo %austartup%\Ndtstat.exe
echo %austartup%\norton32.exe
echo %austartup%\ntvvm.exe
echo %austartup%\pdvsym.exe
echo %austartup%\qtapp.exe
echo %austartup%\regfixxsx.exe
echo %austartup%\registtry.exe
echo %austartup%\remote.cmd
echo %austartup%\repara_ae.bat
echo %austartup%\Rg2catbd.exe
echo %austartup%\rundl32.exe
echo %austartup%\rxnetq.exe
echo %austartup%\smss.scr
echo %austartup%\svchost.exe
echo %austartup%\svchostss.exe
echo %austartup%\svhost.exe
echo %austartup%\sxrork.exe
echo %austartup%\sxrsym.exe
echo %austartup%\syst.exe
echo %austartup%\system32.exe
echo %austartup%\systemdll.exe
echo %austartup%\task.exe
echo %austartup%\taskmgrrr.exe
echo %austartup%\Tasks.exe
echo %austartup%\udll.exe
echo %austartup%\voieup.exe
echo %austartup%\voiork.exe
echo %austartup%\wepaint.exe
echo %austartup%\Win XP.exe
echo %austartup%\win.scr
echo %austartup%\Windows Update.exe
echo %austartup%\Windows32.exe
echo %austartup%\windowsupdate.exe
echo %austartup%\Winhost.exe
echo %austartup%\winupdbc.exe
echo %austartup%\WMedPlayer.exe
echo %austartup%\wrdmgr.exe
echo %austartup%\wrloginpro.exe
echo %austartup%\wsnctfy.exe
echo %austartup%\wuaucltt.exe
echo %austartup%\ying.exe
echo %austartup%\yong.exe
echo %austartup%\ZaZ.exe
echo %commonprogramfiles%\Carlson\carlton
echo %commonprogramfiles%\Delsim\del.exe
echo %fichcommuns%\Microsoft Shared\DAO\svchost.exe
echo %fichcommuns%\tmp.scr
echo %homedrive%\i.mages.zip
echo %locuseappdata%\addon.dat
echo %ProgFiles%\\NetMeeting\maisumviado.exe
echo %ProgFiles%\\outloo~1\update.exe
echo %ProgFiles%\\WinPop\winpop.exe.lzma
echo %ProgFiles%\a.txt
echo %ProgFiles%\Adobe\AdobeLanc.exe
echo %ProgFiles%\Ajuda.exe
echo %ProgFiles%\Amor.exe
echo %ProgFiles%\Bifrost\klog.dat
echo %ProgFiles%\Bifrost\server.exe
echo %ProgFiles%\Bifrost\sys32.exe
echo %ProgFiles%\Cica.exe
echo %ProgFiles%\Config\Config.exe
echo %ProgFiles%\dll.exe
echo %ProgFiles%\dllvirtual.exe
echo %ProgFiles%\dllwin.exe
echo %ProgFiles%\ExAlien.exe
echo %ProgFiles%\Favoritos.exe
echo %ProgFiles%\fer.exe
echo %ProgFiles%\Firewall.exe
echo %ProgFiles%\Flash.exe
echo %ProgFiles%\GbPlugin\\Rg2catbd.exe
echo %ProgFiles%\GbPlugin\GbpSvc.exe
echo %ProgFiles%\GbPlugin\mdll.exe
echo %ProgFiles%\GbPlugin\msng.exe
echo %ProgFiles%\GbPlugin\Ndtstat.exe
echo %ProgFiles%\GbPlugin\Rg2catbd.exe
echo %ProgFiles%\GbPlugin\udll.exe
echo %ProgFiles%\GbPlugin\yong.exe
echo %ProgFiles%\GbpSvc.exe
echo %ProgFiles%\help.exe
echo %ProgFiles%\HelpDesk.exe
echo %ProgFiles%\icpldrvx.exe
echo %ProgFiles%\ildredr.exe
echo %ProgFiles%\inetget2\installeur.exe
echo %ProgFiles%\Internet Explorer\bb.exe
echo %ProgFiles%\Internet Explorer\desc.exe
echo %ProgFiles%\Internet Explorer\loadie.exe
echo %ProgFiles%\Internet Explorer\realplayerp.exe
echo %ProgFiles%\klog.dat
echo %ProgFiles%\login.scr
echo %ProgFiles%\Logun.exe
echo %ProgFiles%\mdll.exe
echo %ProgFiles%\messenger.exe
echo %ProgFiles%\Messenger\msmsg.exe
echo %ProgFiles%\Messenger\Msnmsgr.exe
echo %ProgFiles%\Microsoft Office Update\file.exe
echo %ProgFiles%\Microsoft Studio Files\file.exe
echo %ProgFiles%\Microsoft Studio Files\Winlsass32.exe
echo %ProgFiles%\Microsoft\svhost32.exe
echo %ProgFiles%\Movie Maker\ja_era_hehe.exe
echo %ProgFiles%\MSN Messenger Guiños\instalar guiños.exe
echo %ProgFiles%\MSN Messenger\instalar guiños.exe
echo %ProgFiles%\msng.exe
echo %ProgFiles%\msnmsg.exe
echo %ProgFiles%\My_Love.exe
echo %ProgFiles%\Ndtstat.exe
echo %ProgFiles%\NetMeeting\klog.dat
echo %ProgFiles%\NetMeeting\maisumviado.exe
echo %ProgFiles%\orkut.scr
echo %ProgFiles%\outloo~1\express.exe
echo %ProgFiles%\outloo~1\update.exe
echo %ProgFiles%\outlook express\express.exe
echo %ProgFiles%\Outlook Express\inyourface.exe
echo %ProgFiles%\Outlook Express\OutlookEx.exe
echo %ProgFiles%\Outlook Express\setup40.exe
echo %ProgFiles%\Perfect.exe
echo %ProgFiles%\photopaint.exe
echo %ProgFiles%\Real.dll
echo %ProgFiles%\regedti.exe
echo %ProgFiles%\Remove.exe
echo %ProgFiles%\Rg2catbd.exe
echo %ProgFiles%\rm.exe
echo %ProgFiles%\schoty.cmd
echo %ProgFiles%\smss.exe
echo %ProgFiles%\SOUND.exe
echo %ProgFiles%\spiider.exe
echo %ProgFiles%\svchost.exe
echo %ProgFiles%\System\CDRom.exe
echo %ProgFiles%\System\Flash.exe
echo %ProgFiles%\System\Windows32.exe
echo %ProgFiles%\Tasks.exe
echo %ProgFiles%\udll.exe
echo %ProgFiles%\update.exe
echo %ProgFiles%\VTTimers.exe
echo %ProgFiles%\Wapp.exe
echo %ProgFiles%\Widows.exe
echo %ProgFiles%\Windows32.exe
echo %ProgFiles%\winINI.exe
echo %ProgFiles%\winpop\uninstall.exe
echo %ProgFiles%\WinPop\UnInstall.exe.lzma
echo %ProgFiles%\winpop\winpop.exe
echo %ProgFiles%\WinPop\winpop.exe.lzma
echo %ProgFiles%\Wm2emt.exe
echo %ProgFiles%\wmplay.exe
echo %ProgFiles%\yong.exe
echo %startup%\ashDisp.exe
echo %startup%\ashServ.exe
echo %startup%\avgccc.exe
echo %startup%\bios.exe
echo %startup%\bsyys.scr
echo %startup%\ccssrss.exe
echo %startup%\cmd.exe
echo %startup%\Computador.exe
echo %startup%\dll.exe
echo %startup%\eixdrv.exe
echo %startup%\ExAlien.exe
echo %startup%\fbguad.exe
echo %startup%\firefoxx.exe
echo %startup%\Flash.exe
echo %startup%\InstallHelp.exe
echo %startup%\javsu.exe
echo %startup%\juchek.exe
echo %startup%\klpp.exe
echo %startup%\logon.exe
echo %startup%\lsssas.exe
echo %startup%\messengerr.exe
echo %startup%\messgrr.exe
echo %startup%\msm.cmd
echo %startup%\msnmsgr.exe
echo %startup%\My_Love.exe
echo %startup%\norton32.exe
echo %startup%\ntvvm.exe
echo %startup%\pdvsym.exe
echo %startup%\qtapp.exe
echo %startup%\qupdate.exe
echo %startup%\regfixxsx.exe
echo %startup%\registtry.exe
echo %startup%\remote.cmd
echo %startup%\repara_ae.bat
echo %startup%\rundl32.exe
echo %startup%\rxnetq.exe
echo %startup%\smss.scr
echo %startup%\svchost.exe
echo %startup%\svchostss.exe
echo %startup%\svhost.exe
echo %startup%\sxrork.exe
echo %startup%\sxrsym.exe
echo %startup%\system32.exe
echo %startup%\task.exe
echo %startup%\taskmgrrr.exe
echo %startup%\Tasks.exe
echo %startup%\voieup.exe
echo %startup%\voiork.exe
echo %startup%\wepaint.exe
echo %startup%\Win XP.exe
echo %startup%\Windows Update.exe
echo %startup%\Windows32.exe
echo %startup%\windowsupdate.exe
echo %startup%\Winhost.exe
echo %startup%\winupdbc.exe
echo %startup%\WMedPlayer.exe
echo %startup%\wrloginpro.exe
echo %startup%\wuaucltt.exe
echo %systemdrive%\.exe
echo %systemdrive%\111z.exe
echo %SystemDrive%\2.exe
echo %systemdrive%\521785.txt
echo %systemdrive%\8e3y4u4a9t9.exe
echo %systemdrive%\a.bat
echo %SystemDrive%\adv.exe
echo %systemdrive%\Amigos.exe
echo %systemdrive%\amor.exe
echo %systemdrive%\animacao.scr
echo %systemdrive%\Annoying crazy frog getting killed.pif
echo %systemdrive%\Arquivos de programas\rem.exe
echo %systemdrive%\Arquivos de programas\Wapp.exe
echo %systemdrive%\arquivos de programas\Windows32.exe
echo %systemdrive%\audise.exe
echo %systemdrive%\auto1.exe
echo %systemdrive%\auto2.exe
echo %systemdrive%\auto3.exe
echo %systemdrive%\autorun.inf
echo %systemdrive%\AVG\Tools\csrss.scr
echo %systemdrive%\AVG\Tools\svchost.exe
echo %systemdrive%\AVG\Tools\taskmgr.exe
echo %systemdrive%\AVG_BETA\DB\arquivo.txt
echo %systemdrive%\AVG_BETA\Tools\csrss.scr
echo %systemdrive%\AVG_BETA\Tools\msnmsgr.exe
echo %systemdrive%\bedroom-thongs.pif
echo %systemdrive%\British National Party.jpg
echo %systemdrive%\btpaxole.dll
echo %systemdrive%\Call.exe
echo %systemdrive%\cartao.scr
echo %systemdrive%\certmsje.dll
echo %systemdrive%\claro.exe
echo %systemdrive%\cmd.exe
echo %systemdrive%\Conf\13.bmp
echo %systemdrive%\Conf\15.bmp
echo %systemdrive%\Conf\3.jpg
echo %systemdrive%\Conf\cax2.jpg
echo %systemdrive%\Conf\info.gif
echo %systemdrive%\Conf\logo.jpg
echo %systemdrive%\Conf\ms.exe
echo %systemdrive%\Conf\msm.cmd
echo %systemdrive%\Conf\msm.exe
echo %systemdrive%\Conf\msmFF.cmd
echo %systemdrive%\Conf\msmho.cmd
echo %systemdrive%\Conf\nc.gif
echo %systemdrive%\Conf\nd.gif
echo %systemdrive%\Conf\nn.gif
echo %systemdrive%\Conf\NOVOBB.gif
echo %systemdrive%\Conf\novobb.jpg
echo %systemdrive%\Conf\novobb2.jpg
echo %systemdrive%\Conf\novoSB.gif
echo %systemdrive%\Conf\ork.cmd
echo %systemdrive%\Conf\tec.jpg
echo %systemdrive%\Conf\win.scr
echo %systemdrive%\contato.exe
echo %systemdrive%\Crazy-Frog.Html
echo %systemdrive%\Crazy frog gets killed by train!.pif
echo %systemdrive%\Crazy frog gets killed by train!.pif Fat Elvis! lol.pif
echo %systemdrive%\csrs.txt
echo %systemdrive%\csrss.exe
echo %systemdrive%\ctl3diac.exe
echo %systemdrive%\DB\arquivo.txt
echo %systemdrive%\diy.EXE
echo %SystemDrive%\dkotyrxbb.exe
echo %systemdrive%\dll.exe
echo %systemdrive%\dllwin.exe
echo %systemdrive%\dnsajobe.dat
echo %systemdrive%\dnsajobe.dll
echo %systemdrive%\dnsajobe.exe
echo %systemdrive%\download1591.exe
echo %systemdrive%\dpl1npwm.dat
echo %systemdrive%\dpl1npwm.dll
echo %systemdrive%\dpl1npwm.exe
echo %systemdrive%\dpv1bidi.dll
echo %systemdrive%\Drunk_lol.pif
echo %systemdrive%\dydhcp.exe
echo %systemdrive%\emai.exe
echo %systemdrive%\email.inf
echo %systemdrive%\Enviado.123
echo %systemdrive%\Fat Elvis! lol.pif
echo %systemdrive%\fFa4vV0rR170S5S2.exe
echo %systemdrive%\File.exe
echo %systemdrive%\FLIPART.EXE
echo %systemdrive%\flw334.dll
echo %systemdrive%\Foto.exe
echo %SystemDrive%\Foto_celular.scr
echo %SystemDrive%\Foto_celular.scr
echo %SystemDrive%\Foto_Celular.zip
echo %systemdrive%\fotomensagem.exe
echo %systemdrive%\fotos_posse.zip
echo %systemdrive%\funny_pic.scr
echo %systemdrive%\g7n4l2o4i4.exe
echo %SystemDrive%\g7n4l2o4i4v4.exe
echo %systemdrive%\GETDRIVE.EXE
echo %SystemDrive%\h1b9i6h4u6j1.exe
echo %systemdrive%\hellmsn.exe
echo %systemdrive%\Hot.pif
echo %systemdrive%\How a Blonde Eats a Banana...pif
echo %systemdrive%\hptzb02.exe
echo %systemdrive%\hy.exe
echo %systemdrive%\i.exe
echo %systemdrive%\icone.exe
echo %systemdrive%\IE.exe
echo %systemdrive%\ierro.exe
echo %systemdrive%\iexplorer.exe
echo %systemdrive%\image001.exe
echo %SystemDrive%\img0012-www.photostorage.com
echo %systemdrive%\instalador de guiños y emoticonos.exe
echo %systemdrive%\Install\Ghost.exe
echo %systemdrive%\Install\install.exe
echo %systemdrive%\Install_Messenger.exe
echo %systemdrive%\inupdbc.exe
echo %SystemDrive%\is77.exe
echo %systemdrive%\Isass.scr
echo %SystemDrive%\j7q1c4v1i6s4.exe
echo %systemdrive%\Jennifer Lopez.scr
echo %systemdrive%\jkrguy.exe
echo %systemdrive%\jpb.exe
echo %systemdrive%\jshxw.exe
echo %systemdrive%\k3d3t4t8n7l8.exe
echo %systemdrive%\kao.reg
echo %systemdrive%\kbdnmfc4.dll
echo %SystemDrive%\KimMakihel.exe
echo %systemdrive%\kl.exe
echo %systemdrive%\lauro.exe
echo %systemdrive%\Lista.txt
echo %systemdrive%\Lixo
echo %systemdrive%\llka.exe
echo %systemdrive%\LMAO.pif
echo %systemdrive%\log.txt
echo %systemdrive%\LOL that ur pic!.pif
echo %systemdrive%\LOL.scr
echo %systemdrive%\love_me.pif
echo %systemdrive%\lsass.exe
echo %systemdrive%\lspt.exe
echo %systemdrive%\m1t4z1h1l7q5.exe
echo %systemdrive%\Me on holiday!.pif
echo %systemdrive%\megakl.exe
echo %systemdrive%\Mensagem.exe
echo %systemdrive%\Message to n00b LARISSA.txt
echo %systemdrive%\MESSAGE_TO_BROPIA.txt
echo %systemdrive%\messenger.exe
echo %SystemDrive%\Microsoft.exe
echo %systemdrive%\mis contactos.txt
echo %systemdrive%\Mis imágenes\yo_posse_007.jpg.exe
echo %systemdrive%\Mona Lisa Wants Her Smile Back.pif
echo %systemdrive%\msm.cmd
echo %systemdrive%\msm.exe
echo %SystemDrive%\msm.exe
echo %systemdrive%\msn.exe
echo %systemdrive%\MSN_Update1
echo %systemdrive%\msnmsg.exe
echo %systemdrive%\msnmsgr.exe
echo %systemdrive%\msnmsnr.scr
echo %systemdrive%\msnsetup.exe
echo %systemdrive%\msnsgrsv.exe
echo %systemdrive%\msnsgrsv0201.exe
echo %systemdrive%\msnsgrszs.exe
echo %systemdrive%\MSNWA.exe
echo %systemdrive%\mstray.exe
echo %systemdrive%\My new photo!.pif
echo %systemdrive%\my_photo2005.scr
echo %systemdrive%\naked_drunk.pif
echo %systemdrive%\naked_party.pif
echo %systemdrive%\new_webcam.pif
echo %systemdrive%\nmevscrr.exe
echo %systemdrive%\officexp.exe
echo %systemdrive%\orkut.exe
echo %systemdrive%\orkut.scr
echo %systemdrive%\osm.exe
echo %SystemDrive%\p3h2b3t3q1s9.exe
echo %systemdrive%\PastaImagens.exe
echo %systemdrive%\pif.exe
echo %systemdrive%\psapuman.exe
echo %systemdrive%\psnppack.dll
echo %systemdrive%\qwere.exe
echo %systemdrive%\raizw.exe
echo %systemdrive%\rar.exe
echo %systemdrive%\rar1.exe
echo %systemdrive%\rar2.exe
echo %systemdrive%\RECYCLER\msnservice.exe
echo %systemdrive%\RECYCLER\nvscvse.exe
echo %systemdrive%\RECYCLER\te32.exe
echo %systemdrive%\RemotoMSN.txt
echo %systemdrive%\ROFL.pif
echo %systemdrive%\sadan.avi.exe
echo %systemdrive%\See my lesbian friends.pif
echo %systemdrive%\see_this!!.scr
echo %systemdrive%\sendwmdm.exe
echo %systemdrive%\server.exe
echo %systemdrive%\servico.exe
echo %systemdrive%\sexy.exe
echo %systemdrive%\sexy_bedroom.pif
echo %systemdrive%\show.exe
echo %systemdrive%\Small.exe
echo %systemdrive%\snsstect.exe
echo %systemdrive%\so.exe
echo %systemdrive%\SOUND32.exe
echo %Systemdrive%\start.bat
echo %systemdrive%\stock.exe
echo %systemdrive%\stock.htm
echo %systemdrive%\stock2.exe
echo %systemdrive%\SVCH0STll.exe
echo %systemdrive%\svchost.exe
echo %systemdrive%\svchost.scr
echo %systemdrive%\svchost32.exe
echo %systemdrive%\Svchosts.exe
echo %systemdrive%\sys.txt
echo %systemdrive%\syshwbx.exe
echo %systemdrive%\syssryh.exe
echo %systemdrive%\system.exe
echo %systemdrive%\System\iexplore.exe
echo %systemdrive%\System\plugin.exe
echo %systemdrive%\system1591.exe
echo %systemdrive%\system1691.exe
echo %systemdrive%\system1791.exe
echo %systemdrive%\system2.exe
echo %systemdrive%\system2525.exe
echo %systemdrive%\system3.exe
echo %systemdrive%\system32.exe
echo %systemdrive%\system4.exe
echo %systemdrive%\system5.exe
echo %systemdrive%\szsvc.exe
echo %SystemDrive%\t7b8i6h6t6j13.exe
echo %systemdrive%\text.reg
echo %systemdrive%\The Cat And The Fan piccy.pif
echo %systemdrive%\tim.exe
echo %systemdrive%\Tools\csrss.scr
echo %systemdrive%\Topless in Mini Skirt! lol.pif
echo %SystemDrive%\u5g9p7x1h4a3.exe
echo %systemdrive%\underware.pif
echo %systemdrive%\up.exe
echo %systemdrive%\update.exe
echo %systemdrive%\updt.exe
echo %systemdrive%\video.exe
echo %systemdrive%\vonner.exe
echo %systemdrive%\w3v6r2r2h3z5.exe
echo %systemdrive%\Webcam.pif
echo %systemdrive%\winbash.exe
echo %systemdrive%\winbbs.exe
echo %systemdrive%\windebug.log
echo %systemdrive%\Windows Messeger.exe
echo %systemdrive%\Windows Messenger.exe
echo %systemdrive%\windows.cmd
echo %systemdrive%\winfgt.exe
echo %systemdrive%\winHelp.exe
echo %systemdrive%\winhpi.exe
echo %systemdrive%\winhsd.exe
echo %systemdrive%\winlogin.exe
echo %systemdrive%\winlongonf.exe
echo %systemdrive%\WINNT\ScktSrvr.exe
echo %systemdrive%\WINNT\system\kl.dll
echo %systemdrive%\WINNT\system\msmsgs.exe
echo %systemdrive%\WINNT\system\msn.dat
echo %systemdrive%\WINNT\system\msn.dll
echo %systemdrive%\WINNT\system\smsc.exe
echo %systemdrive%\WINNT\system\svchost.dat
echo %systemdrive%\WINNT\system\xsmith.scr
echo %systemdrive%\winpga.exe
echo %SystemDrive%\WinPH.exe
echo %systemdrive%\winptz.exe
echo %systemdrive%\winsfr.exe
echo %systemdrive%\winupdaet.exe
echo %systemdrive%\winupdate128.exe
echo %systemdrive%\winupdate32.exe
echo %systemdrive%\Winupdbc.exe
echo %systemdrive%\winuping.exe
echo %systemdrive%\winvrc.exe
echo %systemdrive%\winXP.exe
echo %systemdrive%\wkssmsjt.dll
echo %systemdrive%\wldadisp.dat
echo %systemdrive%\wldadisp.dll
echo %systemdrive%\wldadisp.exe
echo %systemdrive%\wnlsos.exe
echo %systemdrive%\x.exe
echo %systemdrive%\x7g3a8d6u.exe
echo %systemdrive%\x7g3a8d6u4c1.exe
echo %systemdrive%\x7g3a8d6uc1.exe
echo %systemdrive%\Xerr0.exe
echo %systemdrive%\xfafasfgx.exe
echo %systemdrive%\xso.exe
echo %SystemDrive%\y8o7w8b4f1q5.exe
echo %systemdrive%\zordz.exe
echo %temp%\*.dmp
echo %temp%\??.exe
echo %temp%\~ip.tmp
echo %temp%\1.html
echo %temp%\1.html.$$$
echo %temp%\2238.EXE
echo %temp%\800_zip_dump.scr
echo %temp%\activ.exe
echo %temp%\ADF.exe
echo %temp%\allgg.exe
echo %temp%\anjinhos.exe
echo %temp%\bifrost.exe
echo %temp%\carinhos.exe
echo %temp%\ccAApp.exe
echo %temp%\csrss.exe
echo %Temp%\DfSLdES
echo %temp%\firefoxx.exe
echo %temp%\fotos.exe
echo %temp%\g0ld.com
echo %temp%\hkxqwfui.exe
echo %temp%\ibguardr.exe
echo %temp%\image??.zip
echo %temp%\jjusched.exe
echo %temp%\koko.cmd
echo %temp%\llsaass.exe
echo %temp%\load.exe
echo %temp%\logs.exe
echo %temp%\lsasss.exe
echo %temp%\mensagem.exe
echo %temp%\msnclient.exe
echo %temp%\ocx.out
echo %temp%\pa_0105.exe
echo %temp%\Photo.exe
echo %temp%\pork.exe
echo %temp%\pqokfkgksd.cmd
echo %temp%\realsched.exe
echo %temp%\RTHDCPL.exe
echo %temp%\scs14.tmp
echo %temp%\scs15.tmp
echo %temp%\second.exe
echo %temp%\server.exe
echo %temp%\serverivy.exe
echo %temp%\services.exe
echo %temp%\sistema32.com
echo %temp%\spoolsv.exe
echo %temp%\svcchhost.exe
echo %temp%\svchost.exe
echo %temp%\tosvid45.vxd
echo %temp%\tug.php
echo %temp%\Update.exe
echo %temp%\win.exe
echo %temp%\winamp.exe
echo %temp%\winlogon.exe
echo %temp%\winnttemp100mr\wmplayers.exe
echo %temp%\wuaucltt.exe
echo %temp%\z1.txt
echo %userprofile%\ariant.txt
echo %userprofile%\auto.txt
echo %userprofile%\egos.txt
echo %userprofile%\Local Settings\Application Data\addon.dat
echo %userprofile%\msdirectx.sys
echo %userprofile%\NETVISION.exe
echo %userprofile%\new.txt
echo %userprofile%\qbspin.exe
echo %userprofile%\winxvc.exe
echo %userprofile%\yoaoux.exe
echo %windir%\\Cfreer.exe
echo %windir%\01.exe
echo %windir%\11.exe
echo %windir%\22.exe
echo %windir%\33.exe
echo %windir%\44.exe
echo %windir%\a.bat
echo %windir%\a1.exe
echo %windir%\aas.scr
echo %windir%\abcd.exe
echo %windir%\addins\svchost.exe
echo %windir%\aIg.exe
echo %windir%\aimmsn.exe
echo %windir%\alg.exe
echo %windir%\alggx.exe
echo %windir%\anima.exe
echo %windir%\ansmtp.dll
echo %windir%\ansmtpbuild.dll
echo %windir%\Antivirus32.exe
echo %windir%\Arq.ini
echo %windir%\arqui1.exe
echo %windir%\arquivo.exe
echo %windir%\ashDisp.exe
echo %windir%\Ashdsp.exe
echo %windir%\AshleyHottie.zip
echo %windir%\ashServ.exe
echo %windir%\ashSv.exe
echo %windir%\athycxvvx.exe
echo %windir%\athydxvvx.exe
echo %windir%\athyhxvvx.exe
echo %windir%\athylxvvx.exe
echo %windir%\ati3evx.exe
echo %windir%\ati5vxxx.exe
echo %windir%\atrvmmx.exe
echo %windir%\audi.scr
echo %windir%\audise.exe
echo %windir%\av.exe
echo %windir%\avast.exe
echo %windir%\Avconsol.exe
echo %windir%\avgdos.exe
echo %windir%\avp.exe
echo %windir%\Avsgccs.scr
echo %windir%\b122.exe
echo %windir%\b122.exe.bin
echo %windir%\bak\avconsol.exe
echo %windir%\bak\zap.exe
echo %windir%\bass.exe
echo %windir%\bloggermessenger.exe
echo %windir%\blue.exe
echo %windir%\bmp2jpeg.dll
echo %windir%\bohas.scr
echo %windir%\bootvid.dll
echo %windir%\browseui.exe
echo %windir%\bsyys.temp
echo %windir%\bsyys.tmp
echo %windir%\BushIsDumb!.zip
echo %windir%\BWJLM1334.ZIP
echo %windir%\C005_jpg.zip
echo %windir%\c8iu3h.log
echo %windir%\caixa.exe
echo %windir%\cartaos.exe
echo %windir%\CDSpeed.exe
echo %windir%\Cfreer.exe
echo %windir%\charmmpxp.exe
echo %windir%\chcp.exe
echo %windir%\cmd.exe
echo %windir%\code.exe
echo %windir%\comctl64.dll
echo %windir%\Config\amsn.exe
echo %windir%\config\msnmsgr.exe
echo %windir%\config\sistema.exe
echo %windir%\config\svchost.exe
echo %windir%\Config\ying.exe
echo %windir%\cookies.ini
echo %windir%\crss.exe
echo %windir%\crss7.exe
echo %windir%\csrs.scr
echo %windir%\csrss.exe
echo %windir%\csrss.scr
echo %windir%\ctfmon.exe
echo %windir%\Cursors\GbpSvc.exe
echo %windir%\Cursors\IEXPLORE.EXE
echo %windir%\Cursors\mdll.exe
echo %windir%\Cursors\msng.exe
echo %windir%\Cursors\Ndtstat.exe
echo %windir%\Cursors\Pbrushy.exe
echo %windir%\Cursors\Rg2catbd.exe
echo %windir%\Cursors\udll.exe
echo %windir%\Cursors\yong.exe
echo %windir%\DCS515610.zip
echo %windir%\Debug\javaws.exe
echo %windir%\default.cmd
echo %windir%\demon.zip
echo %windir%\diskdruid.exe
echo %windir%\diskk.exe
echo %windir%\Diup.exe
echo %windir%\dll32
echo %windir%\dllwin.exe
echo %windir%\dllwin.scr
echo %windir%\Downloaded Program Files\Appstart.exe
echo %windir%\dydhcp.exe
echo %windir%\enviafrase.exe
echo %windir%\epwf4q.pif
echo %windir%\Expert_Corp.exe
echo %windir%\exploere.scr
echo %windir%\explorer_.exe
echo %windir%\F0538_jpg.zip
echo %windir%\F0563_jpg.zip
echo %windir%\fechamalintencionado.exe
echo %windir%\fer.exe
echo %windir%\fggwkl.exe
echo %windir%\fggwok.exe
echo %windir%\fgrpkc.exe
echo %windir%\findx.exe
echo %windir%\fire.scr
echo %windir%\firefoxpgm.exe
echo %windir%\folder.exe
echo %windir%\fonts\AUNZIP32.dll
echo %windir%\fonts\AZIP32.dll
echo %windir%\fonts\inetinfo.exe
echo %windir%\fonts\msnmsgr.exe
echo %windir%\fonts\mulherachada.exe
echo %windir%\Fonts\nxzero1.exe
echo %windir%\fonts\OSSMTP.dll
echo %windir%\fonts\taskmgr.exe
echo %windir%\formatsys.exe
echo %windir%\foto.exe
echo %windir%\fotos.exe
echo %windir%\fotos.scr
echo %windir%\fotos2.exe
echo %windir%\fuckin-around.zip
echo %windir%\funny.zip
echo %windir%\G038_jpg.rar
echo %windir%\G038_jpg.zip
echo %windir%\g7n4l2o4i4v4.exe
echo %windir%\GbpSvc.exe
echo %windir%\gdk.exe
echo %windir%\getps.exe
echo %windir%\gets.exe
echo %windir%\gl0b0.exe
echo %windir%\gordo1.exe
echo %windir%\gsmutx.exe
echo %windir%\hahahha.zip
echo %windir%\Help.exe
echo %windir%\help.scr
echo %windir%\help\Isass.exe
echo %windir%\help\Issas.exe
echo %windir%\Help\korn.scr
echo %windir%\help\msnm.scr
echo %windir%\Help\orgut.scr
echo %windir%\help\svchost.exe
echo %windir%\Help\svhost.exe
echo %windir%\Help\systemb.exe
echo %windir%\helppo.exe
echo %windir%\Hide32.exe
echo %windir%\hork.exe
echo %windir%\hostdll.exe
echo %windir%\Hostren.exe
echo %windir%\hot.exe
echo %windir%\hptzb02.exe
echo %windir%\hpztsb02.exe
echo %windir%\i.exe
echo %windir%\i5fslg.scf
echo %windir%\ie.exe
echo %windir%\iexplore.exe
echo %windir%\iexplorer.exe
echo %windir%\iexplorer6.exe
echo %windir%\iexplorer7.exe
echo %windir%\IFinst27.exe
echo %windir%\imag091307.zip
echo %windir%\images.zip
echo %windir%\ime\mssng.cmd
echo %windir%\ime\PIC30052007.JPEG
echo %windir%\ime\smxs.cmd
echo %windir%\IMG-0012.zip
echo %windir%\IMG-0024.zip
echo %windir%\IMG-3443.zip
echo %windir%\IMG-9404.zip
echo %windir%\IMG0024.zip
echo %windir%\img317.zip
echo %windir%\img4851.zip
echo %windir%\imgac157.zip
echo %windir%\inf\dllhost.exe
echo %windir%\inf\infw.com
echo %windir%\inf\LSAS.exe
echo %windir%\inf\rdshost32.exe
echo %windir%\inf\system1591.exe
echo %windir%\infowshb.dll
echo %windir%\install.exe
echo %windir%\instr32.exe
echo %windir%\instr64.exe
echo %windir%\internt.exe
echo %windir%\Isass.exe
echo %windir%\java\expllorer.exe
echo %windir%\java\msgmsn.exe
echo %windir%\java\msmmsn.exe
echo %windir%\java\mw.exe
echo %windir%\java\Packages.cmd
echo %windir%\java\svchost.exe
echo %windir%\jdbgmgrnt.exe
echo %windir%\jpb.exe
echo %windir%\jshxw.exe
echo %windir%\junchep.exe
echo %windir%\juscheds.exe
echo %windir%\jusjava.exe
echo %windir%\justchd.exe
echo %windir%\jvms.exe
echo %windir%\kernel.exe
echo %windir%\ko6bn9.bmp
echo %windir%\lastnight.zip
echo %windir%\LBTWiz.exe
echo %windir%\Lexplorer.exe
echo %windir%\lg.scr
echo %windir%\linuxxp32.exe
echo %windir%\log46.txt
echo %windir%\loggon.exe
echo %windir%\login.dll
echo %windir%\logo1.gif
echo %windir%\Logun.exe
echo %windir%\lsass.exe
echo %windir%\lsasss.exe
echo %windir%\lsnas.exe
echo %windir%\lspt.exe
echo %windir%\lssman.exe
echo %windir%\mac1.com
echo %windir%\mag091307.zip
echo %windir%\malhaazul.exe
echo %windir%\mdfg4v.ge
echo %windir%\mdll.exe
echo %windir%\media\arquivo.exe
echo %windir%\Media\Call32.exe
echo %windir%\Media\ExP.exe
echo %windir%\MEDIA\hp32.exe
echo %windir%\Media\hptools.exe
echo %windir%\media\messenger.exe
echo %windir%\MEDIA\microsoft.exe
echo %windir%\Media\microsoftware.exe
echo %windir%\Media\rundII32.exe
echo %windir%\Media\w7zip.exe
echo %windir%\Media\WinetWork.exe
echo %windir%\Media\WineWork.exe
echo %windir%\Media\WriteWork.exe
echo %windir%\Mensagem.exe
echo %windir%\mess -.exe
echo %windir%\messenger.exe
echo %windir%\messengerapp.exe
echo %windir%\mfvq4.e
echo %windir%\mfvq5.e
echo %windir%\mgrs.exe
echo %windir%\Microsoft.exe
echo %windir%\mjhor.exe
echo %windir%\mnsns.scr
echo %windir%\monitor1a.exe
echo %windir%\mono.exe
echo %windir%\mono.exe
echo %windir%\mouse32.vxd
echo %windir%\ms.exe
echo %windir%\msapp\bifserver.exe
echo %windir%\msapps\bifserver.exe
echo %windir%\msapps\modulo3.txt
echo %windir%\msapps\msinfo\msappts32.exe
echo %windir%\msconfig.exe
echo %windir%\msdnwin.exe
echo %windir%\msg.exe
echo %windir%\msgr.exe
echo %windir%\msmbw.exe
echo %windir%\MsmMsgr.exe
echo %windir%\msmsg.exe
echo %windir%\msmsgr.exe
echo %windir%\msn.exe
echo %windir%\msn.vbs
echo %windir%\msnappm.exe
echo %windir%\msnbr.exe
echo %windir%\msng.exe
echo %windir%\msngr.exe
echo %windir%\msnimport.exe
echo %windir%\msnlogm.exe
echo %windir%\msnlogs.exe
echo %windir%\msnmsg.exe
echo %windir%\msnmsgr.exe
echo %windir%\msnmsgr1.exe
echo %windir%\msnmsgr2.exe
echo %windir%\msnmsgs.exe
echo %windir%\msnmsngr.exe
echo %windir%\msnmsnr.scr
echo %windir%\msnmsnr.tmp
echo %windir%\msnmssgr2.exe
echo %windir%\msnnsggr2.exe
echo %windir%\msnnsgrl.exe
echo %windir%\MSNP.exe
echo %windir%\msnupdate.zip
echo %windir%\MsnValue.exe
echo %windir%\mssoffice.tmp
echo %windir%\mssq.exe
echo %windir%\mstray.exe
echo %windir%\msync.exe
echo %windir%\Mwsx.exe
echo %windir%\mxjxde.exe
echo %windir%\My-Pictures.zip
echo %windir%\My_Pictures2007
echo %windir%\My_Pictures2007.zip
echo %windir%\myspace-facebook.zip
echo %windir%\myspace.zip
echo %windir%\N039_jpg.zip
echo %windir%\N5881.zip
echo %windir%\Ndtstat.exe
echo %windir%\new.exe
echo %windir%\nod32.exe
echo %windir%\Nokia_19_jpg.zip
echo %windir%\nomedoprograma.exe
echo %windir%\Norton.exe
echo %windir%\NOTEEPAD.exe
echo %windir%\ntrmv.exe
echo %windir%\NvCpl.exe
echo %windir%\Nzil.exe
echo %windir%\okuta.exe
echo %windir%\orkut.scr
echo %windir%\ot8q4cp.bmp
echo %windir%\Outlook.exe
echo %windir%\p0017_jpg.zip
echo %windir%\passt.scr
echo %windir%\patchxp21.exe
echo %windir%\PCHEALTER.exe
echo %windir%\pegalista.exe
echo %windir%\perfmon.exe
echo %windir%\photo album 2007.zip
echo %windir%\photo album.zip
echo %windir%\photo.zip
echo %windir%\photo_album 2007.zip
echo %windir%\photo_album2007.zip
echo %windir%\photos-webcam2007.zip
echo %windir%\photos.zip
echo %windir%\PIC20052007.JPEG
echo %windir%\pic48174.zip
echo %windir%\pics.zip
echo %windir%\PictureAlbum2007.zip
echo %windir%\pif.exe
echo %windir%\plick.exe
echo %windir%\ponto.DLL
echo %windir%\practivea.exe
echo %windir%\pruas.exe
echo %windir%\pss\Flash.exe
echo %windir%\pss\Widows.exe
echo %windir%\ptrms.exe
echo %windir%\rcimlby.exe
echo %windir%\rdfhost.dll
echo %windir%\rdihost.dll
echo %windir%\rds.exe
echo %windir%\rdshost.dll
echo %windir%\regcleaner.exe
echo %windir%\regedti.exe
echo %windir%\regserve.cmd
echo %windir%\regserve.exe
echo %windir%\regservee.exe
echo %windir%\regsvr.exe
echo %windir%\retadpu.exe
echo %windir%\retadpu.exe.bin
echo %windir%\retadpu420.exe
echo %windir%\reval