Spyware secure fiable?

(que vaux spyware secure) ???

salut

euh premiere fois que cela m'arrive j'ai 1 alerte de spyware secure (je ne sais pas quoi penser de lui!!) me disant que j'ai 1 rootkit /adware win 32 .buqkebuhuo, sans parles des cookies malgres que j'utilise Ccleaner regulierement euhhhh je prends a la legere ou pas spyware secure? perso connait pas

bizoux
Configuration: Windows XP
Firefox 2.0.0.4

33 réponses

Résumé de la discussion

Le sujet porte sur Spyware Secure et sur la question de savoir s'il s'agit d'un avertissement légitime ou d'une arnaque affichant un rootkit et de l'adware. Une alerte prétendant un rootkit/adware et des cookies apparemment compromis est décrite, suscitant le doute sur la fiabilité de Spyware Secure dans ce contexte actuel. Des réponses proposent de supprimer le programme en le qualifiant d'Electronic Group, tandis qu'une autre minimise l'alarme en évoquant une accumulation de lignes de code, rendant l'ensemble ambigu. Un extrait long de script technique est partagé, illustrant des méthodes potentiellement associées à des outils de nettoyage ou à des manipulations système avancées complexes.

Bobot (l’IA à votre service)
  1. Contributeur sécurité
    Bonsoir raleuboleu,

    spyware secure est une saleté genre drivecleaner et consor!

    ton pc a du recevoir la visite d'une bébéte!

    a+
    1. salut

      ben oui faut croire car je ne l'ai pas installé en plus

      merci ^^

      bizoux
      1. Contributeur sécurité
        re,

        Télécharge Blacklight (de F-Secure), sauvegarde le sur ton Bureau:

        https://europe.f-secure.com/exclude/blacklight/index.shtml

        Double-clique blbeta.exe et accepte la licence ;clique Scan puis Next

        Tu verras une liste de fichiers détectés apparaître. Tu verras également un rapport, sur ton Bureau, nommé fsbl.xxxxxxx.log (les xxxxxxx sont des chiffres).

        Copie et colle le contenu de ce rapport dans ta prochaine réponse!

        a+
        1. re alu

          voili voualou

          05/31/07 21:16:55 [Info]: BlackLight Engine 1.0.61 initialized
          05/31/07 21:16:55 [Info]: OS: 5.1 build 2600 (Service Pack 2)
          05/31/07 21:16:57 [Note]: 7019 4
          05/31/07 21:16:57 [Note]: 7005 0
          05/31/07 21:17:05 [Note]: 7006 0
          05/31/07 21:17:05 [Note]: 7011 412
          05/31/07 21:17:06 [Note]: 7026 0
          05/31/07 21:17:06 [Note]: 7026 0
          05/31/07 21:17:06 [Note]: 7024 3
          05/31/07 21:17:06 [Info]: Hidden process: C:\windows\system32\buqkebuhuo.exe
          05/31/07 21:17:09 [Note]: FSRAW library version 1.7.1021
          05/31/07 21:19:27 [Info]: Hidden file: c:\WINDOWS\system32\buqkebuhuo.dat
          05/31/07 21:19:27 [Note]: 10002 1
          05/31/07 21:19:27 [Info]: Hidden file: C:\windows\system32\buqkebuhuo.exe
          05/31/07 21:19:27 [Note]: 10002 1
          05/31/07 21:19:27 [Info]: Hidden file: c:\WINDOWS\system32\buqkebuhuo_nav.dat
          05/31/07 21:19:27 [Note]: 10002 1
          05/31/07 21:19:27 [Info]: Hidden file: c:\WINDOWS\system32\buqkebuhuo_navps.dat
          05/31/07 21:19:27 [Note]: 10002 1
          05/31/07 21:37:26 [Note]: 7007 0

          bizoux
          1. re

            pourtant malgré il s'est incrustré looool l'ai viré via ajou/sup de proglame !! mouai bizaroide

            je l'avoue

            bizoux
            1. Contributeur sécurité
              re,

              la belle bébéte que voilà!

              1) Télécharge Brute Force Uninstaller (de Merijn):

              http://www.merijn.org/files/bfu.zip

              Créé un nouveau dossier directement sur le C:\ et nomme-le BFU. Décompresse le fichier téléchargé dans ce nouveau dossier (C:\BFU)

              2) Ouvre le Bloc-note et copie-colle les lignes en gras ci-dessous

              RegDeleteKey HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\buqkebuhuo
              RegDelValue HKLM\Software\Microsoft\Windows\CurrentVersion\Run|buqkebuhuo

              FileDelete %SYSDIR%\buqkebuhuo_navps.dat
              FileDelete %SYSDIR%\buqkebuhuo_nav.dat
              FileDelete %SYSDIR%\buqkebuhuo.dat
              FileDelete %SYSDIR%\buqkebuhuo.exe

              SystemEmptyTempFolder
              SystemEmptyRecycleBin

              FileDelete C:\egd.txt
              SystemRun regedit|/e C:\egd.txt "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run"|0


              Sauvegarde dans le dossier créé (C:\BFU) (Nom du fichier : "Fixme.bfu " -sans inclure les guillemets- ; Type : Tous les fichiers).

              Redémarre en mode Sans Échec : au redémarrage, tapote immédiatement la touche F8; tu verras un écran avec choix de démarrages apparaître. Utilisant les flèches du clavier, choisis "Mode Sans Échec" et valide avec "Entrée". Choisis ton compte usuel, et non Administrateur.

              Démarre le "Brute Force Uninstaller" en double-cliquant BFU.exe (du dossier C:\BFU)

              - Clique sur le petit dossier jaune, à la droite de la boîte Scriptline to execute, et double-clique sur :

              Fixme.bfu

              - Dans la boîte "Scriptline to execute", tu devrais maintenant voir ceci : C:\BFU\Fixme.bfu

              Clique sur Execute et laisse-le faire son travail.

              Attendre que Complete script execution apparaîsse et clique sur OK.
              Clique Exit pour fermer le programme BFU.

              Redémarre normalement.

              Poste le rapport situé ici
              C:\egd.txt avec un nouveau HijackThis.

              a+
              1. remoi toujors, bé veux pas en mode ss néchec pi depuis pourtant que j(ai mis fixefox je n'avais pas de pubs alala helpeuse de cp demande aide classe cr2 loool

                bizoux
                1. Contributeur sécurité
                  re,

                  si tu n'as pas accès au mode sans échec!

                  utilise ce script

                  ProcessKill \buqkebuhuo|1
                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\buqkebuhuo
                  RegDelValue HKLM\Software\Microsoft\Windows\CurrentVersion\Run|buqkebuhuo

                  FileDelete %SYSDIR%\buqkebuhuo_navps.dat
                  FileDelete %SYSDIR%\buqkebuhuo_nav.dat
                  FileDelete %SYSDIR%\buqkebuhuo.dat
                  FileDelete %SYSDIR%\buqkebuhuo.exe

                  SystemEmptyTempFolder
                  SystemEmptyRecycleBin

                  FileDelete C:\egd.txt
                  SystemRun regedit|/e C:\egd.txt "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run"|0
                  1. re moi

                    avast s'affole llllooool grrrr j'ai pas n'enristré drivecliner euh chu ipas conne a ce pint looool^^

                    ben ca me soul avast op tiens win32.adware-gen[adw] mais vazi kil s'acharne looool

                    bizoux
                    1. Contributeur sécurité
                      c'est normal qu'avast hurle!

                      laisse faire!

                      et suis la procédure!

                      a+
                      1. Contributeur sécurité
                        re,

                        pareil qu'avant

                        Créé un nouveau dossier directement sur le C:\ et nomme-le BFU. Décompresse le fichier téléchargé dans ce nouveau dossier (C:\BFU)

                        Ouvre le Bloc-note et copie-colle les lignes en gras ci-dessous

                        RegDeleteKey HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\buqkebuhuo
                        RegDelValue HKLM\Software\Microsoft\Windows\CurrentVersion\Run|buqkebuhuo
                        ProcessKill \buqkebuhuo|1
                        FileDelete %SYSDIR%\buqkebuhuo_navps.dat
                        FileDelete %SYSDIR%\buqkebuhuo_nav.dat
                        FileDelete %SYSDIR%\buqkebuhuo.dat
                        FileDelete %SYSDIR%\buqkebuhuo.exe

                        SystemEmptyTempFolder
                        SystemEmptyRecycleBin

                        FileDelete C:\egd.txt
                        SystemRun regedit|/e C:\egd.txt "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run"|0


                        Sauvegarde dans le dossier créé (C:\BFU) (Nom du fichier : "Fixme.bfu " -sans inclure les guillemets- ; Type : Tous les fichiers).

                        Redémarre en mode Sans Échec : au redémarrage, tapote immédiatement la touche F8; tu verras un écran avec choix de démarrages apparaître. Utilisant les flèches du clavier, choisis "Mode Sans Échec" et valide avec "Entrée". Choisis ton compte usuel, et non Administrateur.

                        Démarre le "Brute Force Uninstaller" en double-cliquant BFU.exe (du dossier C:\BFU)

                        - Clique sur le petit dossier jaune, à la droite de la boîte Scriptline to execute, et double-clique sur :

                        Fixme.bfu

                        - Dans la boîte "Scriptline to execute", tu devrais maintenant voir ceci : C:\BFU\Fixme.bfu

                        Clique sur Execute et laisse-le faire son travail.

                        Attendre que Complete script execution apparaîsse et clique sur OK.
                        Clique Exit pour fermer le programme BFU.

                        Redémarre normalement.

                        Poste le rapport situé ici
                        C:\egd.txt avec un nouveau HijackThis.
                        1. re

                          je t'assure j'arrive a rien !! avast me sonne ttes les 30sec (me casse la tete loool) il vts nan eux me faire enregistrer a tout pri drivecleaner si je mets nan opop op avast raaaaaaaaaaaaaaaa c chiant
                          1. Contributeur sécurité
                            re,

                            on va procèder autrement!

                            1/ Télécharge :

                            - Brute Force Uninstaller:

                            http//www.merijn.org/files/bfu.zip

                            et décompresse-le dans un dossier propre à lui (C:\BFU)

                            Fais un clic droit de souris sur ce lien :

                            http://metallica.geekstogo.com/EGDACCESS.bfu

                            et choisis "Enregistrer sous" (dans IE c'est "Enregistrer le lien sous..")
                            afin de télécharger EGDACCESS.bfu, Type "Tous les fichiers". Sauvegarde dans le dossier créé (C:\BFU)

                            - Navipromo.zip http://www.alt-shift-return.org/Info/Fichiers/Navipromo073.zip et décompresse-le sur ton bureau

                            2/ Copie la suite des instructions dans un fichier texte, sur ton bureau. et redémarre en mode sans échec comme indiqué ici https://docs.microsoft.com/en-us/
                            Il faudra choisir ta session habituelle, pas le compte "Administrateur" ou autre.

                            3/ lance le fichier Navipromo.bat qui se trouve dans le dossier Navipromo, sur ton bureau.

                            * Sélectionne l'option "Recherche et suppression automatique". Patiente.
                            S'il trouve quelque chose, tu verras défiler des lignes dans la fenêtre de commande et au bout de quelques instants, il faudra que tu appuies sur une touche pour que le nettoyage soit lancé. Lorsqu'il a terminé, ferme le rapport qui s'est ouvert

                            * Relance l'outil, Sélectionne l'option "Suppression Heuristique", et patiente quelques minutes. Lorsqu'il a terminé, ferme le rapport qui s'est ouvert

                            4/ Démarre le "Brute Force Uninstaller" en double-cliquant sur BFU.exe.
                            Clique sur le petit dossier jaune, à la droite de la boîte "Scriptline to execute", et double-clique sur : EGDACCESS.bfu
                            - Dans la boîte "Scriptline to execute", tu devrais maintenant voir ceci : C:\BFU\EGDACCESS.bfu
                            Clique sur "Execute" et laisse-le faire son travail.
                            Attendre que "Complete script execution" apparaîsse et clique sur OK. Clique exit pour fermer le programme BFU.
                            Recommence encore une fois.

                            5/ Démarrer -> panneau de configuration -> options internet
                            Clique sur l'onglet "Contenu" puis onglet "Certificats" et si tu trouves ceci, en particulier dans "éditeurs approuvés" :

                            electronic-group - egroup - Montorgueil - VIP - "Sunny Day Design Ltd"

                            => Supprime-les tous

                            6/ redémarre normalement et poste le contenu du fichier Navipromo.txt qui se trouve dans Poste de travail > disque C:\

                            a+
                            1. aluuuu

                              pas moyen de passer en mode ss echec mais du tout , souris bloquée et meme avec les fleches cela ne s'ouvre pas

                              raaa m'enerve!!

                              bizz
                              1. Contributeur sécurité
                                Bonsoir,

                                et pour le reste? tu as suivi la procédure!

                                fais la manip en mode normal!

                                a+
                                1. remoi

                                  oula c'est normal cette tonne de lignes loool

                                  # For use with Merijn's Brute Force Uninstaller
                                  # available from http://merijn.org/
                                  #
                                  # Script Name: EGDACCESS.BFU
                                  # This script combines the old EGDACCESS.bfu and P2EClient.BFU
                                  # Author: Pieter Arntz
                                  #
                                  # Thanks to ~Mark and Moe31 for their contributions

                                  ProcessKill \mailskinner.exe|1
                                  ProcessKill %WINDIR%\iedisco.exe|1
                                  ProcessKill \GoAstro.exe|1
                                  ProcessKill \MessengerSkinner.exe|1
                                  ProcessKill \system32mwsrvacc.exe|1
                                  ProcessKill \accinet.exe|1
                                  ProcessKill \prodsrvs.exe|1

                                  ProcessKillIfContainsText %SYSDIR%\*.exe|qeu_ueAyqes_uew_te|0
                                  ProcessKillIfContainsText %SYSDIR%\*.exe|WaXL5_jp0Ml

                                  RegDeleteKey HKCR\egdhtml.egdialhtml
                                  RegDeleteKey HKCR\egdhtml.egdialhtml.1
                                  RegDeleteKey HKCR\egdialobject.egdial
                                  RegDeleteKey HKCR\EGDialObject.EGDial.1
                                  RegDeleteKey HKCR\eghtmldialer.htmldialer
                                  RegDeleteKey HKCR\eghtmldialer.htmldialer.1
                                  RegDeleteKey HKCR\ieaccess2.iedial
                                  RegDeleteKey HKCR\ieaccess2.iedial.1
                                  RegDeleteKey HKCR\P2ECOM.EGP2ECOM
                                  RegDeleteKey HKCR\P2ECOM.EGP2ECOM.1
                                  RegDeleteKey HKCR\EGAUTH.EGEGAUTH
                                  RegDeleteKey HKCR\EGAUTH.EGEGAUTH.1
                                  RegDeleteKey HKCR\EGCOMSERVICE.EGComSvc
                                  RegDeleteKey HKCR\EGCOMSERVICE.EGComSvc.1
                                  RegDeleteKey HKCR\EGCOMSERVICE2.EGComSvc2
                                  RegDeleteKey HKCR\EGCOMSERVICE2.EGComSvc2.1
                                  RegDeleteKey HKCR\EGCOMLIB.EGComLibrary
                                  RegDeleteKey HKCR\EGCOMLIB.EGComLibrary.1
                                  RegDeleteKey HKCR\Webcam2.VideoProducer
                                  RegDeleteKey HKCR\Webcam2.VideoProducer.1

                                  RegDeleteKey HKCR\CLSID\{01BE5BD7-B2DD-48B3-A759-59265A91E787}
                                  RegDeleteKey HKCR\CLSID\{01C17CA5-D863-42ED-B8DD-C3E325A22E4E}
                                  RegDeleteKey HKCR\CLSID\{04CCFF26-7D52-4E42-BF6A-F8ECE0896EB7}
                                  RegDeleteKey HKCR\CLSID\{04F414E9-E352-4BC3-963D-7BFE5A5F31A9}
                                  RegDeleteKey HKCR\CLSID\{0594AF7E-573B-40DF-8165-E47AB2EAEFE8}
                                  RegDeleteKey HKCR\CLSID\{07C9CFC7-DE33-4A0C-9FFB-CDFBA843B157}
                                  RegDeleteKey HKCR\CLSID\{0878F049-D33E-45E0-A157-C36A6683CF25}
                                  RegDeleteKey HKCR\CLSID\{093F9CF8-0DE1-491C-95D5-5EC257BD4CA3}
                                  RegDeleteKey HKCR\CLSID\{0D1011B3-89C8-4F8E-8693-BB970E2E81E0}
                                  RegDeleteKey HKCR\CLSID\{0DA910BC-6919-489E-B584-D9A4AAC7B8DE}
                                  RegDeleteKey HKCR\CLSID\{0E79192A-C52C-4260-920F-639AC2296203}
                                  RegDeleteKey HKCR\CLSID\{11F1D260-129E-4EB7-B37E-57E3D97A3DF1}
                                  RegDeleteKey HKCR\CLSID\{14325268-79E0-4D2A-89A4-FFFC6E22741E}
                                  RegDeleteKey HKCR\CLSID\{1604DF98-D1A5-44FE-844A-98D6FD0518D0}
                                  RegDeleteKey HKCR\CLSID\{17BFC8DA-B4D6-4DB9-AA40-1CD32EDA9845}
                                  RegDeleteKey HKCR\CLSID\{1CD49DC9-FD88-41FA-B892-47E037267D45}
                                  RegDeleteKey HKCR\CLSID\{1CD4E2DC-2DA0-4154-8723-38CB04FB6A58}
                                  RegDeleteKey HKCR\CLSID\{1D0A339E-315D-4DFE-B4EE-DDD494BB31EA}
                                  RegDeleteKey HKCR\CLSID\{1EB17D1C-141D-4D9D-91CB-24D99215851D}
                                  RegDeleteKey HKCR\CLSID\{201B9B37-848F-40BD-90EA-7B8F0AA89D6A}
                                  RegDeleteKey HKCR\CLSID\{201D3DA8-B495-4A3B-BEE8-6D8DDCCC5762}
                                  RegDeleteKey HKCR\CLSID\{26D73573-F1B3-48C9-A989-E6CE071957A1}
                                  RegDeleteKey HKCR\CLSID\{2A3DFC59-8A87-49A1-85D1-42903410911F}
                                  RegDeleteKey HKCR\CLSID\{2ABE804B-4D3A-41BF-A172-304627874B45}
                                  RegDeleteKey HKCR\CLSID\{2AEEAC34-FD74-4142-B891-4B05C0C03C87}
                                  RegDeleteKey HKCR\CLSID\{2F668A6D-2EC7-4E3A-A485-819E210738D6}
                                  RegDeleteKey HKCR\CLSID\{31DDC1FD-CEA3-4837-A6DC-87E67015ADC9}
                                  RegDeleteKey HKCR\CLSID\{321F38B6-7E5F-470E-B58C-927523B7AF92}
                                  RegDeleteKey HKCR\CLSID\{3446598E-00E4-4B5E-99A6-87ECCA8324A2}
                                  RegDeleteKey HKCR\CLSID\{3616F4B5-F6AD-4E67-966A-C218673648A0}
                                  RegDeleteKey HKCR\CLSID\{39EA2F6F-3F50-4F58-9C63-4B3D53B0926E}
                                  RegDeleteKey HKCR\CLSID\{3ABC79F3-E345-43B9-A79F-5D5C7A8EC4DC}
                                  RegDeleteKey HKCR\CLSID\{3CD945A2-E413-4956-B9D8-A67FB6A7CB66}
                                  RegDeleteKey HKCR\CLSID\{3DAD912E-D2B9-4323-B7C9-7F2C5CC0C57B}
                                  RegDeleteKey HKCR\CLSID\{413E282B-C32A-4717-A0F3-4F2E6FE25F83}
                                  RegDeleteKey HKCR\CLSID\{469C7080-8EC8-43A6-AD97-45848113743C}
                                  RegDeleteKey HKCR\CLSID\{486E48B5-ABF2-42BB-A327-2679DF3FB822}
                                  RegDeleteKey HKCR\CLSID\{505098FD-5D61-4BC2-9B82-F969D0E932A2}
                                  RegDeleteKey HKCR\CLSID\{50AD557E-3426-41FD-AFDD-2AF39BB1C387}
                                  RegDeleteKey HKCR\CLSID\{54579C3D-A58D-4623-B5B5-465552BDA45B}
                                  RegDeleteKey HKCR\CLSID\{54C75FB0-6B8B-4278-BF7B-77036F15A69E}
                                  RegDeleteKey HKCR\CLSID\{5F4D3335-3194-4167-85AE-E7325F2695EF}
                                  RegDeleteKey HKCR\CLSID\{5FD9726A-4977-449D-8352-25FDD8A510B5}
                                  RegDeleteKey HKCR\CLSID\{602890BA-07A1-4A93-A89F-6BDDD8BB9BA5}
                                  RegDeleteKey HKCR\CLSID\{624321F1-0581-49D8-99BD-2E952C2DF31B}
                                  RegDeleteKey HKCR\CLSID\{6AA85413-165C-4200-8154-71166077B22E}
                                  RegDeleteKey HKCR\CLSID\{6AA93DF6-6757-4338-9087-F7601DE18402}
                                  RegDeleteKey HKCR\CLSID\{71CBDCD9-0830-4470-A890-35D364DA352C}
                                  RegDeleteKey HKCR\CLSID\{71DA2A4E-ACB3-4065-9E41-8BC42EABE427}
                                  RegDeleteKey HKCR\CLSID\{72241AD0-9B55-4870-9E72-EBA80C0CB1B8}
                                  RegDeleteKey HKCR\CLSID\{7504F0D5-644A-4103-9D02-95488B6CB9A1}
                                  RegDeleteKey HKCR\CLSID\{77EF6DBF-3929-4081-AF2E-178D387E211C}
                                  RegDeleteKey HKCR\CLSID\{78F584DF-BBF5-4296-839C-31DE60914DBC}
                                  RegDeleteKey HKCR\CLSID\{82FC4503-8459-4239-9B85-0617BEAA950A}
                                  RegDeleteKey HKCR\CLSID\{83F0D6AA-CD15-46B5-AA4E-BDB506B4AE53}
                                  RegDeleteKey HKCR\CLSID\{87C1805D-C5AE-4455-AB39-E245BB516136}
                                  RegDeleteKey HKCR\CLSID\{8B3B8135-9DAA-40E7-8941-962795F9C1CB}
                                  RegDeleteKey HKCR\CLSID\{8D8BAF56-B581-4B90-A549-C4AC6B03F1BB}
                                  RegDeleteKey HKCR\CLSID\{94742E3F-D9A1-4780-9A87-2FFA43655DA2}
                                  RegDeleteKey HKCR\CLSID\{95460ABD-946A-46FF-9F56-268718323EEE}
                                  RegDeleteKey HKCR\CLSID\{9D6ADDBF-8227-4D36-AE46-116AFBDAFCA0}
                                  RegDeleteKey HKCR\CLSID\{9EB4F647-FE4A-42F9-9F5C-B8FB28DD02F9}
                                  RegDeleteKey HKCR\CLSID\{A02780C3-7F77-4E28-855B-28890F3CF37A}
                                  RegDeleteKey HKCR\CLSID\{A1C392A2-B274-46DB-89BE-1FBD476B9C93}
                                  RegDeleteKey HKCR\CLSID\{AA59202C-5E41-48FC-AF7D-324F5FD6A9F1}
                                  RegDeleteKey HKCR\CLSID\{AF7410C1-FBA3-415E-800A-4110CED40536}
                                  RegDeleteKey HKCR\CLSID\{AFCF364F-F730-4B1E-B2D5-80F9172FBC44}
                                  RegDeleteKey HKCR\CLSID\{B2B0AEDF-7CDF-4792-BB67-7654AD1E1B13}
                                  RegDeleteKey HKCR\CLSID\{B3A5878E-5B4C-4D12-9156-4D7FD8D0AF6C}
                                  RegDeleteKey HKCR\CLSID\{B843DA96-2B2D-447E-90AB-B92929AA11AF}
                                  RegDeleteKey HKCR\CLSID\{BA14D944-0D8C-4F16-A950-6E53EEBB558F}
                                  RegDeleteKey HKCR\CLSID\{BA749BC1-143E-430D-B1DA-1D2AF67A3658}
                                  RegDeleteKey HKCR\CLSID\{BD3653E4-884B-43C4-970B-670802501B7F}
                                  RegDeleteKey HKCR\CLSID\{BE5A7132-329F-4319-B781-2A83BFE51534}
                                  RegDeleteKey HKCR\CLSID\{BFC9677B-8006-4336-9D49-2C797AEFCB9E}
                                  RegDeleteKey HKCR\CLSID\{C2481ED1-9896-4D49-AE90-69858DFDE446}
                                  RegDeleteKey HKCR\CLSID\{C660C559-903D-41A5-991B-ED7959096C35}
                                  RegDeleteKey HKCR\CLSID\{C6760A07-A574-4705-B113-7856315922C3}
                                  RegDeleteKey HKCR\CLSID\{C80B7FF6-CE60-4079-935E-520C045C30A6}
                                  RegDeleteKey HKCR\CLSID\{C9269872-E3D6-4811-8E5E-835CA8CBD0B3}
                                  RegDeleteKey HKCR\CLSID\{CB5D474E-A510-40A4-B5A4-838933BCBA64}
                                  RegDeleteKey HKCR\CLSID\{CDD8BADE-B4C8-4E97-84B4-1DC9ABAD3EF3}
                                  RegDeleteKey HKCR\CLSID\{CEFB7B49-9652-464F-8AFD-A577C0500F39}
                                  RegDeleteKey HKCR\CLSID\{CF5F84EB-D3FC-4F98-BE3B-F5B56B962CED}
                                  RegDeleteKey HKCR\CLSID\{D24A1963-9951-4153-A340-6648759EB77D}
                                  RegDeleteKey HKCR\CLSID\{D7B59209-0ED9-4986-BD4A-527BE836C6B2}
                                  RegDeleteKey HKCR\CLSID\{D8B94E9A-A34B-4253-BF48-C7CB7F2CFDB0}
                                  RegDeleteKey HKCR\CLSID\{E114CD5B-17CE-4807-890E-7B1EDF9F2E5E}
                                  RegDeleteKey HKCR\CLSID\{E19AB99F-AEC4-4B40-A5CA-F69D22522D77}
                                  RegDeleteKey HKCR\CLSID\{E1D20694-74D9-472D-AF03-08C26173A67F}
                                  RegDeleteKey HKCR\CLSID\{E24E8472-89B7-479F-8AD8-BBD7206A6A02}
                                  RegDeleteKey HKCR\CLSID\{E3943A24-2F83-4505-9AE5-F705E81B50CB}
                                  RegDeleteKey HKCR\CLSID\{E49A9FCB-FAA9-4C1F-A1C1-54920DA2CCA4}
                                  RegDeleteKey HKCR\CLSID\{E7AE1661-EBEB-492B-AE0D-860DF24174C6}
                                  RegDeleteKey HKCR\CLSID\{EC4AFBF3-4540-4306-AF10-4CAC509EA16B}
                                  RegDeleteKey HKCR\CLSID\{EEECA057-AD0F-44A7-8BE5-8634CEDBDBD1}
                                  RegDeleteKey HKCR\CLSID\{EF4DCD99-D26B-44A4-BA77-CFDCC97E7291}
                                  RegDeleteKey HKCR\CLSID\{EFB23983-5803-4914-ADA3-C0EA2CFBDC37}
                                  RegDeleteKey HKCR\CLSID\{F4653484-F38C-455F-BB15-1175E527754E}
                                  RegDeleteKey HKCR\CLSID\{F72BC3F0-6C20-4793-9DDA-258589D8A907}
                                  RegDeleteKey HKCR\CLSID\{F99973C8-43E7-48C4-9EF3-131B67301321}
                                  RegDeleteKey HKCR\CLSID\{FA1D6D8F-C6ED-4752-8512-A33283240130}
                                  RegDeleteKey HKCR\CLSID\{FA605711-8E72-46B2-AE49-BED11B2E729D}
                                  RegDeleteKey HKCR\CLSID\{FA83E942-B796-46DE-9155-1632ECC5473B}
                                  RegDeleteKey HKCR\CLSID\{FBF65A16-C9AB-465E-AECE-D2D9D5AB5E60}
                                  RegDeleteKey HKCR\CLSID\{FDA26383-C0CF-4D32-AC37-769D7E14581F}
                                  RegDeleteKey HKCR\CLSID\{FF521631-31DA-48AC-B4E9-390A7694C906}

                                  RegDeleteKey HKCR\TypeLib\{06EC63CC-4823-4836-ABB8-AB5F3971FA5C}
                                  RegDeleteKey HKCR\TypeLib\{0E594D22-ACE6-43A2-BCDA-BB7C65D3FE8C}
                                  RegDeleteKey HKCR\TypeLib\{1F445F82-42C0-46F3-9A2E-6ADB79046D41}
                                  RegDeleteKey HKCR\TypeLib\{7699AEF9-F83A-44FA-B374-AA02CEDF247D}
                                  RegDeleteKey HKCR\TypeLib\{83F0D6AA-CD15-46B5-AA4E-BDB506B4AE53}
                                  RegDeleteKey HKCR\TypeLib\{931777A0-33CF-4154-8CEC-82A4656DAD1C}
                                  RegDeleteKey HKCR\TypeLib\{AD9B275B-E42D-4C7F-9FFB-29B5FB81688B}
                                  RegDeleteKey HKCR\TypeLib\{E8C88115-4951-425B-8C45-4DFC5A5540EE}
                                  RegDeleteKey HKCR\TypeLib\{F3A257E6-FA04-4B30-A1B6-6B89EB814544}

                                  RegDeleteKey HKCR\Interface\{2E30AC01-99D7-4E9C-B13E-94E1701B0AC9}
                                  RegDeleteKey HKCR\Interface\{2F668A6D-2EC7-4E3A-A485-819E210738D6}
                                  RegDeleteKey HKCR\Interface\{3947AC1D-DB09-4353-BBCC-55B97F5035EF}
                                  RegDeleteKey HKCR\Interface\{62BFAEC2-82A5-4117-A98B-FEA89413D924}
                                  RegDeleteKey HKCR\Interface\{7B1B5E44-8E90-4EE2-9049-CC0C5D8A918F}
                                  RegDeleteKey HKCR\Interface\{81C2F7F3-F930-455E-9AA5-0876D387C787}
                                  RegDeleteKey HKCR\Interface\{8F0A06F6-DF4D-4D54-B8CA-E8EEDBAE6DDB}
                                  RegDeleteKey HKCR\Interface\{901166A5-F137-4B27-BC4C-CA611DEBDCED}
                                  RegDeleteKey HKCR\Interface\{A58F3D09-4543-4396-8BE7-105F14DD6ED5}
                                  RegDeleteKey HKCR\Interface\{A7B323DA-0D0C-4298-8DE0-4F2AC4773284}
                                  RegDeleteKey HKCR\Interface\{C13FA88A-D264-4BC8-92ED-52EB8181E209}
                                  RegDeleteKey HKCR\Interface\{F8ACA5A0-060A-478A-8368-1407780D2251}

                                  RegDeleteKey HKCU\Software\livesvc
                                  RegDeleteKey HKCU\Software\EGDHTML
                                  RegDeleteKey HKCU\Software\egroup
                                  RegDeleteKey HKCU\Software\P2EClient
                                  RegDeleteKey HKCU\software\egdhtml
                                  RegDeleteKey HKCU\Software\epk_extr
                                  RegDeleteKey HKCU\software\mc
                                  RegDeleteKey HKUS\software\egdhtml
                                  RegDeleteKey HKLM\SOFTWARE\InternetGameBox
                                  RegDeleteKey HKLM\SOFTWARE\GoRecord
                                  RegDeleteKey HKLM\SOFTWARE\GoAstro
                                  RegDeleteKey HKLM\SOFTWARE\SudoPlanet
                                  RegDeleteKey HKLM\SOFTWARE\WebMediaPlayer
                                  RegDeleteKey HKLM\SOFTWARE\MessengerSkinner

                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{01BE5BD7-B2DD-48B3-A759-59265A91E787}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{01C17CA5-D863-42ED-B8DD-C3E325A22E4E}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{04CCFF26-7D52-4E42-BF6A-F8ECE0896EB7}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{04F414E9-E352-4BC3-963D-7BFE5A5F31A9}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{0594AF7E-573B-40DF-8165-E47AB2EAEFE8}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{07C9CFC7-DE33-4A0C-9FFB-CDFBA843B157}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{0878F049-D33E-45E0-A157-C36A6683CF25}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{093F9CF8-0DE1-491C-95D5-5EC257BD4CA3}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{0D1011B3-89C8-4F8E-8693-BB970E2E81E0}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{0DA910BC-6919-489E-B584-D9A4AAC7B8DE}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{0E79192A-C52C-4260-920F-639AC2296203}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{11F1D260-129E-4EB7-B37E-57E3D97A3DF1}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{14325268-79E0-4D2A-89A4-FFFC6E22741E}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{1604DF98-D1A5-44FE-844A-98D6FD0518D0}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{17BFC8DA-B4D6-4DB9-AA40-1CD32EDA9845}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{1CD49DC9-FD88-41FA-B892-47E037267D45}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{1CD4E2DC-2DA0-4154-8723-38CB04FB6A58}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{1D0A339E-315D-4DFE-B4EE-DDD494BB31EA}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{1EB17D1C-141D-4D9D-91CB-24D99215851D}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{201B9B37-848F-40BD-90EA-7B8F0AA89D6A}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{201D3DA8-B495-4A3B-BEE8-6D8DDCCC5762}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{26D73573-F1B3-48C9-A989-E6CE071957A1}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{2A3DFC59-8A87-49A1-85D1-42903410911F}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{2ABE804B-4D3A-41BF-A172-304627874B45}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{2AEEAC34-FD74-4142-B891-4B05C0C03C87}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{2F668A6D-2EC7-4E3A-A485-819E210738D6}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{31DDC1FD-CEA3-4837-A6DC-87E67015ADC9}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{321F38B6-7E5F-470E-B58C-927523B7AF92}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{3446598E-00E4-4B5E-99A6-87ECCA8324A2}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{3616F4B5-F6AD-4E67-966A-C218673648A0}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{39EA2F6F-3F50-4F58-9C63-4B3D53B0926E}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{3DAD912E-D2B9-4323-B7C9-7F2C5CC0C57B}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{413E282B-C32A-4717-A0F3-4F2E6FE25F83}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{469C7080-8EC8-43A6-AD97-45848113743C}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{486E48B5-ABF2-42BB-A327-2679DF3FB822}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{505098FD-5D61-4BC2-9B82-F969D0E932A2}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{50AD557E-3426-41FD-AFDD-2AF39BB1C387}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{54579C3D-A58D-4623-B5B5-465552BDA45B}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{54C75FB0-6B8B-4278-BF7B-77036F15A69E}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{5F4D3335-3194-4167-85AE-E7325F2695EF}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{5FD9726A-4977-449D-8352-25FDD8A510B5}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{602890BA-07A1-4A93-A89F-6BDDD8BB9BA5}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{624321F1-0581-49D8-99BD-2E952C2DF31B}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{6AA85413-165C-4200-8154-71166077B22E}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{6AA93DF6-6757-4338-9087-F7601DE18402}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{71CBDCD9-0830-4470-A890-35D364DA352C}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{71DA2A4E-ACB3-4065-9E41-8BC42EABE427}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{72241AD0-9B55-4870-9E72-EBA80C0CB1B8}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{7504F0D5-644A-4103-9D02-95488B6CB9A1}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{77EF6DBF-3929-4081-AF2E-178D387E211C}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{78F584DF-BBF5-4296-839C-31DE60914DBC}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{82FC4503-8459-4239-9B85-0617BEAA950A}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{83F0D6AA-CD15-46B5-AA4E-BDB506B4AE53}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{87C1805D-C5AE-4455-AB39-E245BB516136}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{8B3B8135-9DAA-40E7-8941-962795F9C1CB}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{8D8BAF56-B581-4B90-A549-C4AC6B03F1BB}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{94742E3F-D9A1-4780-9A87-2FFA43655DA2}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{95460ABD-946A-46FF-9F56-268718323EEE}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{9EB4F647-FE4A-42F9-9F5C-B8FB28DD02F9}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{A02780C3-7F77-4E28-855B-28890F3CF37A}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{A1C392A2-B274-46DB-89BE-1FBD476B9C93}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{AA59202C-5E41-48FC-AF7D-324F5FD6A9F1}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{AF7410C1-FBA3-415E-800A-4110CED40536}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{AFCF364F-F730-4B1E-B2D5-80F9172FBC44}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{B2B0AEDF-7CDF-4792-BB67-7654AD1E1B13}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{B3A5878E-5B4C-4D12-9156-4D7FD8D0AF6C}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{BA14D944-0D8C-4F16-A950-6E53EEBB558F}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{BA749BC1-143E-430D-B1DA-1D2AF67A3658}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{BD3653E4-884B-43C4-970B-670802501B7F}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{BE5A7132-329F-4319-B781-2A83BFE51534}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{BFC9677B-8006-4336-9D49-2C797AEFCB9E}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{C2481ED1-9896-4D49-AE90-69858DFDE446}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{C660C559-903D-41A5-991B-ED7959096C35}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{C6760A07-A574-4705-B113-7856315922C3}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{C80B7FF6-CE60-4079-935E-520C045C30A6}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{C9269872-E3D6-4811-8E5E-835CA8CBD0B3}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CB5D474E-A510-40A4-B5A4-838933BCBA64}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CDD8BADE-B4C8-4E97-84B4-1DC9ABAD3EF3}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CEFB7B49-9652-464F-8AFD-A577C0500F39}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CF5F84EB-D3FC-4F98-BE3B-F5B56B962CED}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{D7B59209-0ED9-4986-BD4A-527BE836C6B2}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{D8B94E9A-A34B-4253-BF48-C7CB7F2CFDB0}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{E19AB99F-AEC4-4B40-A5CA-F69D22522D77}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{E114CD5B-17CE-4807-890E-7B1EDF9F2E5E}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{E1D20694-74D9-472D-AF03-08C26173A67F}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{E24E8472-89B7-479F-8AD8-BBD7206A6A02}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{E3943A24-2F83-4505-9AE5-F705E81B50CB}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{E3943A24-2F83-4505-9AE5-F705E81B50CB}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{E49A9FCB-FAA9-4C1F-A1C1-54920DA2CCA4}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{E7AE1661-EBEB-492B-AE0D-860DF24174C6}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{EC4AFBF3-4540-4306-AF10-4CAC509EA16B}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{EEECA057-AD0F-44A7-8BE5-8634CEDBDBD1}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{EF4DCD99-D26B-44A4-BA77-CFDCC97E7291}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{EFB23983-5803-4914-ADA3-C0EA2CFBDC37}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{F4653484-F38C-455F-BB15-1175E527754E}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{F72BC3F0-6C20-4793-9DDA-258589D8A907}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{F99973C8-43E7-48C4-9EF3-131B67301321}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{FA1D6D8F-C6ED-4752-8512-A33283240130}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{FA605711-8E72-46B2-AE49-BED11B2E729D}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{FA83E942-B796-46DE-9155-1632ECC5473B}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{FBF65A16-C9AB-465E-AECE-D2D9D5AB5E60}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{FDA26383-C0CF-4D32-AC37-769D7E14581F}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{FF521631-31DA-48AC-B4E9-390A7694C906}

                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{01BE5BD7-B2DD-48B3-A759-59265A91E787}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{01C17CA5-D863-42ED-B8DD-C3E325A22E4E}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{04CCFF26-7D52-4E42-BF6A-F8ECE0896EB7}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{04F414E9-E352-4BC3-963D-7BFE5A5F31A9}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{0594AF7E-573B-40DF-8165-E47AB2EAEFE8}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{07C9CFC7-DE33-4A0C-9FFB-CDFBA843B157}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{0878F049-D33E-45E0-A157-C36A6683CF25}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{093F9CF8-0DE1-491C-95D5-5EC257BD4CA3}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{0D1011B3-89C8-4F8E-8693-BB970E2E81E0}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{0DA910BC-6919-489E-B584-D9A4AAC7B8DE}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{0E79192A-C52C-4260-920F-639AC2296203}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{11F1D260-129E-4EB7-B37E-57E3D97A3DF1}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{14325268-79E0-4D2A-89A4-FFFC6E22741E}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{1604DF98-D1A5-44FE-844A-98D6FD0518D0}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{17BFC8DA-B4D6-4DB9-AA40-1CD32EDA9845}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{1CD49DC9-FD88-41FA-B892-47E037267D45}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{1CD4E2DC-2DA0-4154-8723-38CB04FB6A58}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{1D0A339E-315D-4DFE-B4EE-DDD494BB31EA}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{1EB17D1C-141D-4D9D-91CB-24D99215851D}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{201B9B37-848F-40BD-90EA-7B8F0AA89D6A}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{201D3DA8-B495-4A3B-BEE8-6D8DDCCC5762}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{26D73573-F1B3-48C9-A989-E6CE071957A1}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{2A3DFC59-8A87-49A1-85D1-42903410911F}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{2ABE804B-4D3A-41BF-A172-304627874B45}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{2AEEAC34-FD74-4142-B891-4B05C0C03C87}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{2F668A6D-2EC7-4E3A-A485-819E210738D6}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{31DDC1FD-CEA3-4837-A6DC-87E67015ADC9}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{321F38B6-7E5F-470E-B58C-927523B7AF92}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{3446598E-00E4-4B5E-99A6-87ECCA8324A2}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{3616F4B5-F6AD-4E67-966A-C218673648A0}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{39EA2F6F-3F50-4F58-9C63-4B3D53B0926E}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{3ABC79F3-E345-43B9-A79F-5D5C7A8EC4DC}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{3DAD912E-D2B9-4323-B7C9-7F2C5CC0C57B}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{413E282B-C32A-4717-A0F3-4F2E6FE25F83}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{469C7080-8EC8-43A6-AD97-45848113743C}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{486E48B5-ABF2-42BB-A327-2679DF3FB822}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{505098FD-5D61-4BC2-9B82-F969D0E932A2}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{50AD557E-3426-41FD-AFDD-2AF39BB1C387}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{54579C3D-A58D-4623-B5B5-465552BDA45B}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{54C75FB0-6B8B-4278-BF7B-77036F15A69E}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{5F4D3335-3194-4167-85AE-E7325F2695EF}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{5FD9726A-4977-449D-8352-25FDD8A510B5}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{602890BA-07A1-4A93-A89F-6BDDD8BB9BA5}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{624321F1-0581-49D8-99BD-2E952C2DF31B}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{6AA85413-165C-4200-8154-71166077B22E}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{6AA93DF6-6757-4338-9087-F7601DE18402}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{71CBDCD9-0830-4470-A890-35D364DA352C}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{71DA2A4E-ACB3-4065-9E41-8BC42EABE427}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{72241AD0-9B55-4870-9E72-EBA80C0CB1B8}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{7504F0D5-644A-4103-9D02-95488B6CB9A1}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{77EF6DBF-3929-4081-AF2E-178D387E211C}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{78F584DF-BBF5-4296-839C-31DE60914DBC}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{82FC4503-8459-4239-9B85-0617BEAA950A}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{83F0D6AA-CD15-46B5-AA4E-BDB506B4AE53}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{87C1805D-C5AE-4455-AB39-E245BB516136}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{8B3B8135-9DAA-40E7-8941-962795F9C1CB}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{8D8BAF56-B581-4B90-A549-C4AC6B03F1BB}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{94742E3F-D9A1-4780-9A87-2FFA43655DA2}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{95460ABD-946A-46FF-9F56-268718323EEE}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{9EB4F647-FE4A-42F9-9F5C-B8FB28DD02F9}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{A02780C3-7F77-4E28-855B-28890F3CF37A}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{A1C392A2-B274-46DB-89BE-1FBD476B9C93}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{AA59202C-5E41-48FC-AF7D-324F5FD6A9F1}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{AF7410C1-FBA3-415E-800A-4110CED40536}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{AFCF364F-F730-4B1E-B2D5-80F9172FBC44}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{B2B0AEDF-7CDF-4792-BB67-7654AD1E1B13}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{B3A5878E-5B4C-4D12-9156-4D7FD8D0AF6C}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{BA14D944-0D8C-4F16-A950-6E53EEBB558F}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{BA749BC1-143E-430D-B1DA-1D2AF67A3658}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{BD3653E4-884B-43C4-970B-670802501B7F}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{BE5A7132-329F-4319-B781-2A83BFE51534}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{BFC9677B-8006-4336-9D49-2C797AEFCB9E}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{C2481ED1-9896-4D49-AE90-69858DFDE446}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{C660C559-903D-41A5-991B-ED7959096C35}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{C6760A07-A574-4705-B113-7856315922C3}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{C80B7FF6-CE60-4079-935E-520C045C30A6}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{C9269872-E3D6-4811-8E5E-835CA8CBD0B3}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{CB5D474E-A510-40A4-B5A4-838933BCBA64}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{CDD8BADE-B4C8-4E97-84B4-1DC9ABAD3EF3}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{CEFB7B49-9652-464F-8AFD-A577C0500F39}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{CF5F84EB-D3FC-4F98-BE3B-F5B56B962CED}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{D7B59209-0ED9-4986-BD4A-527BE836C6B2}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{D8B94E9A-A34B-4253-BF48-C7CB7F2CFDB0}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{E114CD5B-17CE-4807-890E-7B1EDF9F2E5E}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{E19AB99F-AEC4-4B40-A5CA-F69D22522D77}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{E1D20694-74D9-472D-AF03-08C26173A67F}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{E24E8472-89B7-479F-8AD8-BBD7206A6A02}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{E3943A24-2F83-4505-9AE5-F705E81B50CB}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{E7AE1661-EBEB-492B-AE0D-860DF24174C6}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{E49A9FCB-FAA9-4C1F-A1C1-54920DA2CCA4}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{EC4AFBF3-4540-4306-AF10-4CAC509EA16B}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{EEECA057-AD0F-44A7-8BE5-8634CEDBDBD1}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{EF4DCD99-D26B-44A4-BA77-CFDCC97E7291}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{EFB23983-5803-4914-ADA3-C0EA2CFBDC37}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{F4653484-F38C-455F-BB15-1175E527754E}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{F72BC3F0-6C20-4793-9DDA-258589D8A907}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{F99973C8-43E7-48C4-9EF3-131B67301321}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{FA1D6D8F-C6ED-4752-8512-A33283240130}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{FA605711-8E72-46B2-AE49-BED11B2E729D}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{FA83E942-B796-46DE-9155-1632ECC5473B}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{FBF65A16-C9AB-465E-AECE-D2D9D5AB5E60}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{FDA26383-C0CF-4D32-AC37-769D7E14581F}|Compatibility Flags|1024
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{FF521631-31DA-48AC-B4E9-390A7694C906}|Compatibility Flags|1024

                                  RegDelValue HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|Instant Access
                                  RegDelValue HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|cpntmgc
                                  RegDelValue HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|Instant Access
                                  RegDelValue HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|MailSkinner
                                  RegDelValue HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|MC
                                  RegDelValue HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|go-astro
                                  RegDelValue HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|messengerskinner
                                  RegDelValue HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|messengerskinner
                                  RegDelValue HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices|MC
                                  RegDelValue HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce|msupd
                                  RegDelValue HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|HotTVPlayer
                                  RegSetStringValue HKLM\SYSTEM\CurrentControlSet\Services\Winsock\Autodial|AutodialDllName32|wininet.dll
                                  RegSetStringValue HKLM\SYSTEM\CurrentControlSet\Services\Winsock\Autodial|AutodialFcnName32|InternetAutodialCallback
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Instant Access
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MailSkinner
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\InternetGameBox
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GoRecord
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GoAstro
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SudoPlanet
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WebMediaPlayer
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MessengerSkinner

                                  RegDeleteKey HKCR\AxInst.IgbInstall
                                  RegDeleteKey HKCR\AxInst.IgbInstall.1
                                  RegDeleteKey HKCR\CLSID\{E68718BB-5451-4F6F-B8B8-41B4AB672747}
                                  RegDeleteKey HKCR\CLSID\{FD31BF07-70E3-4B98-8F70-0970AF614275}
                                  RegDeleteKey HKCR\AppID\AppID\AxInst.EXE
                                  RegDeleteKey HKCR\AppID\{7AA54C6E-DBF0-4A63-AFE0-6582094C46DE}
                                  RegDeleteKey HKCR\Interface\{66C13795-9AA0-4244-B1A8-37F9E99FB079}
                                  RegDeleteKey HKCR\Interface\{9E03C295-4FDF-4828-A99C-85EB0D848DC0}
                                  RegDeleteKey HKCR\Interface\{1F323594-30E9-4E1E-8262-CA7B4D0A65A1}
                                  RegDeleteKey HKCR\Interface\{C2CCBFAF-1474-4E53-8130-0CC12B31856B}
                                  RegDeleteKey HKCR\TypeLib\{C9F88FA1-51F1-43C8-A0FC-EAC4537D8392}
                                  RegDeleteKey HKCR\TypeLib\{95012AFD-F4F1-4A96-BF3B-4F5D6C54D593}
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{E68718BB-5451-4F6F-B8B8-41B4AB672747}
                                  RegSetDwordValue HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{E68718BB-5451-4F6F-B8B8-41B4AB672747}|Compatibility Flags|1024
                                  RegDelValue HKCU\software\microsoft\windows\currentversion\wintrust\trust providers\software publishing\trust database\0|ELECTRONIC GROUP
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\GoAstro.exe
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\SudoPlanet.exe
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\GoRecord.exe
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\InternetGameBox.exe
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\WebMediaPlayer.exe
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MessengerSkinner.exe
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\GoRecord
                                  RegDeleteKey HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\SudoPlanet
                                  RegDeleteKey HKCR\HotTVPlayer.HTPlayer
                                  RegDeleteKey HKCR\HotTVPlayer.HTPlayer.1
                                  RegDeleteKey HKCU\software\HotTVPlayer

                                  DllUnregister %SYSDIR%\MSWBM32.DLL|1
                                  DllUnregister %PROGRAMFILES%\MailSkinner\OESkinner.dll|1
                                  DllUnregister %SYSDIR%\HotTVPlayer.dll|1

                                  ProcessKillIfContainsText %SYSDIR%\*.exe|qeu_ueAyqes_uew_te|0
                                  ProcessKillIfContainsText %SYSDIR%\*.exe|WaXL5_jp0Ml

                                  FileDelete %SYSTEMDRIVE%\dfuck.ico
                                  FileDelete %SYSTEMDRIVE%\Video Party.ico

                                  FileDelete %ALLUSERSDESKTOP%\Instant Access.lnk
                                  FileDelete %ALLUSERSDESKTOP%\NoCreditCard.lnk
                                  FileDelete %ALLUSERSDESKTOP%\Join The Orgy.lnk
                                  FileDelete %ALLUSERSDESKTOP%\GoRecord.lnk
                                  FileDelete %ALLUSERSDESKTOP%\GoAstro.lnk
                                  FileDelete %ALLUSERSDESKTOP%\InternetGameBox.lnk
                                  FileDelete %ALLUSERSDESKTOP%\SudoPlanet.lnk
                                  FileDelete %ALLUSERSDESKTOP%\WebMediaPlayer.lnk

                                  FileDelete %DESKTOP%\Instant Access.lnk
                                  FileDelete %DESKTOP%\NoCreditCard.lnk
                                  FileDelete %DESKTOP%\Join The Orgy.lnk
                                  FileDelete %DESKTOP%\GoRecord.lnk
                                  FileDelete %DESKTOP%\GoAstro.lnk
                                  FileDelete %DESKTOP%\InternetGameBox.lnk
                                  FileDelete %DESKTOP%\SudoPlanet.lnk
                                  FileDelete %DESKTOP%\WebMediaPlayer.lnk

                                  FileDelete %PROGRAMS%\GoRecord 2
                                  FileDelete %PROGRAMS%\GoAstro
                                  FileDelete %PROGRAMS%\InternetGameBox
                                  FileDelete %PROGRAMS%\SudoPlanet
                                  FileDelete %PROGRAMS%\WebMediaPlayer
                                  FileDelete %PROGRAMS%\MessengerSkinner

                                  FileDelete %ALLUSERSSTARTMENU%\Instant access
                                  FileDelete %ALLUSERSSTARTMENU%\NoCreditCard
                                  FileDelete %ALLUSERSSTARTMENU%\Join The Orgy
                                  FileDelete %ALLUSERSSTARTMENU%\GoRecord 2
                                  FileDelete %ALLUSERSSTARTMENU%\GoAstro
                                  FileDelete %ALLUSERSSTARTMENU%\InternetGameBox
                                  FileDelete %ALLUSERSSTARTMENU%\SudoPlanet
                                  FileDelete %ALLUSERSSTARTMENU%\WebMediaPlayer

                                  FileDelete %WINDIR%\Downloaded Program Files\dhtmlaccess.inf
                                  FileDelete %WINDIR%\Downloaded Program Files\dtc32.inf
                                  FileDelete %WINDIR%\Downloaded Program Files\EGAUTH.inf
                                  FileDelete %WINDIR%\Downloaded Program Files\EGDACCESS.inf
                                  FileDelete %WINDIR%\Downloaded Program Files\EGDACCESS_ASPIV4.inf
                                  FileDelete %WINDIR%\Downloaded Program Files\EGCOMSERVICE_pack.inf
                                  FileDelete %WINDIR%\Downloaded Program Files\egdhtml.inf
                                  FileDelete %WINDIR%\Downloaded Program Files\egdial.dll
                                  FileDelete %WINDIR%\Downloaded Program Files\egdhtml_****.dll
                                  FileDelete %WINDIR%\Downloaded Program Files\egdhtml_pack.inf
                                  FileDelete %WINDIR%\Downloaded Program Files\eghtmldialer.inf
                                  FileDelete %WINDIR%\Downloaded Program Files\eghtmldialer.dll
                                  FileDelete %WINDIR%\Downloaded Program Files\eglivecam_****.dll
                                  FileDelete %WINDIR%\Downloaded Program Files\eglivecam.dll
                                  FileDelete %WINDIR%\Downloaded Program Files\ia.inf
                                  FileDelete %WINDIR%\Downloaded Program Files\ieaccess2.inf
                                  FileDelete %WINDIR%\Downloaded Program Files\ieaccess2.dll
                                  FileDelete %WINDIR%\Downloaded Program Files\netcmp32.inf
                                  FileDelete %WINDIR%\Downloaded Program Files\netia32.inf
                                  FileDelete %WINDIR%\Downloaded Program Files\Netslv32.inf
                                  FileDelete %WINDIR%\Downloaded Program Files\Netslv32.dll
                                  FileDelete %WINDIR%\Downloaded Program Files\netpe32.inf
                                  FileDelete %WINDIR%\Downloaded Program Files\nethv32.inf
                                  FileDelete %WINDIR%\Downloaded Program Files\LiveService.inf
                                  FileDelete %WINDIR%\Downloaded Program Files\one2oneSvc.inf
                                  FileDelete %WINDIR%\Downloaded Program Files\sysnetsvc32.inf
                                  FileDelete %WINDIR%\Downloaded Program Files\syswbsvc32.inf
                                  FileDelete %WINDIR%\Downloaded Program Files\sysinetsvc32.inf
                                  FileDelete %WINDIR%\Downloaded Program Files\sysiasvc32.inf

                                  FileDelete %WINDIR%\access.exe
                                  FileDelete %WINDIR%\dialx.exe
                                  FileDelete %WINDIR%\ExeDialer.exe
                                  FileDelete %WINDIR%\msupd.exe
                                  FileDelete %WINDIR%\system32mwsrvacc.exe

                                  FileDelete %WINDIR%\tmlpcert2005
                                  FileDelete %WINDIR%\tmlpcert2007

                                  FileDelete %WINDIR%\eg_auth_*.dll
                                  FileDelete %WINDIR%\eg_auth_srv_10*.dll
                                  FileDelete %WINDIR%\eg_auth_srv_mut0*.dll
                                  FileDelete %WINDIR%\ieaccess2.dll
                                  FileDelete %WINDIR%\system\eghtmldialer.dll
                                  FileDelete %WINDIR%\System\ieaccess2.dll
                                  FileDelete %WINDIR%\System\egdial.dll
                                  FileDelete %WINDIR%\p2esocks_10*.dll
                                  FileDelete %WINDIR%\iaccess32.exe

                                  FileDelete %SYSDIR%\authclient.exe
                                  FileDelete %SYSDIR%\dhtmlexe.exe
                                  FileDelete %SYSDIR%\eglivecam.exe
                                  FileDelete %SYSDIR%\P2EClient.exe
                                  FileDelete %SYSDIR%\AxInst.exe
                                  FileDelete %SYSDIR%\axsetup.dll
                                  FileDelete %SYSDIR%\EGACCESS.dll
                                  FileDelete %SYSDIR%\EGACCESS*.dll
                                  FileDelete %SYSDIR%\egaccess4.DLL
                                  FileDelete %SYSDIR%\egaccess4_10*.dll
                                  FileDelete %SYSDIR%\EGDACCESS_*10*.dll
                                  FileDelete %SYSDIR%\EGDACCESS.dll
                                  FileDelete %SYSDIR%\egaccess*.inf
                                  FileDelete %SYSDIR%\EGDACCESS*.inf
                                  FileDelete %SYSDIR%\EGDHTML2.DLL
                                  FileDelete %SYSDIR%\EGDHTML_*.dll
                                  FileDelete %SYSDIR%\EGAUTH.dll
                                  FileDelete %SYSDIR%\eg_auth_srv_10*.dll
                                  FileDelete %SYSDIR%\EGCOMLIB*.dll
                                  FileDelete %SYSDIR%\EGCOMSERVICE2.dll
                                  FileDelete %SYSDIR%\EGCOMSERVICE_*.dll
                                  FileDelete %SYSDIR%\EGDownloader.dll
                                  FileDelete %SYSDIR%\EGLIVECAM_10*.DLL
                                  FileDelete %SYSDIR%\egdial.dll
                                  FileDelete %SYSDIR%\eglivecam.dll
                                  FileDelete %SYSDIR%\ia.dll
                                  FileDelete %SYSDIR%\ieaccess2.dll
                                  FileDelete %SYSDIR%\IaLdr32.exe
                                  FileDelete %SYSDIR%\IaLdr32.inf
                                  FileDelete %SYSDIR%\LiveService_*.dll
                                  FileDelete %SYSDIR%\msegcompid.dll
                                  FileDelete %SYSDIR%\msclock32.dll
                                  FileDelete %SYSDIR%\msclock32*.dll
                                  FileDelete %SYSDIR%\mservice.dll
                                  FileDelete %SYSDIR%\msplock32.dll
                                  FileDelete %SYSDIR%\msplock32*.dll
                                  FileDelete %SYSDIR%\mswbm32.dll
                                  FileDelete %SYSDIR%\mseggrpid.dll
                                  FileDelete %SYSDIR%\netia32.dll
                                  FileDelete %SYSDIR%\nethv32.dll
                                  FileDelete %SYSDIR%\Netslv32.dll
                                  FileDelete %SYSDIR%\One2OneService.dll
                                  FileDelete %SYSDIR%\one2oneSvc.dll
                                  FileDelete %SYSDIR%\p2esocks_*.dll
                                  FileDelete %SYSDIR%\P2ECOM.dll
                                  FileDelete %SYSDIR%\svcia32.dll
                                  FileDelete %SYSDIR%\syswbsvc32.dll
                                  FileDelete %SYSDIR%\sysiasvc32.dll
                                  FileDelete %SYSDIR%\sysia32svc.dll
                                  FileDelete %SYSDIR%\sysinetsvc32.dll
                                  FileDelete %SYSDIR%\svcsysnet32.dll
                                  FileDelete %SYSDIR%\sysnetsvc32.dll
                                  FileDelete %SYSDIR%\*_navps.dat
                                  FileDelete %SYSDIR%\*_nav.dat
                                  FileDelete %SYSDIR%\nvs2.inf
                                  FileDelete %SYSDIR%\linewsrv.exe
                                  FileDelete %SYSDIR%\mwsrvacc.exe
                                  FileDelete %SYSDIR%\accinet.exe
                                  FileDelete %SYSDIR%\prodsrvs.exe
                                  FileDelete %SYSDIR%\inetmodl.exe
                                  FileDelete %SYSDIR%\HotTVPlayer.dll
                                  FileDelete %SYSDIR%\linkprd.exe
                                  FileDelete %SYSDIR%\IaLdr32.exe
                                  FileDelete %SYSDIR%\IaLdr32.inf

                                  FileDelete %SYSDIR%\backgrd.jpg
                                  FileDelete %SYSDIR%\baground.jpg

                                  FolderDelete %PROGRAMFILES%\dialpass
                                  FolderDelete %PROGRAMFILES%\eghtmldialer
                                  FolderDelete %PROGRAMFILES%\egroup
                                  FolderDelete %PROGRAMFILES%\Instant Access
                                  FolderDelete %PROGRAMFILES%\MailSkinner
                                  FolderDelete %PROGRAMFILES%\InternetGameBox
                                  FolderDelete %PROGRAMFILES%\GoRecord2
                                  FolderDelete %PROGRAMFILES%\GoAstro
                                  FolderDelete %PROGRAMFILES%\SudoPlanet
                                  FolderDelete %PROGRAMFILES%\WebMediaPlayer
                                  FolderDelete %PROGRAMFILES%\MessengerSkinner

                                  # mslagent block

                                  DllUnregister %WINDIR%\mslagent\2_mslagent.dll|1
                                  DllUnregister %WINDIR%\navmpc\2_navmpc.dll|1

                                  RegDelValue HKLM\Software\Microsoft\Windows\CurrentVersion\Run|mslagent
                                  RegDelValue HKCU\Software\Microsoft\Windows\CurrentVersion\Run|mslagent
                                  RegDeleteKey HKCR\CLSID\{4A6FA2EB-F381-4503-87D0-BE4CC57DEB8E}
                                  RegDeleteKey HKCR\CLSID\{75A603E7-8BB7-4272-ABBE-9846FF1241C1}
                                  RegDeleteKey HKCR\CLSID\{DE614603-6320-4046-A7A7-6A69CEC26F14}
                                  RegDeleteKey HKCR\CLSID\{D7A82A12-05F5-42D8-B30D-6EF995075D2D}
                                  RegDeleteKey HKCR\Interface\{1EF28CC5-8D97-4310-B71B-CA34EE15B897}
                                  RegDeleteKey HKCR\Interface\{43CDAD65-AA0D-4701-8108-117F86613B69}
                                  RegDeleteKey HKCR\Interface\{510C3373-4842-4944-8729-0AFF6725A132}
                                  RegDeleteKey HKCR\Interface\{6D3F48F4-B40A-4C3F-A95C-85E23C3A8A91}
                                  RegDeleteKey HKCR\TypeLib\{5630B768-1C09-4105-9E03-E35985E36B0B}
                                  RegDeleteKey HKCR\TypeLib\{82C0673C-F1D1-47BA-B904-AB0DE82300BC}
                                  RegDeleteKey HKCR\TypeLib\{BA49BD6A-039C-428E-AF33-8C1288D75A7B}
                                  RegDeleteKey HKCR\TypeLib\{CA72BD3D-6044-4429-8C9A-76D90F4B29A8}
                                  RegDeleteKey HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{021BB032-80A8-4FB6-B3D5-CF27B1553B95}
                                  RegDeleteKey HKCR\MagicControl.MagicComponent
                                  RegDeleteKey HKCR\MagicControl.MagicComponent.1
                                  RegDeleteKey HKCR\mslagent.3
                                  RegDeleteKey HKCR\mslagent.3.1
                                  RegDeleteKey HKCR\NaviHelper.NaviHelperObject
                                  RegDeleteKey HKCR\NaviHelper.NaviHelperObject.1
                                  RegDeleteKey HKCR\NaviPromo.EGNaviScoring
                                  RegDeleteKey HKCR\NaviPromo.EGNaviScoring.1
                                  RegDeleteKey HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\mslagent
                                  RegDeleteKey HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\navmpc
                                  FolderDelete %WINDIR%\mslagent
                                  FolderDelete %WINDIR%\navmpc
                                  FolderDelete %WINDIR%\msskinner
                                  FolderDelete %WINDIR%\wintrim
                                  FolderDelete %WINDIR%\wincomp
                                  FolderDelete %WINDIR%\winmgts
                                  FolderDelete %WINDIR%\simcss
                                  FolderDelete %WINDIR%\mc
                                  FileDelete %SYSDIR%\msklive.dll

                                  SystemEmptyTempFolder

                                  OptionUseRecycleBin
                                  FileDeleteIfContainsText %SYSDIR%\*.exe|qeu_ueAyqes_uew_te
                                  FileDeleteIfContainsText %SYSDIR%\*.exe|WaXL5_jp0Ml
                                  FileDeleteIfContainsText %SYSDIR%\*.exe|iedisco

                                  FileDeleteIfMD5Match %SYSDIR%\*.exe|60000E6EBEFF360898E43A6E2685E1B0
                                  FileDeleteIfContainsText %SYSDIR%\*.dat|42.sa
                                  FileDeleteIfContainsText %SYSDIR%\*.dat|PNDOCDT@
                                  FileDeleteIfMD5Match %SYSDIR%\*.dat|C87EE35149404EA3C7AC361130E121FA

                                  FolderCreate %SYSDIR%\bfubackups
                                  FileMoveIfContainsHex %SYSDIR%\*.exe|%SYSDIR%\bfubackups|50,45,00,00,4C,01,04,00,8A,04,3D,44

                                  FileDelete %SYSDIR%\*_navps.dat
                                  FileDelete %SYSDIR%\*_nav.dat

                                  FileDelete C:\egd.txt
                                  SystemRun regedit|/e C:\egd.txt "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run"|0

                                  bizoux
                                  • 1
                                  • 2