sidewaysup

that one did more, it also closed and dissapeared:

@prompt $
if exist "%temp%\log.txt" del "%temp%\log.txt"

for %%g in (
"C:\Program Files\crap\hijackthis\backup-20060816-225750-579"
"C:\Program Files\crap\hijackthis\backup-20060816-225752-327"
"C:\Program Files\crap\hijackthis\backup-20060816-225920-691"
C:\WINDOWS\gmfrg.dll
C:\WINDOWS\vkmpf.dll
C:\WINDOWS\vub.dll
) do (
del /a/f %%g >nul 2>&1
if exist %%g echo.%%g>>"%temp%\log.txt"
)

for %%g in (
"C:\Documents and Settings\Owner\.housecall\Quarantine"
"C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery"
%systemdrive%\Qoobox
) do (
rd /s/q %%g >nul 2>&1
if exist %%g echo.%%g>>"%temp%\log.txt"
)
if exist "%temp%\log.txt" ( start notepad "%temp%\log.txt"
) else echo.Deleted Successfully !!

echo.GetObject("winmgmts:" ^& "{impersonationLevel=impersonate}!\\" ^& "." ^& "\root\default").Get("SystemRestore").Disable("")>SR.vbs
echo.GetObject("winmgmts:" ^& "{impersonationLevel=impersonate}!\\" ^& "." ^& "\root\default").Get("SystemRestore").Enable("")>>SR.vbs
wscript SR.vbs

(
echo.REGEDIT4&echo.
echo.[hkey_current_user\software\microsoft\windows\currentversion\explorer\advanced]
echo."hidden"=dword:00000002
echo."hidefileext"=dword:00000001
echo."showsuperhidden"=dword:00000000
)>rehide.reg

regedit /s rehide.reg
del rehide.reg SR.vbs
nircmd wait 7000
del %0