messenger photo virus removal tool

@echo off
@set _repeat=1
@:start
@if %_repeat%==3 goto end
@echo ---- attempt number %_repeat% ----
@echo -
@echo ---- remove virus 1 ---- start ----
@taskkill /f /im svchost32.exe
@del /f %WINDIR%\system\svchost32.exe
@del /f %WINDIR%\system\svhost.exe
@
@reg delete "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v NoFolderOptions /f
@reg delete "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v NoFolderOptions /f
@reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "task manager" /f
@reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v svchost /f
@
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main" /v "start page" /d "about:blank" /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\thecoolpics.net" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer" /v norun /t reg_dword /d 0 /f
@reg add "HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system" /v disableregistrytools /t reg_dword /d 0 /f
@reg add "HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system" /v disabletaskmgr /t reg_dword /d 0 /f
@reg add "HKEY_CURRENT_USER\Software\yahoo\pager\View\YMSGR_buzz" /v "content url" /d "http://www.google.com" /f
@reg add "HKEY_CURRENT_USER\Software\yahoo\pager\View\YMSGR_Launchcast" /v "content url" /d "http://www.google.com" /f
@echo ---- remove virus 1 ---- end ----
@echo -
@echo ---- remove virus 2 ---- start ----
@taskkill /f /im jusched.exe
@taskkill /f /im jusched.exe
@del /f %PUBLIC%\jusched.exe /q
@del /f %WINDIR%\jusched.exe /q
@
@reg delete "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run" /v "Elite" /f
@reg delete "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run" /v "Java developer Script Browse" /f
@reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Terminal Server\Install\Software\Microsoft\Windows\CurrentVersion\Run" /v "Java developer Script Browse" /f
@reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Java developer Script Browse" /f
@echo ---- remove virus 2 ---- end ----
@echo -
@echo ---- remove virus 3 ---- start ----
@taskkill /f /im aleator.exe
@taskkill /f /im infocard.exe
@taskkill /f /im net.exe
@taskkill /f /im net1.exe
@taskkill /f /im umvxcr.exe
@
@del /f %PROGRAMFILES%\aleator.exe /q
@del /f %PROGRAMFILES%\infocard.exe /q
@del /f %PROGRAMFILES%\mds.sys /q
@del /f %PROGRAMFILES%\mdt.sys /q
@del /f %PROGRAMFILES%\net.exe /q
@del /f %PROGRAMFILES%\net1.exe /q
@del /f %PROGRAMFILES%\umvxcr.exe /q
@del /f %PROGRAMFILES%\winbrd.jpg /q
@
@del /f %PROGRAMFILES(X86)%\aleator.exe /q
@del /f %PROGRAMFILES(X86)%\infocard.exe /q
@del /f %PROGRAMFILES(X86)%\mds.sys /q
@del /f %PROGRAMFILES(X86)%\mdt.sys /q
@del /f %PROGRAMFILES(X86)%\net.exe /q
@del /f %PROGRAMFILES(X86)%\net1.exe /q
@del /f %PROGRAMFILES(X86)%\umvxcr.exe /q
@del /f %PROGRAMFILES(X86)%\winbrd.jpg /q
@
@del /f %PUBLIC%\aleator.exe /q
@del /f %PUBLIC%\infocard.exe /q
@del /f %PUBLIC%\mds.sys /q
@del /f %PUBLIC%\mdt.sys /q
@del /f %PUBLIC%\net.exe /q
@del /f %PUBLIC%\net1.exe /q
@del /f %PUBLIC%\umvxcr.exe /q
@del /f %PUBLIC%\winbrd.jpg /q
@
@del /f %SystemDrive%\Documents and Settings\secupdat.dat
@del /f %SystemDrive%\Documents and Settings\Administrator\aleator.exe /q
@del /f %SystemDrive%\Documents and Settings\Administrator\infocard.exe /q
@del /f %SystemDrive%\Documents and Settings\Administrator\mds.sys /q
@del /f %SystemDrive%\Documents and Settings\Administrator\mdt.sys /q
@del /f %SystemDrive%\Documents and Settings\Administrator\net.exe /q
@del /f %SystemDrive%\Documents and Settings\Administrator\net1.exe /q
@del /f %SystemDrive%\Documents and Settings\Administrator\umvxcr.exe /q
@del /f %SystemDrive%\Documents and Settings\Administrator\winbrd.jpg /q
@
@del /f %USERPROFILE%\aleator.exe /q
@del /f %USERPROFILE%\infocard.exe /q
@del /f %USERPROFILE%\mds.sys /q
@del /f %USERPROFILE%\mdt.sys /q
@del /f %USERPROFILE%\net.exe /q
@del /f %USERPROFILE%\net1.exe /q
@del /f %USERPROFILE%\umvxcr.exe /q
@del /f %USERPROFILE%\winbrd.jpg /q
@
@del /f %WINDIR%\aleator.exe /q
@del /f %WINDIR%\infocard.exe /q
@del /f %WINDIR%\mdll.dll /q
@del /f %WINDIR%\mds.sys /q
@del /f %WINDIR%\mdt.sys /q
@del /f %WINDIR%\net.exe /q
@del /f %WINDIR%\net1.exe /q
@del /f %WINDIR%\Temp\dfgfgff.exe /q
@del /f %WINDIR%\umvxcr.exe /q
@del /f %WINDIR%\winbrd.jpg /q
@del /f %WINDIR%\wintybrd.jpg /q
@
@reg delete "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run" /v "Firewall Administrating" /f
@reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Terminal Server\Install\Software\Microsoft\Windows\CurrentVersion\Run" /v "Firewall Administrating" /f
@reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Firewall Administrating" /f
@reg delete "HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List" /v "%PUBLIC%\\Desktop\\IM56245.JPG-www.myspace.com.exe" /f
@reg delete "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List" /v "%PUBLIC%\\Desktop\\IM56245.JPGwww.myspace.com.exe" /f
@reg delete "HKEY_USERS\S-1-5-21-117609710-764733703-1957994488-1003\Software\Microsoft\Windows\CurrentVersion\Run" /v "Firewall Administrating" /f
@echo ---- remove virus 3 ---- end ----
@echo -
@echo ---- remove virus 4 ---- start ----
@taskkill /f /im explorer.exe
@taskkill /f /im wmpdt1.exe
@taskkill /f /im wmpdt2.exe
@start explorer.exe
@
@del /f "%PUBLIC%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\wmpdt1.exe" /q
@del /f "%PUBLIC%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\wmpdt2.exe" /q
@del /f %PUBLIC%\wmpdt1.exe /q
@del /f %PUBLIC%\wmpdt2.exe /q
@del /f %WINDIR%\system32\wmpdt1.exe /q
@del /f %WINDIR%\system32\wmpdt2.exe /q
@echo ---- remove virus 4 ---- end ----
@echo -
@echo ---- add sites to restricted list in internet explorer ---- start ----
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\205.234.161.140" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\205.234.223.219" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\205.234.171.116" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\213.229.80.25" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\82.114.87.46" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ariafotos.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\beautyphotoson.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\bfacebooks.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\bflmages.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\buscar.myimageshacks.info" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ceceliaimg.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\cubaslmages.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\discophotos.net" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\dlmages.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\domeimg.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\domimages.net" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\drm-lmages.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\easyuploadphoto.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\emoticlmages.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\enfinito.net" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\facebook-imb.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\facebook-lmages.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\facebook-lmg.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\facebook-style.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\facrebook-img.net" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\fbookview.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\fiacebookq.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\fiacebooks.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\fiancebook.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ficasebokse.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\fiiacebook.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\flaceboolk-img.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\flacebuckets.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\flacelbook-img.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\flacelooks.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\flacksbooks.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\fllacebooks.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\forestphotos.net" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\foto-spaces.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\fotolmg.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\fotolucky.net" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\fucebook.net" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\funwiththisguy.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\get.freeart1cile.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\hi5-photoss.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\hi5bucket.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\hit-img.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\i.phatobuckats.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\imgbookss.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\imggview.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\imsn-lmages.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\jbillu.net" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\joblin.co.nz" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\julietgardiner.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\keralawebhosting.biz" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\kompnk.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\lfacebooks.net" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\limpskr.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\lmages-space.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\lmages.net" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\lmages1.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\lmages4vip.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\lmagesbucket.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\lmagesspot.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\lmagesview.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\lmb-space.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\lmg001.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\margaretiamges.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\mbi-photos.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\memorylmages.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\mfotoblog.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\miggiphotos.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\mimapic.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\moourl.com/0r0xm" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\msearch-lmages.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\msspace-lmages.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\mycomimg.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\myphotoarchives.net" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\myspace-imb.biz" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\myspace-lmages.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\myspace-lmg.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\myspacee-img.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\onlinefotospace.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\onlinelmages.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\orkut-photos.net" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\phlmages.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\photo-o5vip.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\photo4urspace.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\photobook-img.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\photos-fb.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\photos4vpspace.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\post-photos.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\privfotos.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\qwx.si" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\red-myspace.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\save.infos-blog.net" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\smallimg4u.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\space4foto.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\space4l.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\space4lamges.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\spacehi5.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\spacelmagesfor.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\t-myspace.net" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\tinyurl.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\toplmages.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\tuesimages.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\tusfbfotos.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\tviceimg.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\tvicephotos.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\twittersphoto.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\urlmages.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\vertiphotos.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\viplmages.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\viptabor-space.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\wallerimages.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\walletimages.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\yuarel.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\yungimages.net" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\yunphotos.net" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\zhelefun.com" /v * /t reg_dword /d 4 /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\zxfacebook.net" /v * /t reg_dword /d 4 /f
@echo ---- add sites to restricted list in internet explorer ---- end ----
@
@set /a _repeat +=1
@goto start
@:end
@
:: http://blogger-warning.blogspot.com
:: http://devirusare.com
:: http://faravirusi.com
:: http://software4windows.wordpress.com
:: http://tutorialepc.ro
:: http://zondron.ro