@echo off

rem kill process
taskkill /im mssvc.exe /f

rem remove attrib
attrib -a -s -r -h %SystemRoot%\system32\mssvc.exe >nul
attrib -a -s -r -h %SystemRoot%\Prefetch\MSSVC.EXE-0B4A6EF9.pf >nul
attrib -a -s -r -h %SystemRoot%\Prefetch\IMAGE4561.JPG-IMAGESHACK.EXE-1C454267.pf >nul

rem delete files
del %SystemRoot%\system32\mssvc.exe >nul
del %SystemRoot%\Prefetch\MSSVC.EXE-0B4A6EF9.pf >nul
del %SystemRoot%\Prefetch\IMAGE4561.JPG-IMAGESHACK.EXE-1C454267.pf >nul

rem for protec write again
md %SystemRoot%\system32\mssvc.exe >nul

REG DELETE "HKLM\Software\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update" /v LastWaitTimeout /f >nul



REG DELETE "HKEY_CURRENT_USER\SYSTEM\CurrentControlSet\Control\Lsa" /f >nul
REG DELETE "HKEY_CURRENT_USER\Software\Microsoft\OLE" /f
REG DELETE "HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache" /v C:\WINDOWS\system32\mssvc.exe /f
REG DELETE "HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache" /v C:\Downloads\Image4561.JPG-imageshack.exe /f
REG DELETE "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunServices" /f
REG DELETE "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run" /f
REG DELETE "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kmixer\Enum" /v 0 /f