求少女时代所有非专辑曲目打包下载！！

Vegclass ransomware removal instructions
What is Vegclass
Vegclass is another ransomware infection identical to Mahasaraswati, Green_Ray, and JohnyCryptor After stealthily infiltrating the system, Vegclass uses an asymmetric encryption algorithm to encrypt various files stored on victims' computers During encryption, Vegclass ransomware adds the Vegclass(@)aolcomxtbl extension to the name of each encrypted file It also changes the desktop wallpaper and creates a 'How to decrypt your files' text file, placing it in each folder containing encrypted files
The text file and desktop wallpaper state that victims must contact developers of Vegclass to restore their encrypted files As mentioned, Vegclass employs the asymmetric encryption algorithm and, thus, public (to encrypt) and private (to decrypt) keys are generated during encryption The private key is unfortunately stored on Command and Control (C&C) servers controlled by cyber criminals (developers of Vegclass) Therefore, to restore files, victims must purchase the private key for a certain fee (which is currently unknown) To receive payment instructions, victims must send three selected files to the email addressprovided Bear in mind, however, that developers of ransomware-type viruses often ignore victims regardless of any payments made Therefore, we strongly advise you not to contact cyber criminals or pay any ransom In doing so, you will simply support their malicious businesses Unfortunately, there are currently no tools capable of decrypting files compromised by Vegclass Therefore, victims can only restore their files/system from a backup
Screenshot of a message encouraging users to contact the developers of Vegclass ransomware to decrypt their compromised data:
All ransomware-type viruses are very similar - they encrypt victims' files and demand ransom payments There are two main differences - the type of encryption algorithm used and size of ransom Research shows that these viruses are mostly distributed using malicious email attachments, P2P (peer-to-peer) networks, fake software updates, and trojans Therefore, never download files from third party sources or open attachments sent from unrecognized/suspicious email addresses In addition, keep your installed software up-to-date and use a legitimate anti-virus/anti-spyware suite The existence of ransomware-type malware is one of the main reasons why you should maintain regular backups of your files
Text presented in Vegclass desktop wallpaper:
Attention!!! To restore information email technical support send 3 encrypted files Econvector3(@)aolcom or Eco_vector(@)indiacom
Screenshot of Vegclass ransomware text file (How to decrypt your filestxt):
Text presented within this file:
DECRYPT FILES EMAIL ecovector3(@)aolcom or eco_vector(@)indiacom
Screenshot of files encrypted by Vegclass:
Vegclass ransomware removal:
Quick menu: Quick solution to remove Vegclass@aolcomxtbl virus
What is Vegclass
STEP 1 Vegclass virus removal using safe mode with networking
STEP 2 Vegclass ransomware removal using System Restore

>@echo off
color a
set tm1=%time:~0,2%
set tm2=%time:~3,2%
set tm3=%time:~6,2%
echo
title=系统垃圾清理脚本showgrass一月修改增强版（支持PE下使用） Code By showgrass
echo 系统垃圾清理脚本showgrass一月修改增强版（支持PE下使用）
echo
echo 当前系统时间 %date% %tm1%点%TM2%分%TM3%秒
ECHO
ECHO ╭════════════════════╮
ECHO ‖★免责声明★ ‖
ECHO ‖本作品仅在黑客X档案论坛作交流经验之用， ‖
ECHO ‖脚本用于删除当前系统中存在的一些垃圾文 ‖
ECHO ‖件，或无用文件，若您担心本脚本会删除您的‖
ECHO ‖系统文件请不要使用本脚本。 ‖
ECHO ‖ ‖
ECHO ╰════════════════════╯
echo ╭════════════════════╮
echo ‖ Code By：showgrass ‖
echo ╰════════════════════╯
echo
echo 按 Y 键同意许可并执行清理过程，按 N 键退出脚本。
echo
echo
:cho
set choice=
set /p choice= 请输入 相关按键 + 回车键 执行本脚本:
IF NOT "%Choice%"=="" SET Choice=%Choice:~0,1%
if /i "%choice%"=="y" goto start
if /i "%choice%"=="n" goto exit
echo 选择无效，请重新输入
echo
goto cho
pause >nul
@Echo Off
:start
echo下面是可用的变量
Set HomeDrive=C:
Set WinDir=%HomeDrive%\WINDOWS
Set SysDir=%WinDir%\System32
Set ProgFile=%HomeDrive%\Program Files
Set CurUser=%HomeDrive%\Documents and Settings\Administrator
Set AllUser=%HomeDrive%\Documents and Settings\All Users
title=正在清理共享文档
Rd /s/q "%AllUser%\Documents\My Videos
Rd /s/q "%AllUser%\Documents\My Pictures
Rd /s/q "%AllUser%\Documents\My Music
cls
title=正在清理WMP10目录
Rd /s/q "%ProgFile%\Windows Media Player\Icons
Rd /s/q "%ProgFile%\Windows Media Player\Sample Playlists
Rd /s/q "%ProgFile%\Windows Media Player\Skins
Rd /s/q "%ProgFile%\Windows Media Player\Visualizations
Del /a/f/s/q "%ProgFile%\Windows Media Player\txt
cls
title=正在清理开始菜单
Del /a/f/s/q "%AllUser%\「开始」菜单\Windows Catalog
Del /a/f/s/q "%AllUser%\「开始」菜单\Windows Update
Del /a/f/s/q "%AllUser%\「开始」菜单\设定程序访问和默认值
cls
title=正在清理360安全卫士目录
Rd /s/q "%ProgFile%\360Safe\hotfix"
cls
title=正在清理清理ACDSee目录
Rd /s/q "%CurUser%\Application Data\ACD Systems
Del /a/f/s/q "%ProgFile%\ACDSee\hlp"
Del /a/f/s/q "%ProgFile%\ACDSee\cnt"
Del /a/f/s/q "%ProgFile%\ACDSee\PlugIns\hlp
Del /a/f/s/q "%ProgFile%\ACDSee\PlugIns\chm
cls
title=正在清理暴风影音目录
Del /a/f/s/q "%ProgFile%\Ringz Studio\Storm Codec\txt
Del /a/f/s/q "%ProgFile%\Ringz Studio\Storm Codec\ini
Del /a/f/s/q "%ProgFile%\Ringz Studio\Storm Codec\dat
Del /a/f/s/q "%ProgFile%\Ringz Studio\Storm Codec\GSpotexe
Del /a/f/s/q "%ProgFile%\Ringz Studio\Storm Codec\StormSetexe
Del /a/f/s/q "%ProgFile%\Ringz Studio\Storm Codec\Codecs\languages\ffdshow1033en
Rd /s/q "%AllUser%\Application Data\Storm\Update
Rd /s/q "%AllUser%\「开始」菜单\程序\暴风影音
Rd /s/q "%ProgFile%\Ringz Studio\Storm Codec\QTSystem\CoreVideoResources\enlproj
Rd /s/q "%ProgFile%\Ringz Studio\Storm Codec\QTSystem\QuickTime3GPPResources\enlproj
Rd /s/q "%ProgFile%\Ringz Studio\Storm Codec\QTSystem\QuickTimeResources\enlproj
Rd /s/q "%ProgFile%\Ringz Studio\Storm Codec\QTSystem\QuickTimeAudioSupportResources\enlproj
Rd /s/q "%ProgFile%\Ringz Studio\Storm Codec\QTSystem\QuickTimeEssentialsResources\enlproj
Rd /s/q "%ProgFile%\Ringz Studio\Storm Codec\QTSystem\QuickTimeH264Resources\enlproj
Rd /s/q "%ProgFile%\Ringz Studio\Storm Codec\QTSystem\QuickTimeInternetExtrasResources\enlproj
Rd /s/q "%ProgFile%\Ringz Studio\Storm Codec\QTSystem\QuickTimeMPEG4Resources\enlproj
Rd /s/q "%ProgFile%\Ringz Studio\Storm Codec\QTSystem\QuickTimeStreamingResources\enlproj
Rd /s/q "%ProgFile%\Ringz Studio\Storm Codec\QTSystem\QuickTimeStreamingExtrasResources\enlproj
Rd /s/q "%ProgFile%\Ringz Studio\Storm Codec\QTSystem\QuickTimeVRResources\enlproj
Rd /s/q "%ProgFile%\Ringz Studio\Storm Codec\QTSystem\QuickTimeWebHelperResources\enlproj
cls
title=正在清理 极点五笔 目录
Rd /s/q "%CurUser%\「开始」菜单\程序\freeime
Del /a/f/s/q "%ProgFile%\freeime\freeimehtm
Del /a/f/s/q "%ProgFile%\freeime\极点五笔 纪念版url
Del /a/f/s/q "%ProgFile%\freeime\gif
Del /a/f/s/q "%ProgFile%\freeime\txt
Rd /s/q "%ProgFile%\freeime\skin\Apple_Z
Rd /s/q "%ProgFile%\freeime\skin\bear2
Rd /s/q "%ProgFile%\freeime\skin\Elegant
Rd /s/q "%ProgFile%\freeime\skin\IF_Taiji
Rd /s/q "%ProgFile%\freeime\skin\time
Rd /s/q "%ProgFile%\freeime\skin\du
Rd /s/q "%ProgFile%\freeime\skin\huan
Rd /s/q "%ProgFile%\freeime\skin\Tango NightXP
Rd /s/q "%ProgFile%\freeime\skin\youxihou
Rd /s/q "%ProgFile%\freeime\skin\blueness
Rd /s/q "%ProgFile%\freeime\skin\Hello Kitty
Rd /s/q "%ProgFile%\freeime\skin\MG_S
Rd /s/q "%ProgFile%\freeime\skin\VistaHeiMini
cls
title=正在清理 酷我音乐盒 目录
Del /a/f/s/q "%CurUser%\Application Data\Microsoft\Internet Explorer\Quick Launch\酷我音乐盒
Rd /s/q "%CurUser%\「开始」菜单\程序\酷我音乐盒
Del /a/f/s/q "%ProgFile%\KWMUSIC\readmetxt
cls
title=正在清理 MSOFFICE 目录
Del /a/f/s/q "%ProgFile%\Microsoft Office\OFFICE11\2052\chm
Del /a/f/s/q "%ProgFile%\Microsoft Office\OFFICE11\2052\htm
cls
title=正在清理 PPStream 目录
Del /a/f/q "%AllUser%\「开始」菜单\程序\PPS 网络电视
Rd /s/q "%AllUser%\「开始」菜单\程序\PPStream
Del /a/f/s/q "%ProgFile%\PPStream\url
Del /a/f/s/q "%ProgFile%\PPStream\whatsnewtxt
cls
title=正在清理 RealPlayer 目录
Del /a/f/q "%ProgFile%\Real\RealPlayer\Setup\setupexe"
Del /a/f/q "%ProgFile%\Real\RealPlayer\chm
Del /a/f/q "%ProgFile%\Real\RealPlayer\txt
Del /a/f/q "%ProgFile%\Real\RealPlayer\html
cls
title=正在清理 RealPlayer KoWo 目录
Rd /s/q "%ProgFile%\KWREAL"
cls
title=正在清理 迅雷 目录
Del /a/f/q "%ProgFile%\Thunder\AyuConfigexe
Del /a/f/s/q "%ProgFile%\Thunder Network\Thunder\Program\Update\"
Rd /s/q "%AllUser%\Application Data\Thunder Network\KanKan"
Rd /s/q "%ProgFile%\Thunder Network\Thunder\Components\KanKan"
cls
title=正在清理 WINRAR 目录
Del /a/f/q "%ProgFile%\WinRAR\diz
Del /a/f/q "%ProgFile%\WinRAR\txt
Del /a/f/q "%ProgFile%\WinRAR\chm
Del /a/f/q "%ProgFile%\WinRAR\htm
cls
title=正在清理 千千静听 目录
Del /a/f/q "%ProgFile%\千千静听\readmetxt
Del /a/f/s/q "%CurUser%\Application Data\Microsoft\Internet Explorer\Quick Launch\千千静听
title=正在清理紫光拼音输入法用户词库
Del /a/f/q "%AllUser%\Application Data\UNISPIM\usrwldat"
Del /a/f/q "%CurUser%\Application Data\UNISPIM\usrwldat"
cls
title=正在清理超级兔子注册表备份
Rd /s/q "%WinDir%\MAGICSET"
cls
title=正在清理磁盘检测时生成的损坏文件备份
Rd /s/q "%HomeDrive%\Found"
For /f "delims=\" %%i in ('dir "%HomeDrive%\Found" /adh /b') do Rd /s/q "%HomeDrive%\%%i"
cls
title=正在清理虚拟内存文件
Del /a/f/q "%HomeDrive%\PageFilesys"
cls
title=正在清理系统休眠文件
Del /a/f/q "%HomeDrive%\HiberFilsys"
cls
title=正在清理系统补丁卸载文件
echoRd /s/q "%WinDir%\$$"
For /f "delims=\" %%i in ('dir "%Windir%\$$" /adh /b') do Rd /s/q "%WinDir%\%%i"
cls
title=正在清理系统激活程序
Del /a/f/s/q "%SysDir%\oobe\"
cls
title=正在清理多余鼠标方案
Del /a/f/s/q "%WinDir%\Cursors\"
cls
title=正在清理系统临时文件
Del /a/f/s/q "%WinDir%\Temp\"
cls
title=正在清理程序预读文件
Del /a/f/s/q "%WinDir%\Prefetch\"
cls
title=正在清理驱动预编译文件
Del /a/f/s/q "%WinDir%\Inf\PNF"
cls
echo清理硬件驱动备份
Del /a/f/s/q "%SysDir%\ReinstallBackups\"
cls
etitle=正在清理 繁体 输入法
Rd /s/q "%WinDir%\ime\CHTIME"
cls
title=正在清理 日文 输入法
Rd /s/q "%WinDir%\ime\IMJP8_1"
Rd /s/q "%WinDir%\ime\imejp"
Rd /s/q "%WinDir%\ime\imejp98"
cls
title=正在清理 韩文 输入法
Rd /s/q "%WinDir%\ime\IMKR6_1"
cls
title=正在清理 繁体 输入法的 手写识别 文件
Del /a/f/q "%WinDir%\ime\CHTIME\Applets\HWXCHTDLL"
cls
title=正在清理 仓颉码 输入法
Rd /s/q "%SysDir%\IME\CINTLGNT"
cls
title=正在清理 注音 输入法
Rd /s/q "%SysDir%\IME\TINTLGNT"
cls
title=正在清理希腊、土耳其、中欧等字体
Del /a/f/q "%WinDir%\Fonts\gulimttc"
Del /a/f/q "%WinDir%\Fonts\msgothicttc"
cls
title=正在清理网页临时文件
Del /a/f/s/q "%CurUser%\Local Settings\Temporary Internet Files\"
cls
title=正在清理用户临时文件
Del /a/f/s/q "%CurUser%\Local Settings\Temp\"
cls
title=正在清理网页历史纪录
Del /a/f/s/q "%CurUser%\Local Settings\History\"
cls
title=正在清理访问过的网络邻居快捷方式
Del /a/f/s/q "%CurUser%\NetHood\"
cls
title=正在清理未完成的打印任务
Del /a/f/s/q "%CurUser%\PrintHood\"
cls
title=正在清理最近使用的文档纪录
Del /a/f/s/q "%CurUser%\Recent\"
cls
title=正在清理网页 Cookie
Del /a/f/s/q "%CurUser%\Cookies\"
cls
title=正在清理图标缓存文件
Del /a/f/q "%CurUser%\Local Settings\Application Data\IconCachedb"
cls
title=正在清理无用的 Windows 程序
Del /a/f/s/q "%ProgFile%\Outlook Express\txt
Del /a/f/s/q "%ProgFile%\Online Services\
Rd /s/q "%ProgFile%\Messenger"
Rd /s/q "%ProgFile%\Movie Maker"
Rd /s/q "%ProgFile%\MSN Gaming Zone"
Rd /s/q "%ProgFile%\NetMeeting"
cls
title=正在清理注册表最后一次访问位置
reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Applets\Regedit" /v "LastKey" /t "REG_SZ" /d "我的电脑" /f
cls
title=正在清理注册表中的程序运行记录
reg delete "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\RunMRU" /f
reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\RunMRU" /f
cls
title=正在清理最后一次正确配置文件
Rd /s/q "%WinDir%\LastGood"
cls
title=正在清理注册表等文件备份
Rd /s/q "%WinDir%\Repair"
cls
title=正在清理系统补丁生成的系统驱动备份
Del /a/f/q "%WinDir%\Driver Cache\i386\ntkrnlmpexe"
Del /a/f/q "%WinDir%\Driver Cache\i386\ntkrnlpaexe"
Del /a/f/q "%WinDir%\Driver Cache\i386\ntkrpampexe"
Del /a/f/q "%WinDir%\Driver Cache\i386\ntoskrnlexe"
cls
title=正在清理 DESKTOPINI
FOR %%M IN (C D E F G H I J K L M N O P Q R S T U V W X Y Z) DO (DEL/A/F/Q %%M:\desktopini
)
cls
title=正在清理所有磁盘根目录autoruninf文件
FOR %%M IN (C D E F G H I J K L M N O P Q R S T U V W X Y Z) DO (DEL/A/F/Q %%M:\AUTORUNINF
DEL/A/F/Q %%M:\SXSEXE
DEL/A/F/Q %%M:\OSOEXE
DEL/A/F/Q %%M:\SETUPEXE)
title=正在清理系统垃圾
Del /a/f/s/q "%HomeDrive%\tmp"
Del /a/f/s/q "%HomeDrive%\_mp"
Del /a/f/s/q "%HomeDrive%\log"
Del /a/f/s/q "%HomeDrive%\gid"
Del /a/f/s/q "%HomeDrive%\chk"
Del /a/f/s/q "%HomeDrive%\old"
Rd /s/q "%HomeDrive%\RECYCLER
Rd /s/q "%HomeDrive%\System Volume Information
Del /a/f/s/q "%WinDir%\bak"
Rd /s/q "%WinDir%\assembly
del /f /s /q "%WinDir%\SoftwareDistribution\Download\
del /f /s /q "%WinDir%\inf\pnf
del /f /s /q %SysDir%\CatRoot2\tmped0
del /f /s /q %SysDir%\spool\drivers\w32x86\3\
del /f /s /q %SysDir%\tmp
del /f /s /q %SysDir%\_mp
del /f /s /q %SysDir%\log
del /f /s /q %SysDir%\gid
del /f /s /q %SysDir%\chk
del /f /s /q %SysDir%\old
del /f /s /q %SysDir%%\recycled\
cls
title=正在查杀SXS病毒
echo::停止正在运行的SXSEXE和SVOHOSTEXE进程，请稍侯
@echo::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
TASKKILL /F /T /IM SXSEXE
TASKKILL /F /T /IM SVOHOSTEXE
TASKKILL /F /T /IM ROSEEXE
@echo::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
@echo::恢复注册表中不给设置显示隐藏文件的项目,请稍侯
@echo::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
ECHO Windows Registry Editor Version 500>SHOWALLreg
ECHO [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL]>>SHOWALLreg
ECHO "CheckedValue"=->>SHOWALLreg
ECHO [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL]>>SHOWALLreg
ECHO "CheckedValue"=dword:00000001>>SHOWALLreg
@echo::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
@echo::删除系统目录下的SXSEXE、SVOHOSTEXE和WINSCOKDLL文件,请稍侯
@echo::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
ATTRIB -R -H -S -A %SysDir%\SXSEXE
ATTRIB -R -H -S -A %SysDir%\SVOHOSTEXE
ATTRIB -R -H -S -A %SysDir%\WINSCOKDLL
DEL /F /Q /A -R -H -S -A %SysDir%\SXSEXE
DEL /F /Q /A -R -H -S -A %SysDir%\SVOHOSTEXE
DEL /F /Q /A -R -H -S -A %SysDir%\WINSCOKDLL
ATTRIB -R -H -S -A %WinDir%\SXSEXE
ATTRIB -R -H -S -A %WinDir%\SVOHOSTEXE
ATTRIB -R -H -S -A %WinDir%\WINSCOKDLL
DEL /F /Q /A -R -H -S -A %WinDir%\SXSEXE
DEL /F /Q /A -R -H -S -A %WinDir%\SVOHOSTEXE
DEL /F /Q /A -R -H -S -A %WinDir%\WINSCOKDLL
ATTRIB -R -H -S -A %WinDir%\System\SXSEXE
ATTRIB -R -H -S -A %WinDir%\System\SVOHOSTEXE
ATTRIB -R -H -S -A %WinDir%\System\WINSCOKDLL
DEL /F /Q /A -R -H -S -A %WinDir%\System\SXSEXE
DEL /F /Q /A -R -H -S -A %WinDir%\System\SVOHOSTEXE
DEL /F /Q /A -R -H -S -A %WinDir%\System\WINSCOKDLL
ATTRIB -R -H -S -A %SysDir%\dllcache\SXSEXE
ATTRIB -R -H -S -A %SysDir%\dllcache\SVOHOSTEXE
ATTRIB -R -H -S -A %SysDir%\dllcache\WINSCOKDLL
DEL /F /Q /A -R -H -S -A %SysDir%\dllcache\SXSEXE
DEL /F /Q /A -R -H -S -A %SysDir%\dllcache\SVOHOSTEXE
DEL /F /Q /A -R -H -S -A %SysDir%\dllcache\WINSCOKDLL
@echo::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
@echo::删除每个分区下的SXSEXE和AUTORUNINF文件，请稍侯
@echo::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
FOR %%a IN ( C: D: E: F: G: H: I: J: K: L: M: N: O: P: Q: R: S: T: U: V: W: X: Y: Z: ) DO ATTRIB -R -H -S -A %%a\SXSEXE & DEL /F /Q /A -R -H -S -A %%a\SXSEXE & ATTRIB -R -H -S -A %%a\AUTORUNINF & DEL /F /Q /A -R -H -S -A %%a\AUTORUNINF
@echo::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
@echo::删除注册表中自启动项，请稍侯
@echo::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
ECHO Windows Registry Editor Version 500>SoundMamreg
ECHO [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\SoundMam]>>SoundMamreg
ECHO [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]>>SoundMamreg
ECHO "SoundMam"=->>SoundMamreg
REGEDIT /S SoundMamreg
DEL /F /Q SoundMamreg
REGEDIT /S SHOWALLreg
DEL /F /Q SHOWALLreg
cls
echo
echo
echo ╭════════════════════╮
echo ‖ Code By：showgrass ‖
echo ╰════════════════════╯
echo
echo
title= 即将清理系统所有多余的启动项目 是否同意？？？
echo 即将清理系统所有多余的启动项目 是否同意？？？
echo
echo 按 Y 键同意许可并执行清理过程，按 N 键退出脚本。
echo
echo
:cho
set choice=
set /p choice= 请输入 相关按键 + 回车键 执行本脚本:
IF NOT "%Choice%"=="" SET Choice=%Choice:~0,1%
if /i "%choice%"=="y" goto start2
if /i "%choice%"=="n" goto exit
echo 选择无效，请重新输入
echo
goto cho
pause >nul
:start2
title=正在清理所有多余的启动项目
reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /va /f
reg delete HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /va /f
reg add HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /v ctfmonexe /d C:\WINDOWS\system32\ctfmonexe
reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg" /f
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\IMJPMIG81"
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\IMJPMIG81" /v command /d ""C:\WINDOWS\IME\imjp8_1\IMJPMIGEXE" /Spoil /RemAdvDef /Migration32"
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\IMJPMIG81" /v hkey /d HKLM
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\IMJPMIG81" /v inimapping /d 0
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\IMJPMIG81" /v item /d IMJPMIG
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\IMJPMIG81" /v key /d SOFTWARE\Microsoft\Windows\CurrentVersion\Run
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\PHIME2002A"
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\PHIME2002A" /v command /d "C:\WINDOWS\system32\IME\TINTLGNT\TINTSETPEXE /IMEName"
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\PHIME2002A" /v hkey /d HKLM
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\PHIME2002A" /v inimapping /d 0
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\PHIME2002A" /v item /d TINTSETP
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\PHIME2002A" /v key /d SOFTWARE\Microsoft\Windows\CurrentVersion\Run
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\PHIME2002ASync"
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\PHIME2002ASync" /v command /d ""C:\WINDOWS\IME\imjp8_1\IMJPMIGEXE" /Spoil /RemAdvDef /Migration32"
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\PHIME2002ASync" /v hkey /d HKLM
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\PHIME2002ASync" /v inimapping /d 0
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\PHIME2002ASync" /v item /d TINTSETP
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\PHIME2002ASync" /v key /d SOFTWARE\Microsoft\Windows\CurrentVersion\Run
del "C:\Documents and Settings\All Users\「开始」菜单\程序\启动\" /q /f
del "C:\Documents and Settings\Default User\「开始」菜单\程序\启动\" /q /f
del "%userprofile%\「开始」菜单\程序\启动\" /q /f
cls
title=系统垃圾清理脚本showgrass一月增强版（支持PE下使用） Code By showgrass
echo
ECHO
ECHO
echo ╭════════════════════╮
echo ‖ Code By：showgrass ‖
echo ╰════════════════════╯
ECHO
echo 当前系统时间 %date% %tm1%点%TM2%分%TM3%秒
ECHO
title 生成倒计时脚本
echo WScriptSleep 500 > %temp%\tmp$$$vbs
title 系统垃圾清理完成！5秒后自动退出本页！
set /a i =5+1
:Timeout1
if %i% == 1 goto Next
setlocal
set /a i = %i% - 1
title 系统垃圾清理完成！%i%秒后自动退出本页！
echo 系统垃圾清理完成！%i%秒后自动退出本页！
cscript //nologo %temp%\tmp$$$vbs
goto Timeout1
goto End
@Echo Off
:exit
cls
cls
title=系统垃圾清理脚本showgrass一月增强版（支持PE下使用） Code By showgrass
echo
ECHO
echo ╭════════════════════╮
echo ‖ Code By:showgrass ‖
echo ╰════════════════════╯
ECHO
echo 当前系统时间 %date% %tm1%点%TM2%分%TM3%秒
echo
title 生成倒计时脚本
echo WScriptSleep 500 > %temp%\tmp$$$vbs
set /a i =5+1:
Timeout2
if %i% == 1 goto Next
setlocal
set /a i = %i% - 1
title 您没有同意使用本脚本清理系统垃圾！%i%秒后自动退出本页！
echo 您没有同意使用本脚本清理系统垃圾！%i%秒后自动退出本页！
cscript //nologo %temp%\tmp$$$vbs
goto Timeout2
goto End
:Next
cls &
echo
for %%f in (%temp%\tmp$$$vbs) do del %%f
echo
exit
title 完成退出
echo完成退出

---