View Single Post
Old 08-07-2007, 11:58 AM   #21 (permalink)
sUBs
Asst Manager Security, Expert Analyst, Moderator, Security Team; Rangemaster, Moderator, TSF Academy
 
sUBs's Avatar
 
Join Date: May 2005
Posts: 24,489
OS: N/A


Re: recent trouble- programs slow to start

I see a possible script error. Let's try this one instead:

Code:
@prompt $
if exist "%temp%\log.txt" del "%temp%\log.txt"

for %%g in (
"C:\Program Files\crap\hijackthis\backup-20060816-225750-579"
"C:\Program Files\crap\hijackthis\backup-20060816-225752-327"
"C:\Program Files\crap\hijackthis\backup-20060816-225920-691"
C:\WINDOWS\gmfrg.dll
C:\WINDOWS\vkmpf.dll
C:\WINDOWS\vub.dll
) do (
del /a/f %%g >nul 2>&1
if exist %%g echo.%%g>>"%temp%\log.txt"
)

for %%g in (
"C:\Documents and Settings\Owner\.housecall\Quarantine"
"C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery"
%systemdrive%\Qoobox
) do (
rd /s/q %%g >nul 2>&1
if exist %%g echo.%%g>>"%temp%\log.txt"
)
if exist "%temp%\log.txt" ( start notepad "%temp%\log.txt"
) else echo.Deleted Successfully !!

echo.GetObject("winmgmts:" ^& "{impersonationLevel=impersonate}!\\" ^& "." ^& "\root\default").Get("SystemRestore").Disable("")>SR.vbs
echo.GetObject("winmgmts:" ^& "{impersonationLevel=impersonate}!\\" ^& "." ^& "\root\default").Get("SystemRestore").Enable("")>>SR.vbs
wscript SR.vbs

(
echo.REGEDIT4&echo.
echo.[hkey_current_user\software\microsoft\windows\currentversion\explorer\advanced]
echo."hidden"=dword:00000002
echo."hidefileext"=dword:00000001
echo."showsuperhidden"=dword:00000000
)>rehide.reg

regedit /s rehide.reg
del rehide.reg SR.vbs
nircmd wait 7000
del %0
__________________

Question - what have you done for the community today?
sUBs is offline  
Important Information
Join the #1 Tech Support Forum Today - It's Totally Free!

TechSupportForum.com is a leading support website for your computer needs. We offer free, friendly and personalized computer support. Why pay to have your computer fixed when you can do it for free.

Join TechSupportforum.com Today - Click Here