@ECHO OFF

CLS

TITLE Malware Zero

SET LANGCODE=%1
SET CACHEPROTECT=%2

REM * Check - Compression
IF NOT EXIST "DB\CHECK\MZK" (
	IF "%LANGCODE%" == "GLOBAL" (
		ECHO Please extract the compressed file correctly before running.
	)
	IF "%LANGCODE%" == "KOREAN" (
		ECHO 압축 파일을 올바르게 해제 후 실행해주세요.
	)
	ECHO.
	PAUSE
	EXIT /B
)

REM * Check - Start
IF NOT "%LANGCODE%" == "GLOBAL" (
	IF NOT "%LANGCODE%" == "KOREAN" (
		ECHO 잘못된 접근입니다. START.BAT 파일로 실행해주세요.
		ECHO.
		ECHO The wrong approach. Please run as START.BAT file.
		ECHO.
		PAUSE
		EXIT /B
	)
)

REM * Setup - Path
IF DEFINED SYSTEMROOT (
	SET "PATH=%CD%;%SYSTEMROOT%\System32\wbem;%SYSTEMROOT%;%SYSTEMROOT%\System32;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\"
) ELSE (
	IF DEFINED WINDIR (
		SET "PATH=%CD%;%WINDIR%\System32\wbem;%WINDIR%;%WINDIR%\System32;%WINDIR%\System32\WindowsPowerShell\v1.0\"
	) ELSE (
		IF "%LANGCODE%" == "GLOBAL" (
			ECHO The environment variable settings are incorrect.
		)
		IF "%LANGCODE%" == "KOREAN" (
			ECHO 환경 변수 설정이 올바르지 않습니다.
		)
		ECHO.
		PAUSE
		EXIT /B
	)
)

REM * Setup - Window Size
MODE.COM CON COLS=98 LINES=30 >Nul 2>Nul

IF EXIST "%TEMP%\CMDQUICKEDITDISABLE" (
	REG.EXE IMPORT REPAIR\CMD_QUICKEDIT_ENABLE.REG >Nul 2>Nul
	DEL /F /Q /A "%TEMP%\CMDQUICKEDITDISABLE" >Nul 2>Nul
)

REM * Setup - Variable Initialization
SET ACTIVESCAN=0
SET CHKEXPLORER=0
SET CURRENTDATE=NULL
SET DATECHK=0
SET DATETIME=NULL
SET DDRV=NULL
SET ERRCODE=0
SET FILESIZE=0
SET FORCEEND=0
SET MZALLUSERSPROFILE=
SET MZAPPDATA=
SET MZCOMMONPROGRAMFILES=
SET MZCOMMONPROGRAMFILESX86=
SET MZLOCALAPPDATA=
SET MZLOCALLOWAPPDATA=
SET MZPROGRAMFILES=
SET MZPROGRAMFILESX86=
SET MZPUBLIC=
SET MZSYSTEMROOT=
SET MZUSERPROFILE=
SET NUMTMP=0
SET OSVER=NULL
SET REGTMP=NULL
SET RPTDATE=NULL
SET SID=NULL
SET STRTMP=NULL
SET UNIQ=%RANDOM%%RANDOM%%RANDOM%
SET VCHECK=%RANDOM%%RANDOM%%RANDOM%%RANDOM%%RANDOM%%RANDOM%%RANDOM%.v
SET VDENY=%RANDOM%%RANDOM%%RANDOM%%RANDOM%%RANDOM%%RANDOM%%RANDOM%.v
SET VFAIL=%RANDOM%%RANDOM%%RANDOM%%RANDOM%%RANDOM%%RANDOM%%RANDOM%.v
SET VREBOOT=%RANDOM%%RANDOM%%RANDOM%%RANDOM%%RANDOM%%RANDOM%%RANDOM%.v
SET VSEARCH=%RANDOM%%RANDOM%%RANDOM%%RANDOM%%RANDOM%%RANDOM%%RANDOM%.v
SET VSUCCESS=%RANDOM%%RANDOM%%RANDOM%%RANDOM%%RANDOM%%RANDOM%%RANDOM%.v
SET VTEXT1=%RANDOM%%RANDOM%%RANDOM%%RANDOM%%RANDOM%%RANDOM%%RANDOM%.v
SET VTEXT2=%RANDOM%%RANDOM%%RANDOM%%RANDOM%%RANDOM%%RANDOM%%RANDOM%.v
SET VTEXT3=%RANDOM%%RANDOM%%RANDOM%%RANDOM%%RANDOM%%RANDOM%%RANDOM%.v
SET VTEXT4=%RANDOM%%RANDOM%%RANDOM%%RANDOM%%RANDOM%%RANDOM%%RANDOM%.v
SET VXXXX=%RANDOM%%RANDOM%%RANDOM%%RANDOM%%RANDOM%%RANDOM%%RANDOM%.v
SET VXXYY=%RANDOM%%RANDOM%%RANDOM%%RANDOM%%RANDOM%%RANDOM%%RANDOM%.v
SET YNCCC=

GOTO PASSED

:ERROR104
SET ERRCODE=104 & GOTO MZ

:PASSED
REM * Check - Required Variables
IF NOT DEFINED SYSTEMDRIVE (
	IF NOT DEFINED HOMEDRIVE (
		SET ERRCODE=104
	) ELSE (
		SET "SYSTEMDRIVE=%HOMEDRIVE%"
	)
)
IF NOT DEFINED SYSTEMROOT (
	IF NOT DEFINED WINDIR (
		SET ERRCODE=104
	) ELSE (
		SET "SYSTEMROOT=%WINDIR%"
	)
)

REM * Check - Random Variables
IF NOT DEFINED RANDOM (
	SET RANDOM=32767
)

REM * Setup - Random Variables
SET /A RAND=%RANDOM% * 99

DEL /F /Q /A DB_ACTIVE\*.DB >Nul 2>Nul
DEL /F /Q /S /A VARIABLE\*.V >Nul 2>Nul
DEL /F /A REGTOOL.EXE.STACKDUMP >Nul 2>Nul

>VARIABLE\%VCHECK% ECHO 0
>VARIABLE\%VDENY% ECHO.
>VARIABLE\%VFAIL% ECHO 0
>VARIABLE\%VREBOOT% ECHO 0
>VARIABLE\%VSEARCH% ECHO 0
>VARIABLE\%VSUCCESS% ECHO 0
>VARIABLE\%VTEXT1% ECHO.
>VARIABLE\%VTEXT2% ECHO.
>VARIABLE\%VTEXT3% ECHO.
>VARIABLE\%VTEXT4% ECHO.
>VARIABLE\%VXXXX% ECHO 0
>VARIABLE\%VXXYY% ECHO 0

REM * Check - Supported Language
CHCP.COM 949 >Nul 2>Nul
IF %ERRORLEVEL% NEQ 0 (
	CLS
	ECHO Oops, Unsupported Korean Language ^!
	ECHO.
	PAUSE
	EXIT /B
)

REM * Setup - Architecture
IF /I "%PROCESSOR_ARCHITECTURE%" == "AMD64" (
	SET ARCHITECTURE=x64
) ELSE (
	SET ARCHITECTURE=x86
)

SET "EXEGREP=TOOLS\GREP\%ARCHITECTURE%\GREP.EXE"
SET "EXESETACL=TOOLS\SETACL\%ARCHITECTURE%\SETACL.EXE"

CLS

REM * Reset - Malicious Windows Load Files
DIR /B /A-D "%WINDIR%\SYSTEM32\MICROSOFT.EXE" >Nul 2>Nul
IF %ERRORLEVEL% EQU 0 (
	REN "%WINDIR%\SYSTEM32\MICROSOFT.EXE" "MICROSOFT.EXE.%RANDOM%.INFECTED" >Nul 2>Nul
	>VARIABLE\%VCHECK% ECHO 1
)
DIR /B /A-D "%WINDIR%\SYSWOW64\MICROSOFT.EXE" >Nul 2>Nul
IF %ERRORLEVEL% EQU 0 (
	REN "%WINDIR%\SYSWOW64\MICROSOFT.EXE" "MICROSOFT.EXE.%RANDOM%.INFECTED" >Nul 2>Nul
	>VARIABLE\%VCHECK% ECHO 1
)
FOR /F "DELIMS=" %%Z IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows\Load" 2^>Nul') DO (
	IF /I "%%Z" == "MICROSOFT NET" (
		TOOLS\000.000 ADD "HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows" /v Load /d "" /f >Nul 2>Nul
		>VARIABLE\%VCHECK% ECHO 1
	)
)
REM * Reset - Malicious AppInit_DLLs Values (x64 or x86)
FOR /F "DELIMS=" %%Z IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs" 2^>Nul') DO (
	IF /I "%%Z" == "HIMYM.DLL" (
		TOOLS\000.000 ADD "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows" /v AppInit_DLLs /d "" /f >Nul 2>Nul
		TOOLS\000.000 ADD "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows" /v LoadAppInit_DLLs /d 0 /f >Nul 2>Nul
		>VARIABLE\%VCHECK% ECHO 1
	)
	IF /I "%%Z" == "WS2HELP.DLL" (
		TOOLS\000.000 ADD "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows" /v AppInit_DLLs /d "" /f >Nul 2>Nul
		TOOLS\000.000 ADD "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows" /v LoadAppInit_DLLs /d 0 /f >Nul 2>Nul
		>VARIABLE\%VCHECK% ECHO 1
	)
)
FOR /F "DELIMS=" %%Z IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs" 2^>Nul') DO (
	IF /I "%%Z" == "HIMYM.DLL" (
		TOOLS\000.000 ADD "HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Windows" /v AppInit_DLLs /d "" /f >Nul 2>Nul
		TOOLS\000.000 ADD "HKLM\Software\Wow6432Node:Microsoft\Windows NT\CurrentVersion\Windows" /v LoadAppInit_DLLs /d 0 /f >Nul 2>Nul
		>VARIABLE\%VCHECK% ECHO 1
	)
	IF /I "%%Z" == "WS2HELP.DLL" (
		TOOLS\000.000 ADD "HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Windows" /v AppInit_DLLs /d "" /f >Nul 2>Nul
		TOOLS\000.000 ADD "HKLM\Software\Wow6432Node:Microsoft\Windows NT\CurrentVersion\Windows" /v LoadAppInit_DLLs /d 0 /f >Nul 2>Nul
		>VARIABLE\%VCHECK% ECHO 1
	)
	IF /I "%%Z" == "%SYSTEMROOT%\SYSTEM32\APPINITX64.DLL" (
		TOOLS\000.000 ADD "HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Windows" /v AppInit_DLLs /d "%SYSTEMROOT%\SysWOW64\AppInitx86.dll" /f >Nul 2>Nul
	)
)
SETLOCAL ENABLEDELAYEDEXPANSION
<VARIABLE\!VCHECK! SET /P CHCK=
IF !CHCK! EQU 1 (
	ENDLOCAL
	IF "%LANGCODE%" == "GLOBAL" (
		ECHO ⓘ Notification
		ECHO.
		ECHO Malicious auto execute library values were found and removed that prevented the Malware Zero from running.
		ECHO.
		ECHO Please reboot and run again.
	)
	IF "%LANGCODE%" == "KOREAN" (
		ECHO ⓘ 알림
		ECHO.
		ECHO 멀웨어 제로 도구의 실행을 방해하는 악성 자동 실행 라이브러리 값이 발견되어 제거했습니다.
		ECHO.
		ECHO 재부팅 후 다시 실행해주시기 바랍니다.
	)
	ECHO.
	PAUSE
	EXIT /B
) ELSE (
	ENDLOCAL
)

REM * Setup *****
<TOOLS\000.001 SET /P DBDATE=
<TOOLS\000.002 SET /P CKEY=
<TOOLS\000.003 SET /P COUNT=
<TOOLS\000.004 SET /P DBVER=
<TOOLS\000.006 SET /P CURRENTDATE=

REM * Setup - Title
SET "MZTITLE=Malware Zero / ViOLeT / DB: %DBDATE% V%DBVER%"
SET "MZBOXTITLE=Malware Zero (DB: %DBDATE% V%DBVER%) - ViOLeT"

TITLE %MZTITLE% 2>Nul

TOOLS\CMDBKG\CMDBKG.EXE RESOURCE\BACKGROUND.PNG /C >Nul 2>Nul

REM * Initialization
ECHO.
ECHO.
ECHO.
ECHO.
ECHO.
ECHO.
ECHO.
ECHO.
ECHO.
ECHO.
ECHO.
ECHO.
ECHO.
ECHO                                     ^[ DB : %DBDATE% V%DBVER% ^]
ECHO.

SET /A RAND=(%RANDOM%%%(9999-1000+1))+1000

IF "%LANGCODE%" == "GLOBAL" (
	IF %RAND% EQU 7777 (
		GOTO E7777
	)
	GOTO E0000
)

IF "%LANGCODE%" == "KOREAN" (
	IF %RAND% EQU 1212 (
		GOTO K1212
	)
	IF %RAND% EQU 4545 (
		GOTO K4545
	)
	IF %RAND% EQU 7777 (
		GOTO K7777
	)
	IF %RAND% EQU 5555 (
		GOTO K5555
	)
	IF %RAND% EQU 9999 (
		GOTO K9999
	)
	GOTO K0000
)

:E0000
ECHO                                         Initializing . . .
GOTO POINT
:E7777
ECHO                               What country is next to USA? USB . . .
GOTO POINT
:K0000
ECHO                                        도구 초기화 중 . . .
GOTO POINT
:K1111
ECHO                                MZ 세대의 필수품^! Malware Zero . . .
GOTO POINT
:K1212
ECHO                                        비치~ 비치~ 다비치~~
GOTO POINT
:K4545
ECHO                                    악성코드가 . . . 말대꾸 ? ^!
GOTO POINT
:K5555
ECHO                                           왈랄랄루 . . .
GOTO POINT
:K7777
ECHO                                        새는? 왱알앵알 . . .
GOTO POINT
:K8888
ECHO                          막섬코드가 멊는 세삼믈 꿈꾸는 모늘과 내밀 . . .
GOTO POINT
:K9999
ECHO                         악성코드는 그냥 하루하루 똥 만드는 코드일 뿐이지 ^!
GOTO POINT

:POINT
ECHO.
ECHO.
ECHO               진행이 느릴 경우 안티바이러스 실시간 감시 해제 또는 안전 모드에서 진행
ECHO.
ECHO  ------------------------------------------------------------------------------------------------
ECHO.
ECHO           경고 ^! 타 사이트/카페/블로그/토렌트 등에서 배포/개작 및 상업적 이용 절대 금지 ^!
ECHO.
ECHO           진행중 창이 멈추거나 종료되는 경우, 동봉된 ^<3. 문제 해결^> 문서를 참고해주세요.
ECHO.
ECHO.
ECHO                                       Script by Malware Zero

DIR /B * >Nul 2>Nul
IF %ERRORLEVEL% NEQ 0 (
	SET ERRCODE=105
	GOTO MZ
)

FOR /F "DELIMS=" %%A IN ('TOOLS\DOFF\DOFF.EXE "yyyymmdd" -7 2^>Nul') DO (
	IF "%CURRENTDATE%" LEQ "%%A" SET DATECHK=1
)
FOR /F "DELIMS=" %%A IN ('TOOLS\DOFF\DOFF.EXE "yyyymmdd" -10 2^>Nul') DO (
	IF "%CURRENTDATE%" LEQ "%%A" (
		SET ERRCODE=1
		SET FORCEEND=1
		GOTO END
	)
)

REM * Check - Execute Temporary Directories
ECHO "%~dp0"|%EXEGREP% -Fi %TEMP% >Nul 2>Nul
IF %ERRORLEVEL% EQU 0 (
	SET ERRCODE=108
	GOTO MZ
)

REM * Check - Operating System Version
VER|%EXEGREP% -Eiq "ANOMALY" >Nul 2>Nul
IF %ERRORLEVEL% EQU 0 (
	SET ERRCODE=109
	GOTO MZ
)

VER|%EXEGREP% -Eiq "(Version|Versao) 10\." >Nul 2>Nul
IF %ERRORLEVEL% EQU 0 SET OSVER=10
VER|%EXEGREP% -Eiq "(Version|Versao) 11\." >Nul 2>Nul
IF %ERRORLEVEL% EQU 0 SET OSVER=11
IF /I "%OSVER%" == "NULL" (
	SET ERRCODE=100
	GOTO MZ
)

REM * Check - Administrator Privileges
BCDEDIT.EXE >Nul 2>Nul
IF %ERRORLEVEL% NEQ 0 SET /A NUMTMP+=1
NET.EXE SESSION >Nul 2>Nul
IF %ERRORLEVEL% NEQ 0 SET /A NUMTMP+=1
MKDIR "%SYSTEMROOT%\System32\MalwareZeroKitAuthTest%RAND%" >Nul 2>Nul
IF %ERRORLEVEL% NEQ 0 (
	SET /A NUMTMP+=1
) ELSE (
	RMDIR /S /Q "%SYSTEMROOT%\System32\MalwareZeroKitAuthTest%RAND%" >Nul 2>Nul
)
IF %NUMTMP% EQU 3 (
	SET ERRCODE=103
	GOTO MZ
)

REM * Check - Current Directories
SET "MZSYSTEMROOT=%SYSTEMROOT%"
SET "MZSYSTEMROOT=%MZSYSTEMROOT:(=^(%"
SET "MZSYSTEMROOT=%MZSYSTEMROOT:)=^)%"
SET "MZSYSTEMROOT=%MZSYSTEMROOT:&=^&%"
IF NOT DEFINED ALLUSERSPROFILE GOTO ERROR104
SET "MZALLUSERSPROFILE=%ALLUSERSPROFILE%"
SET "MZALLUSERSPROFILE=%MZALLUSERSPROFILE:(=^(%"
SET "MZALLUSERSPROFILE=%MZALLUSERSPROFILE:)=^)%"
SET "MZALLUSERSPROFILE=%MZALLUSERSPROFILE:&=^&%"
IF NOT DEFINED USERPROFILE GOTO ERROR104
SET "MZUSERPROFILE=%USERPROFILE%"
SET "MZUSERPROFILE=%MZUSERPROFILE:(=^(%"
SET "MZUSERPROFILE=%MZUSERPROFILE:)=^)%"
SET "MZUSERPROFILE=%MZUSERPROFILE:&=^&%"
IF NOT DEFINED APPDATA GOTO MZ_DS1X
SET "MZAPPDATA=%APPDATA%"
SET "MZAPPDATA=%MZAPPDATA:(=^(%"
SET "MZAPPDATA=%MZAPPDATA:)=^)%"
SET "MZAPPDATA=%MZAPPDATA:&=^&%"
GOTO MZ_DS1Q
:MZ_DS1X
SET "APPDATA=%USERPROFILE%\AppData\Roaming"
SET "MZAPPDATA=%MZUSERPROFILE%\AppData\Roaming"
:MZ_DS1Q
IF NOT DEFINED LOCALAPPDATA GOTO MZ_DS2X
SET "LOCALLOWAPPDATA=%LOCALAPPDATA%Low"
SET "MZLOCALAPPDATA=%LOCALAPPDATA%"
SET "MZLOCALAPPDATA=%MZLOCALAPPDATA:(=^(%"
SET "MZLOCALAPPDATA=%MZLOCALAPPDATA:)=^)%"
SET "MZLOCALAPPDATA=%MZLOCALAPPDATA:&=^&%"
SET "MZLOCALLOWAPPDATA=%LOCALLOWAPPDATA%"
SET "MZLOCALLOWAPPDATA=%MZLOCALLOWAPPDATA:(=^(%"
SET "MZLOCALLOWAPPDATA=%MZLOCALLOWAPPDATA:)=^)%"
SET "MZLOCALLOWAPPDATA=%MZLOCALLOWAPPDATA:&=^&%"
GOTO MZ_DS2Q
:MZ_DS2X
SET "LOCALAPPDATA=%USERPROFILE%\AppData\Local"
SET "LOCALLOWAPPDATA=%USERPROFILE%\AppData\LocalLow"
SET "MZLOCALAPPDATA=%MZUSERPROFILE%\AppData\Local"
SET "MZLOCALLOWAPPDATA=%MZUSERPROFILE%\AppData\LocalLow"
:MZ_DS2Q
IF NOT DEFINED PUBLIC GOTO MZ_DS3X
SET "MZPUBLIC=%PUBLIC%"
SET "MZPUBLIC=%MZPUBLIC:(=^(%"
SET "MZPUBLIC=%MZPUBLIC:)=^)%"
SET "MZPUBLIC=%MZPUBLIC:&=^&%"
GOTO MZ_DS3Q
:MZ_DS3X
SET "PUBLIC=%SYSTEMDRIVE%\Users\Public"
SET "MZPUBLIC=%SYSTEMDRIVE%\Users\Public"
:MZ_DS3Q
IF NOT DEFINED PROGRAMFILES GOTO MZ_DS4X
SET "MZPROGRAMFILES=%PROGRAMFILES%"
SET "MZPROGRAMFILES=%MZPROGRAMFILES:(=^(%"
SET "MZPROGRAMFILES=%MZPROGRAMFILES:)=^)%"
SET "MZPROGRAMFILES=%MZPROGRAMFILES:&=^&%"
GOTO MZ_DS4Q
:MZ_DS4X
SET "PROGRAMFILES=%SYSTEMDRIVE%\Program Files"
SET "MZPROGRAMFILES=%SYSTEMDRIVE%\Program Files"
:MZ_DS4Q
IF NOT DEFINED PROGRAMFILES^(x86^) GOTO MZ_DS5X
SET "PROGRAMFILESX86=%PROGRAMFILES(x86)%"
SET "MZPROGRAMFILESX86=%PROGRAMFILESX86%"
SET "MZPROGRAMFILESX86=%MZPROGRAMFILESX86:(=^(%"
SET "MZPROGRAMFILESX86=%MZPROGRAMFILESX86:)=^)%"
SET "MZPROGRAMFILESX86=%MZPROGRAMFILESX86:&=^&%"
GOTO MZ_DS5Q
:MZ_DS5X
SET "PROGRAMFILESX86=%SYSTEMDRIVE%\Program Files (x86)"
SET "MZPROGRAMFILESX86=%SYSTEMDRIVE%\Program Files ^(x86^)"
:MZ_DS5Q
IF NOT DEFINED COMMONPROGRAMFILES GOTO MZ_DS6X
SET "MZCOMMONPROGRAMFILES=%COMMONPROGRAMFILES%"
SET "MZCOMMONPROGRAMFILES=%MZCOMMONPROGRAMFILES:(=^(%"
SET "MZCOMMONPROGRAMFILES=%MZCOMMONPROGRAMFILES:)=^)%"
SET "MZCOMMONPROGRAMFILES=%MZCOMMONPROGRAMFILES:&=^&%"
GOTO MZ_DS6Q
:MZ_DS6X
SET "COMMONPROGRAMFILES=%SYSTEMDRIVE%\Program Files\Common Files"
SET "MZCOMMONPROGRAMFILES=%SYSTEMDRIVE%\Program Files\Common Files"
:MZ_DS6Q
IF NOT DEFINED COMMONPROGRAMFILES^(x86^) GOTO MZ_DS7X
SET "COMMONPROGRAMFILESX86=%COMMONPROGRAMFILES(x86)%"
SET "MZCOMMONPROGRAMFILESX86=%COMMONPROGRAMFILESX86%"
SET "MZCOMMONPROGRAMFILESX86=%MZCOMMONPROGRAMFILESX86:(=^(%"
SET "MZCOMMONPROGRAMFILESX86=%MZCOMMONPROGRAMFILESX86:)=^)%"
SET "MZCOMMONPROGRAMFILESX86=%MZCOMMONPROGRAMFILESX86:&=^&%"
GOTO MZ_DS7Q
:MZ_DS7X
SET "COMMONPROGRAMFILESX86=%SYSTEMDRIVE%\Program Files (x86)\Common Files"
SET "MZCOMMONPROGRAMFILESX86=%SYSTEMDRIVE%\Program Files ^(x86^)\Common Files"
:MZ_DS7Q
IF NOT DEFINED TEMP SET "TEMP=%LOCALAPPDATA%\Temp"

REM * Check - Validate Directories
IF /I "%SYSTEMDRIVE%" == "%SYSTEMROOT%" SET ERRCODE=104
IF /I "%ALLUSERSPROFILE%" == "%SYSTEMROOT%" SET ERRCODE=104
IF /I "%USERPROFILE%" == "%SYSTEMROOT%" SET ERRCODE=104
IF /I "%APPDATA%" == "%SYSTEMROOT%" SET ERRCODE=104
IF /I "%LOCALAPPDATA%" == "%SYSTEMROOT%" SET ERRCODE=104
IF /I "%LOCALLOWAPPDATA%" == "%SYSTEMROOT%" SET ERRCODE=104
IF /I "%PUBLIC%" == "%SYSTEMROOT%" SET ERRCODE=104
IF /I "%PROGRAMFILES%" == "%SYSTEMROOT%" SET ERRCODE=104
IF /I "%PROGRAMFILESX86%" == "%SYSTEMROOT%" SET ERRCODE=104
IF /I "%COMMONPROGRAMFILES%" == "%SYSTEMROOT%" SET ERRCODE=104
IF /I "%COMMONPROGRAMFILESX86%" == "%SYSTEMROOT%" SET ERRCODE=104

REM * Check - Validate Temporary Directories
ECHO "%TEMP%"|%EXEGREP% -ixq "\"[A-Z]:\\\?\"" >Nul 2>Nul
IF %ERRORLEVEL% EQU 0 SET ERRCODE=104
IF /I "%TEMP%" == "%SYSTEMDRIVE%" SET ERRCODE=104
IF /I "%TEMP%" == "%SYSTEMROOT%" SET ERRCODE=104
IF /I "%TEMP%" == "%SYSTEMROOT%\" SET ERRCODE=104
IF /I "%TEMP%" == "%ALLUSERSPROFILE%" SET ERRCODE=104
IF /I "%TEMP%" == "%ALLUSERSPROFILE%\" SET ERRCODE=104
IF /I "%TEMP%" == "%USERPROFILE%" SET ERRCODE=104
IF /I "%TEMP%" == "%USERPROFILE%\" SET ERRCODE=104
IF /I "%TEMP%" == "%APPDATA%" SET ERRCODE=104
IF /I "%TEMP%" == "%APPDATA%\" SET ERRCODE=104
IF /I "%TEMP%" == "%LOCALAPPDATA%" SET ERRCODE=104
IF /I "%TEMP%" == "%LOCALAPPDATA%\" SET ERRCODE=104
IF /I "%TEMP%" == "%LOCALLOWAPPDATA%" SET ERRCODE=104
IF /I "%TEMP%" == "%LOCALLOWAPPDATA%\" SET ERRCODE=104
IF /I "%TEMP%" == "%PUBLIC%" SET ERRCODE=104
IF /I "%TEMP%" == "%PUBLIC%\" SET ERRCODE=104
IF /I "%TEMP%" == "%PROGRAMFILES%" SET ERRCODE=104
IF /I "%TEMP%" == "%PROGRAMFILES%\" SET ERRCODE=104
IF /I "%TEMP%" == "%PROGRAMFILESX86%" SET ERRCODE=104
IF /I "%TEMP%" == "%PROGRAMFILESX86%\" SET ERRCODE=104
IF /I "%TEMP%" == "%COMMONPROGRAMFILES%" SET ERRCODE=104
IF /I "%TEMP%" == "%COMMONPROGRAMFILES%\" SET ERRCODE=104
IF /I "%TEMP%" == "%COMMONPROGRAMFILESX86%" SET ERRCODE=104
IF /I "%TEMP%" == "%COMMONPROGRAMFILESX86%\" SET ERRCODE=104
IF /I "%TEMP%" == "\" SET ERRCODE=104
IF /I "%TEMP%" == "" SET ERRCODE=104

IF %ERRCODE% NEQ 0 GOTO MZ

REM * Check - Anti-Shutdown
SHUTDOWN.EXE /A >Nul 2>Nul

REM * Check - Database File Count
SETLOCAL ENABLEDELAYEDEXPANSION
SET NUMTMP=0
FOR /F "DELIMS=" %%A IN ('DIR /B /S /A-D DB\*.DB 2^>Nul') DO SET /A NUMTMP+=1
IF !COUNT! NEQ !NUMTMP! (
	ENDLOCAL
	SET ERRCODE=107
	GOTO MZ
) ELSE (
	ENDLOCAL
)

REM * Setup - Datetime
SET "STRTMP=%DATE% %TIME%"
SET "DATETIME=%STRTMP%"
SET "RPTDATE=%STRTMP:-=%"
SET "RPTDATE=%RPTDATE:/=%"
SET "RPTDATE=%RPTDATE::=%"
SET "RPTDATE=%RPTDATE:.=%"
SET "RPTDATE=%RPTDATE: =%"

REM * Setup - Quarantine
SET "QRoot=%SYSTEMDRIVE%\Quarantine_MZ"
SET "QFiles=%QRoot%\Files\%RPTDATE%"
SET "QFolders=%QRoot%\Folders\%RPTDATE%"
SET "QRegistries=%QRoot%\Registries\%RPTDATE%"

REM * Setup - Database Initialization
%EXESETACL% -on "%CD%" -ot file -actn trustee -trst "n1:Everyone;ta:remtrst;w:dacl" -rec cont_obj -silent >Nul 2>Nul
%EXESETACL% -on "DB" -ot file -actn ace -ace "n:Everyone;p:FILE_ADD_FILE,FILE_ADD_SUBDIRECTORY,FILE_WRITE_EA,WRITE_DAC;m:deny" -rec cont_obj -silent >Nul 2>Nul
%EXESETACL% -on "DB_EXEC" -ot file -actn trustee -trst "n1:Everyone;ta:remtrst;w:dacl" -rec cont_obj -silent
DEL /F /Q /S /A DB_EXEC\*.DB >Nul 2>Nul
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "DB\*.DB" 2^>Nul') DO (
	TOOLS\OPENSSL\OPENSSL.EXE enc -aes-128-cbc -d -a -k "%DBDATE%%CKEY%" -in "DB\%%A" -out "DB_EXEC\%%A" -pbkdf2 >Nul 2>Nul
)
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "DB\" 2^>Nul') DO (
	IF /I NOT "%%A" == "EXCEPT" (
		FOR /F "DELIMS=" %%B IN ('DIR /B /A-D "DB\%%A\*.DB" 2^>Nul') DO (
			TOOLS\OPENSSL\OPENSSL.EXE enc -aes-128-cbc -d -a -k "%DBDATE%%CKEY%" -in "DB\%%A\%%B" -out "DB_EXEC\%%A\%%B" -pbkdf2 >Nul 2>Nul
		)
	)
)
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "DB\ACTIVESCAN\" 2^>Nul') DO (
	FOR /F "DELIMS=" %%B IN ('DIR /B /A-D "DB\ACTIVESCAN\%%A\*.DB" 2^>Nul') DO (
		TOOLS\OPENSSL\OPENSSL.EXE enc -aes-128-cbc -d -a -k "%DBDATE%%CKEY%" -in "DB\ACTIVESCAN\%%A\%%B" -out "DB_EXEC\ACTIVESCAN\%%A\%%B" -pbkdf2 >Nul 2>Nul
	)
)
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "DB\THREAT\" 2^>Nul') DO (
	FOR /F "DELIMS=" %%B IN ('DIR /B /A-D "DB\THREAT\%%A\*.DB" 2^>Nul') DO (
		TOOLS\OPENSSL\OPENSSL.EXE enc -aes-128-cbc -d -a -k "%DBDATE%%CKEY%" -in "DB\THREAT\%%A\%%B" -out "DB_EXEC\THREAT\%%A\%%B" -pbkdf2 >Nul 2>Nul
	)
)
ATTRIB.EXE +R +H +S "DB_EXEC\*" /S /D >Nul 2>Nul
%EXESETACL% -on "DB_EXEC" -ot file -actn ace -ace "n:Everyone;p:FILE_ADD_FILE,FILE_ADD_SUBDIRECTORY,FILE_WRITE_EA,WRITE_DAC;m:deny" -rec cont_obj -silent >Nul 2>Nul

REM * Check - Required Files
IF NOT EXIST DB_EXEC\CHECK\CHK_REQUIREDFILES+NC.DB (
	SET "STRTMP=CHK_REQUIREDFILES+NC.DB"
	SET ERRCODE=101
	GOTO MZ
)
FOR /F "DELIMS=" %%A IN ('TYPE DB_EXEC\CHECK\CHK_REQUIREDFILES+NC.DB 2^>Nul') DO (
	IF NOT EXIST "%%A" (
		SET "STRTMP=%%~nxA"
		SET ERRCODE=101
		GOTO MZ
	)
)

REM * Check - Validate Required Files
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "DB_EXEC\*.DB" 2^>Nul') DO (
	FOR /F "TOKENS=1" %%B IN ('TOOLS\DIRHASH\DIRHASH.EXE "DB_EXEC\%%A" MD5 -quiet -nowait 2^>Nul') DO (
		FOR /F %%X IN ('ECHO "%%B|E\%%A"^|%EXEGREP% -Fxvf TOOLS\000.005 2^>Nul') DO (
			SET ERRCODE=107
			GOTO MZ
		)
	)
)
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "DB_EXEC\" 2^>Nul') DO (
	IF /I NOT "%%A" == "EXCEPT" (
		FOR /F "DELIMS=" %%B IN ('DIR /B /A-D "DB_EXEC\%%A\*.DB" 2^>Nul') DO (
			FOR /F "TOKENS=1" %%C IN ('TOOLS\DIRHASH\DIRHASH.EXE "DB_EXEC\%%A\%%B" MD5 -quiet -nowait 2^>Nul') DO (
				FOR /F %%X IN ('ECHO "%%C|E\%%A\%%B"^|%EXEGREP% -Fxvf TOOLS\000.005 2^>Nul') DO (
					SET ERRCODE=107
					GOTO MZ
				)
			)
		)
	)
)
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "DB_EXEC\ACTIVESCAN\" 2^>Nul') DO (
	FOR /F "DELIMS=" %%B IN ('DIR /B /A-D "DB_EXEC\ACTIVESCAN\%%A\*.DB" 2^>Nul') DO (
		FOR /F "TOKENS=1" %%C IN ('TOOLS\DIRHASH\DIRHASH.EXE "DB_EXEC\ACTIVESCAN\%%A\%%B" MD5 -quiet -nowait 2^>Nul') DO (
			FOR /F %%X IN ('ECHO "%%C|E\AS\%%A\%%B"^|%EXEGREP% -Fxvf TOOLS\000.005 2^>Nul') DO (
				SET ERRCODE=107
				GOTO MZ
			)
		)
	)
)
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "DB_EXEC\THREAT\" 2^>Nul') DO (
	FOR /F "DELIMS=" %%B IN ('DIR /B /A-D "DB_EXEC\THREAT\%%A\*.DB" 2^>Nul') DO (
		FOR /F "TOKENS=1" %%C IN ('TOOLS\DIRHASH\DIRHASH.EXE "DB_EXEC\THREAT\%%A\%%B" MD5 -quiet -nowait 2^>Nul') DO (
			FOR /F %%X IN ('ECHO "%%C|E\TH\%%A\%%B"^|%EXEGREP% -Fxvf TOOLS\000.005 2^>Nul') DO (
				SET ERRCODE=107
				GOTO MZ
			)
		)
	)
)
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "*" 2^>Nul') DO (
	FOR /F "TOKENS=1" %%B IN ('TOOLS\DIRHASH\DIRHASH.EXE "%%A" MD5 -quiet -nowait 2^>Nul') DO (
		IF /I NOT "%%~xA" == ".TXT" (
			FOR /F %%X IN ('ECHO "%%B|XXX\%%A"^|%EXEGREP% -Fxvf TOOLS\000.005 2^>Nul') DO (
				SET ERRCODE=107
				GOTO MZ
			)
		)
	)
)
FOR /F "DELIMS=" %%A IN ('DIR /B /S /A-D "TOOLS\*" 2^>Nul') DO (
	FOR /F "TOKENS=1" %%B IN ('TOOLS\DIRHASH\DIRHASH.EXE "%%A" MD5 -quiet -nowait 2^>Nul') DO (
		IF /I NOT "%%~xA" == ".TXT" (
			IF /I NOT "%%~xA" == ".XML" (
				IF /I NOT "%%~nxA" == "000.005" (
					FOR /F %%X IN ('ECHO "%%B|TOOLS\%%~nxA"^|%EXEGREP% -Fxvf TOOLS\000.005 2^>Nul') DO (
						SET ERRCODE=107
						GOTO MZ
					)
				)
			)
		)
	)
)
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "DB\EXCEPT\*.DB" 2^>Nul') DO (
	FOR /F "TOKENS=1" %%B IN ('TOOLS\DIRHASH\DIRHASH.EXE "DB\EXCEPT\%%A" MD5 -quiet -nowait 2^>Nul') DO (
		FOR /F %%X IN ('ECHO "%%B|X\%%A"^|%EXEGREP% -Fxvf TOOLS\000.005 2^>Nul') DO (
			SET ERRCODE=107
			GOTO MZ
		)
	)
)

REM * Check - Image File Execution Options
FOR /F "DELIMS=" %%A IN ('TYPE DB_EXEC\CHECK\CHK_REQUIREDFILES_IMGFILEEXECOP+NC.DB 2^>Nul') DO (
	SETLOCAL ENABLEDELAYEDEXPANSION
	TOOLS\000.000 DELETE "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\%%A" /f >Nul 2>Nul
	IF !ERRORLEVEL! NEQ 0 (
		ENDLOCAL
		%EXESETACL% -on "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\%%A" -ot reg -actn setowner -ownr "n:Administrators" -rec yes -silent >Nul 2>Nul
		%EXESETACL% -on "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\%%A" -ot reg -actn clear -clr "dacl,sacl" -actn setprot -op "dacl:np;sacl:np" -rec yes -silent >Nul 2>Nul
		TOOLS\000.000 DELETE "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\%%A" /f >Nul 2>Nul
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	TOOLS\000.000 DELETE "HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\%%A" /f >Nul 2>Nul
	IF !ERRORLEVEL! NEQ 0 (
		ENDLOCAL
		%EXESETACL% -on "HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\%%A" -ot reg -actn setowner -ownr "n:Administrators" -rec yes -silent >Nul 2>Nul
		%EXESETACL% -on "HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\%%A" -ot reg -actn clear -clr "dacl,sacl" -actn setprot -op "dacl:np;sacl:np" -rec yes -silent >Nul 2>Nul
		TOOLS\000.000 DELETE "HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\%%A" /f >Nul 2>Nul
	) ELSE (
		ENDLOCAL
	)
)

REM * Check - Required Files
FOR /F "DELIMS=" %%A IN ('TYPE DB_EXEC\CHECK\CHK_REQUIREDFILES_SYSTEM+C.DB 2^>Nul') DO (
	IF NOT EXIST "%SYSTEMROOT%\System32\%%A" (
		SET "STRTMP=%SYSTEMROOT%\System32\%%A"
		SET ERRCODE=102
		GOTO MZ
	)
)

REM * Check - Service Stop
FOR /F "DELIMS=" %%A IN ('TYPE DB_EXEC\CHECK\CHK_SERVICE_STOP+C.DB 2^>Nul^|%EXEGREP% -Fixvf DB_EXEC\CHECK\CHK_TRUSTED_SERVICES+NC.DB 2^>Nul') DO (
	SC.EXE STOP "%%A" >Nul 2>Nul
)

REM * Check - Service Disabled
FOR /F "DELIMS=" %%A IN ('TYPE DB_EXEC\CHECK\CHK_SERVICE_DISABLE+C.DB 2^>Nul^|%EXEGREP% -Fixvf DB_EXEC\CHECK\CHK_TRUSTED_SERVICES+NC.DB 2^>Nul') DO (
	SC.EXE CONFIG "%%A" START= DISABLED >Nul 2>Nul
)

REM * Check - Malicious Service Stop
REM :HKLM\System\CurrentControlSet\Services\6to4\Parameters (ServiceDll)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\6to4\Parameters\ServiceDll" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "6TO4SVC.DLL" (
		SC.EXE STOP "6to4" >Nul 2>Nul
	)
)
REM :HKLM\System\CurrentControlSet\Services\AeLookupSvc\Parameters (ServiceDll)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\AeLookupSvc\Parameters\ServiceDll" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "AELUPSVC.DLL" (
		SC.EXE STOP "AeLookupSvc" >Nul 2>Nul
	)
)
REM :HKLM\System\CurrentControlSet\Services\Appinfo\Parameters (ServiceDll)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\Appinfo\Parameters\ServiceDll" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "APPINFO.DLL" (
		SC.EXE STOP "Appinfo" >Nul 2>Nul
	)
)
REM :HKLM\System\CurrentControlSet\Services\AppMgmt\Parameters (ServiceDll)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\AppMgmt\Parameters\ServiceDll" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "APPMGMTS.DLL" (
		SC.EXE STOP "AppMgmt" >Nul 2>Nul
	)
)
REM :HKLM\System\CurrentControlSet\Services\BITS\Parameters (ServiceDll)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\BITS\Parameters\ServiceDll" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "QMGR.DLL" (
		SC.EXE STOP "BITS" >Nul 2>Nul
	)
)
REM :HKLM\System\CurrentControlSet\Services\Bonjour Service (ImagePath)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\Bonjour Service\ImagePath" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "MDNSRESPONDER.EXE" (
		SC.EXE STOP "Bonjour Service" >Nul 2>Nul
	)
)
REM :HKLM\System\CurrentControlSet\Services\Browser\Parameters (ServiceDll)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\Browser\Parameters\ServiceDll" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "BROWSER.DLL" (
		SC.EXE STOP "Browser" >Nul 2>Nul
	)
)
REM :HKLM\System\CurrentControlSet\Services\circlass (ImagePath)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\circlass\ImagePath" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "CIRCLASS.SYS" (
		SC.EXE STOP "circlass" >Nul 2>Nul
	)
)
REM :HKLM\System\CurrentControlSet\Services\dmserver\Parameters (ServiceDll)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\dmserver\Parameters\ServiceDll" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "DMSERVER.DLL" (
		SC.EXE STOP "dmserver" >Nul 2>Nul
	)
)
REM :HKLM\System\CurrentControlSet\Services\dmvsc (ImagePath)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\dmvsc\ImagePath" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "DMVSC.SYS" (
		SC.EXE STOP "dmvsc" >Nul 2>Nul
	)
)
REM :HKLM\System\CurrentControlSet\Services\DsmSvc\Parameters (ServiceDll)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\DsmSvc\Parameters\ServiceDll" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "DEVICESETUPMANAGER.DLL" (
		SC.EXE STOP "DsmSvc" >Nul 2>Nul
	)
)
REM :HKLM\System\CurrentControlSet\Services\Emproxy (ImagePath)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\Emproxy\ImagePath" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "EMPROXY.EXE" (
		SC.EXE STOP "Emproxy" >Nul 2>Nul
	)
)
REM :HKLM\System\CurrentControlSet\Services\FastUserSwitchingCompatibility\Parameters (ServiceDll)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\FastUserSwitchingCompatibility\Parameters\ServiceDll" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "SHSVCS.DLL" (
		SC.EXE STOP "FastUserSwitchingCompatibility" >Nul 2>Nul
	)
)
REM :HKLM\System\CurrentControlSet\Services\HidIr (ImagePath)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\HidIr\ImagePath" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "HIDIR.SYS" (
		SC.EXE STOP "HidIr" >Nul 2>Nul
	)
)
REM :HKLM\System\CurrentControlSet\Services\Ias\Parameters (ServiceDll)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\Ias\Parameters\ServiceDll" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "IAS.DLL" (
		SC.EXE STOP "Ias" >Nul 2>Nul
	)
)
REM :HKLM\System\CurrentControlSet\Services\IKEEXT\Parameters (ServiceDll)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\IKEEXT\Parameters\ServiceDll" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "IKEEXT.DLL" (
		SC.EXE STOP "IKEEXT" >Nul 2>Nul
	)
)
REM :HKLM\System\CurrentControlSet\Services\Irmon\Parameters (ServiceDll)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\Irmon\Parameters\ServiceDll" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "IRMON.DLL" (
		SC.EXE STOP "Irmon" >Nul 2>Nul
	)
)
REM :HKLM\System\CurrentControlSet\Services\MSiSCSI\Parameters (ServiceDll)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\MSiSCSI\Parameters\ServiceDll" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "ISCSIEXE.DLL" (
		SC.EXE STOP "MSiSCSI" >Nul 2>Nul
	)
)
REM :HKLM\System\CurrentControlSet\Services\MSPQM (ImagePath)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\MSPQM\ImagePath" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "MSPQM.SYS" (
		SC.EXE STOP "MSPQM" >Nul 2>Nul
	)
)
REM :HKLM\System\CurrentControlSet\Services\NWCWorkstation\Parameters (ServiceDll)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\NWCWorkstation\Parameters\ServiceDll" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "NWWKS.DLL" (
		SC.EXE STOP "NWCWorkstation" >Nul 2>Nul
	)
)
REM :HKLM\System\CurrentControlSet\Services\RemoteAccess\RouterManagers\Ip (DllPath)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\RemoteAccess\RouterManagers\Ip\DllPath" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "IPRTRMGR.DLL" (
		SC.EXE STOP "RemoteAccess" >Nul 2>Nul
	)
)
REM :HKLM\System\CurrentControlSet\Services\RemoteAccess\RouterManagers\Ipv6 (DllPath)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\RemoteAccess\RouterManagers\Ipv6\DllPath" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "IPRTRMGR.DLL" (
		SC.EXE STOP "RemoteAccess" >Nul 2>Nul
	)
)
REM :HKLM\System\CurrentControlSet\Services\RemoteAccess\RouterManagers\Ipx (DllPath)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\RemoteAccess\RouterManagers\Ipx\DllPath" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "IPXRTMGR.DLL" (
		SC.EXE STOP "RemoteAccess" >Nul 2>Nul
	)
)
REM :HKLM\System\CurrentControlSet\Services\SENS\Parameters (ServiceDll)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\SENS\Parameters\ServiceDll" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "SENS.DLL" (
		SC.EXE STOP "SENS" >Nul 2>Nul
	)
)
REM :HKLM\System\CurrentControlSet\Services\Schedule\Parameters (ServiceDll)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\Schedule\Parameters\ServiceDll" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "SCHEDSVC.DLL" (
		SC.EXE STOP "Schedule" >Nul 2>Nul
	)
)
REM :HKLM\System\CurrentControlSet\Services\StiSvc\Parameters (ServiceDll)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\StiSvc\Parameters\ServiceDll" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "WIASERVC.DLL" (
		SC.EXE STOP "StiSvc" >Nul 2>Nul
	)
)
REM :HKLM\System\CurrentControlSet\Services\SuperProServer (ImagePath)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\SuperProServer\ImagePath" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "SPNSRVNT.EXE" (
		SC.EXE STOP "SuperProServer" >Nul 2>Nul
	)
)
REM :HKLM\System\CurrentControlSet\Services\TermService\Parameters (ServiceDll)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\TermService\Parameters\ServiceDll" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "TERMSRV.DLL" (
		IF /I NOT "%%~nxA" == "RDPWRAP.DLL" (
			SC.EXE STOP "TermService" >Nul 2>Nul
		)
	)
)
REM :HKLM\System\CurrentControlSet\Services\UmPass (ImagePath)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\UmPass\ImagePath" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "UMPASS.SYS" (
		SC.EXE STOP "UmPass" >Nul 2>Nul
	)
)
REM :HKLM\System\CurrentControlSet\Services\UxSms\Parameters (ServiceDll)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\UxSms\Parameters\ServiceDll" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "UXSMS.DLL" (
		SC.EXE STOP "UxSms" >Nul 2>Nul
	)
)
REM :HKLM\System\CurrentControlSet\Services\Winmgmt\Parameters (ServiceDll)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\Winmgmt\Parameters\ServiceDll" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "WMISVC.DLL" (
		SC.EXE STOP "Winmgmt" >Nul 2>Nul
	)
)
REM :HKLM\System\CurrentControlSet\Services\WmdmPmSN\Parameters (ServiceDll)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\WmdmPmSN\Parameters\ServiceDll" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "MSPMSNSV.DLL" (
		SC.EXE STOP "WmdmPmSN" >Nul 2>Nul
	)
)
REM :HKLM\System\CurrentControlSet\Services\WmdmPmSp\Parameters (ServiceDll)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\WmdmPmSp\Parameters\ServiceDll" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "MSPMSPSV.DLL" (
		SC.EXE STOP "WmdmPmSp" >Nul 2>Nul
	)
)
REM :HKLM\System\CurrentControlSet\Services\wuauserv\Parameters (ServiceDll)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\wuauserv\Parameters\ServiceDll" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "WUAUSERV.DLL" (
		IF /I NOT "%%~nxA" == "WUAUENG.DLL" (
			SC.EXE STOP "wuauserv" >Nul 2>Nul
		)
	)
)
REM :HKLM\System\CurrentControlSet\Services\xmlprov\Parameters (ServiceDll)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\xmlprov\Parameters\ServiceDll" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "XMLPROV.DLL" (
		SC.EXE STOP "xmlprov" >Nul 2>Nul
	)
)

REM * Check - Registry Process
REG.EXE QUERY HKLM >Nul 2>Nul
IF %ERRORLEVEL% NEQ 0 (
	SET ERRCODE=106
	GOTO MZ
)

REM * Check - D Storage Drive
DIR /B "D:\" >Nul 2>Nul
IF %ERRORLEVEL% EQU 0 (
	IF EXIST D:\MZTEMP DEL /F /Q /A D:\MZTEMP >Nul 2>Nul
	COPY DB_ACTIVE\MZ D:\MZTEMP >Nul 2>Nul
	IF EXIST D:\MZTEMP (
		SET DDRV=TRUE
		DEL /F /Q /A D:\MZTEMP >Nul 2>Nul
	)
)

REM * Setup - What are you doing?
REG.EXE ADD "HKCU\Software\Telerik\Fiddler" /f >Nul 2>Nul
REG.EXE ADD "HKLM\Software\Microsoft\Fiddler2" /f >Nul 2>Nul
REG.EXE ADD "HKLM\Software\Sysinternals\Process Monitor" /f >Nul 2>Nul

IF /I "%ARCHITECTURE%" == "x64" (
	REG.EXE ADD "HKLM\Wow6432Node\Software\Telerik\Fiddler" /f >Nul 2>Nul
	REG.EXE ADD "HKLM\Wow6432Node\Software\Microsoft\Fiddler2" /f >Nul 2>Nul
	REG.EXE ADD "HKLM\Wow6432Node\Software\Sysinternals\Process Monitor" /f >Nul 2>Nul
)

FOR /F "DELIMS=," %%A IN ('SCHTASKS.EXE /Query /FO CSV 2^>Nul^|%EXEGREP% -i MalwareZero 2^>Nul') DO (
	SCHTASKS.EXE /End /TN "%%~nxA" >Nul 2>Nul
	SCHTASKS.EXE /Delete /TN "%%~nxA" /F >Nul 2>Nul
)

REM * Reset - Count Value (All)
CALL :RESET_VALUE ALL

:MZ
COLOR 1F

TOOLS\CMDBKG\CMDBKG.EXE >Nul 2>Nul

CLS

REM * Start
ECHO.
ECHO.
ECHO    Malware Zero  ^[ DB : %DBDATE% V%DBVER% ^]
ECHO.
ECHO -------------------------------------------------------------------------------------------------
ECHO.

REM * Check - Error Code
IF %ERRCODE% EQU 100 GOTO FAILEDOS
IF %ERRCODE% EQU 101 GOTO NOFILE
IF %ERRCODE% EQU 102 GOTO NOSYSF
IF %ERRCODE% EQU 103 GOTO FAILED
IF %ERRCODE% EQU 104 GOTO NOVAR
IF %ERRCODE% EQU 105 GOTO MALWARE
IF %ERRCODE% EQU 106 GOTO REGBLOCK
IF %ERRCODE% EQU 107 GOTO NOCOUNT
IF %ERRCODE% EQU 108 GOTO NOTEMP
IF %ERRCODE% EQU 109 GOTO NOSTATUS

ECHO ◇ 검사 준비중 . . .
SET NUMTMP=0

SETLOCAL ENABLEDELAYEDEXPANSION
TOOLS\MESSAGEBOX\MESSAGEBOX.EXE /C:!MZBOXTITLE! /T:4164 /M:검사 진행 전에 반드시 읽어주세요 ^^!\n\n검사 시, 신뢰 프로세스를 제외한 실행 중인 프로그램을\n모두 종료하므로 작업 중인 내용은 반드시 저장해주세요.\n\n표준 환경에서는 악성코드/특정 프로세스에 의한 강제 재부팅\n또는 블루 스크린이 발생할 수 있으므로, 원활한 검사를 위해\n안전 모드 환경에서의 실행을 권장합니다. ^(필수 아님^)\n\n진행하기 전, 동봉된 안내 문서들을 반드시 열람해주세요.\n\n이 도구는 반드시 보조 수단으로 한정 및 필요한 경우에만\n사용하셔야 하며, 사용 후 반드시 보안 제품^(백신^)을 이용하여\n정밀 검사를 수행해주시기 바랍니다.\n\n사용 후 문제 발생 시 ^<3. 문제 해결^> 문서를 참고해주세요.\n\n동의 및 검사를 진행하시겠습니까^?\n\n★ 경고 ★\n\n멀웨어 제로는 타 사이트^/카페^/블로그^/토렌트 등을 통한\n배포^/개작^/상업적 이용이 철저하게 금지되어 있습니다 ^^!\n\n※ 검사 소요 시간: 3분 ~ 1시간 이상 ^(환경마다 다름, 평균 20분^) >Nul 2>Nul
IF !ERRORLEVEL! EQU 7 (
	ENDLOCAL
	SET ERRCODE=999
	GOTO END
) ELSE (
	ENDLOCAL
)
IF %DATECHK% EQU 1 (
	COLOR 6F
	SETLOCAL ENABLEDELAYEDEXPANSION
	TOOLS\MESSAGEBOX\MESSAGEBOX.EXE /C:!MZBOXTITLE! /T:4372 /M:데이터베이스^(DB^)가 오래된 상태입니다.\n\n현재 상태에서는 악성 프로그램을 효과적으로 제거할 수 없으므로 사용중인 도구를 삭제 후, 아래 주소로 방문하여 새로 내려받아 검사를 진행해주세요.\n\n주소 : https:^/^/malzero.xyz\n\n계속 진행하시겠습니까^? >Nul 2>Nul
	IF !ERRORLEVEL! EQU 7 (
		ENDLOCAL
		SET ERRCODE=999
		GOTO END
	) ELSE (
		ECHO.
		ECHO ⓘ 경고 ^^! 데이터베이스^(DB^)가 오래되어 악성 프로그램을 효과적으로 제거할 수 없습니다 ^^!^^!^^!
		ENDLOCAL
	)
)
SETLOCAL ENABLEDELAYEDEXPANSION
TOOLS\MESSAGEBOX\MESSAGEBOX.EXE /C:!MZBOXTITLE! /T:4132 /M:악성 프로세스의 효과적 제거를 위해 파일 탐색기를 종료합니다.\n\n종료 시 검사가 완료될 때까지 바탕 화면이 비활성화되며,\n폴더 및 파일의 복사/이동/삭제 작업이 취소됩니다.\n\n검사 완료 후 또는 중간에 검사를 중지했을 때\n파일 탐색기가 자동으로 실행되지 않는 상황이 발생하면\n키보드 ^<CTRL ^+ ALT ^+ DEL^> 키를 동시에\n누르신 후 로그아웃 또는 종료 메뉴를 통해 재부팅 해주세요.\n\n※ 오동작 문의는 ^<3. 문제 해결^> 문서 참고\n\n파일 탐색기를 종료하시겠습니까^? ^(선택, 필수 아님^) >Nul 2>Nul
IF !ERRORLEVEL! EQU 6 (
	ENDLOCAL
	SET CHKEXPLORER=1
	TOOLS\TASKS\TASKKILL.EXE /IM "EXPLORER.EXE" >Nul 2>Nul
	TOOLS\TASKS\TASKKILL.EXE /IM "EXPLORER.EXE" >Nul 2>Nul
	TOOLS\TASKS\TASKKILL.EXE /F /IM "EXPLORER.EXE" >Nul 2>Nul
	SCHTASKS.EXE /Create /TN "MalwareZeroRestartExplorerTemporaryTasks_%UNIQ%" /XML REPAIR\TASKS.XML /F >Nul 2>Nul
	>Nul 2>Nul START "MZKABS" /MIN /LOW CMD.EXE /D /C "ABS.BAT %LANGCODE% %UNIQ%"
) ELSE (
	ENDLOCAL
)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyEnable" 2^>Nul') DO (
	IF NOT "%%A" == "0" (
		SETLOCAL ENABLEDELAYEDEXPANSION
		TOOLS\MESSAGEBOX\MESSAGEBOX.EXE /C:!MZBOXTITLE! /T:4388 /M:프록시 연결이 활성화 되어 있습니다. 비활성화 하시겠습니까^?\n\n단, 특정 공공 기관, 회사, 기타 전용 프록시 연결이 필요한 환경일 경우 비활성화 하지 마시기 바랍니다. ^(만약 실수로 비활성화 하셨다면 다시 활성화 하시면 됩니다.^)\n\n^(선택, 필수 아님^) >Nul 2>Nul
		IF !ERRORLEVEL! EQU 6 (
			ENDLOCAL
			REG.EXE ADD "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings" /v ProxyEnable /t REG_DWORD /d 0 /f >Nul 2>Nul
		) ELSE (
			ENDLOCAL
		)
	)
)

ECHO.
ECHO ◇ 검사 시작 . . .
ECHO.

TOOLS\REGTOOL\REGTOOL.EXE check "\HKLM\Software\Microsoft\NET Framework Setup\NDP\v4" >Nul 2>Nul
IF %ERRORLEVEL% EQU 0 (
	>Nul 2>Nul START "NOSLEEP" /D "TOOLS\NOSLEEP" /B "NOSLEEP.EXE"
)

SCHTASKS.EXE /End /TN "\Microsoft\Windows\Multimedia\SystemSoundsService" >Nul 2>Nul
SCHTASKS.EXE /End /TN "\Microsoft\Windows\TextServicesFramework\MsCtfMonitor" >Nul 2>Nul
SCHTASKS.EXE /End /TN "\Microsoft\Windows\WDI\ResolutionHost" >Nul 2>Nul
SCHTASKS.EXE /End /TN "\Microsoft\Windows\Wininet\CacheTask" >Nul 2>Nul
SCHTASKS.EXE /End /TN "\Windows Local Network Service" >Nul 2>Nul

TOOLS\TASKS\TASKKILL.EXE /IM "CSCRIPT.EXE" >Nul 2>Nul
TOOLS\TASKS\TASKKILL.EXE /IM "DLLHOST.EXE" >Nul 2>Nul
TOOLS\TASKS\TASKKILL.EXE /IM "POWERSHELL.EXE" >Nul 2>Nul
TOOLS\TASKS\TASKKILL.EXE /IM "RUNDLL32.EXE" >Nul 2>Nul
TOOLS\TASKS\TASKKILL.EXE /IM "SCHTASKS.EXE" >Nul 2>Nul
TOOLS\TASKS\TASKKILL.EXE /IM "WSCRIPT.EXE" >Nul 2>Nul

TOOLS\TASKS\TASKKILL.EXE /F /IM "CSCRIPT.EXE" >Nul 2>Nul
TOOLS\TASKS\TASKKILL.EXE /F /IM "DLLHOST.EXE" >Nul 2>Nul
TOOLS\TASKS\TASKKILL.EXE /F /IM "POWERSHELL.EXE" >Nul 2>Nul
TOOLS\TASKS\TASKKILL.EXE /F /IM "RUNDLL32.EXE" >Nul 2>Nul
TOOLS\TASKS\TASKKILL.EXE /F /IM "SCHTASKS.EXE" >Nul 2>Nul
TOOLS\TASKS\TASKKILL.EXE /F /IM "WSCRIPT.EXE" >Nul 2>Nul

MKDIR "%QRoot%" >Nul 2>Nul
MKDIR "%QFiles%" >Nul 2>Nul
MKDIR "%QFolders%" >Nul 2>Nul
MKDIR "%QRegistries%" >Nul 2>Nul

%EXESETACL% -on "%QFiles%" -ot file -actn ace -ace "n:Everyone;p:FILE_TRAVERSE;m:deny" -silent >Nul 2>Nul
%EXESETACL% -on "%QFolders%" -ot file -actn ace -ace "n:Everyone;p:FILE_TRAVERSE;m:deny" -silent >Nul 2>Nul

SET "QLog=%QRoot%\Report [%RPTDATE%].mz.log"

REM * Setup - User SID
FOR /F "DELIMS=" %%A IN ('POWERSHELL.EXE -C "Get-WmiObject -Query 'SELECT SID FROM Win32_UserAccount Where LocalAccount = True AND Name = \"%USERNAME%\"'|Select SID -ExpandProperty SID" 2^>Nul') DO (
	SET SID=%%A
)

REM * Setup - Start Logging
ECHO ◇ 검사 기록 시작 및 악성코드 격리를 위한 검역소 생성 . . .
ECHO.
ECHO    검사 일시 : %DATETIME%
ECHO    검역소 폴더 : %QRoot%
ECHO.
ECHO    기록 : %QLog%

PING.EXE -n 2 0 >Nul 2>Nul

>>"%QLog%" ECHO Malware Zero Report File
>>"%QLog%" ECHO.
>>"%QLog%" ECHO -- 경고 --
>>"%QLog%" ECHO.
>>"%QLog%" ECHO    데이터베이스는 자동으로 갱신되지 않기 때문에, 필요할 때마다 새로 내려받아 검사하시기 바랍니다.
>>"%QLog%" ECHO.
>>"%QLog%" ECHO -- 알림 --
>>"%QLog%" ECHO.
>>"%QLog%" ECHO    도구 사용 후, 아래 사항 반드시 확인
>>"%QLog%" ECHO.
>>"%QLog%" ECHO    ① 악성코드 제거에 실패했을 경우, 안전 모드에서 검사를 진행하거나 재부팅 후 재검사 진행
>>"%QLog%" ECHO    ② 메모리를 활용하는 악성코드에 감염되었을 경우, 검사 후 반드시 재부팅 진행
>>"%QLog%" ECHO    ③ 웹 브라우저에서 악성 광고 창이 계속 생성될 경우, 임시 파일 제거 / 시작 ^& 검색 페이지 설정 및 부가 ^& 확장 프로그램 점검 / 웹 브라우저 재설치
>>"%QLog%" ECHO    ④ 한글 입력 불가 및 특정 프로그램^(예^: Classic Shell^)이 정상 실행되지 않을 경우 재부팅 진행
>>"%QLog%" ECHO    ⑤ 사용 후 도구가 삭제되지 않을 경우, 재부팅 후 삭제 진행
>>"%QLog%" ECHO.
>>"%QLog%" ECHO    반복 진단, 미진단, 오진, 오동작, 그 외 버그 등 문제 발생 시 아래 사항 확인
>>"%QLog%" ECHO.
>>"%QLog%" ECHO    ① 동봉되어 있는 ^<3. 문제 해결^> 문서를 참고하여 문제 해결
>>"%QLog%" ECHO    ② 반복 진단, 미진단 시 악성코드 분석 요청 : https://malzero.xyz/support/analysis
>>"%QLog%" ECHO    ③ 오진, 오동작, 그 외 버그 신고 : malzero.virus@gmail.com
>>"%QLog%" ECHO.
>>"%QLog%" ECHO    ※ 자기 자신부터 보안 실천 ^! ^! ^! ^<5. 악성코드 감염 예방^> 문서 참고
>>"%QLog%" ECHO.
>>"%QLog%" ECHO -- 검사 정보 --
>>"%QLog%" ECHO.
>>"%QLog%" ECHO    데이터베이스 버전 : %DBDATE% V%DBVER%
>>"%QLog%" ECHO.
FOR /F "DELIMS=" %%A IN ('VER 2^>Nul') DO (
	>>"%QLog%" ECHO    운영체제^(OS^) : %%A, %ARCHITECTURE%
)
IF NOT DEFINED SAFEBOOT_OPTION (
	>>"%QLog%" ECHO    검사 환경 : 표준
) ELSE (
	IF /I "%SAFEBOOT_OPTION%" == "MINIMAL" (
		>>"%QLog%" ECHO    검사 환경 : 안전 모드
	) ELSE (
		IF /I "%SAFEBOOT_OPTION%" == "NETWORK" (
			>>"%QLog%" ECHO    검사 환경 : 안전 모드 ^(네트워킹 사용^)
		) ELSE (
			>>"%QLog%" ECHO    검사 환경 : 안전 모드 ^(기타^)
		)
	)
)
>>"%QLog%" ECHO    검사 일시 : %DATETIME%
>>"%QLog%" ECHO.
>>"%QLog%" ECHO    검역소 폴더 : %QRoot%
>>"%QLog%" ECHO.

SET STRTMP=NULL

PING.EXE -n 4 0 >Nul 2>Nul

ECHO.

REM * Check - User Account Control
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA" 2^>Nul') DO (
	IF /I NOT "%%A" == "1" (
		>>"%QLog%" ECHO -- 사용자 계정 컨트롤^(UAC^) --
		>>"%QLog%" ECHO.
		>>"%QLog%" ECHO    ★ 위험 ★ 사용자 계정 컨트롤^(UAC^) 기능이 비활성화되어 있습니다.
		>>"%QLog%" ECHO.

		ECHO ★ 위험 ★ 사용자 계정 컨트롤^(UAC^) 기능이 비활성화 되어 있습니다.
		ECHO.
		>VARIABLE\%VXXYY% ECHO 1
	) ELSE (
		>>"%QLog%" ECHO -- 사용자 계정 컨트롤^(UAC^) --
		>>"%QLog%" ECHO.
		>>"%QLog%" ECHO    ★ 안전 ★ 사용자 계정 컨트롤^(UAC^) 기능이 활성화되어 있습니다.
		>>"%QLog%" ECHO.
	)
)

>>"%QLog%" ECHO -- 상세 보고 --
>>"%QLog%" ECHO.

REM * Reset - Malicious AppInit_DLLs Values (x64 or x86)
ECHO ◇ 악성 및 유해 가능 자동 실행 라이브러리^(AppInit_DLLs^) 값 확인중 . . . & >>"%QLog%" ECHO    ■ 악성 및 유해 가능 자동 실행 라이브러리^(AppInit_DLLs^) 값 확인 :
TITLE ^(확인중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs" 2^>Nul') DO (
	>VARIABLE\%VTEXT3% ECHO %%~A
	FOR /F %%X IN ('%EXEGREP% -Fif DB_EXEC\THREAT\REGISTRY\DEL_HKLM_APPINIT_DLLS.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		>VARIABLE\%VCHECK% ECHO 1
		SETLOCAL ENABLEDELAYEDEXPANSION
		REG.EXE EXPORT "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows" "!QRegistries!\HKLM_WinNT_Windows_AppInitDLLs.reg" /y >Nul 2>Nul
		REG.EXE ADD "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows" /v AppInit_DLLs /d "" /f >Nul 2>Nul
		REG.EXE ADD "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows" /v LoadAppInit_DLLs /d 0 /f >Nul 2>Nul
		IF !ERRORLEVEL! EQU 0 (
			ECHO    비정상 값이 확인되어 초기화를 진행합니다. ^(재부팅 필요^) & >>"!QLog!" ECHO    비정상 값이 확인되어 초기화 진행 ^(재부팅 필요^)
		) ELSE (
			ECHO    비정상 값이 확인되어 초기화를 진행하였으나 오류가 발생했습니다. & >>"!QLog!" ECHO    비정상 값이 확인되어 초기화 진행 ^(실패 - 오류 발생^)
		)
		ENDLOCAL & GOTO GO_INIT1
	)
	FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HKLM_APPINIT_DLLS_FILEONLY.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		>VARIABLE\%VCHECK% ECHO 1
		SETLOCAL ENABLEDELAYEDEXPANSION
		REG.EXE EXPORT "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows" "!QRegistries!\HKLM_WinNT_Windows_AppInitDLLs.reg" /y >Nul 2>Nul
		REG.EXE ADD "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows" /v AppInit_DLLs /d "" /f >Nul 2>Nul
		REG.EXE ADD "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows" /v LoadAppInit_DLLs /d 0 /f >Nul 2>Nul
		IF !ERRORLEVEL! EQU 0 (
			ECHO    비정상 값이 확인되어 초기화를 진행합니다. ^(재부팅 필요^) & >>"!QLog!" ECHO    비정상 값이 확인되어 초기화 진행 ^(재부팅 필요^)
		) ELSE (
			ECHO    비정상 값이 확인되어 초기화를 진행하였으나 오류가 발생했습니다. & >>"!QLog!" ECHO    비정상 값이 확인되어 초기화 진행 ^(실패 - 오류 발생^)
		)
		ENDLOCAL & GOTO GO_INIT1
	)
	FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_HKLM_APPINIT_DLLS.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		>VARIABLE\%VCHECK% ECHO 1
		SETLOCAL ENABLEDELAYEDEXPANSION
		REG.EXE EXPORT "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows" "!QRegistries!\HKLM_WinNT_Windows_AppInitDLLs.reg" /y >Nul 2>Nul
		REG.EXE ADD "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows" /v AppInit_DLLs /d "" /f >Nul 2>Nul
		REG.EXE ADD "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows" /v LoadAppInit_DLLs /d 0 /f >Nul 2>Nul
		IF !ERRORLEVEL! EQU 0 (
			ECHO    비정상 값이 확인되어 초기화를 진행합니다. ^(재부팅 필요^) & >>"!QLog!" ECHO    비정상 값이 확인되어 초기화 진행 ^(재부팅 필요^)
		) ELSE (
			ECHO    비정상 값이 확인되어 초기화를 진행하였으나 오류가 발생했습니다. & >>"!QLog!" ECHO    비정상 값이 확인되어 초기화 진행 ^(실패 - 오류 발생^)
		)
		ENDLOCAL & GOTO GO_INIT1
	)
)
:GO_INIT1
SETLOCAL ENABLEDELAYEDEXPANSION
<VARIABLE\!VCHECK! SET /P CHCK=
IF !CHCK! EQU 0 (
	ENDLOCAL
	ECHO    문제점이 발견되지 않았습니다. & >>"%QLog%" ECHO    문제점이 발견되지 않음
) ELSE (
	ENDLOCAL
	>VARIABLE\%VXXXX% ECHO 1
	COLOR 4F
)
REM :Reset Value
CALL :RESET_VALUE

TITLE %MZTITLE% 2>Nul & PING.EXE -n 2 0 >Nul 2>Nul & ECHO. & >>"%QLog%" ECHO.

REM * Reset - Malicious AppInit_DLLs Values (x86)
ECHO ◇ 악성 및 유해 가능 자동 실행 라이브러리^(AppInit_DLLs, 32bit^) 값 확인중 . . . & >>"%QLog%" ECHO    ■ 악성 및 유해 가능 자동 실행 라이브러리^(AppInit_DLLs, 32bit^) 값 확인 :
TITLE ^(확인중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs" 2^>Nul') DO (
	>VARIABLE\%VTEXT3% ECHO %%~A
	FOR /F %%X IN ('%EXEGREP% -Fif DB_EXEC\THREAT\REGISTRY\DEL_HKLM_APPINIT_DLLS.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		>VARIABLE\%VCHECK% ECHO 1
		SETLOCAL ENABLEDELAYEDEXPANSION
		REG.EXE EXPORT "HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Windows" "!QRegistries!\HKLM_WinNT_Windows_AppInitDLLs(x86).reg" /y >Nul 2>Nul
		REG.EXE ADD "HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Windows" /v AppInit_DLLs /d "" /f >Nul 2>Nul
		REG.EXE ADD "HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Windows" /v LoadAppInit_DLLs /d 0 /f >Nul 2>Nul
		IF !ERRORLEVEL! EQU 0 (
			ECHO    비정상 값이 확인되어 초기화를 진행합니다. ^(재부팅 필요^) & >>"!QLog!" ECHO    비정상 값이 확인되어 초기화 진행 ^(재부팅 필요^)
		) ELSE (
			ECHO    비정상 값이 확인되어 초기화를 진행하였으나 오류가 발생했습니다. & >>"!QLog!" ECHO    비정상 값이 확인되어 초기화 진행 ^(실패 - 오류 발생^)
		)
		ENDLOCAL & GOTO GO_INIT2
	)
	FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HKLM_APPINIT_DLLS_FILEONLY.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		>VARIABLE\%VCHECK% ECHO 1
		SETLOCAL ENABLEDELAYEDEXPANSION
		REG.EXE EXPORT "HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Windows" "!QRegistries!\HKLM_WinNT_Windows_AppInitDLLs(x86).reg" /y >Nul 2>Nul
		REG.EXE ADD "HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Windows" /v AppInit_DLLs /d "" /f >Nul 2>Nul
		REG.EXE ADD "HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Windows" /v LoadAppInit_DLLs /d 0 /f >Nul 2>Nul
		IF !ERRORLEVEL! EQU 0 (
			ECHO    비정상 값이 확인되어 초기화를 진행합니다. ^(재부팅 필요^) & >>"!QLog!" ECHO    비정상 값이 확인되어 초기화 진행 ^(재부팅 필요^)
		) ELSE (
			ECHO    비정상 값이 확인되어 초기화를 진행하였으나 오류가 발생했습니다. & >>"!QLog!" ECHO    비정상 값이 확인되어 초기화 진행 ^(실패 - 오류 발생^)
		)
		ENDLOCAL & GOTO GO_INIT2
	)
	FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_HKLM_APPINIT_DLLS.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		>VARIABLE\%VCHECK% ECHO 1
		SETLOCAL ENABLEDELAYEDEXPANSION
		REG.EXE EXPORT "HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Windows" "!QRegistries!\HKLM_WinNT_Windows_AppInitDLLs(x86).reg" /y >Nul 2>Nul
		REG.EXE ADD "HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Windows" /v AppInit_DLLs /d "" /f >Nul 2>Nul
		REG.EXE ADD "HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Windows" /v LoadAppInit_DLLs /d 0 /f >Nul 2>Nul
		IF !ERRORLEVEL! EQU 0 (
			ECHO    비정상 값이 확인되어 초기화를 진행합니다. ^(재부팅 필요^) & >>"!QLog!" ECHO    비정상 값이 확인되어 초기화 진행 ^(재부팅 필요^)
		) ELSE (
			ECHO    비정상 값이 확인되어 초기화를 진행하였으나 오류가 발생했습니다. & >>"!QLog!" ECHO    비정상 값이 확인되어 초기화 진행 ^(실패 - 오류 발생^)
		)
		ENDLOCAL & GOTO GO_INIT2
	)
)
:GO_INIT2
SETLOCAL ENABLEDELAYEDEXPANSION
<VARIABLE\!VCHECK! SET /P CHCK=
IF !CHCK! EQU 0 (
	ENDLOCAL
	ECHO    문제점이 발견되지 않았습니다. & >>"%QLog%" ECHO    문제점이 발견되지 않음
) ELSE (
	ENDLOCAL
	>VARIABLE\%VXXXX% ECHO 1
	COLOR 4F
)
REM :Reset Value
CALL :RESET_VALUE

TITLE %MZTITLE% 2>Nul & PING.EXE -n 2 0 >Nul 2>Nul & ECHO. & >>"%QLog%" ECHO.

REM * Check - Malicious Task Scheduler
ECHO ◇ 악성 및 유해 가능 작업 스케줄러 확인중 . . .
REM :HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\…\Schedule\TaskCache\Tasks\%%A" 2>Nul
	FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\%%A\Path" 2^>Nul^|%EXEGREP% -Fivxf DB\EXCEPT\EX_REG_TASKS_PATH+NC.DB 2^>Nul') DO (
		>VARIABLE\%VCHECK% ECHO 0
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			>VARIABLE\%VTEXT3% TOOLS\REGTOOL\REGTOOL.EXE -w get "\HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\%%A\Actions" 2>Nul
			CSCRIPT.EXE //B //T:5 TOOLS\UNSETNUL\UNSETNUL.VBS VARIABLE\%VTEXT3% >Nul 2>Nul
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				FOR /F %%X IN ('%EXEGREP% -f DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_HKLM_TASKS_TRIGGER+C.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
					SCHTASKS.EXE /End /TN "%%B" >Nul 2>Nul
					>>DB_ACTIVE\ACT_FILE_TASKS_%UNIQ%.DB ECHO %%B
					>VARIABLE\%VCHECK% ECHO 1
				)
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				FOR /F %%X IN ('%EXEGREP% -if DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_HKLM_TASKS_TRIGGER+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
					SCHTASKS.EXE /End /TN "%%B" >Nul 2>Nul
					>>DB_ACTIVE\ACT_FILE_TASKS_%UNIQ%.DB ECHO %%B
					>VARIABLE\%VCHECK% ECHO 1
				)
			) ELSE (
				ENDLOCAL
			)
		) ELSE (
			ENDLOCAL
		)
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F "DELIMS=" %%C IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\%%A\Description" 2^>Nul') DO (
				>VARIABLE\%VTEXT3% ECHO %%C
				FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_HKLM_TASKS_DESCRIPTION_SCANONLY+C.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
					SCHTASKS.EXE /End /TN "%%B" >Nul 2>Nul
					>>DB_ACTIVE\ACT_FILE_TASKS_%UNIQ%.DB ECHO %%B
					>VARIABLE\%VCHECK% ECHO 1
				)
			)
		) ELSE (
			ENDLOCAL
		)
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			>VARIABLE\%VTEXT3% ECHO %%B
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				FOR /F %%Y IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HKLM_TASKS_PATH_SCANONLY+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
					SCHTASKS.EXE /End /TN "%%B" >Nul 2>Nul
					>>DB_ACTIVE\ACT_FILE_TASKS_%UNIQ%.DB ECHO %%B
					>VARIABLE\%VCHECK% ECHO 1
				)
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				FOR /F %%Y IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_HKLM_TASKS_PATH+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
					SCHTASKS.EXE /End /TN "%%B" >Nul 2>Nul
					>>DB_ACTIVE\ACT_FILE_TASKS_%UNIQ%.DB ECHO %%B
					>VARIABLE\%VCHECK% ECHO 1
				)
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				CALL :GET_FILESIZE "%SYSTEMROOT%\System32\Tasks%%B"
				SETLOCAL ENABLEDELAYEDEXPANSION
				IF !FILESIZE! LEQ 100000 (
					ENDLOCAL
					IF EXIST "%SYSTEMROOT%\System32\Tasks%%B" (
						>VARIABLE\%VTEXT4% TYPE "%SYSTEMROOT%\System32\Tasks%%B" 2>Nul
						SETLOCAL ENABLEDELAYEDEXPANSION
						<VARIABLE\!VCHECK! SET /P CHCK=
						IF !CHCK! EQU 0 (
							ENDLOCAL
							FOR /F %%X IN ('%EXEGREP% -f DB_EXEC\ACTIVESCAN\FILE\PATTERN_TASKS_PATH+C.DB VARIABLE\%VTEXT4% 2^>Nul^|%EXEGREP% -Fvf DB\EXCEPT\EX_FILE_TASKS_PATHDATA+C.DB 2^>Nul') DO (
								SCHTASKS.EXE /End /TN "%%B" >Nul 2>Nul
								>>DB_ACTIVE\ACT_FILE_TASKS_%UNIQ%.DB ECHO %%B
								>VARIABLE\%VCHECK% ECHO 1
							)
						) ELSE (
							ENDLOCAL
						)
						SETLOCAL ENABLEDELAYEDEXPANSION
						<VARIABLE\!VCHECK! SET /P CHCK=
						IF !CHCK! EQU 0 (
							ENDLOCAL
							FOR /F %%X IN ('%EXEGREP% -if DB_EXEC\ACTIVESCAN\FILE\PATTERN_TASKS_PATH+NC.DB VARIABLE\%VTEXT4% 2^>Nul^|%EXEGREP% -Fvf DB\EXCEPT\EX_FILE_TASKS_PATHDATA+C.DB 2^>Nul') DO (
								SCHTASKS.EXE /End /TN "%%B" >Nul 2>Nul
								>>DB_ACTIVE\ACT_FILE_TASKS_%UNIQ%.DB ECHO %%B
								>VARIABLE\%VCHECK% ECHO 1
							)
						) ELSE (
							ENDLOCAL
						)
					)
				) ELSE (
					ENDLOCAL
				)
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				CALL :GET_FILESIZE "%SYSTEMROOT%\SysWOW64\Tasks%%B"
				SETLOCAL ENABLEDELAYEDEXPANSION
				IF !FILESIZE! LEQ 100000 (
					ENDLOCAL
					IF EXIST "%SYSTEMROOT%\SysWOW64\Tasks%%B" (
						>VARIABLE\%VTEXT4% TYPE "%SYSTEMROOT%\SysWOW64\Tasks%%B" 2>Nul
						SETLOCAL ENABLEDELAYEDEXPANSION
						<VARIABLE\!VCHECK! SET /P CHCK=
						IF !CHCK! EQU 0 (
							ENDLOCAL
							FOR /F %%X IN ('%EXEGREP% -f DB_EXEC\ACTIVESCAN\FILE\PATTERN_TASKS_PATH+C.DB VARIABLE\%VTEXT4% 2^>Nul^|%EXEGREP% -Fvf DB\EXCEPT\EX_FILE_TASKS_PATHDATA+C.DB 2^>Nul') DO (
								SCHTASKS.EXE /End /TN "%%B" >Nul 2>Nul
								>>DB_ACTIVE\ACT_FILE_TASKS_%UNIQ%.DB ECHO %%B
								>VARIABLE\%VCHECK% ECHO 1
							)
						) ELSE (
							ENDLOCAL
						)
						SETLOCAL ENABLEDELAYEDEXPANSION
						<VARIABLE\!VCHECK! SET /P CHCK=
						IF !CHCK! EQU 0 (
							ENDLOCAL
							FOR /F %%X IN ('%EXEGREP% -if DB_EXEC\ACTIVESCAN\FILE\PATTERN_TASKS_PATH+NC.DB VARIABLE\%VTEXT4% 2^>Nul^|%EXEGREP% -Fvf DB\EXCEPT\EX_FILE_TASKS_PATHDATA+C.DB 2^>Nul') DO (
								SCHTASKS.EXE /End /TN "%%B" >Nul 2>Nul
								>>DB_ACTIVE\ACT_FILE_TASKS_%UNIQ%.DB ECHO %%B
								>VARIABLE\%VCHECK% ECHO 1
							)
						) ELSE (
							ENDLOCAL
						)
					)
				) ELSE (
					ENDLOCAL
				)
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				CALL :GET_FILESIZE "%SYSTEMROOT%\System32\Tasks_Migrated%%B"
				SETLOCAL ENABLEDELAYEDEXPANSION
				IF !FILESIZE! LEQ 100000 (
					ENDLOCAL
					IF EXIST "%SYSTEMROOT%\System32\Tasks_Migrated%%B" (
						>VARIABLE\%VTEXT4% TYPE "%SYSTEMROOT%\System32\Tasks_Migrated%%B" 2>Nul
						SETLOCAL ENABLEDELAYEDEXPANSION
						<VARIABLE\!VCHECK! SET /P CHCK=
						IF !CHCK! EQU 0 (
							ENDLOCAL
							FOR /F %%X IN ('%EXEGREP% -f DB_EXEC\ACTIVESCAN\FILE\PATTERN_TASKS_PATH+C.DB VARIABLE\%VTEXT4% 2^>Nul^|%EXEGREP% -Fvf DB\EXCEPT\EX_FILE_TASKS_PATHDATA+C.DB 2^>Nul') DO (
								SCHTASKS.EXE /End /TN "%%B" >Nul 2>Nul
								>>DB_ACTIVE\ACT_FILE_TASKS_%UNIQ%.DB ECHO %%B
								>VARIABLE\%VCHECK% ECHO 1
							)
						) ELSE (
							ENDLOCAL
						)
						SETLOCAL ENABLEDELAYEDEXPANSION
						<VARIABLE\!VCHECK! SET /P CHCK=
						IF !CHCK! EQU 0 (
							ENDLOCAL
							FOR /F %%X IN ('%EXEGREP% -if DB_EXEC\ACTIVESCAN\FILE\PATTERN_TASKS_PATH+NC.DB VARIABLE\%VTEXT4% 2^>Nul^|%EXEGREP% -Fvf DB\EXCEPT\EX_FILE_TASKS_PATHDATA+C.DB 2^>Nul') DO (
								SCHTASKS.EXE /End /TN "%%B" >Nul 2>Nul
								>>DB_ACTIVE\ACT_FILE_TASKS_%UNIQ%.DB ECHO %%B
								>VARIABLE\%VCHECK% ECHO 1
							)
						) ELSE (
							ENDLOCAL
						)
					)
				) ELSE (
					ENDLOCAL
				)
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				CALL :GET_FILESIZE "%SYSTEMROOT%\SysWOW64\Tasks_Migrated%%B"
				SETLOCAL ENABLEDELAYEDEXPANSION
				IF !FILESIZE! LEQ 100000 (
					ENDLOCAL
					IF EXIST "%SYSTEMROOT%\SysWOW64\Tasks_Migrated%%B" (
						>VARIABLE\%VTEXT4% TYPE "%SYSTEMROOT%\SysWOW64\Tasks_Migrated%%B" 2>Nul
						SETLOCAL ENABLEDELAYEDEXPANSION
						<VARIABLE\!VCHECK! SET /P CHCK=
						IF !CHCK! EQU 0 (
							ENDLOCAL
							FOR /F %%X IN ('%EXEGREP% -f DB_EXEC\ACTIVESCAN\FILE\PATTERN_TASKS_PATH+C.DB VARIABLE\%VTEXT4% 2^>Nul^|%EXEGREP% -Fvf DB\EXCEPT\EX_FILE_TASKS_PATHDATA+C.DB 2^>Nul') DO (
								SCHTASKS.EXE /End /TN "%%B" >Nul 2>Nul
								>>DB_ACTIVE\ACT_FILE_TASKS_%UNIQ%.DB ECHO %%B
								>VARIABLE\%VCHECK% ECHO 1
							)
						) ELSE (
							ENDLOCAL
						)
						SETLOCAL ENABLEDELAYEDEXPANSION
						<VARIABLE\!VCHECK! SET /P CHCK=
						IF !CHCK! EQU 0 (
							ENDLOCAL
							FOR /F %%X IN ('%EXEGREP% -if DB_EXEC\ACTIVESCAN\FILE\PATTERN_TASKS_PATH+NC.DB VARIABLE\%VTEXT4% 2^>Nul^|%EXEGREP% -Fvf DB\EXCEPT\EX_FILE_TASKS_PATHDATA+C.DB 2^>Nul') DO (
								SCHTASKS.EXE /End /TN "%%B" >Nul 2>Nul
								>>DB_ACTIVE\ACT_FILE_TASKS_%UNIQ%.DB ECHO %%B
								>VARIABLE\%VCHECK% ECHO 1
							)
						) ELSE (
							ENDLOCAL
						)
					)
				) ELSE (
					ENDLOCAL
				)
			) ELSE (
				ENDLOCAL
			)
		) ELSE (
			ENDLOCAL
		)
	)
)
REM :HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Wow6432Node\…\Schedule\TaskCache\Tasks\%%A" 2>Nul
	FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\%%A\Path" 2^>Nul^|%EXEGREP% -Fivxf DB\EXCEPT\EX_REG_TASKS_PATH+NC.DB 2^>Nul') DO (
		>VARIABLE\%VCHECK% ECHO 0
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			>VARIABLE\%VTEXT3% TOOLS\REGTOOL\REGTOOL.EXE -w get "\HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\%%A\Actions" 2>Nul
			CSCRIPT.EXE //B //T:5 TOOLS\UNSETNUL\UNSETNUL.VBS VARIABLE\%VTEXT3% >Nul 2>Nul
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				FOR /F %%X IN ('%EXEGREP% -f DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_HKLM_TASKS_TRIGGER+C.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
					SCHTASKS.EXE /End /TN "%%B" >Nul 2>Nul
					>>DB_ACTIVE\ACT_FILE_TASKS_%UNIQ%.DB ECHO %%B
					>VARIABLE\%VCHECK% ECHO 1
				)
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				FOR /F %%X IN ('%EXEGREP% -if DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_HKLM_TASKS_TRIGGER+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
					SCHTASKS.EXE /End /TN "%%B" >Nul 2>Nul
					>>DB_ACTIVE\ACT_FILE_TASKS_%UNIQ%.DB ECHO %%B
					>VARIABLE\%VCHECK% ECHO 1
				)
			) ELSE (
				ENDLOCAL
			)
		) ELSE (
			ENDLOCAL
		)
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F "DELIMS=" %%C IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\%%A\Description" 2^>Nul') DO (
				>VARIABLE\%VTEXT3% ECHO %%C
				FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_HKLM_TASKS_DESCRIPTION_SCANONLY+C.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
					SCHTASKS.EXE /End /TN "%%B" >Nul 2>Nul
					>>DB_ACTIVE\ACT_FILE_TASKS_%UNIQ%.DB ECHO %%B
					>VARIABLE\%VCHECK% ECHO 1
				)
			)
		) ELSE (
			ENDLOCAL
		)
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			>VARIABLE\%VTEXT3% ECHO %%B
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				FOR /F %%Y IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HKLM_TASKS_PATH_SCANONLY+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
					SCHTASKS.EXE /End /TN "%%B" >Nul 2>Nul
					>>DB_ACTIVE\ACT_FILE_TASKS_%UNIQ%.DB ECHO %%B
					>VARIABLE\%VCHECK% ECHO 1
				)
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				FOR /F %%Y IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_HKLM_TASKS_PATH+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
					SCHTASKS.EXE /End /TN "%%B" >Nul 2>Nul
					>>DB_ACTIVE\ACT_FILE_TASKS_%UNIQ%.DB ECHO %%B
					>VARIABLE\%VCHECK% ECHO 1
				)
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				CALL :GET_FILESIZE "%SYSTEMROOT%\System32\Tasks%%B"
				SETLOCAL ENABLEDELAYEDEXPANSION
				IF !FILESIZE! LEQ 100000 (
					ENDLOCAL
					IF EXIST "%SYSTEMROOT%\System32\Tasks%%B" (
						>VARIABLE\%VTEXT4% TYPE "%SYSTEMROOT%\System32\Tasks%%B" 2>Nul
						SETLOCAL ENABLEDELAYEDEXPANSION
						<VARIABLE\!VCHECK! SET /P CHCK=
						IF !CHCK! EQU 0 (
							ENDLOCAL
							FOR /F %%X IN ('%EXEGREP% -f DB_EXEC\ACTIVESCAN\FILE\PATTERN_TASKS_PATH+C.DB VARIABLE\%VTEXT4% 2^>Nul^|%EXEGREP% -Fvf DB\EXCEPT\EX_FILE_TASKS_PATHDATA+C.DB 2^>Nul') DO (
								SCHTASKS.EXE /End /TN "%%B" >Nul 2>Nul
								>>DB_ACTIVE\ACT_FILE_TASKS_%UNIQ%.DB ECHO %%B
								>VARIABLE\%VCHECK% ECHO 1
							)
						) ELSE (
							ENDLOCAL
						)
						SETLOCAL ENABLEDELAYEDEXPANSION
						<VARIABLE\!VCHECK! SET /P CHCK=
						IF !CHCK! EQU 0 (
							ENDLOCAL
							FOR /F %%X IN ('%EXEGREP% -if DB_EXEC\ACTIVESCAN\FILE\PATTERN_TASKS_PATH+NC.DB VARIABLE\%VTEXT4% 2^>Nul^|%EXEGREP% -Fvf DB\EXCEPT\EX_FILE_TASKS_PATHDATA+C.DB 2^>Nul') DO (
								SCHTASKS.EXE /End /TN "%%B" >Nul 2>Nul
								>>DB_ACTIVE\ACT_FILE_TASKS_%UNIQ%.DB ECHO %%B
								>VARIABLE\%VCHECK% ECHO 1
							)
						) ELSE (
							ENDLOCAL
						)
					)
				) ELSE (
					ENDLOCAL
				)
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				CALL :GET_FILESIZE "%SYSTEMROOT%\SysWOW64\Tasks%%B"
				SETLOCAL ENABLEDELAYEDEXPANSION
				IF !FILESIZE! LEQ 100000 (
					ENDLOCAL
					IF EXIST "%SYSTEMROOT%\SysWOW64\Tasks%%B" (
						>VARIABLE\%VTEXT4% TYPE "%SYSTEMROOT%\SysWOW64\Tasks%%B" 2>Nul
						SETLOCAL ENABLEDELAYEDEXPANSION
						<VARIABLE\!VCHECK! SET /P CHCK=
						IF !CHCK! EQU 0 (
							ENDLOCAL
							FOR /F %%X IN ('%EXEGREP% -f DB_EXEC\ACTIVESCAN\FILE\PATTERN_TASKS_PATH+C.DB VARIABLE\%VTEXT4% 2^>Nul^|%EXEGREP% -Fvf DB\EXCEPT\EX_FILE_TASKS_PATHDATA+C.DB 2^>Nul') DO (
								SCHTASKS.EXE /End /TN "%%B" >Nul 2>Nul
								>>DB_ACTIVE\ACT_FILE_TASKS_%UNIQ%.DB ECHO %%B
								>VARIABLE\%VCHECK% ECHO 1
							)
						) ELSE (
							ENDLOCAL
						)
						SETLOCAL ENABLEDELAYEDEXPANSION
						<VARIABLE\!VCHECK! SET /P CHCK=
						IF !CHCK! EQU 0 (
							ENDLOCAL
							FOR /F %%X IN ('%EXEGREP% -if DB_EXEC\ACTIVESCAN\FILE\PATTERN_TASKS_PATH+NC.DB VARIABLE\%VTEXT4% 2^>Nul^|%EXEGREP% -Fvf DB\EXCEPT\EX_FILE_TASKS_PATHDATA+C.DB 2^>Nul') DO (
								SCHTASKS.EXE /End /TN "%%B" >Nul 2>Nul
								>>DB_ACTIVE\ACT_FILE_TASKS_%UNIQ%.DB ECHO %%B
								>VARIABLE\%VCHECK% ECHO 1
							)
						) ELSE (
							ENDLOCAL
						)
					)
				) ELSE (
					ENDLOCAL
				)
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				CALL :GET_FILESIZE "%SYSTEMROOT%\System32\Tasks_Migrated%%B"
				SETLOCAL ENABLEDELAYEDEXPANSION
				IF !FILESIZE! LEQ 100000 (
					ENDLOCAL
					IF EXIST "%SYSTEMROOT%\System32\Tasks_Migrated%%B" (
						>VARIABLE\%VTEXT4% TYPE "%SYSTEMROOT%\System32\Tasks_Migrated%%B" 2>Nul
						SETLOCAL ENABLEDELAYEDEXPANSION
						<VARIABLE\!VCHECK! SET /P CHCK=
						IF !CHCK! EQU 0 (
							ENDLOCAL
							FOR /F %%X IN ('%EXEGREP% -f DB_EXEC\ACTIVESCAN\FILE\PATTERN_TASKS_PATH+C.DB VARIABLE\%VTEXT4% 2^>Nul^|%EXEGREP% -Fvf DB\EXCEPT\EX_FILE_TASKS_PATHDATA+C.DB 2^>Nul') DO (
								SCHTASKS.EXE /End /TN "%%B" >Nul 2>Nul
								>>DB_ACTIVE\ACT_FILE_TASKS_%UNIQ%.DB ECHO %%B
								>VARIABLE\%VCHECK% ECHO 1
							)
						) ELSE (
							ENDLOCAL
						)
						SETLOCAL ENABLEDELAYEDEXPANSION
						<VARIABLE\!VCHECK! SET /P CHCK=
						IF !CHCK! EQU 0 (
							ENDLOCAL
							FOR /F %%X IN ('%EXEGREP% -if DB_EXEC\ACTIVESCAN\FILE\PATTERN_TASKS_PATH+NC.DB VARIABLE\%VTEXT4% 2^>Nul^|%EXEGREP% -Fvf DB\EXCEPT\EX_FILE_TASKS_PATHDATA+C.DB 2^>Nul') DO (
								SCHTASKS.EXE /End /TN "%%B" >Nul 2>Nul
								>>DB_ACTIVE\ACT_FILE_TASKS_%UNIQ%.DB ECHO %%B
								>VARIABLE\%VCHECK% ECHO 1
							)
						) ELSE (
							ENDLOCAL
						)
					)
				) ELSE (
					ENDLOCAL
				)
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				CALL :GET_FILESIZE "%SYSTEMROOT%\SysWOW64\Tasks_Migrated%%B"
				SETLOCAL ENABLEDELAYEDEXPANSION
				IF !FILESIZE! LEQ 100000 (
					ENDLOCAL
					IF EXIST "%SYSTEMROOT%\SysWOW64\Tasks_Migrated%%B" (
						>VARIABLE\%VTEXT4% TYPE "%SYSTEMROOT%\SysWOW64\Tasks_Migrated%%B" 2>Nul
						SETLOCAL ENABLEDELAYEDEXPANSION
						<VARIABLE\!VCHECK! SET /P CHCK=
						IF !CHCK! EQU 0 (
							ENDLOCAL
							FOR /F %%X IN ('%EXEGREP% -f DB_EXEC\ACTIVESCAN\FILE\PATTERN_TASKS_PATH+C.DB VARIABLE\%VTEXT4% 2^>Nul^|%EXEGREP% -Fvf DB\EXCEPT\EX_FILE_TASKS_PATHDATA+C.DB 2^>Nul') DO (
								SCHTASKS.EXE /End /TN "%%B" >Nul 2>Nul
								>>DB_ACTIVE\ACT_FILE_TASKS_%UNIQ%.DB ECHO %%B
								>VARIABLE\%VCHECK% ECHO 1
							)
						) ELSE (
							ENDLOCAL
						)
						SETLOCAL ENABLEDELAYEDEXPANSION
						<VARIABLE\!VCHECK! SET /P CHCK=
						IF !CHCK! EQU 0 (
							ENDLOCAL
							FOR /F %%X IN ('%EXEGREP% -if DB_EXEC\ACTIVESCAN\FILE\PATTERN_TASKS_PATH+NC.DB VARIABLE\%VTEXT4% 2^>Nul^|%EXEGREP% -Fvf DB\EXCEPT\EX_FILE_TASKS_PATHDATA+C.DB 2^>Nul') DO (
								SCHTASKS.EXE /End /TN "%%B" >Nul 2>Nul
								>>DB_ACTIVE\ACT_FILE_TASKS_%UNIQ%.DB ECHO %%B
								>VARIABLE\%VCHECK% ECHO 1
							)
						) ELSE (
							ENDLOCAL
						)
					)
				) ELSE (
					ENDLOCAL
				)
			) ELSE (
				ENDLOCAL
			)
		) ELSE (
			ENDLOCAL
		)
	)
)
IF EXIST "DB_ACTIVE\ACT_FILE_TASKS_%UNIQ%.DB" (
	ECHO    비정상 값이 발견되었습니다.
	>VARIABLE\%VXXXX% ECHO 1
	COLOR 4F
) ELSE (
	ECHO    문제점이 발견되지 않았습니다.
)
REM :Reset Value
CALL :RESET_VALUE

TITLE %MZTITLE% 2>Nul & PING.EXE -n 2 0 >Nul 2>Nul & ECHO.

REM * Delete - Malicious Services
ECHO ◇ 악성 및 유해 가능 서비스 제거중 . . . & >>"%QLog%" ECHO    ■ 악성 및 유해 가능 서비스 제거 :
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\System\CurrentControlSet\Services
SET "STRTMP=HKLM_Services"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\System\CurrentControlSet\Services" 2^>Nul^|%EXEGREP% -Fixvf DB_EXEC\CHECK\CHK_TRUSTED_SERVICES+NC.DB 2^>Nul^|%EXEGREP% -ixvf DB_EXEC\CHECK\CHK_TRUSTED_SERVICES_PATTERN+NC.DB 2^>Nul') DO (
	TITLE 검사중 "%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	%EXESETACL% -on "HKLM\System\CurrentControlSet\Services\%%A" -ot reg -actn list -lst "f:csv;s:n" -bckp VARIABLE\%VTEXT3% -silent >Nul 2>Nul
	>VARIABLE\%VTEXT4% TYPE VARIABLE\%VTEXT3% 2>Nul
	FOR /F %%X IN ('%EXEGREP% -Ff DB_EXEC\CHECK\CHK_SERVICE_PROTECT_ACL+C.DB VARIABLE\%VTEXT4% 2^>Nul') DO (
		%EXESETACL% -on "HKLM\System\CurrentControlSet\Services\%%A" -ot reg -actn setowner -ownr "n:Administrators" -rec yes -silent >Nul 2>Nul
		%EXESETACL% -on "HKLM\System\CurrentControlSet\Services\%%A" -ot reg -actn setprot -op "dacl:np;sacl:np" -actn clear -clr "dacl,sacl" -actn setowner -ownr "n:SYSTEM" -rec yes -silent >Nul 2>Nul
	)
	FOR /F "TOKENS=1,2,3 DELIMS=|" %%B IN ('TYPE DB_EXEC\THREAT\SERVICE\DEL_SERVICE_ACTIVE_FILE+NC.DB 2^>Nul') DO (
		IF /I "%%A" == "%%B" >>DB_ACTIVE\ACT_FILE_%%C_%UNIQ%.DB ECHO %%D
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		>VARIABLE\%VTEXT3% ECHO %%A^|
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\SERVICE\DEL_SERVICE+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_SERVICE NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		>VARIABLE\%VTEXT3% ECHO %%A^|
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\SERVICE\PATTERN_SERVICE+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_SERVICE ACTIVESCAN BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		>VARIABLE\%VTEXT3% ECHO %%A^|
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\SERVICE\PATTERN_SERVICE+C.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_SERVICE ACTIVESCAN BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F "DELIMS=" %%Y IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\%%A\Description" 2^>Nul') DO (
			>VARIABLE\%VTEXT3% ECHO %%Y
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				FOR /F %%Z IN ('%EXEGREP% -Fxf DB_EXEC\THREAT\SERVICE\DEL_SERVICE_DESCRIPTION+C.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_SERVICE NULL BACKUP "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				FOR /F %%Z IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\SERVICE\PATTERN_DESCRIPTION.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_SERVICE ACTIVESCAN BACKUP "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
		)
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F "DELIMS=" %%Y IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\%%A\DisplayName" 2^>Nul') DO (
			>VARIABLE\%VTEXT3% ECHO %%Y
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				FOR /F %%Z IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\SERVICE\DEL_SERVICE_DISPLAYNAME+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_SERVICE NULL BACKUP "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				FOR /F %%Z IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\SERVICE\PATTERN_DISPLAYNAME+C.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_SERVICE ACTIVESCAN BACKUP "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
		)
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F "DELIMS=" %%Y IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\%%A\ImagePath" 2^>Nul') DO (
			>VARIABLE\%VTEXT3% ECHO %%Y
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				FOR /F %%Z IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\SERVICE\PATTERN_IMAGEPATH.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_SERVICE ACTIVESCAN BACKUP "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				FOR /F %%Z IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\SERVICE\PATTERN_IMAGEPATH_CASE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_SERVICE ACTIVESCAN BACKUP "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
		)
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F "DELIMS=" %%Y IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\%%A\Parameters\ServiceDll" 2^>Nul') DO (
			>VARIABLE\%VTEXT3% ECHO %%Y
			FOR /F %%Z IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\SERVICE\PATTERN_SERVICEDLL.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_SERVICE ACTIVESCAN BACKUP "%STRTMP%"
		)
	) ELSE (
		ENDLOCAL
	)
)
REM :Result
CALL :PROCESS_RESULT RECK CHKINFECT
REM :Reset Value
CALL :RESET_VALUE

TITLE %MZTITLE% 2>Nul & PING.EXE -n 2 0 >Nul 2>Nul & ECHO. & >>"%QLog%" ECHO.

REM * Reset Process Autorun Registry
ECHO ◇ 초기화 대상 프로세스 자동 실행 레지스트리 확인중 . . . & >>"%QLog%" ECHO    ■ 초기화 대상 프로세스 자동 실행 레지스트리 확인 :
TITLE ^(확인중^) 잠시만 기다려주세요 . . . 2>Nul
REM :HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon (Shell)
TITLE 확인중 "HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon : Shell" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell" 2^>Nul') DO (
	>VARIABLE\%VTEXT3% ECHO %%~nxA
	FOR /F %%X IN ('%EXEGREP% -Fixvf DB\EXCEPT\EX_REG_WINLOGON_SHELL.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		>VARIABLE\%VTEXT1% ECHO HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
		>VARIABLE\%VTEXT2% ECHO explorer.exe
		CALL :RESET_REGISTRY Shell NULL BACKUP "HKCU_WinNT_Winlogon"
	)
)
REM :HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon (Shell)
TITLE 확인중 "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon : Shell" 2>Nul
TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell" >Nul 2>Nul
IF %ERRORLEVEL% EQU 1 (
	>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
	>VARIABLE\%VTEXT2% ECHO explorer.exe
	CALL :RESET_REGISTRY Shell NULL NULL NULL
) ELSE (
	FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell" 2^>Nul') DO (
		>VARIABLE\%VTEXT3% ECHO %%~nxA
		FOR /F %%X IN ('%EXEGREP% -Fixvf DB\EXCEPT\EX_REG_WINLOGON_SHELL.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
			>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
			>VARIABLE\%VTEXT2% ECHO explorer.exe
			CALL :RESET_REGISTRY Shell NULL BACKUP "HKLM_WinNT_Winlogon"
		)
	)
)
REM :HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon (System)
TITLE 확인중 "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon : System" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\System" 2^>Nul') DO (
	>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
	>VARIABLE\%VTEXT2% ECHO NULL
	CALL :RESET_REGISTRY System NULL BACKUP "HKLM_WinNT_Winlogon"
)
REM :Result
SETLOCAL ENABLEDELAYEDEXPANSION
<VARIABLE\!VSEARCH! SET /P SRCH=
<VARIABLE\!VSUCCESS! SET /P SUCC=
<VARIABLE\!VFAIL! SET /P FAIL=
IF !SRCH! EQU 0 (
	ECHO    문제점이 발견되지 않았습니다. & >>"!QLog!" ECHO    문제점이 발견되지 않음
) ELSE (
	ECHO    발견: !SRCH! / 초기화: !SUCC! / 초기화 실패: !FAIL!
	>VARIABLE\!VXXYY! ECHO 1
)
ENDLOCAL
REM :Reset Value
CALL :RESET_VALUE

TITLE %MZTITLE% 2>Nul & PING.EXE -n 2 0 >Nul 2>Nul & ECHO. & >>"%QLog%" ECHO.

REM * Delete - Malicious Background Intelligent Transfer Service Job
ECHO ◇ 악성 및 유해 가능 또는 불필요한 유휴 파일 전송 작업 제거중 . . . & >>"%QLog%" ECHO    ■ 악성 및 유해 가능 또는 불필요한 유휴 파일 전송 작업 제거 :
TITLE ^(확인중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "TOKENS=1,*" %%A IN ('BITSADMIN.EXE /LIST /ALLUSERS 2^>Nul^|%EXEGREP% -Ei "\{[0-9A-Z]{8}-[0-9A-Z]{4}-[0-9A-Z]{4}-[0-9A-Z]{4}-[0-9A-Z]{12}\}" 2^>Nul') DO (
	TITLE 검사중 "BITS Job : %%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%B
	>VARIABLE\%VCHECK% ECHO 0
	FOR /F %%Z IN ('%EXEGREP% -ivf DB\EXCEPT\EX_SVC_BITSADMIN_PATTERN+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -Fif DB_EXEC\THREAT\SERVICE\DEL_BITSADMIN_JOB+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_BITS NULL "%%A"
		) ELSE (
			ENDLOCAL
		)
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -if DB_EXEC\ACTIVESCAN\SERVICE\PATTERN_BITSADMIN_JOB.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_BITS ACTIVESCAN "%%A"
		) ELSE (
			ENDLOCAL
		)
	)
)
REM :Result
CALL :PROCESS_RESULT NULL CHKINFECT
REM :Reset Value
CALL :RESET_VALUE

TITLE %MZTITLE% 2>Nul & PING.EXE -n 2 0 >Nul 2>Nul & ECHO. & >>"%QLog%" ECHO.

REM * Task Killing
ECHO ◇ 악성 및 불필요한 프로세스 종료중 ^(화면이 잠시 깜박일 수 있음^) . . .
FOR /F "TOKENS=2 DELIMS=," %%A IN ('TOOLS\TASKS\TASKLIST.EXE /V /FO CSV /NH /FI "IMAGENAME eq cmd.exe" 2^>Nul^|%EXEGREP% -Ev "^$|Malware Zero|N/A" ') DO (
	TOOLS\TASKS\TASKKILL.EXE /PID "%%A" >Nul 2>Nul
)
FOR /F "DELIMS=" %%A IN ('TYPE DB_EXEC\CHECK\CHK_PROCESSKILL_FAKESYSTEMPROCESS+NC.DB 2^>Nul') DO (
	TITLE 종료중 "%%A" 2>Nul
	FOR /F "TOKENS=1,2 DELIMS=|" %%B IN ('POWERSHELL.EXE -C "(Get-WmiObject Win32_Process -Filter \"Name LIKE '%%A'\"|SELECT ExecutablePath, ProcessId|ForEach-Object {'{0}|{1}' -f $_.ExecutablePath, $_.ProcessId})" -JOIN [ENVIRONMENT]::NewLine 2^>Nul') DO (
		IF NOT "%%B" == "" (
			IF NOT "%%C" == "" (
				FOR /F %%X IN ('ECHO %%B^|GREP.EXE -Fivx "%SYSTEMROOT%\SysNative\%%A" 2^>Nul^|GREP.EXE -Fivx "%SYSTEMROOT%\System32\%%A" 2^>Nul^|GREP.EXE -Fivx "%SYSTEMROOT%\SysWOW64\%%A" 2^>Nul') DO (
					TOOLS\TASKS\TASKKILL.EXE /PID "%%C" >Nul 2>Nul
				)
			)
		)
	)
)

FOR /F "DELIMS=" %%A IN ('TYPE DB_EXEC\CHECK\CHK_PROCESSKILL_BROWSER+NC.DB 2^>Nul') DO (
	TITLE 종료중 "%%A" 2>Nul
	TOOLS\TASKS\TASKKILL.EXE /F /IM "%%A" >Nul 2>Nul
)
IF %CHKEXPLORER% EQU 1 (
	TOOLS\TASKS\TASKKILL.EXE /IM "DOPUS.EXE" >Nul 2>Nul
	TOOLS\TASKS\TASKKILL.EXE /IM "DOPUSRT.EXE" >Nul 2>Nul
	TOOLS\TASKS\TASKKILL.EXE /IM "EXPLORER++.EXE" >Nul 2>Nul
	TOOLS\TASKS\TASKKILL.EXE /IM "FAR.EXE" >Nul 2>Nul
	TOOLS\TASKS\TASKKILL.EXE /IM "FLYEXPLORER.EXE" >Nul 2>Nul
	TOOLS\TASKS\TASKKILL.EXE /IM "FREECOMMANDER.EXE" >Nul 2>Nul
	TOOLS\TASKS\TASKKILL.EXE /IM "MASTER COMMANDER.EXE" >Nul 2>Nul
	TOOLS\TASKS\TASKKILL.EXE /IM "MULTICOMMANDER.EXE" >Nul 2>Nul
	TOOLS\TASKS\TASKKILL.EXE /IM "NEXUSFILE.EXE" >Nul 2>Nul
	TOOLS\TASKS\TASKKILL.EXE /IM "ONECOMMANDERV2.EXE" >NUL 2>NUL
	TOOLS\TASKS\TASKKILL.EXE /IM "Q-DIR.EXE" >NUL 2>NUL
	TOOLS\TASKS\TASKKILL.EXE /IM "TOTALCMD.EXE" >Nul 2>Nul
	TOOLS\TASKS\TASKKILL.EXE /IM "UNCOM.EXE" >Nul 2>Nul
	TOOLS\TASKS\TASKKILL.EXE /IM "XYPLORER.EXE" >Nul 2>Nul
	TOOLS\TASKS\TASKKILL.EXE /IM "XYPLORERFREE.EXE" >Nul 2>Nul
)
SC.EXE STOP Spooler >Nul 2>Nul
SC.EXE STOP UXSMS >Nul 2>Nul
SC.EXE STOP VaultSvc >Nul 2>Nul
FOR /F "TOKENS=1,2,5 DELIMS=," %%A IN ('TOOLS\TASKS\TASKLIST.EXE /FO CSV 2^>Nul^|%EXEGREP% -F "." 2^>Nul') DO (
	SETLOCAL ENABLEDELAYEDEXPANSION
	!EXEGREP! -Fixq "%%~nxA" WHITELIST.TXT >Nul 2>Nul
	IF !ERRORLEVEL! NEQ 0 (
		!EXEGREP! -Fixq "%%~nxA" DB_EXEC\CHECK\CHK_TRUSTED_PROCESS+NC.DB >Nul 2>Nul
		IF !ERRORLEVEL! NEQ 0 (
			!EXEGREP! -ixq "%%~nxA" DB_EXEC\CHECK\CHK_TRUSTED_PROCESS_PATTERN+NC.DB >Nul 2>Nul
			IF !ERRORLEVEL! NEQ 0 (
				TITLE 종료중 "%%~nxA" 2>Nul
				TOOLS\TASKS\TASKKILL.EXE /F /T /IM "%%~nxA" >Nul 2>Nul
			) ELSE (
				TITLE 보호됨 "%%~nxA" 2>Nul
			)
		) ELSE (
			TITLE 보호됨 "%%~nxA" 2>Nul
		)
	) ELSE (
		TITLE 보호됨 "%%~nxA" 2>Nul
	)
	ENDLOCAL
)
SC.EXE START Spooler >Nul 2>Nul
SC.EXE START UXSMS >Nul 2>Nul
SC.EXE START VaultSvc >Nul 2>Nul
SCHTASKS.EXE /Run /TN "\Microsoft\Windows\Multimedia\SystemSoundsService" >Nul 2>Nul
SCHTASKS.EXE /Run /TN "\Microsoft\Windows\TextServicesFramework\MsCtfMonitor" >Nul 2>Nul
SCHTASKS.EXE /Run /TN "\Microsoft\Windows\WDI\ResolutionHost" >Nul 2>Nul
SCHTASKS.EXE /Run /TN "\Microsoft\Windows\Wininet\CacheTask" >Nul 2>Nul
ECHO    완료되었습니다.
REM :Reset Value
CALL :RESET_VALUE

TITLE %MZTITLE% 2>Nul & PING.EXE -n 2 0 >Nul 2>Nul & ECHO.

REM * Delete - Reserved Word Folder
RMDIR /S /Q "\\.\%ALLUSERSPROFILE%\AUX" >Nul 2>Nul
RMDIR /S /Q "\\.\%ALLUSERSPROFILE%\CON" >Nul 2>Nul
RMDIR /S /Q "\\.\%ALLUSERSPROFILE%\NUL" >Nul 2>Nul
RMDIR /S /Q "\\.\%ALLUSERSPROFILE%\PRN" >Nul 2>Nul
RMDIR /S /Q "\\?\%ALLUSERSPROFILE%\AUX.." >Nul 2>Nul
RMDIR /S /Q "\\?\%ALLUSERSPROFILE%\CON.." >Nul 2>Nul
RMDIR /S /Q "\\?\%ALLUSERSPROFILE%\NUL.." >Nul 2>Nul
RMDIR /S /Q "\\?\%ALLUSERSPROFILE%\PRN.." >Nul 2>Nul

REM * Delete - Temporary & Cache Files #1
IF NOT "%CACHEPROTECT%" == "1" (
	ECHO ◇ 임시 파일/폴더 정리중 - 1차 . . .
	TITLE ^(정리중^) 잠시만 기다려주세요 ^(시간이 다소 소요될 수 있음^) . . . 2>Nul
	FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%SYSTEMROOT%\Temp\" 2^>Nul') DO (
		RMDIR /S /Q "%SYSTEMROOT%\Temp\%%A" >Nul 2>Nul
	)
	FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%SYSTEMROOT%\System32\Temp\" 2^>Nul') DO (
		RMDIR /S /Q "%SYSTEMROOT%\System32\Temp\%%A" >Nul 2>Nul
	)
	FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%SYSTEMROOT%\SysWOW64\Temp\" 2^>Nul') DO (
		RMDIR /S /Q "%SYSTEMROOT%\SysWOW64\Temp\%%A" >Nul 2>Nul
	)
	FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%TEMP%\" 2^>Nul') DO (
		RMDIR /S /Q "%TEMP%\%%A" >Nul 2>Nul
	)
	DEL /F /Q /S /A "%SYSTEMROOT%\Temp" >Nul 2>Nul
	DEL /F /Q /S /A "%SYSTEMROOT%\System32\Temp" >Nul 2>Nul
	DEL /F /Q /S /A "%SYSTEMROOT%\SysWOW64\Temp" >Nul 2>Nul
	DEL /F /Q /S /A "%SYSTEMROOT%\SystemTemp" >Nul 2>Nul
	DEL /F /Q /S /A "%APPDATA%\Temp" >Nul 2>Nul
	DEL /F /Q /S /A "%TEMP%" >Nul 2>Nul
	DEL /F /Q /A "%APPDATA%\*.TMP" >Nul 2>Nul
	DEL /F /Q /A "%LOCALAPPDATA%\*.TMP" >Nul 2>Nul
	DEL /F /Q /A "%LOCALLOWAPPDATA%\*.TMP" >Nul 2>Nul

	FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Local\tw-*.tmp" 2^>Nul') DO (
		RMDIR /Q "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Local\%%A" >Nul 2>Nul
	)
	FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Local\tw-*.tmp" 2^>Nul') DO (
		RMDIR /Q "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Local\%%A" >Nul 2>Nul
	)

	IF EXIST "%SYSTEMROOT% \" (
		RMDIR /S /Q "%SYSTEMROOT% \" >Nul 2>Nul
	)

	ECHO    완료되었습니다.

	TITLE %MZTITLE% 2>Nul & PING.EXE -n 2 0 >Nul 2>Nul & ECHO.
)

REM * Delete Malicious File
ECHO ◇ 악성 및 유해 가능 파일 제거중 . . .
>>"%QLog%" ECHO    ■ 악성 및 유해 가능 파일 제거 :
REM :[%SYSTEMROOT%]\Tasks
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\Tasks\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%SYSTEMROOT%\Tasks\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_FILE_TASKS.DB 2^>Nul^|%EXEGREP% -ixvf DB\EXCEPT\EX_FILE_TASKS_PATTERN+NC.DB 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\Tasks\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\Tasks\%%A" (
		FOR /F %%X IN ('%EXEGREP% -Fix -f DB_EXEC\THREAT\FILE\DEL_TASKS.DB -f DB_EXEC\THREAT\FILE\DEL_TASKS_JOB.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
			CALL :DELETE_FILE
		)
	)
	IF EXIST "%SYSTEMROOT%\Tasks\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ix -f DB_EXEC\ACTIVESCAN\FILE\PATTERN_TASKS.DB -f DB_EXEC\ACTIVESCAN\COMBO\PATTERN_FAKE_OPTIMIZER+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
			IF /I "%%~xA" == ".JOB" (
				>>DB_ACTIVE\ACT_REG_TASKS_JOB_%UNIQ%.DB ECHO %%A
				>>DB_ACTIVE\ACT_REG_TASKS_JOB_%UNIQ%.DB ECHO %%A.fp
			)
			CALL :DELETE_FILE ACTIVESCAN
		)
	)
	IF EXIST "%SYSTEMROOT%\Tasks\%%A" (
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\FILE\PATTERN_TASKS+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
			IF /I "%%~xA" == ".JOB" (
				>>DB_ACTIVE\ACT_REG_TASKS_JOB_%UNIQ%.DB ECHO %%A
				>>DB_ACTIVE\ACT_REG_TASKS_JOB_%UNIQ%.DB ECHO %%A.fp
			)
			CALL :DELETE_FILE ACTIVESCAN
		)
	)
	IF EXIST "%SYSTEMROOT%\Tasks\%%A" (
		IF /I "%%~xA" == ".JOB" (
			FOR /F %%Y IN ('TOOLS\BINASC\BINASC.EXE -a "%SYSTEMROOT%\Tasks\%%A" --wrap 3000 2^>Nul^|%EXEGREP% -af DB_EXEC\ACTIVESCAN\FILE\PATTERN_TASKS_PATH_OLD+C.DB 2^>Nul') DO (
				>>DB_ACTIVE\ACT_REG_TASKS_JOB_%UNIQ%.DB ECHO %%A
				>>DB_ACTIVE\ACT_REG_TASKS_JOB_%UNIQ%.DB ECHO %%A.fp
				CALL :DELETE_FILE ACTIVESCAN
			)
		)
	)
)
REM :[%SYSTEMROOT%]\System32\Tasks
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\System32\Tasks\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%SYSTEMROOT%\System32\Tasks\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_FILE_TASKS.DB 2^>Nul^|%EXEGREP% -ixvf DB\EXCEPT\EX_FILE_TASKS_PATTERN+NC.DB 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\System32\Tasks\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\System32\Tasks\%%A" (
		FOR /F %%X IN ('%EXEGREP% -Fix -f DB_EXEC\THREAT\FILE\DEL_TASKS.DB -f DB_EXEC\THREAT\FILE\DEL_TASKS_TREE.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
			CALL :DELETE_FILE
		)
	)
	IF EXIST "%SYSTEMROOT%\System32\Tasks\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ix -f DB_EXEC\ACTIVESCAN\FILE\PATTERN_TASKS.DB -f DB_EXEC\ACTIVESCAN\COMBO\PATTERN_FAKE_OPTIMIZER+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
			>>DB_ACTIVE\ACT_REG_TASKS_TREE_%UNIQ%.DB ECHO %%A
			CALL :DELETE_FILE ACTIVESCAN
		)
	)
	IF EXIST "%SYSTEMROOT%\System32\Tasks\%%A" (
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\FILE\PATTERN_TASKS+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
			>>DB_ACTIVE\ACT_REG_TASKS_TREE_%UNIQ%.DB ECHO %%A
			CALL :DELETE_FILE ACTIVESCAN
		)
	)
)
REM :[%SYSTEMROOT%]\SysWOW64\Tasks
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\SysWOW64\Tasks\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%SYSTEMROOT%\SysWOW64\Tasks\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_FILE_TASKS.DB 2^>Nul^|%EXEGREP% -ixvf DB\EXCEPT\EX_FILE_TASKS_PATTERN+NC.DB 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\SysWOW64\Tasks\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\SysWOW64\Tasks\%%A" (
		FOR /F %%X IN ('%EXEGREP% -Fix -f DB_EXEC\THREAT\FILE\DEL_TASKS.DB -f DB_EXEC\THREAT\FILE\DEL_TASKS_TREE.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE
	)
	IF EXIST "%SYSTEMROOT%\SysWOW64\Tasks\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ix -f DB_EXEC\ACTIVESCAN\FILE\PATTERN_TASKS.DB -f DB_EXEC\ACTIVESCAN\COMBO\PATTERN_FAKE_OPTIMIZER+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
			>>DB_ACTIVE\ACT_REG_TASKS_TREE_%UNIQ%.DB ECHO %%A
			CALL :DELETE_FILE ACTIVESCAN
		)
	)
	IF EXIST "%SYSTEMROOT%\SysWOW64\Tasks\%%A" (
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\FILE\PATTERN_TASKS+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
			>>DB_ACTIVE\ACT_REG_TASKS_TREE_%UNIQ%.DB ECHO %%A
			CALL :DELETE_FILE ACTIVESCAN
		)
	)
)
REM :[%SYSTEMROOT%]\System32\Tasks (Active)
IF EXIST "DB_ACTIVE\ACT_FILE_TASKS_%UNIQ%.DB" (
	TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
	FOR /F "DELIMS=" %%A IN ('TYPE DB_ACTIVE\ACT_FILE_TASKS_%UNIQ%.DB 2^>Nul') DO (
		TITLE 검사중^(DB^) "%SYSTEMROOT%\System32\Tasks%%A" 2>Nul
		IF EXIST "%SYSTEMROOT%\System32\Tasks%%A" (
			>VARIABLE\%VTEXT1% ECHO %SYSTEMROOT%\System32\Tasks%%~pA
			>VARIABLE\%VTEXT2% ECHO %%~nxA
			CALL :DELETE_FILE ACTIVESCAN
		)
	)
)
REM :[%SYSTEMROOT%]\SysWOW64\Tasks (Active)
IF EXIST "DB_ACTIVE\ACT_FILE_TASKS_%UNIQ%.DB" (
	TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
	FOR /F "DELIMS=" %%A IN ('TYPE DB_ACTIVE\ACT_FILE_TASKS_%UNIQ%.DB 2^>Nul') DO (
		TITLE 검사중^(DB^) "%SYSTEMROOT%\SysWOW64\Tasks%%A" 2>Nul
		IF EXIST "%SYSTEMROOT%\SysWOW64\Tasks%%A" (
			>VARIABLE\%VTEXT1% ECHO %SYSTEMROOT%\SysWOW64\Tasks%%~pA
			>VARIABLE\%VTEXT2% ECHO %%~nxA
			CALL :DELETE_FILE ACTIVESCAN
		)
	)
)
REM :[%SYSTEMROOT%]\System32\Tasks_Migrated
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\System32\Tasks_Migrated\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%SYSTEMROOT%\System32\Tasks_Migrated\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_FILE_TASKS.DB 2^>Nul^|%EXEGREP% -ixvf DB\EXCEPT\EX_FILE_TASKS_PATTERN+NC.DB 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\System32\Tasks_Migrated\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\System32\Tasks_Migrated\%%A" (
		FOR /F %%X IN ('%EXEGREP% -Fix -f DB_EXEC\THREAT\FILE\DEL_TASKS.DB -f DB_EXEC\THREAT\FILE\DEL_TASKS_TREE.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE
	)
	IF EXIST "%SYSTEMROOT%\System32\Tasks_Migrated\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ix -f DB_EXEC\ACTIVESCAN\FILE\PATTERN_TASKS.DB -f DB_EXEC\ACTIVESCAN\COMBO\PATTERN_FAKE_OPTIMIZER+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
			>>DB_ACTIVE\ACT_REG_TASKS_TREE_%UNIQ%.DB ECHO %%A
			CALL :DELETE_FILE ACTIVESCAN
		)
	)
	IF EXIST "%SYSTEMROOT%\System32\Tasks_Migrated\%%A" (
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\FILE\PATTERN_TASKS+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
			>>DB_ACTIVE\ACT_REG_TASKS_TREE_%UNIQ%.DB ECHO %%A
			CALL :DELETE_FILE ACTIVESCAN
		)
	)
)
REM :[%SYSTEMROOT%]\SysWOW64\Tasks_Migrated
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\SysWOW64\Tasks_Migrated\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%SYSTEMROOT%\SysWOW64\Tasks_Migrated\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_FILE_TASKS.DB 2^>Nul^|%EXEGREP% -ixvf DB\EXCEPT\EX_FILE_TASKS_PATTERN+NC.DB 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\SysWOW64\Tasks_Migrated\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\SysWOW64\Tasks_Migrated\%%A" (
		FOR /F %%X IN ('%EXEGREP% -Fix -f DB_EXEC\THREAT\FILE\DEL_TASKS.DB -f DB_EXEC\THREAT\FILE\DEL_TASKS_TREE.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE
	)
	IF EXIST "%SYSTEMROOT%\SysWOW64\Tasks_Migrated\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ix -f DB_EXEC\ACTIVESCAN\FILE\PATTERN_TASKS.DB -f DB_EXEC\ACTIVESCAN\COMBO\PATTERN_FAKE_OPTIMIZER+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
			>>DB_ACTIVE\ACT_REG_TASKS_TREE_%UNIQ%.DB ECHO %%A
			CALL :DELETE_FILE ACTIVESCAN
		)
	)
	IF EXIST "%SYSTEMROOT%\SysWOW64\Tasks_Migrated\%%A" (
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\FILE\PATTERN_TASKS+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
			>>DB_ACTIVE\ACT_REG_TASKS_TREE_%UNIQ%.DB ECHO %%A
			CALL :DELETE_FILE ACTIVESCAN
		)
	)
)
REM :[%SYSTEMROOT%]\System32\Tasks_Migrated (Active)
IF EXIST "DB_ACTIVE\ACT_FILE_TASKS_%UNIQ%.DB" (
	TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
	FOR /F "DELIMS=" %%A IN ('TYPE DB_ACTIVE\ACT_FILE_TASKS_%UNIQ%.DB 2^>Nul') DO (
		TITLE 검사중^(DB^) "%SYSTEMROOT%\System32\Tasks_Migrated%%A" 2>Nul
		IF EXIST "%SYSTEMROOT%\System32\Tasks_Migrated%%A" (
			>VARIABLE\%VTEXT1% ECHO %SYSTEMROOT%\System32\Tasks_Migrated%%~pA
			>VARIABLE\%VTEXT2% ECHO %%~nA
			CALL :DELETE_FILE ACTIVESCAN
		)
	)
)
REM :[%SYSTEMROOT%]\SysWOW64\Tasks_Migrated (Active)
IF EXIST "DB_ACTIVE\ACT_FILE_TASKS_%UNIQ%.DB" (
	TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
	FOR /F "DELIMS=" %%A IN ('TYPE DB_ACTIVE\ACT_FILE_TASKS_%UNIQ%.DB 2^>Nul') DO (
		TITLE 검사중^(DB^) "%SYSTEMROOT%\SysWOW64\Tasks_Migrated%%A" 2>Nul
		IF EXIST "%SYSTEMROOT%\SysWOW64\Tasks_Migrated%%A" (
			>VARIABLE\%VTEXT1% ECHO %SYSTEMROOT%\SysWOW64\Tasks_Migrated%%~pA
			>VARIABLE\%VTEXT2% ECHO %%~nA
			CALL :DELETE_FILE ACTIVESCAN
		)
	)
)
REM :[%SYSTEMDRIVE%]
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %SYSTEMDRIVE%\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%SYSTEMDRIVE%\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_FILE_ROOT.DB 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMDRIVE%\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMDRIVE%\%%A" (
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\FILE\DEL_ROOT.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE
	)
	IF EXIST "%SYSTEMDRIVE%\%%A" (
		CALL :GET_FILESIZE "%SYSTEMDRIVE%\%%A"
		SETLOCAL ENABLEDELAYEDEXPANSION
		IF !FILESIZE! LEQ 200000000 (
			ENDLOCAL
			FOR /F "TOKENS=1" %%B IN ('TOOLS\DIRHASH\DIRHASH.EXE "%SYSTEMDRIVE%\%%A" MD5 -quiet -nowait 2^>Nul') DO (
				FOR /F %%X IN ('%EXEGREP% -Fixe "%%B" DB_EXEC\THREAT\FILE\DEL_MD5.DB 2^>Nul') DO CALL :DELETE_FILE
			)
		) ELSE (
			ENDLOCAL
		)
	)
	IF EXIST "%SYSTEMDRIVE%\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_ROOT.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
	IF EXIST "%SYSTEMDRIVE%\%%A" (
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\FILE\PATTERN_ROOT+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%SYSTEMDRIVE%] (Hidden)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %SYSTEMDRIVE%\
FOR /F "DELIMS=" %%A IN ('DIR /B /AH-D "%SYSTEMDRIVE%\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_FILE_ROOT.DB 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMDRIVE%\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMDRIVE%\%%A" (
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\FILE\PATTERN_ROOT_ONLYHIDDEN+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%SYSTEMDRIVE%] (Steps)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%SYSTEMDRIVE%\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_DIR_ROOT.DB 2^>Nul') DO (
	>VARIABLE\%VTEXT1% ECHO %SYSTEMDRIVE%\%%A\
	FOR /F "DELIMS=" %%B IN ('DIR /B /A-D "%SYSTEMDRIVE%\%%A\" 2^>Nul') DO (
		TITLE 검사중 "%SYSTEMDRIVE%\%%A\%%B" 2>Nul
		>VARIABLE\%VTEXT2% ECHO %%B
		IF EXIST "%SYSTEMDRIVE%\%%A\%%B" (
			CALL :GET_FILESIZE "%SYSTEMDRIVE%\%%A\%%B"
			SETLOCAL ENABLEDELAYEDEXPANSION
			IF !FILESIZE! LEQ 200000000 (
				ENDLOCAL
				FOR /F "TOKENS=1" %%C IN ('TOOLS\DIRHASH\DIRHASH.EXE "%SYSTEMDRIVE%\%%A\%%B" MD5 -quiet -nowait 2^>Nul') DO (
					FOR /F %%X IN ('%EXEGREP% -Fixe "%%C" DB_EXEC\THREAT\FILE\DEL_MD5.DB 2^>Nul') DO CALL :DELETE_FILE
				)
			) ELSE (
				ENDLOCAL
			)
		)
	)
)
REM :[%SYSTEMDRIVE%] (ETCs)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('TYPE DB_EXEC\THREAT\FILE\DEL_ROOT_ETCS+NC.DB 2^>Nul') DO (
	TITLE 검사중^(DB^) "%SYSTEMDRIVE%%%A" 2>Nul
	IF EXIST "%SYSTEMDRIVE%%%A" (
		IF NOT EXIST "%SYSTEMDRIVE%%%A\" (
			>VARIABLE\%VTEXT1% ECHO %SYSTEMDRIVE%%%~pA
			>VARIABLE\%VTEXT2% ECHO %%~nxA
			CALL :DELETE_FILE
		)
	)
)
REM :[%SYSTEMDRIVE%]\MSOCache
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %SYSTEMDRIVE%\MSOCache\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%SYSTEMDRIVE%\MSOCache\" 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMDRIVE%\MSOCache\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMDRIVE%\MSOCache\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_MSOCACHE+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%SYSTEMDRIVE%]\MSOCache\All Users
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %SYSTEMDRIVE%\MSOCache\All Users\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%SYSTEMDRIVE%\MSOCache\All Users\" 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMDRIVE%\MSOCache\All Users\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMDRIVE%\MSOCache\All Users\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_MSOCACHE_ALLUSERS+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%SYSTEMDRIVE%]\MSOCache\All Users (Steps)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%SYSTEMDRIVE%\MSOCache\All Users\" 2^>Nul') DO (
	>VARIABLE\%VTEXT1% ECHO %SYSTEMDRIVE%\MSOCache\All Users\%%A\
	FOR /F "DELIMS=" %%B IN ('DIR /B /A-D "%SYSTEMDRIVE%\%%A\" 2^>Nul') DO (
		TITLE 검사중 "%SYSTEMDRIVE%\MSOCache\All Users\%%A\%%B" 2>Nul
		>VARIABLE\%VTEXT2% ECHO %%B
		IF EXIST "%SYSTEMDRIVE%\MSOCache\All Users\%%A\%%B" (
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\FILE\DEL_MSOCACHE_ALLUSERS_STEPS+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE
		)
	)
	FOR /F "DELIMS=" %%B IN ('DIR /B /AD "%SYSTEMDRIVE%\MSOCache\All Users\%%A\" 2^>Nul') DO (
		>VARIABLE\%VTEXT1% ECHO %SYSTEMDRIVE%\MSOCache\All Users\%%A\%%B\
		FOR /F "DELIMS=" %%C IN ('DIR /B /A-D "%SYSTEMDRIVE%\%%A\%%B\" 2^>Nul') DO (
			TITLE 검사중 "%SYSTEMDRIVE%\MSOCache\All Users\%%A\%%B\%%C" 2>Nul
			>VARIABLE\%VTEXT2% ECHO %%C
			IF EXIST "%SYSTEMDRIVE%\MSOCache\All Users\%%A\%%B\%%C" (
				FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\FILE\DEL_MSOCACHE_ALLUSERS_STEPS+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE
			)
		)
	)
)
REM :[%SYSTEMDRIVE%]\Recovery\OEM\OSVer
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %SYSTEMDRIVE%\Recovery\OEM\OSVer\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%SYSTEMDRIVE%\Recovery\OEM\OSVer\" 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMDRIVE%\Recovery\OEM\OSVer\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMDRIVE%\Recovery\OEM\OSVer\%%A" (
		FOR /F "TOKENS=1" %%B IN ('TOOLS\DIRHASH\DIRHASH.EXE "%SYSTEMDRIVE%\Recovery\OEM\OSVer\%%A" MD5 -quiet -nowait 2^>Nul') DO (
			FOR /F %%X IN ('%EXEGREP% -Fixe "%%B" DB_EXEC\THREAT\FILE\DEL_MD5.DB 2^>Nul') DO CALL :DELETE_FILE
		)
	)
)
REM :[%SYSTEMROOT%]
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%SYSTEMROOT%\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_FILE_SYSTEMROOT.DB 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\%%A" (
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\FILE\DEL_SYSTEMROOT+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE
	)
	IF EXIST "%SYSTEMROOT%\%%A" (
		CALL :GET_FILESIZE "%SYSTEMROOT%\%%A"
		SETLOCAL ENABLEDELAYEDEXPANSION
		IF !FILESIZE! LEQ 200000000 (
			ENDLOCAL
			FOR /F "TOKENS=1" %%B IN ('TOOLS\DIRHASH\DIRHASH.EXE "%SYSTEMROOT%\%%A" MD5 -quiet -nowait 2^>Nul') DO (
				FOR /F %%X IN ('%EXEGREP% -Fixe "%%B" DB_EXEC\THREAT\FILE\DEL_MD5.DB 2^>Nul') DO CALL :DELETE_FILE
			)
		) ELSE (
			ENDLOCAL
		)
	)
	IF EXIST "%SYSTEMROOT%\%%A" (
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\FILE\PATTERN_SYSTEMROOT+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
	IF EXIST "%SYSTEMROOT%\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_SYSTEMROOT+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%SYSTEMROOT%] (Hidden)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\
FOR /F "DELIMS=" %%A IN ('DIR /B /AH-D "%SYSTEMROOT%\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_FILE_SYSTEMROOT.DB 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_SYSTEMROOT_ONLYHIDDEN.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%SYSTEMROOT%] (Super Hidden)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\
FOR /F "DELIMS=" %%A IN ('DIR /B /AHS-D "%SYSTEMROOT%\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_FILE_SYSTEMROOT.DB 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_SYSTEMROOT_ONLYSUPERHIDDEN.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%SYSTEMROOT%] (ETCs)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('TYPE DB_EXEC\THREAT\FILE\DEL_SYSTEMROOT_ETCS+NC.DB 2^>Nul') DO (
	TITLE 검사중^(DB^) "%SYSTEMROOT%%%A" 2>Nul
	IF EXIST "%SYSTEMROOT%%%A" (
		IF NOT EXIST "%SYSTEMROOT%%%A\" (
			>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%%%~pA
			>VARIABLE\%VTEXT2% ECHO %%~nxA
			CALL :DELETE_FILE
		)
	)
)
REM :[%SYSTEMROOT%]\addins
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\addins\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%SYSTEMROOT%\addins\" 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\addins\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\addins\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_SYSTEMROOT_ADDINS.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
	IF EXIST "%SYSTEMROOT%\addins\%%A" (
		CALL :GET_FILESIZE "%SYSTEMROOT%\addins\%%A"
		SETLOCAL ENABLEDELAYEDEXPANSION
		IF !FILESIZE! LEQ 200000000 (
			ENDLOCAL
			FOR /F "TOKENS=1" %%B IN ('TOOLS\DIRHASH\DIRHASH.EXE "%SYSTEMROOT%\addins\%%A" MD5 -quiet -nowait 2^>Nul') DO (
				FOR /F %%X IN ('%EXEGREP% -Fixe "%%B" DB_EXEC\THREAT\FILE\DEL_MD5.DB 2^>Nul') DO CALL :DELETE_FILE
			)
		) ELSE (
			ENDLOCAL
		)
	)
)
REM :[%SYSTEMROOT%]\AppPatch
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\AppPatch\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%SYSTEMROOT%\AppPatch\" 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\AppPatch\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\AppPatch\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_SYSTEMROOT_APPPATCH.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
	IF EXIST "%SYSTEMROOT%\AppPatch\%%A" (
		CALL :GET_FILESIZE "%SYSTEMROOT%\AppPatch\%%A"
		SETLOCAL ENABLEDELAYEDEXPANSION
		IF !FILESIZE! LEQ 200000000 (
			ENDLOCAL
			FOR /F "TOKENS=1" %%B IN ('TOOLS\DIRHASH\DIRHASH.EXE "%SYSTEMROOT%\AppPatch\%%A" MD5 -quiet -nowait 2^>Nul') DO (
				FOR /F %%X IN ('%EXEGREP% -Fixe "%%B" DB_EXEC\THREAT\FILE\DEL_MD5.DB 2^>Nul') DO CALL :DELETE_FILE
			)
		) ELSE (
			ENDLOCAL
		)
	)
)
REM :[%SYSTEMROOT%]\debug
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\debug\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%SYSTEMROOT%\debug\" 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\debug\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\debug\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_SYSTEMROOT_DEBUG+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
	IF EXIST "%SYSTEMROOT%\debug\%%A" (
		CALL :GET_FILESIZE "%SYSTEMROOT%\debug\%%A"
		SETLOCAL ENABLEDELAYEDEXPANSION
		IF !FILESIZE! LEQ 200000000 (
			ENDLOCAL
			FOR /F "TOKENS=1" %%B IN ('TOOLS\DIRHASH\DIRHASH.EXE "%SYSTEMROOT%\debug\%%A" MD5 -quiet -nowait 2^>Nul') DO (
				FOR /F %%X IN ('%EXEGREP% -Fixe "%%B" DB_EXEC\THREAT\FILE\DEL_MD5.DB 2^>Nul') DO CALL :DELETE_FILE
			)
		) ELSE (
			ENDLOCAL
		)
	)
)
REM :[%SYSTEMROOT%]\Fonts
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\Fonts\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%SYSTEMROOT%\Fonts\" 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\Fonts\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\Fonts\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_FONTS.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%SYSTEMROOT%]\Help
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\Help\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%SYSTEMROOT%\Help\" 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\Help\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\Help\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_SYSTEMROOT_HELP+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
	IF EXIST "%SYSTEMROOT%\Help\%%A" (
		CALL :GET_FILESIZE "%SYSTEMROOT%\Help\%%A"
		SETLOCAL ENABLEDELAYEDEXPANSION
		IF !FILESIZE! LEQ 200000000 (
			ENDLOCAL
			FOR /F "TOKENS=1" %%B IN ('TOOLS\DIRHASH\DIRHASH.EXE "%SYSTEMROOT%\Help\%%A" MD5 -quiet -nowait 2^>Nul') DO (
				FOR /F %%X IN ('%EXEGREP% -Fixe "%%B" DB_EXEC\THREAT\FILE\DEL_MD5.DB 2^>Nul') DO CALL :DELETE_FILE
			)
		) ELSE (
			ENDLOCAL
		)
	)
)
REM :[%SYSTEMROOT%]\Installer
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %SYSTEMROOT%\Installer\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%SYSTEMROOT%\Installer\" 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\Installer\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\Installer\%%A" (
		CALL :GET_FILESIZE "%SYSTEMROOT%\Installer\%%A"
		SETLOCAL ENABLEDELAYEDEXPANSION
		IF !FILESIZE! LEQ 200000000 (
			ENDLOCAL
			FOR /F "TOKENS=1" %%B IN ('TOOLS\DIRHASH\DIRHASH.EXE "%SYSTEMROOT%\Installer\%%A" MD5 -quiet -nowait 2^>Nul') DO (
				FOR /F %%X IN ('%EXEGREP% -Fixe "%%B" DB_EXEC\THREAT\FILE\DEL_MD5.DB 2^>Nul') DO CALL :DELETE_FILE
			)
		) ELSE (
			ENDLOCAL
		)
	)
)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%SYSTEMROOT%\Installer\" 2^>Nul') DO (
	>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\Installer\%%A\
	FOR /F "DELIMS=" %%B IN ('DIR /B /A-D "%SYSTEMROOT%\Installer\%%A\" 2^>Nul') DO (
		TITLE 검사중 "%SYSTEMROOT%\Installer\%%A\%%B" 2>Nul
		>VARIABLE\%VTEXT2% ECHO %%B
		IF EXIST "%SYSTEMROOT%\Installer\%%A\%%B" (
			FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_SYSTEMROOT_INSTALLER_1STEP.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
		)
	)
)
REM :[%SYSTEMROOT%]\Registration
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\Registration\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%SYSTEMROOT%\Registration\" 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\Registration\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\Registration\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_SYSTEMROOT_REGISTRATION+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
	IF EXIST "%SYSTEMROOT%\Registration\%%A" (
		CALL :GET_FILESIZE "%SYSTEMROOT%\Registration\%%A"
		SETLOCAL ENABLEDELAYEDEXPANSION
		IF !FILESIZE! LEQ 200000000 (
			ENDLOCAL
			FOR /F "TOKENS=1" %%B IN ('TOOLS\DIRHASH\DIRHASH.EXE "%SYSTEMROOT%\Registration\%%A" MD5 -quiet -nowait 2^>Nul') DO (
				FOR /F %%X IN ('%EXEGREP% -Fixe "%%B" DB_EXEC\THREAT\FILE\DEL_MD5.DB 2^>Nul') DO CALL :DELETE_FILE
			)
		) ELSE (
			ENDLOCAL
		)
	)
)
REM :[%SYSTEMROOT%]\Registration\CRMLog
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\Registration\CRMLog\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%SYSTEMROOT%\Registration\CRMLog\" 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\Registration\CRMLog\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\Registration\CRMLog\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_SYSTEMROOT_REGISTRATION_CRMLOG+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
	IF EXIST "%SYSTEMROOT%\Registration\CRMLog\%%A" (
		CALL :GET_FILESIZE "%SYSTEMROOT%\Registration\CRMLog\%%A"
		SETLOCAL ENABLEDELAYEDEXPANSION
		IF !FILESIZE! LEQ 200000000 (
			ENDLOCAL
			FOR /F "TOKENS=1" %%B IN ('TOOLS\DIRHASH\DIRHASH.EXE "%SYSTEMROOT%\Registration\CRMLog\%%A" MD5 -quiet -nowait 2^>Nul') DO (
				FOR /F %%X IN ('%EXEGREP% -Fixe "%%B" DB_EXEC\THREAT\FILE\DEL_MD5.DB 2^>Nul') DO CALL :DELETE_FILE
			)
		) ELSE (
			ENDLOCAL
		)
	)
)
REM :[%SYSTEMROOT%]\SoftwareDistribution\Download
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\SoftwareDistribution\Download\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%SYSTEMROOT%\SoftwareDistribution\Download\" 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\SoftwareDistribution\Download\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\SoftwareDistribution\Download\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_SYSTEMROOT_SOFTWAREDISTRIBUTION_DOWNLOAD_+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%SYSTEMROOT%]\System
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\System\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%SYSTEMROOT%\System\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_FILE_SYSTEM+NC.DB 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\System\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\System\%%A" (
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\FILE\DEL_SYSTEM.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE
	)
	IF EXIST "%SYSTEMROOT%\System\%%A" (
		CALL :GET_FILESIZE "%SYSTEMROOT%\System\%%A"
		SETLOCAL ENABLEDELAYEDEXPANSION
		IF !FILESIZE! LEQ 200000000 (
			ENDLOCAL
			FOR /F "TOKENS=1" %%B IN ('TOOLS\DIRHASH\DIRHASH.EXE "%SYSTEMROOT%\System\%%A" MD5 -quiet -nowait 2^>Nul') DO (
				FOR /F %%X IN ('%EXEGREP% -Fixe "%%B" DB_EXEC\THREAT\FILE\DEL_MD5.DB 2^>Nul') DO CALL :DELETE_FILE
			)
		) ELSE (
			ENDLOCAL
		)
	)
)
REM :[%SYSTEMROOT%]\System (Hidden)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\System\
FOR /F "DELIMS=" %%A IN ('DIR /B /AH-D "%SYSTEMROOT%\System\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_FILE_SYSTEM+NC.DB 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\System\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\System\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_SYSTEM_ONLYHIDDEN.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%SYSTEMROOT%]\System (Super Hidden)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\System\
FOR /F "DELIMS=" %%A IN ('DIR /B /AHS-D "%SYSTEMROOT%\System\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_FILE_SYSTEM+NC.DB 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\System\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\System\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_SYSTEM_ONLYSUPERHIDDEN.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%SYSTEMROOT%]\System32
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\System32\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%SYSTEMROOT%\System32\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_FILE_SYSTEM6432.DB 2^>Nul^|%EXEGREP% -ixvf DB\EXCEPT\EX_FILE_SYSTEM6432_PATTERN+NC.DB 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\System32\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\System32\%%A" (
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\FILE\DEL_SYSTEM6432+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE
	)
	IF EXIST "%SYSTEMROOT%\System32\%%A" (
		CALL :GET_FILESIZE "%SYSTEMROOT%\System32\%%A"
		SETLOCAL ENABLEDELAYEDEXPANSION
		IF !FILESIZE! LEQ 200000000 (
			ENDLOCAL
			FOR /F "TOKENS=1" %%B IN ('TOOLS\DIRHASH\DIRHASH.EXE "%SYSTEMROOT%\System32\%%A" MD5 -quiet -nowait 2^>Nul') DO (
				FOR /F %%X IN ('%EXEGREP% -Fixe "%%B" DB_EXEC\THREAT\FILE\DEL_MD5.DB 2^>Nul') DO CALL :DELETE_FILE
			)
		) ELSE (
			ENDLOCAL
		)
	)
	IF EXIST "%SYSTEMROOT%\System32\%%A" (
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\FILE\PATTERN_SYSTEM6432+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
	IF EXIST "%SYSTEMROOT%\System32\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_SYSTEM6432+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%SYSTEMROOT%]\SysWOW64
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\SysWOW64\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%SYSTEMROOT%\SysWOW64\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_FILE_SYSTEM6432.DB 2^>Nul^|%EXEGREP% -ixvf DB\EXCEPT\EX_FILE_SYSTEM6432_PATTERN+NC.DB 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\SysWOW64\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\SysWOW64\%%A" (
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\FILE\DEL_SYSTEM6432+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE
	)
	IF EXIST "%SYSTEMROOT%\SysWOW64\%%A" (
		CALL :GET_FILESIZE "%SYSTEMROOT%\SysWOW64\%%A"
		SETLOCAL ENABLEDELAYEDEXPANSION
		IF !FILESIZE! LEQ 200000000 (
			ENDLOCAL
			FOR /F "TOKENS=1" %%B IN ('TOOLS\DIRHASH\DIRHASH.EXE "%SYSTEMROOT%\SysNative\%%A" MD5 -quiet -nowait 2^>Nul') DO (
				FOR /F %%X IN ('%EXEGREP% -Fixe "%%B" DB_EXEC\THREAT\FILE\DEL_MD5.DB 2^>Nul') DO CALL :DELETE_FILE
			)
		) ELSE (
			ENDLOCAL
		)
	)
	IF EXIST "%SYSTEMROOT%\SysWOW64\%%A" (
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\FILE\PATTERN_SYSTEM6432+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
	IF EXIST "%SYSTEMROOT%\SysWOW64\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_SYSTEM6432+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%SYSTEMROOT%]\System32 (4 Digit Directory)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%SYSTEMROOT%\System32\" 2^>Nul^|%EXEGREP% -Eix "[0-9]{4}" 2^>Nul') DO (
	>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\System32\%%A\
	FOR /F "DELIMS=" %%B IN ('DIR /B /A-D "%SYSTEMROOT%\System32\%%A\" 2^>Nul') DO (
		TITLE 검사중 "%SYSTEMROOT%\System32\%%A\%%B" 2>Nul
		>VARIABLE\%VTEXT2% ECHO %%B
		IF EXIST "%SYSTEMROOT%\System32\%%A\%%B" (
			FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_SYSTEM6432_4DIGITS.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
		)
	)
)
REM :[%SYSTEMROOT%]\SysWOW64 (4 Digit Directory)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%SYSTEMROOT%\SysWOW64\" 2^>Nul^|%EXEGREP% -Eix "[0-9]{4}" 2^>Nul') DO (
	>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\SysWOW64\%%A\
	FOR /F "DELIMS=" %%B IN ('DIR /B /A-D "%SYSTEMROOT%\SysWOW64\%%A\" 2^>Nul') DO (
		TITLE 검사중 "%SYSTEMROOT%\SysWOW64\%%A\%%B" 2>Nul
		>VARIABLE\%VTEXT2% ECHO %%B
		IF EXIST "%SYSTEMROOT%\SysWOW64\%%A\%%B" (
			FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_SYSTEM6432_4DIGITS.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
		)
	)
)
REM :[%SYSTEMROOT%]\System32 (12 Char Directory)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%SYSTEMROOT%\System32\" 2^>Nul^|%EXEGREP% -Eix "[0-9A-Z]{12}" 2^>Nul') DO (
	>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\System32\%%A\
	FOR /F "DELIMS=" %%B IN ('DIR /B /A-D "%SYSTEMROOT%\System32\%%A\" 2^>Nul') DO (
		TITLE 검사중 "%SYSTEMROOT%\System32\%%A\%%B" 2>Nul
		>VARIABLE\%VTEXT2% ECHO %%B
		IF EXIST "%SYSTEMROOT%\System32\%%A\%%B" (
			FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_SYSTEM6432_12DIGITS.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
		)
	)
)
REM :[%SYSTEMROOT%]\SysWOW64 (12 Char Directory)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%SYSTEMROOT%\SysWOW64\" 2^>Nul^|%EXEGREP% -Eix "[0-9A-Z]{12}" 2^>Nul') DO (
	>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\SysWOW64\%%A\
	FOR /F "DELIMS=" %%B IN ('DIR /B /A-D "%SYSTEMROOT%\SysWOW64\%%A\" 2^>Nul') DO (
		TITLE 검사중 "%SYSTEMROOT%\SysWOW64\%%A\%%B" 2>Nul
		>VARIABLE\%VTEXT2% ECHO %%B
		IF EXIST "%SYSTEMROOT%\SysWOW64\%%A\%%B" (
			FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_SYSTEM6432_12DIGITS.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
		)
	)
)
REM :[%SYSTEMROOT%]\System32 (Hidden)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\System32\
FOR /F "DELIMS=" %%A IN ('DIR /B /AH-D "%SYSTEMROOT%\System32\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_FILE_SYSTEM6432.DB 2^>Nul^|%EXEGREP% -ixvf DB\EXCEPT\EX_FILE_SYSTEM6432_PATTERN+NC.DB 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\System32\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\System32\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_SYSTEM6432_ONLYHIDDEN.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%SYSTEMROOT%]\SysWOW64 (Hidden)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\SysWOW64\
FOR /F "DELIMS=" %%A IN ('DIR /B /AH-D "%SYSTEMROOT%\SysWOW64\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_FILE_SYSTEM6432.DB 2^>Nul^|%EXEGREP% -ixvf DB\EXCEPT\EX_FILE_SYSTEM6432_PATTERN+NC.DB 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\SysWOW64\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\SysWOW64\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_SYSTEM6432_ONLYHIDDEN.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%SYSTEMROOT%]\System32 (Super Hidden)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\System32\
FOR /F "DELIMS=" %%A IN ('DIR /B /AHS-D "%SYSTEMROOT%\System32\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_FILE_SYSTEM6432.DB 2^>Nul^|%EXEGREP% -ixvf DB\EXCEPT\EX_FILE_SYSTEM6432_PATTERN+NC.DB 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\System32\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\System32\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_SYSTEM6432_ONLYSUPERHIDDEN.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%SYSTEMROOT%]\SysWOW64 (Super Hidden)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\SysWOW64\
FOR /F "DELIMS=" %%A IN ('DIR /B /AHS-D "%SYSTEMROOT%\SysWOW64\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_FILE_SYSTEM6432.DB 2^>Nul^|%EXEGREP% -ixvf DB\EXCEPT\EX_FILE_SYSTEM6432_PATTERN+NC.DB 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\SysWOW64\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\SysWOW64\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_SYSTEM6432_ONLYSUPERHIDDEN.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%SYSTEMROOT%]\System32/SysWOW64 (ETCs)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('TYPE DB_EXEC\THREAT\FILE\DEL_SYSTEM6432_ETCS+NC.DB 2^>Nul') DO (
	TITLE 검사중^(DB^) "%SYSTEMROOT%\System32%%A" 2>Nul
	IF EXIST "%SYSTEMROOT%\System32%%A" (
		IF NOT EXIST "%SYSTEMROOT%\System32%%A\" (
			>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\System32%%~pA
			>VARIABLE\%VTEXT2% ECHO %%~nxA
			CALL :DELETE_FILE
		)
	)
	TITLE 검사중^(DB^) "%SYSTEMROOT%\SysWOW64%%A" 2>Nul
	IF EXIST "%SYSTEMROOT%\SysWOW64%%A" (
		IF NOT EXIST "%SYSTEMROOT%\SysWOW64%%A\" (
			>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\SysWOW64%%~pA
			>VARIABLE\%VTEXT2% ECHO %%~nxA
			CALL :DELETE_FILE
		)
	)
)
REM :[%SYSTEMROOT%]\System32\Config\SystemProfile\AppData\Local
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\System32\Config\SystemProfile\AppData\Local\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Local\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_FILE_APPDATA+NC.DB 2^>Nul^|%EXEGREP% -ixvf DB\EXCEPT\EX_FILE_APPDATA_LOCAL_PATTERN+NC.DB 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Local\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Local\%%A" (
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\FILE\DEL_APPDATA_LOCAL+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE
	)
	IF EXIST "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Local\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_APPDATA_LOCAL+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%SYSTEMROOT%]\SysWOW64\Config\SystemProfile\AppData\Local
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Local\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Local\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_FILE_APPDATA+NC.DB 2^>Nul^|%EXEGREP% -ixvf DB\EXCEPT\EX_FILE_APPDATA_LOCAL_PATTERN+NC.DB 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Local\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Local\%%A" (
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\FILE\DEL_APPDATA_LOCAL+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE
	)
	IF EXIST "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Local\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_APPDATA_LOCAL+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%SYSTEMROOT%]\System32\Config\SystemProfile\AppData\Local\Microsoft
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\System32\Config\SystemProfile\AppData\Local\Microsoft\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Local\Microsoft\" 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Local\Microsoft\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Local\Microsoft\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_APPDATA_LOCAL_MICROSOFT+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%SYSTEMROOT%]\SysWOW64\Config\SystemProfile\AppData\Local\Microsoft
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Local\Microsoft\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Local\Microsoft\" 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Local\Microsoft\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Local\Microsoft\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_APPDATA_LOCAL_MICROSOFT+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%SYSTEMROOT%]\System32\Config\SystemProfile\AppData\Local\ServiceHub
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\System32\Config\SystemProfile\AppData\Local\ServiceHub\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Local\ServiceHub\" 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Local\ServiceHub\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Local\ServiceHub\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_APPDATA_LOCAL_SERVICEHUB+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%SYSTEMROOT%]\SysWOW64\Config\SystemProfile\AppData\Local\ServiceHub
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Local\ServiceHub\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Local\ServiceHub\" 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Local\ServiceHub\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Local\ServiceHub\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_APPDATA_LOCAL_SERVICEHUB+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%SYSTEMROOT%]\System32\Config\SystemProfile\AppData\LocalLow
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\System32\Config\SystemProfile\AppData\LocalLow\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\LocalLow\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_FILE_APPDATA+NC.DB 2^>Nul^|%EXEGREP% -ixvf DB\EXCEPT\EX_FILE_APPDATA_LOCAL_PATTERN+NC.DB 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\LocalLow\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\LocalLow\%%A" (
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\FILE\DEL_APPDATA_LOCAL+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE
	)
	IF EXIST "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\LocalLow\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_APPDATA_LOCAL+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%SYSTEMROOT%]\SysWOW64\Config\SystemProfile\AppData\LocalLow
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\LocalLow\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\LocalLow\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_FILE_APPDATA+NC.DB 2^>Nul^|%EXEGREP% -ixvf DB\EXCEPT\EX_FILE_APPDATA_LOCAL_PATTERN+NC.DB 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\LocalLow\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\LocalLow\%%A" (
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\FILE\DEL_APPDATA_LOCAL+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE
	)
	IF EXIST "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\LocalLow\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_APPDATA_LOCAL+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%SYSTEMROOT%]\System32\Config\SystemProfile\AppData\LocalLow\Microsoft
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\System32\Config\SystemProfile\AppData\LocalLow\Microsoft\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\LocalLow\Microsoft\" 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\LocalLow\Microsoft\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\LocalLow\Microsoft\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_APPDATA_LOCAL_MICROSOFT+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%SYSTEMROOT%]\SysWOW64\Config\SystemProfile\AppData\LocalLow\Microsoft
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\LocalLow\Microsoft\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\LocalLow\Microsoft\" 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\LocalLow\Microsoft\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\LocalLow\Microsoft\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_APPDATA_LOCAL_MICROSOFT+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%SYSTEMROOT%]\System32\Config\SystemProfile\AppData\Roaming
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\System32\Config\SystemProfile\AppData\Roaming\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Roaming\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_FILE_APPDATA+NC.DB 2^>Nul^|%EXEGREP% -ixvf DB\EXCEPT\EX_FILE_APPDATA_ROAMING_PATTERN+NC.DB 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Roaming\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Roaming\%%A" (
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\FILE\DEL_APPDATA_ROAMING+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE
	)
	IF EXIST "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Roaming\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_APPDATA_ROAMING+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%SYSTEMROOT%]\SysWOW64\Config\SystemProfile\AppData\Roaming
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Roaming\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Roaming\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_FILE_APPDATA+NC.DB 2^>Nul^|%EXEGREP% -ixvf DB\EXCEPT\EX_FILE_APPDATA_ROAMING_PATTERN+NC.DB 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Roaming\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Roaming\%%A" (
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\FILE\DEL_APPDATA_ROAMING+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE
	)
	IF EXIST "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Roaming\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_APPDATA_ROAMING+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%SYSTEMROOT%]\System32\Config\SystemProfile\AppData\Roaming\Adobe
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\System32\Config\SystemProfile\AppData\Roaming\Adobe\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Roaming\Adobe\" 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Roaming\Adobe\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Roaming\Adobe\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_APPDATA_ROAMING_ADOBE+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%SYSTEMROOT%]\SysWOW64\Config\SystemProfile\AppData\Roaming\Adobe
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Roaming\Adobe\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Roaming\Adobe\" 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Roaming\Adobe\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Roaming\Adobe\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_APPDATA_ROAMING_ADOBE+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%SYSTEMROOT%]\System32\Config\SystemProfile\AppData\Roaming\Log
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\System32\Config\SystemProfile\AppData\Roaming\Log\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Roaming\Log\" 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Roaming\Log\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Roaming\Log\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_APPDATA_ROAMING_LOG+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%SYSTEMROOT%]\SysWOW64\Config\SystemProfile\AppData\Roaming\Log
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Roaming\Log\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Roaming\Log\" 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Roaming\Log\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Roaming\Log\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_APPDATA_ROAMING_LOG+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%SYSTEMROOT%]\System32\Config\SystemProfile\AppData\Roaming\Microsoft
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\System32\Config\SystemProfile\AppData\Roaming\Microsoft\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Roaming\Microsoft\" 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Roaming\Microsoft\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Roaming\Microsoft\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_APPDATA_ROAMING_MICROSOFT+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%SYSTEMROOT%]\SysWOW64\Config\SystemProfile\AppData\Roaming\Microsoft
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Roaming\Microsoft\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Roaming\Microsoft\" 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Roaming\Microsoft\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Roaming\Microsoft\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_APPDATA_ROAMING_MICROSOFT+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%SYSTEMROOT%]\System32\Config\SystemProfile\AppData\Roaming\Microsoft\Windows
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\System32\Config\SystemProfile\AppData\Roaming\Microsoft\Windows\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Roaming\Microsoft\Windows\" 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Roaming\Microsoft\Windows\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Roaming\Microsoft\Windows\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_APPDATA_ROAMING_WINDOWS+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%SYSTEMROOT%]\SysWOW64\Config\SystemProfile\AppData\Roaming\Microsoft\Windows
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Roaming\Microsoft\Windows\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Roaming\Microsoft\Windows\" 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Roaming\Microsoft\Windows\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Roaming\Microsoft\Windows\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_APPDATA_ROAMING_WINDOWS+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%SYSTEMROOT%]\System32\Config\SystemProfile\Desktop
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\System32\Config\SystemProfile\Desktop\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%SYSTEMROOT%\System32\Config\SystemProfile\Desktop\" 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\System32\Config\SystemProfile\Desktop\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\System32\Config\SystemProfile\Desktop\%%A" (
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\FILE\DEL_DESKTOP+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE
	)
	IF EXIST "%SYSTEMROOT%\System32\Config\SystemProfile\Desktop\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_DESKTOP+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
	IF EXIST "%SYSTEMROOT%\System32\Config\SystemProfile\Desktop\%%A" (
		CALL :GET_FILESIZE "%SYSTEMROOT%\System32\Config\SystemProfile\Desktop\%%A"
		SETLOCAL ENABLEDELAYEDEXPANSION
		IF !FILESIZE! LEQ 200000000 (
			ENDLOCAL
			FOR /F "TOKENS=1" %%B IN ('TOOLS\DIRHASH\DIRHASH.EXE "%SYSTEMROOT%\System32\Config\SystemProfile\Desktop\%%A" MD5 -quiet -nowait 2^>Nul') DO (
				FOR /F %%X IN ('%EXEGREP% -Fixe "%%B" DB_EXEC\THREAT\FILE\DEL_MD5.DB 2^>Nul') DO CALL :DELETE_FILE
			)
		) ELSE (
			ENDLOCAL
		)
	)
	IF EXIST "%SYSTEMROOT%\System32\Config\SystemProfile\Desktop\%%A" (
		IF /I "%%~xA" == ".LNK" (
			FOR /F "TOKENS=1,* DELIMS==" %%B IN ('TOOLS\SHORTCUT\SHORTCUT.EXE /A:Q /F:"%SYSTEMROOT%\System32\Config\SystemProfile\Desktop\%%A" 2^>Nul^|%EXEGREP% -F "IconLocation=" 2^>Nul') DO (
				IF NOT "%%C" == "" (
					>VARIABLE\%VTEXT3% ECHO %%C
					FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_AD_FAVORITES_ICONLOCATION.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
				)
			)
		)
	)
	IF EXIST "%SYSTEMROOT%\System32\Config\SystemProfile\Desktop\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_SHORTCUT+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%SYSTEMROOT%]\SysWOW64\Config\SystemProfile\Desktop
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\SysWOW64\Config\SystemProfile\Desktop\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\Desktop\" 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\Desktop\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\Desktop\%%A" (
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\FILE\DEL_DESKTOP+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE
	)
	IF EXIST "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\Desktop\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_DESKTOP+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
	IF EXIST "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\Desktop\%%A" (
		CALL :GET_FILESIZE "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\Desktop\%%A"
		SETLOCAL ENABLEDELAYEDEXPANSION
		IF !FILESIZE! LEQ 200000000 (
			ENDLOCAL
			FOR /F "TOKENS=1" %%B IN ('TOOLS\DIRHASH\DIRHASH.EXE "%SYSTEMROOT%\SysNative\Config\SystemProfile\Desktop\%%A" MD5 -quiet -nowait 2^>Nul') DO (
				FOR /F %%X IN ('%EXEGREP% -Fixe "%%B" DB_EXEC\THREAT\FILE\DEL_MD5.DB 2^>Nul') DO CALL :DELETE_FILE
			)
		) ELSE (
			ENDLOCAL
		)
	)
	IF EXIST "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\Desktop\%%A" (
		IF /I "%%~xA" == ".LNK" (
			FOR /F "TOKENS=1,* DELIMS==" %%B IN ('TOOLS\SHORTCUT\SHORTCUT.EXE /A:Q /F:"%SYSTEMROOT%\SysWOW64\Config\SystemProfile\Desktop\%%A" 2^>Nul^|%EXEGREP% -F "IconLocation=" 2^>Nul') DO (
				IF NOT "%%C" == "" (
					>VARIABLE\%VTEXT3% ECHO %%C
					FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_AD_FAVORITES_ICONLOCATION.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
				)
			)
		)
	)
	IF EXIST "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\Desktop\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_SHORTCUT+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%SYSTEMROOT%]\System32\Drivers
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\System32\Drivers\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%SYSTEMROOT%\System32\Drivers\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_FILE_SYSTEM6432_DRIVERS.DB 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\System32\Drivers\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\System32\Drivers\%%A" (
		FOR /F %%X IN ('%EXEGREP% -Fix -f DB_EXEC\THREAT\FILE\DEL_ROOTKIT.DB -f DB_EXEC\THREAT\FILE\DEL_SYSTEM6432_DRIVERS+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE
	)
	IF EXIST "%SYSTEMROOT%\System32\Drivers\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_ROOTKIT.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
			CALL :GET_FILESIZE "%SYSTEMROOT%\System32\Drivers\%%A"
			SETLOCAL ENABLEDELAYEDEXPANSION
			IF !FILESIZE! LEQ 200000000 (
				ENDLOCAL
				FOR /F %%X IN ('TOOLS\DIRHASH\DIRHASH.EXE "%SYSTEMROOT%\System32\Drivers\%%A" SHA256 -quiet -nowait 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_FILE_SYSTEM6432_DRIVERS_SHA.DB') DO CALL :DELETE_FILE ACTIVESCAN
			) ELSE (
				ENDLOCAL
			)
		)
	)
)
REM :[%SYSTEMROOT%]\SysWOW64\Drivers
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\SysWOW64\Drivers\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%SYSTEMROOT%\SysWOW64\Drivers\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_FILE_SYSTEM6432_DRIVERS.DB 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\SysWOW64\Drivers\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\SysWOW64\Drivers\%%A" (
		FOR /F %%X IN ('%EXEGREP% -Fix -f DB_EXEC\THREAT\FILE\DEL_ROOTKIT.DB -f DB_EXEC\THREAT\FILE\DEL_SYSTEM6432_DRIVERS+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE
	)
	IF EXIST "%SYSTEMROOT%\SysWOW64\Drivers\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_ROOTKIT.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
			CALL :GET_FILESIZE "%SYSTEMROOT%\SysWOW64\Drivers\%%A"
			SETLOCAL ENABLEDELAYEDEXPANSION
			IF !FILESIZE! LEQ 200000000 (
				ENDLOCAL
				FOR /F %%X IN ('TOOLS\DIRHASH\DIRHASH.EXE "%SYSTEMROOT%\SysNative\Drivers\%%A" SHA256 -quiet -nowait 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_FILE_SYSTEM6432_DRIVERS_SHA.DB') DO CALL :DELETE_FILE ACTIVESCAN
			) ELSE (
				ENDLOCAL
			)
		)
	)
)
REM :[%SYSTEMROOT%]\System32\GroupPolicy\Machine\Registry.pol
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
IF EXIST "%SYSTEMROOT%\System32\GroupPolicy\Machine\Registry.pol" (
	TITLE 검사중 "%SYSTEMROOT%\System32\GroupPolicy\Machine\Registry.pol" 2>Nul
	>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\System32\GroupPolicy\Machine\
	>VARIABLE\%VTEXT2% ECHO Registry.pol
	>VARIABLE\%VTEXT3% TYPE "%SYSTEMROOT%\System32\GroupPolicy\Machine\Registry.pol" 2>Nul
	CSCRIPT.EXE //B //T:5 TOOLS\UNSETNUL\UNSETNUL.VBS VARIABLE\%VTEXT3% >Nul 2>Nul
	FOR /F %%X IN ('%EXEGREP% -Fi -f DB_EXEC\ACTIVESCAN\FILE\PATTERN_GROUPPOLICY_REGISTRY.DB -f DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
)
REM :[%SYSTEMROOT%]\SysWOW64\GroupPolicy\Machine\Registry.pol
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
IF EXIST "%SYSTEMROOT%\SysWOW64\GroupPolicy\Machine\Registry.pol" (
	TITLE 검사중 "%SYSTEMROOT%\SysWOW64\GroupPolicy\Machine\Registry.pol" 2>Nul
	>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\SysWOW64\GroupPolicy\Machine\
	>VARIABLE\%VTEXT2% ECHO Registry.pol
	>VARIABLE\%VTEXT3% TYPE "%SYSTEMROOT%\SysWOW64\GroupPolicy\Machine\Registry.pol" 2>Nul
	CSCRIPT.EXE //B //T:5 TOOLS\UNSETNUL\UNSETNUL.VBS VARIABLE\%VTEXT3% >Nul 2>Nul
	FOR /F %%X IN ('%EXEGREP% -Fi -f DB_EXEC\ACTIVESCAN\FILE\PATTERN_GROUPPOLICY_REGISTRY.DB -f DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
)
REM :[%SYSTEMROOT%]\System32\GroupPolicy\User\Registry.pol
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
IF EXIST "%SYSTEMROOT%\System32\GroupPolicy\User\Registry.pol" (
	TITLE 검사중 "%SYSTEMROOT%\System32\GroupPolicy\User\Registry.pol" 2>Nul
	>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\System32\GroupPolicy\User\
	>VARIABLE\%VTEXT2% ECHO Registry.pol
	>VARIABLE\%VTEXT3% TYPE "%SYSTEMROOT%\System32\GroupPolicy\User\Registry.pol" 2>Nul
	CSCRIPT.EXE //B //T:5 TOOLS\UNSETNUL\UNSETNUL.VBS VARIABLE\%VTEXT3% >Nul 2>Nul
	FOR /F %%X IN ('%EXEGREP% -Fi -f DB_EXEC\ACTIVESCAN\FILE\PATTERN_GROUPPOLICY_REGISTRY.DB -f DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
)
REM :[%SYSTEMROOT%]\SysWOW64\GroupPolicy\User\Registry.pol
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
IF EXIST "%SYSTEMROOT%\SysWOW64\GroupPolicy\User\Registry.pol" (
	TITLE 검사중 "%SYSTEMROOT%\SysWOW64\GroupPolicy\User\Registry.pol" 2>Nul
	>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\SysWOW64\GroupPolicy\User\
	>VARIABLE\%VTEXT2% ECHO Registry.pol
	>VARIABLE\%VTEXT3% TYPE "%SYSTEMROOT%\SysWOW64\GroupPolicy\User\Registry.pol" 2>Nul
	CSCRIPT.EXE //B //T:5 TOOLS\UNSETNUL\UNSETNUL.VBS VARIABLE\%VTEXT3% >Nul 2>Nul
	FOR /F %%X IN ('%EXEGREP% -Fi -f DB_EXEC\ACTIVESCAN\FILE\PATTERN_GROUPPOLICY_REGISTRY.DB -f DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
)
REM :[%ALLUSERSPROFILE%]
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZALLUSERSPROFILE%\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%ALLUSERSPROFILE%\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_FILE_ALLUSERSPROFILE+NC.DB 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_FILE_APPDATA+NC.DB 2^>Nul^|%EXEGREP% -ixvf DB\EXCEPT\EX_FILE_ALLUSERSPROFILE_PATTERN+NC.DB 2^>Nul') DO (
	TITLE 검사중 "%ALLUSERSPROFILE%\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%ALLUSERSPROFILE%\%%A" (
		FOR /F %%X IN ('%EXEGREP% -Fix -f DB_EXEC\THREAT\FILE\DEL_PROFILE.DB -f DB_EXEC\THREAT\FILE\DEL_ALLUSERSPROFILE+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE
	)
	IF EXIST "%ALLUSERSPROFILE%\%%A" (
		CALL :GET_FILESIZE "%ALLUSERSPROFILE%\%%A"
		SETLOCAL ENABLEDELAYEDEXPANSION
		IF !FILESIZE! LEQ 200000000 (
			ENDLOCAL
			FOR /F "TOKENS=1" %%B IN ('TOOLS\DIRHASH\DIRHASH.EXE "%ALLUSERSPROFILE%\%%A" MD5 -quiet -nowait 2^>Nul') DO (
				FOR /F %%X IN ('%EXEGREP% -Fixe "%%B" DB_EXEC\THREAT\FILE\DEL_MD5.DB 2^>Nul') DO CALL :DELETE_FILE
			)
		) ELSE (
			ENDLOCAL
		)
	)
	IF EXIST "%ALLUSERSPROFILE%\%%A" (
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\FILE\PATTERN_ALLUSERSPROFILE+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
	IF EXIST "%ALLUSERSPROFILE%\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_ALLUSERSPROFILE+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%ALLUSERSPROFILE%] (Steps & MD5)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%ALLUSERSPROFILE%\" 2^>Nul') DO (
	>VARIABLE\%VTEXT1% ECHO %MZALLUSERSPROFILE%\%%A\
	FOR /F "DELIMS=" %%B IN ('DIR /B /A-D "%ALLUSERSPROFILE%\%%A\" 2^>Nul') DO (
		TITLE 검사중 "%ALLUSERSPROFILE%\%%A\%%B" 2>Nul
		>VARIABLE\%VTEXT2% ECHO %%B
		IF EXIST "%ALLUSERSPROFILE%\%%A\%%B" (
			CALL :GET_FILESIZE "%ALLUSERSPROFILE%\%%A\%%B"
			SETLOCAL ENABLEDELAYEDEXPANSION
			IF !FILESIZE! LEQ 200000000 (
				ENDLOCAL
				FOR /F "TOKENS=1" %%C IN ('TOOLS\DIRHASH\DIRHASH.EXE "%ALLUSERSPROFILE%\%%A\%%B" MD5 -quiet -nowait 2^>Nul') DO (
					FOR /F %%X IN ('%EXEGREP% -Fixe "%%C" DB_EXEC\THREAT\FILE\DEL_MD5.DB 2^>Nul') DO CALL :DELETE_FILE
				)
			) ELSE (
				ENDLOCAL
			)
		)
	)
)
REM :[%ALLUSERSPROFILE%] (ETCs)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('TYPE DB_EXEC\THREAT\FILE\DEL_ALLUSERSPROFILE_ETCS+NC.DB 2^>Nul') DO (
	TITLE 검사중^(DB^) "%ALLUSERSPROFILE%%%A" 2>Nul
	IF EXIST "%ALLUSERSPROFILE%%%A" (
		IF NOT EXIST "%ALLUSERSPROFILE%%%A\" (
			>VARIABLE\%VTEXT1% ECHO %MZALLUSERSPROFILE%%%~pA
			>VARIABLE\%VTEXT2% ECHO %%~nxA
			CALL :DELETE_FILE
		)
	)
)
REM :[%ALLUSERSPROFILE%]\ntuser.pol
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
IF EXIST "%ALLUSERSPROFILE%\ntuser.pol" (
	TITLE 검사중 "%ALLUSERSPROFILE%\ntuser.pol" 2>Nul
	>VARIABLE\%VTEXT1% ECHO %MZALLUSERSPROFILE%\
	>VARIABLE\%VTEXT2% ECHO ntuser.pol
	>VARIABLE\%VTEXT3% TYPE "%ALLUSERSPROFILE%\ntuser.pol" 2>Nul
	CSCRIPT.EXE //B //T:5 TOOLS\UNSETNUL\UNSETNUL.VBS VARIABLE\%VTEXT3% >Nul 2>Nul
	FOR /F %%X IN ('%EXEGREP% -Fi -f DB_EXEC\ACTIVESCAN\FILE\PATTERN_GROUPPOLICY_REGISTRY.DB -f DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
)
REM :[%ALLUSERSPROFILE%]\Adobe\Temp
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZALLUSERSPROFILE%\Adobe\Temp\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%ALLUSERSPROFILE%\Adobe\Temp\" 2^>Nul') DO (
	TITLE 검사중 "%ALLUSERSPROFILE%\Adobe\Temp\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%ALLUSERSPROFILE%\Adobe\Temp\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_ALLUSERSPROFILE_ADOBE_TEMP+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%ALLUSERSPROFILE%]\Desktop
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZALLUSERSPROFILE%\Desktop\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%ALLUSERSPROFILE%\Desktop\" 2^>Nul') DO (
	TITLE 검사중 "%ALLUSERSPROFILE%\Desktop\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%ALLUSERSPROFILE%\Desktop\%%A" (
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\FILE\DEL_DESKTOP+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE
	)
	IF EXIST "%ALLUSERSPROFILE%\Desktop\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_DESKTOP+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
	IF EXIST "%ALLUSERSPROFILE%\Desktop\%%A" (
		CALL :GET_FILESIZE "%ALLUSERSPROFILE%\Desktop\%%A"
		SETLOCAL ENABLEDELAYEDEXPANSION
		IF !FILESIZE! LEQ 200000000 (
			ENDLOCAL
			FOR /F "TOKENS=1" %%B IN ('TOOLS\DIRHASH\DIRHASH.EXE "%ALLUSERSPROFILE%\Desktop\%%A" MD5 -quiet -nowait 2^>Nul') DO (
				FOR /F %%X IN ('%EXEGREP% -Fixe "%%B" DB_EXEC\THREAT\FILE\DEL_MD5.DB 2^>Nul') DO CALL :DELETE_FILE
			)
		) ELSE (
			ENDLOCAL
		)
	)
	IF EXIST "%ALLUSERSPROFILE%\Desktop\%%A" (
		IF /I "%%~xA" == ".LNK" (
			FOR /F "TOKENS=1,* DELIMS==" %%B IN ('TOOLS\SHORTCUT\SHORTCUT.EXE /A:Q /F:"%ALLUSERSPROFILE%\Desktop\%%A" 2^>Nul^|%EXEGREP% -F "IconLocation=" 2^>Nul') DO (
				IF NOT "%%C" == "" (
					>VARIABLE\%VTEXT3% ECHO %%C
					FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_AD_FAVORITES_ICONLOCATION.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
				)
			)
		)
	)
	IF EXIST "%ALLUSERSPROFILE%\Desktop\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_SHORTCUT+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%ALLUSERSPROFILE%]\Java (Target)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZALLUSERSPROFILE%\Java\
IF EXIST "%ALLUSERSPROFILE%\Java\" ATTRIB.EXE -H -S "%ALLUSERSPROFILE%\Java" /S /D >Nul 2>Nul
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%ALLUSERSPROFILE%\Java\" 2^>Nul') DO (
	TITLE 검사중 "%ALLUSERSPROFILE%\Java\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%ALLUSERSPROFILE%\Java\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_TARGET_JAVA.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
			%EXESETACL% -on "%ALLUSERSPROFILE%\Java" -ot file -actn setowner -ownr "n:Administrators" -silent >Nul 2>Nul
			%EXESETACL% -on "%ALLUSERSPROFILE%\Java" -ot file -actn clear -clr "dacl,sacl" -actn setprot -op "dacl:np;sacl:np" -silent >Nul 2>Nul
			CALL :DELETE_FILE ACTIVESCAN
		)
	)
)
REM :[%ALLUSERSPROFILE%]\Microsoft\Internet Explorer\Quick Launch
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZALLUSERSPROFILE%\Microsoft\Internet Explorer\Quick Launch\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%ALLUSERSPROFILE%\Microsoft\Internet Explorer\Quick Launch\" 2^>Nul') DO (
	TITLE 검사중 "%ALLUSERSPROFILE%\…\Quick Launch\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%ALLUSERSPROFILE%\Microsoft\Internet Explorer\Quick Launch\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_SHORTCUT+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%ALLUSERSPROFILE%]\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZALLUSERSPROFILE%\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%ALLUSERSPROFILE%\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\" 2^>Nul') DO (
	TITLE 검사중 "%ALLUSERSPROFILE%\…\TaskBar\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%ALLUSERSPROFILE%\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_SHORTCUT+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%ALLUSERSPROFILE%]\Microsoft\Windows\Start Menu\Programs
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\" 2^>Nul') DO (
	TITLE 검사중 "%ALLUSERSPROFILE%\…\Start Menu\Programs\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_SHORTCUT+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%ALLUSERSPROFILE%]\Microsoft\Windows\Start Menu\Programs\StartUp
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\StartUp\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\StartUp\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_FILE_STARTUP+NC.DB 2^>Nul') DO (
	TITLE 검사중 "%ALLUSERSPROFILE%\…\StartUp\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\StartUp\%%A" (
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\FILE\DEL_STARTUP.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE
	)
	IF EXIST "%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\StartUp\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_STARTUP.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
	IF /I "%%~xA" == ".LNK" (
		IF EXIST "%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\StartUp\%%A" (
			FOR /F "TOKENS=1,* DELIMS==" %%B IN ('TOOLS\SHORTCUT\SHORTCUT.EXE /A:Q /F:"%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\StartUp\%%A" 2^>Nul^|%EXEGREP% -E "(Arguments|TargetPath|WorkingDirectory)=" 2^>Nul') DO (
				>VARIABLE\%VTEXT3% ECHO %%C
				FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\FILE\PATTERN_STARTUP_PATHDATA.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
			)
		)
	)
	IF EXIST "%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\StartUp\%%A" (
		CALL :GET_FILESIZE "%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\StartUp\%%A"
		SETLOCAL ENABLEDELAYEDEXPANSION
		IF !FILESIZE! LEQ 200000000 (
			ENDLOCAL
			FOR /F "TOKENS=1" %%B IN ('TOOLS\DIRHASH\DIRHASH.EXE "%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\StartUp\%%A" MD5 -quiet -nowait 2^>Nul') DO (
				FOR /F %%X IN ('%EXEGREP% -Fixe "%%B" DB_EXEC\THREAT\FILE\DEL_MD5.DB 2^>Nul') DO CALL :DELETE_FILE
			)
		) ELSE (
			ENDLOCAL
		)
	)
)
REM :[%ALLUSERSPROFILE%]\Microsoft\Windows\Templates
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZALLUSERSPROFILE%\Microsoft\Windows\Templates\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%ALLUSERSPROFILE%\Microsoft\Windows\Templates\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_FILE_TEMPLATES.DB 2^>Nul') DO (
	TITLE 검사중 "%ALLUSERSPROFILE%\Microsoft\Windows\Templates\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%ALLUSERSPROFILE%\Microsoft\Windows\Templates\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_TEMPLATES.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%ALLUSERSPROFILE%]\Microsoft\Windows\Templates (Steps & MD5)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%ALLUSERSPROFILE%\Microsoft\Windows\Templates\" 2^>Nul') DO (
	>VARIABLE\%VTEXT1% ECHO %MZALLUSERSPROFILE%\Microsoft\Windows\Templates\%%A\
	FOR /F "DELIMS=" %%B IN ('DIR /B /A-D "%ALLUSERSPROFILE%\Microsoft\Windows\Templates\%%A\" 2^>Nul') DO (
		TITLE 검사중 "%ALLUSERSPROFILE%\Microsoft\Windows\Templates\%%A\%%B" 2>Nul
		>VARIABLE\%VTEXT2% ECHO %%B
		IF EXIST "%ALLUSERSPROFILE%\Microsoft\Windows\Templates\%%A\%%B" (
			CALL :GET_FILESIZE "%ALLUSERSPROFILE%\Microsoft\Windows\Templates\%%A\%%B"
			SETLOCAL ENABLEDELAYEDEXPANSION
			IF !FILESIZE! LEQ 200000000 (
				ENDLOCAL
				FOR /F "TOKENS=1" %%C IN ('TOOLS\DIRHASH\DIRHASH.EXE "%ALLUSERSPROFILE%\Microsoft\Windows\Templates\%%A\%%B" MD5 -quiet -nowait 2^>Nul') DO (
					FOR /F %%X IN ('%EXEGREP% -Fixe "%%C" DB_EXEC\THREAT\FILE\DEL_MD5.DB 2^>Nul') DO CALL :DELETE_FILE
				)
			) ELSE (
				ENDLOCAL
			)
		)
	)
)
REM :[%ALLUSERSPROFILE%]\Templates
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZALLUSERSPROFILE%\Templates\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%ALLUSERSPROFILE%\Templates\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_FILE_TEMPLATES.DB 2^>Nul') DO (
	TITLE 검사중 "%ALLUSERSPROFILE%\Templates\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%ALLUSERSPROFILE%\Templates\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_TEMPLATES.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%ALLUSERSPROFILE%]\Templates (Steps & MD5)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%ALLUSERSPROFILE%\Templates\" 2^>Nul') DO (
	>VARIABLE\%VTEXT1% ECHO %MZALLUSERSPROFILE%\Templates\%%A\
	FOR /F "DELIMS=" %%B IN ('DIR /B /A-D "%ALLUSERSPROFILE%\Templates\%%A\" 2^>Nul') DO (
		TITLE 검사중 "%ALLUSERSPROFILE%\Templates\%%A\%%B" 2>Nul
		>VARIABLE\%VTEXT2% ECHO %%B
		IF EXIST "%ALLUSERSPROFILE%\Templates\%%A\%%B" (
			CALL :GET_FILESIZE "%ALLUSERSPROFILE%\Templates\%%A\%%B"
			SETLOCAL ENABLEDELAYEDEXPANSION
			IF !FILESIZE! LEQ 200000000 (
				ENDLOCAL
				FOR /F "TOKENS=1" %%C IN ('TOOLS\DIRHASH\DIRHASH.EXE "%ALLUSERSPROFILE%\Templates\%%A\%%B" MD5 -quiet -nowait 2^>Nul') DO (
					FOR /F %%X IN ('%EXEGREP% -Fixe "%%C" DB_EXEC\THREAT\FILE\DEL_MD5.DB 2^>Nul') DO CALL :DELETE_FILE
				)
			) ELSE (
				ENDLOCAL
			)
		)
	)
)
REM :[%LOCALAPPDATA%]
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZLOCALAPPDATA%\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%LOCALAPPDATA%\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_FILE_APPDATA+NC.DB 2^>Nul^|%EXEGREP% -ixvf DB\EXCEPT\EX_FILE_APPDATA_LOCAL_PATTERN+NC.DB 2^>Nul') DO (
	TITLE 검사중 "%LOCALAPPDATA%\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%LOCALAPPDATA%\%%A" (
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\FILE\DEL_APPDATA_LOCAL+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE
	)
	IF EXIST "%LOCALAPPDATA%\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_APPDATA_LOCAL+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%LOCALAPPDATA%]\Microsoft
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZLOCALAPPDATA%\Microsoft\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%LOCALAPPDATA%\Microsoft\" 2^>Nul') DO (
	TITLE 검사중 "%LOCALAPPDATA%\Microsoft\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%LOCALAPPDATA%\Microsoft\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_APPDATA_LOCAL_MICROSOFT+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%LOCALAPPDATA%]\Microsoft\Windows\History
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZLOCALAPPDATA%\Microsoft\Windows\History\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%LOCALAPPDATA%\Microsoft\Windows\History\" 2^>Nul') DO (
	TITLE 검사중 "%LOCALAPPDATA%\Microsoft\Windows\History\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%LOCALAPPDATA%\Microsoft\Windows\History\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_APPDATA_LOCAL_MICROSOFT_HISTORY+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%LOCALAPPDATA%]\Google\Chrome\User Data
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZLOCALAPPDATA%\Google\Chrome\User Data\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%LOCALAPPDATA%\Google\Chrome\User Data\" 2^>Nul') DO (
	TITLE 검사중 "%LOCALAPPDATA%\Google\Chrome\User Data\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%LOCALAPPDATA%\Google\Chrome\User Data\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_APPDATA_LOCAL_CHROME_USERDATA+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%LOCALAPPDATA%]\Microsoft\Edge\User Data
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZLOCALAPPDATA%\Microsoft\Edge\User Data\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%LOCALAPPDATA%\Microsoft\Edge\User Data\" 2^>Nul') DO (
	TITLE 검사중 "%LOCALAPPDATA%\Microsoft\Edge\User Data\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%LOCALAPPDATA%\Microsoft\Edge\User Data\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_APPDATA_LOCAL_CHROME_USERDATA+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%LOCALAPPDATA%]\ServiceHub
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZLOCALAPPDATA%\ServiceHub\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%LOCALAPPDATA%\ServiceHub\" 2^>Nul') DO (
	TITLE 검사중 "%LOCALAPPDATA%\ServiceHub\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%LOCALAPPDATA%\ServiceHub\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_APPDATA_LOCAL_SERVICEHUB+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%LOCALAPPDATA%] (Steps & MD5)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%LOCALAPPDATA%\" 2^>Nul') DO (
	>VARIABLE\%VTEXT1% ECHO %MZLOCALAPPDATA%\%%A\
	FOR /F "DELIMS=" %%B IN ('DIR /B /A-D "%LOCALAPPDATA%\%%A\" 2^>Nul') DO (
		TITLE 검사중 "%LOCALAPPDATA%\%%A\%%B" 2>Nul
		>VARIABLE\%VTEXT2% ECHO %%B
		IF EXIST "%LOCALAPPDATA%\%%A\%%B" (
			CALL :GET_FILESIZE "%LOCALAPPDATA%\%%A\%%B"
			SETLOCAL ENABLEDELAYEDEXPANSION
			IF !FILESIZE! LEQ 200000000 (
				ENDLOCAL
				FOR /F "TOKENS=1" %%C IN ('TOOLS\DIRHASH\DIRHASH.EXE "%LOCALAPPDATA%\%%A\%%B" MD5 -quiet -nowait 2^>Nul') DO (
					FOR /F %%X IN ('%EXEGREP% -Fixe "%%C" DB_EXEC\THREAT\FILE\DEL_MD5.DB 2^>Nul') DO CALL :DELETE_FILE
				)
			) ELSE (
				ENDLOCAL
			)
		)
	)
)
REM :[%LOCALAPPDATA%] (ETCs)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('TYPE DB_EXEC\THREAT\FILE\DEL_APPDATA_LOCAL_ETCS+NC.DB 2^>Nul') DO (
	TITLE 검사중^(DB^) "%LOCALAPPDATA%%%A" 2>Nul
	IF EXIST "%LOCALAPPDATA%%%A" (
		IF NOT EXIST "%LOCALAPPDATA%%%A\" (
			>VARIABLE\%VTEXT1% ECHO %MZLOCALAPPDATA%%%~pA
			>VARIABLE\%VTEXT2% ECHO %%~nxA
			CALL :DELETE_FILE
		)
	)
	TITLE 검사중^(DB^) "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Local%%A" 2>Nul
	IF EXIST "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Local%%A" (
		IF NOT EXIST "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Local%%A\" (
			>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\System32\Config\SystemProfile\AppData\Local%%~pA
			>VARIABLE\%VTEXT2% ECHO %%~nxA
			CALL :DELETE_FILE
		)
	)
	TITLE 검사중^(DB^) "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Local%%A" 2>Nul
	IF EXIST "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Local%%A" (
		IF NOT EXIST "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Local%%A\" (
			>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Local%%~pA
			>VARIABLE\%VTEXT2% ECHO %%~nxA
			CALL :DELETE_FILE
		)
	)
	TITLE 검사중^(DB^) "%LOCALLOWAPPDATA%%%A" 2>Nul
	IF EXIST "%LOCALLOWAPPDATA%%%A" (
		IF NOT EXIST "%LOCALLOWAPPDATA%%%A\" (
			>VARIABLE\%VTEXT1% ECHO %MZLOCALLOWAPPDATA%%%~pA
			>VARIABLE\%VTEXT2% ECHO %%~nxA
			CALL :DELETE_FILE
		)
	)
	TITLE 검사중^(DB^) "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\LocalLow%%A" 2>Nul
	IF EXIST "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\LocalLow%%A" (
		IF NOT EXIST "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\LocalLow%%A\" (
			>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\System32\Config\SystemProfile\AppData\LocalLow%%~pA
			>VARIABLE\%VTEXT2% ECHO %%~nxA
			CALL :DELETE_FILE
		)
	)
	TITLE 검사중^(DB^) "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\LocalLow%%A" 2>Nul
	IF EXIST "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\LocalLow%%A" (
		IF NOT EXIST "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\LocalLow%%A\" (
			>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\LocalLow%%~pA
			>VARIABLE\%VTEXT2% ECHO %%~nxA
			CALL :DELETE_FILE
		)
	)
)
REM :[%LOCALLOWAPPDATA%]
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZLOCALLOWAPPDATA%\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%LOCALLOWAPPDATA%\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_FILE_APPDATA+NC.DB 2^>Nul^|%EXEGREP% -ixvf DB\EXCEPT\EX_FILE_APPDATA_LOCAL_PATTERN+NC.DB 2^>Nul') DO (
	TITLE 검사중 "%LOCALLOWAPPDATA%\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%LOCALLOWAPPDATA%\%%A" (
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\FILE\DEL_APPDATA_LOCAL+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE
	)
	IF EXIST "%LOCALLOWAPPDATA%\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_APPDATA_LOCAL+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%LOCALLOWAPPDATA%]\Microsoft
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZLOCALLOWAPPDATA%\Microsoft\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%LOCALLOWAPPDATA%\Microsoft\" 2^>Nul') DO (
	TITLE 검사중 "%LOCALLOWAPPDATA%\Microsoft\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%LOCALLOWAPPDATA%\Microsoft\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_APPDATA_LOCAL_MICROSOFT+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%LOCALLOWAPPDATA%] (for 1-Step & MD5)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%LOCALLOWAPPDATA%\" 2^>Nul') DO (
	>VARIABLE\%VTEXT1% ECHO %MZLOCALLOWAPPDATA%\%%A\
	FOR /F "DELIMS=" %%B IN ('DIR /B /A-D "%LOCALLOWAPPDATA%\%%A\" 2^>Nul') DO (
		TITLE 검사중 "%LOCALLOWAPPDATA%\%%A\%%B" 2>Nul
		>VARIABLE\%VTEXT2% ECHO %%B
		IF EXIST "%LOCALLOWAPPDATA%\%%A\%%B" (
			CALL :GET_FILESIZE "%LOCALLOWAPPDATA%\%%A\%%B"
			SETLOCAL ENABLEDELAYEDEXPANSION
			IF !FILESIZE! LEQ 200000000 (
				ENDLOCAL
				FOR /F "TOKENS=1" %%C IN ('TOOLS\DIRHASH\DIRHASH.EXE "%LOCALLOWAPPDATA%\%%A\%%B" MD5 -quiet -nowait 2^>Nul') DO (
					FOR /F %%X IN ('%EXEGREP% -Fixe "%%C" DB_EXEC\THREAT\FILE\DEL_MD5.DB 2^>Nul') DO CALL :DELETE_FILE
				)
			) ELSE (
				ENDLOCAL
			)
		)
	)
)
REM :[%APPDATA%]
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZAPPDATA%\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%APPDATA%\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_FILE_APPDATA+NC.DB 2^>Nul^|%EXEGREP% -ixvf DB\EXCEPT\EX_FILE_APPDATA_ROAMING_PATTERN+NC.DB 2^>Nul') DO (
	TITLE 검사중 "%APPDATA%\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%APPDATA%\%%A" (
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\FILE\DEL_APPDATA_ROAMING+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE
	)
	IF EXIST "%APPDATA%\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_APPDATA_ROAMING+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%APPDATA%] (Steps & MD5)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%APPDATA%\" 2^>Nul') DO (
	>VARIABLE\%VTEXT1% ECHO %MZAPPDATA%\%%A\
	FOR /F "DELIMS=" %%B IN ('DIR /B /A-D "%APPDATA%\%%A\" 2^>Nul') DO (
		TITLE 검사중 "%APPDATA%\%%A\%%B" 2>Nul
		>VARIABLE\%VTEXT2% ECHO %%B
		IF EXIST "%APPDATA%\%%A\%%B" (
			CALL :GET_FILESIZE "%APPDATA%\%%A\%%B"
			SETLOCAL ENABLEDELAYEDEXPANSION
			IF !FILESIZE! LEQ 200000000 (
				ENDLOCAL
				FOR /F "TOKENS=1" %%C IN ('TOOLS\DIRHASH\DIRHASH.EXE "%APPDATA%\%%A\%%B" MD5 -quiet -nowait 2^>Nul') DO (
					FOR /F %%X IN ('%EXEGREP% -Fixe "%%C" DB_EXEC\THREAT\FILE\DEL_MD5.DB 2^>Nul') DO CALL :DELETE_FILE
				)
			) ELSE (
				ENDLOCAL
			)
		)
	)
)
REM :[%APPDATA%] (ETCs)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('TYPE DB_EXEC\THREAT\FILE\DEL_APPDATA_ROAMING_ETCS+NC.DB 2^>Nul') DO (
	TITLE 검사중^(DB^) "%APPDATA%%%A" 2>Nul
	IF EXIST "%APPDATA%%%A" (
		IF NOT EXIST "%APPDATA%%%A\" (
			>VARIABLE\%VTEXT1% ECHO %MZAPPDATA%%%~pA
			>VARIABLE\%VTEXT2% ECHO %%~nxA
			CALL :DELETE_FILE
		)
	)
	TITLE 검사중^(DB^) "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Roaming%%A" 2>Nul
	IF EXIST "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Roaming%%A" (
		IF NOT EXIST "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Roaming%%A\" (
			>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\System32\Config\SystemProfile\AppData\Roaming%%~pA
			>VARIABLE\%VTEXT2% ECHO %%~nxA
			CALL :DELETE_FILE
		)
	)
	TITLE 검사중^(DB^) "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Roaming%%A" 2>Nul
	IF EXIST "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Roaming%%A" (
		IF NOT EXIST "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Roaming%%A\" (
			>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Roaming%%~pA
			>VARIABLE\%VTEXT2% ECHO %%~nxA
			CALL :DELETE_FILE
		)
	)
)
REM :[%APPDATA%]\Identities
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZAPPDATA%\Identities\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%APPDATA%\Identities\" 2^>Nul') DO (
	TITLE 검사중 "%APPDATA%\Identities\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%APPDATA%\Identities\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_APPDATA_IDENTITIES.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%APPDATA%]\Adobe
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZAPPDATA%\Adobe\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%APPDATA%\Adobe\" 2^>Nul') DO (
	TITLE 검사중 "%APPDATA%\Adobe\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%APPDATA%\Adobe\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_APPDATA_ROAMING_ADOBE+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%APPDATA%]\Log
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZAPPDATA%\Log\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%APPDATA%\Log\" 2^>Nul') DO (
	TITLE 검사중 "%APPDATA%\Log\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%APPDATA%\Log\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_APPDATA_ROAMING_LOG+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%APPDATA%]\Microsoft
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZAPPDATA%\Microsoft\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%APPDATA%\Microsoft\" 2^>Nul') DO (
	TITLE 검사중 "%APPDATA%\Microsoft\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%APPDATA%\Microsoft\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_APPDATA_ROAMING_MICROSOFT+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%APPDATA%]\Microsoft\Internet Explorer\Quick Launch
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZAPPDATA%\Microsoft\Internet Explorer\Quick Launch\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%APPDATA%\Microsoft\Internet Explorer\Quick Launch\" 2^>Nul') DO (
	TITLE 검사중 "%APPDATA%\…\Quick Launch\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%APPDATA%\Microsoft\Internet Explorer\Quick Launch\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_SHORTCUT+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%APPDATA%]\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZAPPDATA%\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%APPDATA%\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\" 2^>Nul') DO (
	TITLE 검사중 "%APPDATA%\…\TaskBar\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%APPDATA%\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_SHORTCUT+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%APPDATA%]\Microsoft\Protect
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZAPPDATA%\Microsoft\Protect\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%APPDATA%\Microsoft\Protect\" 2^>Nul') DO (
	TITLE 검사중 "%APPDATA%\Microsoft\Protect\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%APPDATA%\Microsoft\Protect\%%A" (
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\FILE\PATTERN_APPDATA_MICROSOFT_PROTECT+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%APPDATA%]\Microsoft\Windows
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZAPPDATA%\Microsoft\Windows\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%APPDATA%\Microsoft\Windows\" 2^>Nul') DO (
	TITLE 검사중 "%APPDATA%\Microsoft\Windows\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%APPDATA%\Microsoft\Windows\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_APPDATA_ROAMING_WINDOWS+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%APPDATA%]\Microsoft\Windows\Cookies
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZAPPDATA%\Microsoft\Windows\Cookies\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%APPDATA%\Microsoft\Windows\Cookies\" 2^>Nul') DO (
	TITLE 검사중 "%APPDATA%\Microsoft\Windows\Cookies\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%APPDATA%\Microsoft\Windows\Cookies\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_APPDATA_ROAMING_WINDOWS_COOKIES+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%APPDATA%]\Microsoft\Windows\INetCookies
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZAPPDATA%\Microsoft\Windows\INetCookies\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%APPDATA%\Microsoft\Windows\INetCookies\" 2^>Nul') DO (
	TITLE 검사중 "%APPDATA%\Microsoft\Windows\INetCookies\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%APPDATA%\Microsoft\Windows\INetCookies\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_APPDATA_ROAMING_WINDOWS_COOKIES+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%APPDATA%]\Microsoft\Windows\Network Shortcuts
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZAPPDATA%\Microsoft\Windows\Network Shortcuts\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%APPDATA%\Microsoft\Windows\Network Shortcuts\" 2^>Nul') DO (
	TITLE 검사중 "%APPDATA%\Microsoft\Windows\Network Shortcuts\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%APPDATA%\Microsoft\Windows\Network Shortcuts\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_NETWORK_SHORTCUTS.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%APPDATA%]\Microsoft\Windows\Recent
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZAPPDATA%\Microsoft\Windows\Recent\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%APPDATA%\Microsoft\Windows\Recent\" 2^>Nul') DO (
	TITLE 검사중 "%USERPROFILE%\Recent\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%APPDATA%\Microsoft\Windows\Recent\%%A" (
		FOR /F "TOKENS=1" %%B IN ('TOOLS\DIRHASH\DIRHASH.EXE "%APPDATA%\Microsoft\Windows\Recent\%%A" MD5 -quiet -nowait 2^>Nul') DO (
			FOR /F %%X IN ('%EXEGREP% -Fixe "%%B" DB_EXEC\THREAT\FILE\DEL_MD5.DB 2^>Nul') DO CALL :DELETE_FILE
		)
	)
	IF EXIST "%APPDATA%\Microsoft\Windows\Recent\%%A" (
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\FILE\PATTERN_PROFILE_RECENT+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%APPDATA%]\Microsoft\Windows\Start Menu\Programs
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZAPPDATA%\Microsoft\Windows\Start Menu\Programs\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%APPDATA%\Microsoft\Windows\Start Menu\Programs\" 2^>Nul') DO (
	TITLE 검사중 "%APPDATA%\…\Start Menu\Programs\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%APPDATA%\Microsoft\Windows\Start Menu\Programs\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_SHORTCUT+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%APPDATA%]\Microsoft\Windows\Start Menu\Programs\StartUp
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZAPPDATA%\Microsoft\Windows\Start Menu\Programs\StartUp\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%APPDATA%\Microsoft\Windows\Start Menu\Programs\StartUp\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_FILE_STARTUP+NC.DB 2^>Nul') DO (
	TITLE 검사중 "%APPDATA%\…\StartUp\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%APPDATA%\Microsoft\Windows\Start Menu\Programs\StartUp\%%A" (
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\FILE\DEL_STARTUP.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE
	)
	IF EXIST "%APPDATA%\Microsoft\Windows\Start Menu\Programs\StartUp\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_STARTUP.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
	IF /I "%%~xA" == ".LNK" (
		IF EXIST "%APPDATA%\Microsoft\Windows\Start Menu\Programs\StartUp\%%A" (
			FOR /F "TOKENS=1,* DELIMS==" %%B IN ('TOOLS\SHORTCUT\SHORTCUT.EXE /A:Q /F:"%APPDATA%\Microsoft\Windows\Start Menu\Programs\StartUp\%%A" 2^>Nul^|%EXEGREP% -E "(Arguments|TargetPath|WorkingDirectory)=" 2^>Nul') DO (
				>VARIABLE\%VTEXT3% ECHO %%C
				FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\FILE\PATTERN_STARTUP_PATHDATA.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
			)
		)
	)
	IF EXIST "%APPDATA%\Microsoft\Windows\Start Menu\Programs\StartUp\%%A" (
		CALL :GET_FILESIZE "%APPDATA%\Microsoft\Windows\Start Menu\Programs\StartUp\%%A"
		SETLOCAL ENABLEDELAYEDEXPANSION
		IF !FILESIZE! LEQ 200000000 (
			ENDLOCAL
			FOR /F "TOKENS=1" %%B IN ('TOOLS\DIRHASH\DIRHASH.EXE "%APPDATA%\Microsoft\Windows\Start Menu\Programs\StartUp\%%A" MD5 -quiet -nowait 2^>Nul') DO (
				FOR /F %%X IN ('%EXEGREP% -Fixe "%%B" DB_EXEC\THREAT\FILE\DEL_MD5.DB 2^>Nul') DO CALL :DELETE_FILE
			)
		) ELSE (
			ENDLOCAL
		)
	)
)
REM :[%APPDATA%]\Microsoft\Windows\Templates
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZAPPDATA%\Microsoft\Windows\Templates\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%APPDATA%\Microsoft\Windows\Templates\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_FILE_TEMPLATES.DB 2^>Nul') DO (
	TITLE 검사중 "%APPDATA%\Microsoft\Windows\Templates\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%APPDATA%\Microsoft\Windows\Templates\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_TEMPLATES.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%APPDATA%]\Microsoft\Windows\Templates (Steps & MD5)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%APPDATA%\Microsoft\Windows\Templates\" 2^>Nul') DO (
	>VARIABLE\%VTEXT1% ECHO %MZAPPDATA%\Microsoft\Windows\Templates\%%A\
	FOR /F "DELIMS=" %%B IN ('DIR /B /A-D "%APPDATA%\Microsoft\Windows\Templates\%%A\" 2^>Nul') DO (
		TITLE 검사중 "%APPDATA%\Microsoft\Windows\Templates\%%A\%%B" 2>Nul
		>VARIABLE\%VTEXT2% ECHO %%B
		IF EXIST "%APPDATA%\Microsoft\Windows\Templates\%%A\%%B" (
			CALL :GET_FILESIZE "%APPDATA%\Microsoft\Windows\Templates\%%A\%%B"
			SETLOCAL ENABLEDELAYEDEXPANSION
			IF !FILESIZE! LEQ 200000000 (
				ENDLOCAL
				FOR /F "TOKENS=1" %%C IN ('TOOLS\DIRHASH\DIRHASH.EXE "%APPDATA%\Microsoft\Windows\Templates\%%A\%%B" MD5 -quiet -nowait 2^>Nul') DO (
					FOR /F %%X IN ('%EXEGREP% -Fixe "%%C" DB_EXEC\THREAT\FILE\DEL_MD5.DB 2^>Nul') DO CALL :DELETE_FILE
				)
			) ELSE (
				ENDLOCAL
			)
		)
	)
)
REM :[%APPDATA%]\Microsoft\Windows\Themes
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZAPPDATA%\Microsoft\Windows\Themes\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%APPDATA%\Microsoft\Windows\Themes\" 2^>Nul') DO (
	TITLE 검사중 "%APPDATA%\Microsoft\Windows\Themes\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%APPDATA%\Microsoft\Windows\Themes\%%A" (
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\FILE\PATTERN_APPDATA_ROAMING_WINDOWS_THEMES+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :Application Data (ETCs)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('TYPE DB_EXEC\THREAT\FILE\DEL_APPDATA_ETCS.DB 2^>Nul') DO (
	TITLE 검사중^(DB^) "%ALLUSERSPROFILE%%%A" 2>Nul
	IF EXIST "%ALLUSERSPROFILE%%%A" (
		IF NOT EXIST "%ALLUSERSPROFILE%%%A\" (
			>VARIABLE\%VTEXT1% ECHO %MZALLUSERSPROFILE%%%~pA
			>VARIABLE\%VTEXT2% ECHO %%~nxA
			CALL :DELETE_FILE
		)
	)
	TITLE 검사중^(DB^) "%LOCALAPPDATA%%%A" 2>Nul
	IF EXIST "%LOCALAPPDATA%%%A" (
		IF NOT EXIST "%LOCALAPPDATA%%%A\" (
			>VARIABLE\%VTEXT1% ECHO %MZLOCALAPPDATA%%%~pA
			>VARIABLE\%VTEXT2% ECHO %%~nxA
			CALL :DELETE_FILE
		)
	)
	TITLE 검사중^(DB^) "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Local%%A" 2>Nul
	IF EXIST "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Local%%A" (
		IF NOT EXIST "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Local%%A\" (
			>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\System32\Config\SystemProfile\AppData\Local%%~pA
			>VARIABLE\%VTEXT2% ECHO %%~nxA
			CALL :DELETE_FILE
		)
	)
	TITLE 검사중^(DB^) "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Local%%A" 2>Nul
	IF EXIST "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Local%%A" (
		IF EXIST "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Local%%A\" (
			>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Local%%~pA
			>VARIABLE\%VTEXT2% ECHO %%~nxA
			CALL :DELETE_FILE
		)
	)
	TITLE 검사중^(DB^) "%LOCALLOWAPPDATA%%%A" 2>Nul
	IF EXIST "%LOCALLOWAPPDATA%%%A" (
		IF NOT EXIST "%LOCALLOWAPPDATA%%%A" (
			>VARIABLE\%VTEXT1% ECHO %MZLOCALLOWAPPDATA%%%~pA
			>VARIABLE\%VTEXT2% ECHO %%~nxA
			CALL :DELETE_FILE
		)
	)
	TITLE 검사중^(DB^) "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\LocalLow%%A" 2>Nul
	IF EXIST "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\LocalLow%%A" (
		IF NOT EXIST "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\LocalLow%%A\" (
			>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\System32\Config\SystemProfile\AppData\LocalLow%%~pA
			>VARIABLE\%VTEXT2% ECHO %%~nxA
			CALL :DELETE_FILE
		)
	)
	TITLE 검사중^(DB^) "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\LocalLow%%A" 2>Nul
	IF EXIST "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\LocalLow%%A" (
		IF NOT EXIST "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\LocalLow%%A\" (
			>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\LocalLow%%~pA
			>VARIABLE\%VTEXT2% ECHO %%~nxA
			CALL :DELETE_FILE
		)
	)
	TITLE 검사중^(DB^) "%APPDATA%%%A" 2>Nul
	IF EXIST "%APPDATA%%%A" (
		IF NOT EXIST "%APPDATA%%%A\" (
			>VARIABLE\%VTEXT1% ECHO %MZAPPDATA%%%~pA
			>VARIABLE\%VTEXT2% ECHO %%~nxA
			CALL :DELETE_FILE
		)
	)
	TITLE 검사중^(DB^) "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Roaming%%A" 2>Nul
	IF EXIST "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Roaming%%A" (
		IF NOT EXIST "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Roaming%%A\" (
			>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\System32\Config\SystemProfile\AppData\Roaming%%~pA
			>VARIABLE\%VTEXT2% ECHO %%~nxA
			CALL :DELETE_FILE
		)
	)
	TITLE 검사중^(DB^) "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Roaming%%A" 2>Nul
	IF EXIST "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Roaming%%A" (
		IF NOT EXIST "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Roaming%%A\" (
			>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Roaming%%~pA
			>VARIABLE\%VTEXT2% ECHO %%~nxA
			CALL :DELETE_FILE
		)
	)
)
REM :[%USERPROFILE%]
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZUSERPROFILE%\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%USERPROFILE%\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_FILE_PROFILE+NC.DB 2^>Nul') DO (
	TITLE 검사중 "%USERPROFILE%\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%USERPROFILE%\%%A" (
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\FILE\DEL_PROFILE.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE
	)
	IF EXIST "%USERPROFILE%\%%A" (
		CALL :GET_FILESIZE "%USERPROFILE%\%%A"
		SETLOCAL ENABLEDELAYEDEXPANSION
		IF !FILESIZE! LEQ 200000000 (
			ENDLOCAL
			FOR /F "TOKENS=1" %%B IN ('TOOLS\DIRHASH\DIRHASH.EXE "%USERPROFILE%\%%A" MD5 -quiet -nowait 2^>Nul') DO (
				FOR /F %%X IN ('%EXEGREP% -Fixe "%%B" DB_EXEC\THREAT\FILE\DEL_MD5.DB 2^>Nul') DO CALL :DELETE_FILE
			)
		) ELSE (
			ENDLOCAL
		)
	)
	IF EXIST "%USERPROFILE%\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_PROFILE.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%USERPROFILE%] (Hidden)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZUSERPROFILE%\
FOR /F "DELIMS=" %%A IN ('DIR /B /AH-D "%USERPROFILE%\" 2^>Nul') DO (
	TITLE 검사중 "%USERPROFILE%\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%USERPROFILE%\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_PROFILE_ONLYHIDDEN.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%USERPROFILE%]\AppData
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZUSERPROFILE%\AppData\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%USERPROFILE%\AppData\" 2^>Nul') DO (
	TITLE 검사중 "%USERPROFILE%\AppData\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%USERPROFILE%\AppData\%%A" (
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\FILE\DEL_APPDATA+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE
	)
	IF EXIST "%USERPROFILE%\AppData\%%A" (
		CALL :GET_FILESIZE "%USERPROFILE%\AppData\%%A"
		SETLOCAL ENABLEDELAYEDEXPANSION
		IF !FILESIZE! LEQ 200000000 (
			ENDLOCAL
			FOR /F "TOKENS=1" %%B IN ('TOOLS\DIRHASH\DIRHASH.EXE "%USERPROFILE%\AppData\%%A" MD5 -quiet -nowait 2^>Nul') DO (
				FOR /F %%X IN ('%EXEGREP% -Fixe "%%B" DB_EXEC\THREAT\FILE\DEL_MD5.DB 2^>Nul') DO CALL :DELETE_FILE
			)
		) ELSE (
			ENDLOCAL
		)
	)
	IF EXIST "%USERPROFILE%\AppData\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_APPDATA+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%USERPROFILE%]\Contacts
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZUSERPROFILE%\Contacts\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%USERPROFILE%\Contacts\" 2^>Nul') DO (
	TITLE 검사중 "%USERPROFILE%\Contacts\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%USERPROFILE%\Contacts\%%A" (
		CALL :GET_FILESIZE "%USERPROFILE%\Contacts\%%A"
		SETLOCAL ENABLEDELAYEDEXPANSION
		IF !FILESIZE! LEQ 200000000 (
			ENDLOCAL
			FOR /F "TOKENS=1" %%B IN ('TOOLS\DIRHASH\DIRHASH.EXE "%USERPROFILE%\Contacts\%%A" MD5 -quiet -nowait 2^>Nul') DO (
				FOR /F %%X IN ('%EXEGREP% -Fixe "%%B" DB_EXEC\THREAT\FILE\DEL_MD5.DB 2^>Nul') DO CALL :DELETE_FILE
			)
		) ELSE (
			ENDLOCAL
		)
	)
	IF EXIST "%USERPROFILE%\Contacts\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_PROFILE_CONTACTS+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%USERPROFILE%]\Desktop
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZUSERPROFILE%\Desktop\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%USERPROFILE%\Desktop\" 2^>Nul') DO (
	TITLE 검사중 "%USERPROFILE%\Desktop\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%USERPROFILE%\Desktop\%%A" (
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\FILE\DEL_DESKTOP+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE
	)
	IF EXIST "%USERPROFILE%\Desktop\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_DESKTOP+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
	IF EXIST "%USERPROFILE%\Desktop\%%A" (
		CALL :GET_FILESIZE "%USERPROFILE%\Desktop\%%A"
		SETLOCAL ENABLEDELAYEDEXPANSION
		IF !FILESIZE! LEQ 200000000 (
			ENDLOCAL
			FOR /F "TOKENS=1" %%B IN ('TOOLS\DIRHASH\DIRHASH.EXE "%USERPROFILE%\Desktop\%%A" MD5 -quiet -nowait 2^>Nul') DO (
				FOR /F %%X IN ('%EXEGREP% -Fixe "%%B" DB_EXEC\THREAT\FILE\DEL_MD5.DB 2^>Nul') DO CALL :DELETE_FILE
			)
		) ELSE (
			ENDLOCAL
		)
	)
	IF EXIST "%USERPROFILE%\Desktop\%%A" (
		IF /I "%%~xA" == ".LNK" (
			FOR /F "TOKENS=1,* DELIMS==" %%B IN ('TOOLS\SHORTCUT\SHORTCUT.EXE /A:Q /F:"%USERPROFILE%\Desktop\%%A" 2^>Nul^|%EXEGREP% -F "IconLocation=" 2^>Nul') DO (
				IF NOT "%%C" == "" (
					>VARIABLE\%VTEXT3% ECHO %%C
					FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_AD_FAVORITES_ICONLOCATION.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
				)
			)
		)
	)
	IF EXIST "%USERPROFILE%\Desktop\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_SHORTCUT+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%USERPROFILE%]\Documents
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZUSERPROFILE%\Documents\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%USERPROFILE%\Documents\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_FILE_PROFILE_DOCUMENTS+NC.DB 2^>Nul^|%EXEGREP% -Fixv DB\EXCEPT\EX_FILE_PROFILE_DOCUMENTS_PATTERN+NC.DB 2^>Nul') DO (
	TITLE 검사중 "%USERPROFILE%\Documents\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%USERPROFILE%\Documents\%%A" (
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\FILE\DEL_PROFILE_DOCUMENTS.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE
	)
	IF EXIST "%USERPROFILE%\Documents\%%A" (
		CALL :GET_FILESIZE "%USERPROFILE%\Documents\%%A"
		SETLOCAL ENABLEDELAYEDEXPANSION
		IF !FILESIZE! LEQ 200000000 (
			ENDLOCAL
			FOR /F "TOKENS=1" %%B IN ('TOOLS\DIRHASH\DIRHASH.EXE "%USERPROFILE%\Documents\%%A" MD5 -quiet -nowait 2^>Nul') DO (
				FOR /F %%X IN ('%EXEGREP% -Fixe "%%B" DB_EXEC\THREAT\FILE\DEL_MD5.DB 2^>Nul') DO CALL :DELETE_FILE
			)
		) ELSE (
			ENDLOCAL
		)
	)
	IF EXIST "%USERPROFILE%\Documents\%%A" (
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\FILE\PATTERN_PROFILE_DOCUMENTS+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%USERPROFILE%]\Documents\GIGABYTE\GHOST(6980X)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZUSERPROFILE%\Documents\GIGABYTE\GHOST(6980X)\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%USERPROFILE%\Documents\GIGABYTE\GHOST(6980X)\" 2^>Nul') DO (
	TITLE 검사중 "%USERPROFILE%\Documents\GIGABYTE\GHOST(6980X)\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%USERPROFILE%\Documents\GIGABYTE\GHOST(6980X)\%%A" (
		CALL :GET_FILESIZE "%USERPROFILE%\Documents\GIGABYTE\GHOST(6980X)\%%A"
		SETLOCAL ENABLEDELAYEDEXPANSION
		IF !FILESIZE! LEQ 200000000 (
			ENDLOCAL
			FOR /F "TOKENS=1" %%B IN ('TOOLS\DIRHASH\DIRHASH.EXE "%USERPROFILE%\Documents\GIGABYTE\GHOST(6980X)\%%A" MD5 -quiet -nowait 2^>Nul') DO (
				FOR /F %%X IN ('%EXEGREP% -Fixe "%%B" DB_EXEC\THREAT\FILE\DEL_MD5.DB 2^>Nul') DO CALL :DELETE_FILE
			)
		) ELSE (
			ENDLOCAL
		)
	)
)
REM :[%USERPROFILE%]\Downloads
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZUSERPROFILE%\Downloads\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%USERPROFILE%\Downloads\" 2^>Nul') DO (
	TITLE 검사중 "%USERPROFILE%\Downloads\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%USERPROFILE%\Downloads\%%A" (
		CALL :GET_FILESIZE "%USERPROFILE%\Downloads\%%A"
		SETLOCAL ENABLEDELAYEDEXPANSION
		IF !FILESIZE! LEQ 200000000 (
			ENDLOCAL
			FOR /F "TOKENS=1" %%B IN ('TOOLS\DIRHASH\DIRHASH.EXE "%USERPROFILE%\Downloads\%%A" MD5 -quiet -nowait 2^>Nul') DO (
				FOR /F %%X IN ('%EXEGREP% -Fixe "%%B" DB_EXEC\THREAT\FILE\DEL_MD5.DB 2^>Nul') DO CALL :DELETE_FILE
			)
		) ELSE (
			ENDLOCAL
		)
	)
	IF EXIST "%USERPROFILE%\Downloads\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_PROFILE_DOWNLOADS+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%USERPROFILE%]\Favorites
TITLE ^(확인중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZUSERPROFILE%\Favorites\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%USERPROFILE%\Favorites\*.LNK" 2^>Nul') DO (
	TITLE 확인중 "%USERPROFILE%\Favorites\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	FOR /F "TOKENS=1,* DELIMS==" %%B IN ('TOOLS\SHORTCUT\SHORTCUT.EXE /A:Q /F:"%USERPROFILE%\Favorites\%%A" 2^>Nul^|%EXEGREP% -F "IconLocation=" 2^>Nul') DO (
		IF NOT "%%C" == "" (
			>VARIABLE\%VTEXT3% ECHO %%C
			FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_AD_FAVORITES_ICONLOCATION.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
		)
	)
)
REM :[%USERPROFILE%]\Favorites\Links
TITLE ^(확인중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZUSERPROFILE%\Favorites\Links\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%USERPROFILE%\Favorites\Links\*.LNK" 2^>Nul') DO (
	TITLE 확인중 "%USERPROFILE%\Favorites\Links\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	FOR /F "TOKENS=1,* DELIMS==" %%B IN ('TOOLS\SHORTCUT\SHORTCUT.EXE /A:Q /F:"%USERPROFILE%\Favorites\Links\%%A" 2^>Nul^|%EXEGREP% -F "IconLocation=" 2^>Nul') DO (
		IF NOT "%%C" == "" (
			>VARIABLE\%VTEXT3% ECHO %%C
			FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_AD_FAVORITES_ICONLOCATION.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
		)
	)
)
REM :[%USERPROFILE%]\Links
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZUSERPROFILE%\Links\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%USERPROFILE%\Links\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_FILE_PROFILE_LINKS+NC.DB 2^>Nul') DO (
	TITLE 검사중 "%USERPROFILE%\Links\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%USERPROFILE%\Links\%%A" (
		CALL :GET_FILESIZE "%USERPROFILE%\Links\%%A"
		SETLOCAL ENABLEDELAYEDEXPANSION
		IF !FILESIZE! LEQ 200000000 (
			ENDLOCAL
			FOR /F "TOKENS=1" %%B IN ('TOOLS\DIRHASH\DIRHASH.EXE "%USERPROFILE%\Links\%%A" MD5 -quiet -nowait 2^>Nul') DO (
				FOR /F %%X IN ('%EXEGREP% -Fixe "%%B" DB_EXEC\THREAT\FILE\DEL_MD5.DB 2^>Nul') DO CALL :DELETE_FILE
			)
		) ELSE (
			ENDLOCAL
		)
	)
	IF EXIST "%USERPROFILE%\Links\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_PROFILE_LINKS+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%USERPROFILE%]\Pictures
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZUSERPROFILE%\Pictures\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%USERPROFILE%\Pictures\" 2^>Nul') DO (
	TITLE 검사중 "%USERPROFILE%\Pictures\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%USERPROFILE%\Pictures\%%A" (
		CALL :GET_FILESIZE "%USERPROFILE%\Pictures\%%A"
		SETLOCAL ENABLEDELAYEDEXPANSION
		IF !FILESIZE! LEQ 200000000 (
			ENDLOCAL
			FOR /F "TOKENS=1" %%B IN ('TOOLS\DIRHASH\DIRHASH.EXE "%USERPROFILE%\Pictures\%%A" MD5 -quiet -nowait 2^>Nul') DO (
				FOR /F %%X IN ('%EXEGREP% -Fixe "%%B" DB_EXEC\THREAT\FILE\DEL_MD5.DB 2^>Nul') DO CALL :DELETE_FILE
			)
		) ELSE (
			ENDLOCAL
		)
	)
	IF EXIST "%USERPROFILE%\Pictures\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_PROFILE_PICTURES+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
			FOR /F %%Y IN ('TOOLS\DIRHASH\DIRHASH.EXE "%USERPROFILE%\Pictures\%%A" SHA256 -quiet -nowait 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_FILE_PROFILE_PICTURES_SHA+NC.DB') DO CALL :DELETE_FILE ACTIVESCAN
		)
	)
)
REM :[%USERPROFILE%]\Recent
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZUSERPROFILE%\Recent\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%USERPROFILE%\Recent\" 2^>Nul') DO (
	TITLE 검사중 "%USERPROFILE%\Recent\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%USERPROFILE%\Recent\%%A" (
		FOR /F "TOKENS=1" %%B IN ('TOOLS\DIRHASH\DIRHASH.EXE "%USERPROFILE%\Recent\%%A" MD5 -quiet -nowait 2^>Nul') DO (
			FOR /F %%X IN ('%EXEGREP% -Fixe "%%B" DB_EXEC\THREAT\FILE\DEL_MD5.DB 2^>Nul') DO CALL :DELETE_FILE
		)
	)
	IF EXIST "%USERPROFILE%\Recent\%%A" (
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\FILE\PATTERN_PROFILE_RECENT+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%USERPROFILE%]\Searches
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZUSERPROFILE%\Searches\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%USERPROFILE%\Searches\" 2^>Nul') DO (
	TITLE 검사중 "%USERPROFILE%\Searches\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%USERPROFILE%\Searches\%%A" (
		CALL :GET_FILESIZE "%USERPROFILE%\Searches\%%A"
		SETLOCAL ENABLEDELAYEDEXPANSION
		IF !FILESIZE! LEQ 200000000 (
			ENDLOCAL
			FOR /F "TOKENS=1" %%B IN ('TOOLS\DIRHASH\DIRHASH.EXE "%USERPROFILE%\Searches\%%A" MD5 -quiet -nowait 2^>Nul') DO (
				FOR /F %%X IN ('%EXEGREP% -Fixe "%%B" DB_EXEC\THREAT\FILE\DEL_MD5.DB 2^>Nul') DO CALL :DELETE_FILE
			)
		) ELSE (
			ENDLOCAL
		)
	)
	IF EXIST "%USERPROFILE%\Searches\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_PROFILE_SEARCHES+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%USERPROFILE%]\Templates
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZUSERPROFILE%\Templates\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%USERPROFILE%\Templates\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_FILE_TEMPLATES.DB 2^>Nul') DO (
	TITLE 검사중 "%USERPROFILE%\Templates\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%USERPROFILE%\Templates\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_TEMPLATES.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%USERPROFILE%]\Templates (Steps & MD5)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%USERPROFILE%\Templates\" 2^>Nul') DO (
	>VARIABLE\%VTEXT1% ECHO %MZUSERPROFILE%\Templates\%%A\
	FOR /F "DELIMS=" %%B IN ('DIR /B /A-D "%USERPROFILE%\Templates\%%A\" 2^>Nul') DO (
		TITLE 검사중 "%USERPROFILE%\Templates\%%A\%%B" 2>Nul
		>VARIABLE\%VTEXT2% ECHO %%B
		IF EXIST "%USERPROFILE%\Templates\%%A\%%B" (
			CALL :GET_FILESIZE "%USERPROFILE%\Templates\%%A\%%B"
			SETLOCAL ENABLEDELAYEDEXPANSION
			IF !FILESIZE! LEQ 200000000 (
				ENDLOCAL
				FOR /F "TOKENS=1" %%C IN ('TOOLS\DIRHASH\DIRHASH.EXE "%USERPROFILE%\Templates\%%A\%%B" MD5 -quiet -nowait 2^>Nul') DO (
					FOR /F %%X IN ('%EXEGREP% -Fixe "%%C" DB_EXEC\THREAT\FILE\DEL_MD5.DB 2^>Nul') DO CALL :DELETE_FILE
				)
			) ELSE (
				ENDLOCAL
			)
		)
	)
)
REM :[%PUBLIC%]
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZPUBLIC%\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%PUBLIC%\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_FILE_PROFILE+NC.DB 2^>Nul') DO (
	TITLE 검사중 "%PUBLIC%\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%PUBLIC%\%%A" (
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\FILE\DEL_PROFILE.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE
	)
	IF EXIST "%PUBLIC%\%%A" (
		CALL :GET_FILESIZE "%PUBLIC%\%%A"
		SETLOCAL ENABLEDELAYEDEXPANSION
		IF !FILESIZE! LEQ 200000000 (
			ENDLOCAL
			FOR /F "TOKENS=1" %%B IN ('TOOLS\DIRHASH\DIRHASH.EXE "%PUBLIC%\%%A" MD5 -quiet -nowait 2^>Nul') DO (
				FOR /F %%X IN ('%EXEGREP% -Fixe "%%B" DB_EXEC\THREAT\FILE\DEL_MD5.DB 2^>Nul') DO CALL :DELETE_FILE
			)
		) ELSE (
			ENDLOCAL
		)
	)
	IF EXIST "%PUBLIC%\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ix -f DB_EXEC\ACTIVESCAN\FILE\PATTERN_PROFILE.DB -f DB_EXEC\ACTIVESCAN\FILE\PATTERN_PROFILE_PUBLIC+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%PUBLIC%]\Desktop
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZPUBLIC%\Desktop\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%PUBLIC%\Desktop\" 2^>Nul') DO (
	TITLE 검사중 "%PUBLIC%\Desktop\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%PUBLIC%\Desktop\%%A" (
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\FILE\DEL_DESKTOP+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE
	)
	IF EXIST "%PUBLIC%\Desktop\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_DESKTOP+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
	IF EXIST "%PUBLIC%\Desktop\%%A" (
		CALL :GET_FILESIZE "%PUBLIC%\Desktop\%%A"
		SETLOCAL ENABLEDELAYEDEXPANSION
		IF !FILESIZE! LEQ 200000000 (
			ENDLOCAL
			FOR /F "TOKENS=1" %%B IN ('TOOLS\DIRHASH\DIRHASH.EXE "%PUBLIC%\Desktop\%%A" MD5 -quiet -nowait 2^>Nul') DO (
				FOR /F %%X IN ('%EXEGREP% -Fixe "%%B" DB_EXEC\THREAT\FILE\DEL_MD5.DB 2^>Nul') DO CALL :DELETE_FILE
			)
		) ELSE (
			ENDLOCAL
		)
	)
	IF EXIST "%PUBLIC%\Desktop\%%A" (
		IF /I "%%~xA" == ".LNK" (
			FOR /F "TOKENS=1,* DELIMS==" %%B IN ('TOOLS\SHORTCUT\SHORTCUT.EXE /A:Q /F:"%PUBLIC%\Desktop\%%A" 2^>Nul^|%EXEGREP% -F "IconLocation=" 2^>Nul') DO (
				IF NOT "%%C" == "" (
					>VARIABLE\%VTEXT3% ECHO %%C
					FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_AD_FAVORITES_ICONLOCATION.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
				)
			)
		)
	)
	IF EXIST "%PUBLIC%\Desktop\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_SHORTCUT+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%PUBLIC%]\Libraries
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZPUBLIC%\Libraries\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%PUBLIC%\Libraries\" 2^>Nul') DO (
	TITLE 검사중 "%PUBLIC%\Libraries\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%PUBLIC%\Libraries\%%A" (
		CALL :GET_FILESIZE "%PUBLIC%\Libraries\%%A"
		SETLOCAL ENABLEDELAYEDEXPANSION
		IF !FILESIZE! LEQ 200000000 (
			ENDLOCAL
			FOR /F "TOKENS=1" %%B IN ('TOOLS\DIRHASH\DIRHASH.EXE "%PUBLIC%\Libraries\%%A" MD5 -quiet -nowait 2^>Nul') DO (
				FOR /F %%X IN ('%EXEGREP% -Fixe "%%B" DB_EXEC\THREAT\FILE\DEL_MD5.DB 2^>Nul') DO CALL :DELETE_FILE
			)
		) ELSE (
			ENDLOCAL
		)
	)
	IF EXIST "%PUBLIC%\Libraries\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_PROFILE_PUBLIC_LIBRARIES+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :Profiles (ETCs)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('TYPE DB_EXEC\THREAT\FILE\DEL_PROFILE_ETCS.DB 2^>Nul') DO (
	TITLE 검사중^(DB^) "%ALLUSERSPROFILE%%%A" 2>Nul
	IF EXIST "%ALLUSERSPROFILE%%%A" (
		IF NOT EXIST "%ALLUSERSPROFILE%%%A\" (
			>VARIABLE\%VTEXT1% ECHO %MZALLUSERSPROFILE%%%~pA
			>VARIABLE\%VTEXT2% ECHO %%~nxA
			CALL :DELETE_FILE
		)
	)
	TITLE 검사중^(DB^) "%USERPROFILE%%%A" 2>Nul
	IF EXIST "%USERPROFILE%%%A" (
		IF NOT EXIST "%USERPROFILE%%%A\" (
			>VARIABLE\%VTEXT1% ECHO %MZUSERPROFILE%%%~pA
			>VARIABLE\%VTEXT2% ECHO %%~nxA
			CALL :DELETE_FILE
		)
	)
	TITLE 검사중^(DB^) "%PUBLIC%%%A" 2>Nul
	IF EXIST "%PUBLIC%%%A" (
		IF NOT EXIST "%PUBLIC%%%A\" (
			>VARIABLE\%VTEXT1% ECHO %MZPUBLIC%%%~pA
			>VARIABLE\%VTEXT2% ECHO %%~nxA
			CALL :DELETE_FILE
		)
	)
)
REM :[%PROGRAMFILES%]
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZPROGRAMFILES%\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%PROGRAMFILES%\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_FILE_PROGRAMFILES.DB 2^>Nul') DO (
	TITLE 검사중 "%PROGRAMFILES%\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%PROGRAMFILES%\%%A" (
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\FILE\DEL_PROGRAMFILES.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE
	)
	IF EXIST "%PROGRAMFILES%\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_PROGRAMFILES.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
	IF EXIST "%PROGRAMFILES%\%%A" (
		CALL :GET_FILESIZE "%PROGRAMFILES%\%%A"
		SETLOCAL ENABLEDELAYEDEXPANSION
		IF !FILESIZE! LEQ 200000000 (
			ENDLOCAL
			FOR /F "TOKENS=1" %%B IN ('TOOLS\DIRHASH\DIRHASH.EXE "%PROGRAMFILES%\%%A" MD5 -quiet -nowait 2^>Nul') DO (
				FOR /F %%X IN ('%EXEGREP% -Fixe "%%B" DB_EXEC\THREAT\FILE\DEL_MD5.DB 2^>Nul') DO CALL :DELETE_FILE
			)
		) ELSE (
			ENDLOCAL
		)
	)
)
REM :[%PROGRAMFILESX86%]
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZPROGRAMFILESX86%\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%PROGRAMFILESX86%\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_FILE_PROGRAMFILES.DB 2^>Nul') DO (
	TITLE 검사중 "%PROGRAMFILESX86%\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%PROGRAMFILESX86%\%%A" (
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\FILE\DEL_PROGRAMFILES.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE
	)
	IF EXIST "%PROGRAMFILESX86%\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_PROGRAMFILES.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
	IF EXIST "%PROGRAMFILESX86%\%%A" (
		CALL :GET_FILESIZE "%PROGRAMFILESX86%\%%A"
		SETLOCAL ENABLEDELAYEDEXPANSION
		IF !FILESIZE! LEQ 200000000 (
			ENDLOCAL
			FOR /F "TOKENS=1" %%B IN ('TOOLS\DIRHASH\DIRHASH.EXE "%PROGRAMFILESX86%\%%A" MD5 -quiet -nowait 2^>Nul') DO (
				FOR /F %%X IN ('%EXEGREP% -Fixe "%%B" DB_EXEC\THREAT\FILE\DEL_MD5.DB 2^>Nul') DO CALL :DELETE_FILE
			)
		) ELSE (
			ENDLOCAL
		)
	)
)
REM :[%PROGRAMFILES%] (Super Hidden)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZPROGRAMFILES%\
FOR /F "DELIMS=" %%A IN ('DIR /B /AHS-D "%PROGRAMFILES%\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_FILE_PROGRAMFILES.DB 2^>Nul') DO (
	TITLE 검사중 "%PROGRAMFILES%\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%PROGRAMFILES%\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_PROGRAMFILES_ONLYSUPERHIDDEN+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%PROGRAMFILESX86%] (Super Hidden)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZPROGRAMFILESX86%\
FOR /F "DELIMS=" %%A IN ('DIR /B /AHS-D "%PROGRAMFILESX86%\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_FILE_PROGRAMFILES.DB 2^>Nul') DO (
	TITLE 검사중 "%PROGRAMFILESX86%\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%PROGRAMFILESX86%\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_PROGRAMFILES_ONLYSUPERHIDDEN+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%PROGRAMFILES%] (Steps & MD5)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%PROGRAMFILES%\" 2^>Nul') DO (
	IF /I NOT "%%A" == "TOXICFREE" (
		>VARIABLE\%VTEXT1% ECHO %MZPROGRAMFILES%\%%A\
		FOR /F "DELIMS=" %%B IN ('DIR /B /A-D "%PROGRAMFILES%\%%A\" 2^>Nul') DO (
			TITLE 검사중 "%PROGRAMFILES%\%%A\%%B" 2>Nul
			>VARIABLE\%VTEXT2% ECHO %%B
			IF EXIST "%PROGRAMFILES%\%%A\%%B" (
				FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\FILE\DEL_PROGRAMFILES_1STEP.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE
			)
			IF EXIST "%PROGRAMFILES%\%%A\%%B" (
				CALL :GET_FILESIZE "%PROGRAMFILES%\%%A\%%B"
				SETLOCAL ENABLEDELAYEDEXPANSION
				IF !FILESIZE! LEQ 200000000 (
					ENDLOCAL
					FOR /F "TOKENS=1" %%C IN ('TOOLS\DIRHASH\DIRHASH.EXE "%PROGRAMFILES%\%%A\%%B" MD5 -quiet -nowait 2^>Nul') DO (
						FOR /F %%X IN ('%EXEGREP% -Fixe "%%C" DB_EXEC\THREAT\FILE\DEL_MD5.DB 2^>Nul') DO CALL :DELETE_FILE
					)
				) ELSE (
					ENDLOCAL
				)
			)
		)
	)
)
REM :[%PROGRAMFILESX86%] (Steps & MD5)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%PROGRAMFILESX86%\" 2^>Nul') DO (
	IF /I NOT "%%A" == "TOXICFREE" (
		>VARIABLE\%VTEXT1% ECHO %MZPROGRAMFILESX86%\%%A\
		FOR /F "DELIMS=" %%B IN ('DIR /B /A-D "%PROGRAMFILESX86%\%%A\" 2^>Nul') DO (
			TITLE 검사중 "%PROGRAMFILESX86%\%%A\%%B" 2>Nul
			>VARIABLE\%VTEXT2% ECHO %%B
			IF EXIST "%PROGRAMFILESX86%\%%A\%%B" (
				FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\FILE\DEL_PROGRAMFILES_1STEP.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE
			)
			IF EXIST "%PROGRAMFILESX86%\%%A\%%B" (
				CALL :GET_FILESIZE "%PROGRAMFILESX86%\%%A\%%B"
				SETLOCAL ENABLEDELAYEDEXPANSION
				IF !FILESIZE! LEQ 200000000 (
					ENDLOCAL
					FOR /F "TOKENS=1" %%C IN ('TOOLS\DIRHASH\DIRHASH.EXE "%PROGRAMFILESX86%\%%A\%%B" MD5 -quiet -nowait 2^>Nul') DO (
						FOR /F %%X IN ('%EXEGREP% -Fixe "%%C" DB_EXEC\THREAT\FILE\DEL_MD5.DB 2^>Nul') DO CALL :DELETE_FILE
					)
				) ELSE (
					ENDLOCAL
				)
			)
		)
	)
)
REM :[%PROGRAMFILES%]\Google\Update
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZPROGRAMFILES%\Google\Update
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%PROGRAMFILES%\Google\Update" 2^>Nul') DO (
	TITLE 검사중 "%PROGRAMFILES%\Google\Update\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%PROGRAMFILES%\Google\Update\%%A" (
		FOR /F "TOKENS=1" %%B IN ('TOOLS\DIRHASH\DIRHASH.EXE "%PROGRAMFILES%\Google\Update\%%A" MD5 -quiet -nowait 2^>Nul') DO (
			FOR /F %%X IN ('%EXEGREP% -Fixe "%%B" DB_EXEC\THREAT\FILE\DEL_MD5.DB 2^>Nul') DO CALL :DELETE_FILE
		)
	)
)
REM :[%PROGRAMFILESX86%]\Google\Update
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZPROGRAMFILESX86%\Google\Update
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%PROGRAMFILESX86%\Google\Update" 2^>Nul') DO (
	TITLE 검사중 "%PROGRAMFILESX86%\Google\Update\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%PROGRAMFILESX86%\Google\Update\%%A" (
		FOR /F "TOKENS=1" %%B IN ('TOOLS\DIRHASH\DIRHASH.EXE "%PROGRAMFILESX86%\Google\Update\%%A" MD5 -quiet -nowait 2^>Nul') DO (
			FOR /F %%X IN ('%EXEGREP% -Fixe "%%B" DB_EXEC\THREAT\FILE\DEL_MD5.DB 2^>Nul') DO CALL :DELETE_FILE
		)
	)
)
REM :[%PROGRAMFILES%]\Mozilla Firefox
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZPROGRAMFILES%\Mozilla Firefox
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%PROGRAMFILES%\Mozilla Firefox" 2^>Nul') DO (
	TITLE 검사중 "%PROGRAMFILES%\Mozilla Firefox\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%PROGRAMFILES%\Mozilla Firefox\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_PROGRAMFILES_FIREFOX+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%PROGRAMFILESX86%]\Mozilla Firefox
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZPROGRAMFILESX86%\Mozilla Firefox\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%PROGRAMFILESX86%\Mozilla Firefox\" 2^>Nul') DO (
	TITLE 검사중 "%PROGRAMFILESX86%\Mozilla Firefox\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%PROGRAMFILESX86%\Mozilla Firefox\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_PROGRAMFILES_FIREFOX+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%PROGRAMFILES%]\Mozilla Firefox\defaults\pref
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZPROGRAMFILES%\Mozilla Firefox\defaults\pref\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%PROGRAMFILES%\Mozilla Firefox\defaults\pref\" 2^>Nul') DO (
	TITLE 검사중 "%PROGRAMFILES%\Mozilla Firefox\defaults\pref\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%PROGRAMFILES%\Mozilla Firefox\defaults\pref\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_PROGRAMFILES_FIREFOX_PREF+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%PROGRAMFILESX86%]\Mozilla Firefox\defaults\pref
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZPROGRAMFILESX86%\Mozilla Firefox\defaults\pref\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%PROGRAMFILESX86%\Mozilla Firefox\defaults\pref\" 2^>Nul') DO (
	TITLE 검사중 "%PROGRAMFILESX86%\Mozilla Firefox\defaults\pref\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%PROGRAMFILESX86%\Mozilla Firefox\defaults\pref\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_PROGRAMFILES_FIREFOX_PREF+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%PROGRAMFILES%]\WindowsPowerShell\Modules\Microsoft.PowerShell.Operation.Validation\1.0.1\Test\Modules\Example2.Diagnostics\1.0.1\Diagnostics\Simple
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZPROGRAMFILES%\WindowsPowerShell\Modules\Microsoft.PowerShell.Operation.Validation\1.0.1\Test\Modules\Example2.Diagnostics\1.0.1\Diagnostics\Simple\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%PROGRAMFILES%\WindowsPowerShell\Modules\Microsoft.PowerShell.Operation.Validation\1.0.1\Test\Modules\Example2.Diagnostics\1.0.1\Diagnostics\Simple\" 2^>Nul') DO (
	TITLE 검사중 "%PROGRAMFILES%\WindowsPowerShell\…\Diagnostics\Simple\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%PROGRAMFILES%\WindowsPowerShell\Modules\Microsoft.PowerShell.Operation.Validation\1.0.1\Test\Modules\Example2.Diagnostics\1.0.1\Diagnostics\Simple\%%A" (
		FOR /F "TOKENS=1" %%B IN ('TOOLS\DIRHASH\DIRHASH.EXE "%PROGRAMFILES%\WindowsPowerShell\Modules\Microsoft.PowerShell.Operation.Validation\1.0.1\Test\Modules\Example2.Diagnostics\1.0.1\Diagnostics\Simple\%%A" MD5 -quiet -nowait 2^>Nul') DO (
			FOR /F %%X IN ('%EXEGREP% -Fixe "%%B" DB_EXEC\THREAT\FILE\DEL_MD5.DB 2^>Nul') DO CALL :DELETE_FILE
		)
	)
)
REM :[%PROGRAMFILESX86%]\WindowsPowerShell\Modules\Microsoft.PowerShell.Operation.Validation\1.0.1\Test\Modules\Example2.Diagnostics\1.0.1\Diagnostics\Simple
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZPROGRAMFILESX86%\WindowsPowerShell\Modules\Microsoft.PowerShell.Operation.Validation\1.0.1\Test\Modules\Example2.Diagnostics\1.0.1\Diagnostics\Simple\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%PROGRAMFILESX86%\WindowsPowerShell\Modules\Microsoft.PowerShell.Operation.Validation\1.0.1\Test\Modules\Example2.Diagnostics\1.0.1\Diagnostics\Simple\" 2^>Nul') DO (
	TITLE 검사중 "%PROGRAMFILESX86%\WindowsPowerShell\…\Diagnostics\Simple\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%PROGRAMFILESX86%\WindowsPowerShell\Modules\Microsoft.PowerShell.Operation.Validation\1.0.1\Test\Modules\Example2.Diagnostics\1.0.1\Diagnostics\Simple\%%A" (
		FOR /F "TOKENS=1" %%B IN ('TOOLS\DIRHASH\DIRHASH.EXE "%PROGRAMFILESX86%\WindowsPowerShell\Modules\Microsoft.PowerShell.Operation.Validation\1.0.1\Test\Modules\Example2.Diagnostics\1.0.1\Diagnostics\Simple\%%A" MD5 -quiet -nowait 2^>Nul') DO (
			FOR /F %%X IN ('%EXEGREP% -Fixe "%%B" DB_EXEC\THREAT\FILE\DEL_MD5.DB 2^>Nul') DO CALL :DELETE_FILE
		)
	)
)
REM :[%PROGRAMFILES%]\WindowsPowerShell\Modules\Pester
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZPROGRAMFILES%\WindowsPowerShell\Modules\Pester
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%PROGRAMFILES%\WindowsPowerShell\Modules\Pester" 2^>Nul') DO (
	TITLE 검사중 "%PROGRAMFILES%\WindowsPowerShell\Modules\Pester\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%PROGRAMFILES%\WindowsPowerShell\Modules\Pester\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_PROGRAMFILES_WINDOWSPOWERSHELL_MODULES_PESTER+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%PROGRAMFILESX86%]\WindowsPowerShell\Modules\Pester
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZPROGRAMFILESX86%\WindowsPowerShell\Modules\Pester
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%PROGRAMFILESX86%\WindowsPowerShell\Modules\Pester" 2^>Nul') DO (
	TITLE 검사중 "%PROGRAMFILESX86%\WindowsPowerShell\Modules\Pester\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%PROGRAMFILESX86%\WindowsPowerShell\Modules\Pester\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_PROGRAMFILES_WINDOWSPOWERSHELL_MODULES_PESTER+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%PROGRAMFILES%] (ETCs)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('TYPE DB_EXEC\THREAT\FILE\DEL_PROGRAMFILES_ETCS.DB 2^>Nul') DO (
	TITLE 검사중^(DB^) "%PROGRAMFILES%%%A" 2>Nul
	IF EXIST "%PROGRAMFILES%%%A" (
		IF NOT EXIST "%PROGRAMFILES%%%A\" (
			>VARIABLE\%VTEXT1% ECHO %MZPROGRAMFILES%%%~pA
			>VARIABLE\%VTEXT2% ECHO %%~nxA
			CALL :DELETE_FILE
		)
	)
	TITLE 검사중^(DB^) "%PROGRAMFILESX86%%%A" 2>Nul
	IF EXIST "%PROGRAMFILESX86%%%A" (
		IF NOT EXIST "%PROGRAMFILESX86%%%A\" (
			>VARIABLE\%VTEXT1% ECHO %MZPROGRAMFILESX86%%%~pA
			>VARIABLE\%VTEXT2% ECHO %%~nxA
			CALL :DELETE_FILE
		)
	)
)
REM :[%PROGRAMFILES%] (Active)
IF EXIST "DB_ACTIVE\ACT_FILE_PROGRAMFILES_%UNIQ%.DB" (
	TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
	FOR /F "DELIMS=" %%A IN ('TYPE DB_ACTIVE\ACT_FILE_PROGRAMFILES_%UNIQ%.DB 2^>Nul') DO (
		TITLE 검사중^(DB^) "%PROGRAMFILES%%%A" 2>Nul
		IF EXIST "%PROGRAMFILES%%%A" (
			IF NOT EXIST "%PROGRAMFILES%%%A\" (
				>VARIABLE\%VTEXT1% ECHO %MZPROGRAMFILES%%%~pA
				>VARIABLE\%VTEXT2% ECHO %%~nxA
				CALL :DELETE_FILE
			)
		)
		TITLE 검사중^(DB^) "%PROGRAMFILESX86%%%A" 2>Nul
		IF EXIST "%PROGRAMFILESX86%%%A" (
			IF NOT EXIST "%PROGRAMFILESX86%%%A\" (
				>VARIABLE\%VTEXT1% ECHO %MZPROGRAMFILESX86%%%~pA
				>VARIABLE\%VTEXT2% ECHO %%~nxA
				CALL :DELETE_FILE
			)
		)
	)
)
REM :[%COMMONPROGRAMFILES%]
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZCOMMONPROGRAMFILES%\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%COMMONPROGRAMFILES%\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_FILE_COMMONPROGRAMFILES.DB 2^>Nul') DO (
	TITLE 검사중 "%COMMONPROGRAMFILES%\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%COMMONPROGRAMFILES%\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_COMMONPROGRAMFILES.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%COMMONPROGRAMFILESX86%]
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZCOMMONPROGRAMFILESX86%\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%COMMONPROGRAMFILESX86%\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_FILE_COMMONPROGRAMFILES.DB 2^>Nul') DO (
	TITLE 검사중 "%COMMONPROGRAMFILESX86%\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%COMMONPROGRAMFILESX86%\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_COMMONPROGRAMFILES.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%COMMONPROGRAMFILES%]\Java (Target)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZCOMMONPROGRAMFILES%\Java\
IF EXIST "%COMMONPROGRAMFILES%\Java\" ATTRIB.EXE -H -S "%COMMONPROGRAMFILES%\Java" /S /D >Nul 2>Nul
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%COMMONPROGRAMFILES%\Java\" 2^>Nul') DO (
	TITLE 검사중 "%COMMONPROGRAMFILES%\Java\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%COMMONPROGRAMFILES%\Java\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_TARGET_JAVA.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
			%EXESETACL% -on "%COMMONPROGRAMFILES%\Java" -ot file -actn setowner -ownr "n:Administrators" -silent >Nul 2>Nul
			%EXESETACL% -on "%COMMONPROGRAMFILES%\Java" -ot file -actn clear -clr "dacl,sacl" -actn setprot -op "dacl:np;sacl:np" -silent >Nul 2>Nul
			CALL :DELETE_FILE ACTIVESCAN
		)
	)
)
REM :[%COMMONPROGRAMFILESX86%]\Java (Target)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZCOMMONPROGRAMFILESX86%\Java\
IF EXIST "%COMMONPROGRAMFILESX86%\Java\" ATTRIB.EXE -H -S "%COMMONPROGRAMFILESX86%\Java" /S /D >Nul 2>Nul
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%COMMONPROGRAMFILESX86%\Java\" 2^>Nul') DO (
	TITLE 검사중 "%COMMONPROGRAMFILESX86%\Java\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%COMMONPROGRAMFILESX86%\Java\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_TARGET_JAVA.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
			%EXESETACL% -on "%COMMONPROGRAMFILESX86%\Java" -ot file -actn setowner -ownr "n:Administrators" -silent >Nul 2>Nul
			%EXESETACL% -on "%COMMONPROGRAMFILESX86%\Java" -ot file -actn clear -clr "dacl,sacl" -actn setprot -op "dacl:np;sacl:np" -silent >Nul 2>Nul
			CALL :DELETE_FILE ACTIVESCAN
		)
	)
)
REM :[%COMMONPROGRAMFILES%]\Services
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZCOMMONPROGRAMFILES%\Services\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%COMMONPROGRAMFILES%\Services\" 2^>Nul') DO (
	TITLE 검사중 "%COMMONPROGRAMFILES%\Services\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%COMMONPROGRAMFILES%\Services\%%A" (
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\FILE\DEL_COMMONPROGRAMFILES_SERVICES.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE
	)
	IF EXIST "%COMMONPROGRAMFILES%\Services\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_COMMONPROGRAMFILES_SERVICES.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%COMMONPROGRAMFILESX86%]\Services
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZCOMMONPROGRAMFILESX86%\Services\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%COMMONPROGRAMFILESX86%\Services\" 2^>Nul') DO (
	TITLE 검사중 "%COMMONPROGRAMFILESX86%\Services\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%COMMONPROGRAMFILESX86%\Services\%%A" (
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\FILE\DEL_COMMONPROGRAMFILES_SERVICES.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE
	)
	IF EXIST "%COMMONPROGRAMFILESX86%\Services\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_COMMONPROGRAMFILES_SERVICES.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%COMMONPROGRAMFILES%]\System
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZCOMMONPROGRAMFILES%\System\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%COMMONPROGRAMFILES%\System\" 2^>Nul') DO (
	TITLE 검사중 "%COMMONPROGRAMFILES%\System\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%COMMONPROGRAMFILES%\System\%%A" (
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\FILE\DEL_COMMONPROGRAMFILES_SYSTEM.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE
	)
	IF EXIST "%COMMONPROGRAMFILES%\System\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_COMMONPROGRAMFILES_SYSTEM.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :[%COMMONPROGRAMFILESX86%]\System
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZCOMMONPROGRAMFILESX86%\System\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%COMMONPROGRAMFILESX86%\System\" 2^>Nul') DO (
	TITLE 검사중 "%COMMONPROGRAMFILESX86%\System\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%COMMONPROGRAMFILESX86%\System\%%A" (
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\FILE\DEL_COMMONPROGRAMFILES_SYSTEM.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE
	)
	IF EXIST "%COMMONPROGRAMFILESX86%\System\%%A" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_COMMONPROGRAMFILES_SYSTEM.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
	)
)
REM :Browser Extensions - Chromium (Searching Only)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%LOCALAPPDATA%\Chromium\User Data\" 2^>Nul^|%EXEGREP% -Fixf DB_EXEC\CHECK\CHK_BROWSER_CHROMEPROFILE+NC.DB 2^>Nul') DO (
	FOR /F "DELIMS=" %%B IN ('DIR /B /AD "%LOCALAPPDATA%\Chromium\User Data\%%A\Extensions\" 2^>Nul') DO (
		FOR /F "DELIMS=" %%C IN ('DIR /B /AD "%LOCALAPPDATA%\Chromium\User Data\%%A\Extensions\%%B\" 2^>Nul') DO (
			TITLE 검사중 "%LOCALAPPDATA%\Chromium\…\%%A\Extensions\%%B" 2>Nul
			FOR /F "DELIMS=" %%D IN ('DIR /B /A-D "%LOCALAPPDATA%\Chromium\User Data\%%A\Extensions\%%B\%%C\" 2^>Nul') DO (
				IF /I "%%D" == "BACKGROUND.HTML" (
					FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\COMBO\PATTERN_BROWSER_EXTENSIONS_CHROME_BACKGROUND+C.DB "%LOCALAPPDATA%\Chromium\User Data\%%A\Extensions\%%B\%%C\%%D" 2^>Nul') DO >>DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB ECHO %%B
				)
				IF /I "%%D" == "CONFIG.JSON" (
					FOR /F %%X IN ('%EXEGREP% -Ff DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME_CONFIG+C.DB "%LOCALAPPDATA%\Chromium\User Data\%%A\Extensions\%%B\%%C\%%D" 2^>Nul') DO >>DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB ECHO %%B
				)
				IF /I "%%D" == "MANIFEST.JSON" (
					FOR /F "DELIMS=" %%E IN ('TYPE "%LOCALAPPDATA%\Chromium\User Data\%%A\Extensions\%%B\%%C\%%D" 2^>Nul^|TOOLS\JQ\JQ.EXE ".name" 2^>Nul') DO (
						IF "%%E" == "null" (
							>>DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB ECHO %%B
						) ELSE (
							>VARIABLE\%VTEXT3% ECHO %%E
							FOR /F %%X IN ('%EXEGREP% -Fxf DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME_NAME+C.DB VARIABLE\%VTEXT3% 2^>Nul') DO >>DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB ECHO %%B
							FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\COMBO\PATTERN_BROWSER_EXTENSIONS_CHROME_NAME+C.DB VARIABLE\%VTEXT3% 2^>Nul') DO >>DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB ECHO %%B
							FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\COMBO\PATTERN_ADWARE_MULTIPLUG+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO >>DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB ECHO %%B
						)
					)
					FOR /F "DELIMS=" %%E IN ('TYPE "%LOCALAPPDATA%\Chromium\User Data\%%A\Extensions\%%B\%%C\%%D" 2^>Nul^|TOOLS\JQ\JQ.EXE ".short_name" 2^>Nul') DO (
						>VARIABLE\%VTEXT3% ECHO %%E
						FOR /F %%X IN ('%EXEGREP% -Fxf DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME_NAME+C.DB VARIABLE\%VTEXT3% 2^>Nul') DO >>DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB ECHO %%B
						FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\COMBO\PATTERN_BROWSER_EXTENSIONS_CHROME_NAME+C.DB VARIABLE\%VTEXT3% 2^>Nul') DO >>DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB ECHO %%B
						FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\COMBO\PATTERN_ADWARE_MULTIPLUG+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO >>DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB ECHO %%B
					)
				)
			)
		)
	)
)
REM :Browser Extensions - Google Chrome (Searching Only)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%LOCALAPPDATA%\Google\Chrome\User Data\" 2^>Nul^|%EXEGREP% -Fixf DB_EXEC\CHECK\CHK_BROWSER_CHROMEPROFILE+NC.DB 2^>Nul') DO (
	FOR /F "DELIMS=" %%B IN ('DIR /B /AD "%LOCALAPPDATA%\Google\Chrome\User Data\%%A\Extensions\" 2^>Nul') DO (
		FOR /F "DELIMS=" %%C IN ('DIR /B /AD "%LOCALAPPDATA%\Google\Chrome\User Data\%%A\Extensions\%%B\" 2^>Nul') DO (
			TITLE 검사중 "%LOCALAPPDATA%\Google\Chrome\…\%%A\Extensions\%%B" 2>Nul
			FOR /F "DELIMS=" %%D IN ('DIR /B /A-D "%LOCALAPPDATA%\Google\Chrome\User Data\%%A\Extensions\%%B\%%C\" 2^>Nul') DO (
				IF /I "%%D" == "BACKGROUND.HTML" (
					FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\COMBO\PATTERN_BROWSER_EXTENSIONS_CHROME_BACKGROUND+C.DB "%LOCALAPPDATA%\Google\Chrome\User Data\%%A\Extensions\%%B\%%C\%%D" 2^>Nul') DO >>DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB ECHO %%B
				)
				IF /I "%%D" == "CONFIG.JSON" (
					FOR /F %%X IN ('%EXEGREP% -Ff DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME_CONFIG+C.DB "%LOCALAPPDATA%\Google\Chrome\User Data\%%A\Extensions\%%B\%%C\%%D" 2^>Nul') DO >>DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB ECHO %%B
				)
				IF /I "%%D" == "MANIFEST.JSON" (
					FOR /F "DELIMS=" %%E IN ('TYPE "%LOCALAPPDATA%\Google\Chrome\User Data\%%A\Extensions\%%B\%%C\%%D" 2^>Nul^|TOOLS\JQ\JQ.EXE ".name" 2^>Nul') DO (
						IF "%%E" == "null" (
							>>DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB ECHO %%B
						) ELSE (
							>VARIABLE\%VTEXT3% ECHO %%E
							FOR /F %%X IN ('%EXEGREP% -Fxf DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME_NAME+C.DB VARIABLE\%VTEXT3% 2^>Nul') DO >>DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB ECHO %%B
							FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\COMBO\PATTERN_BROWSER_EXTENSIONS_CHROME_NAME+C.DB VARIABLE\%VTEXT3% 2^>Nul') DO >>DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB ECHO %%B
							FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\COMBO\PATTERN_ADWARE_MULTIPLUG+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO >>DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB ECHO %%B
						)
					)
					FOR /F "DELIMS=" %%E IN ('TYPE "%LOCALAPPDATA%\Google\Chrome\User Data\%%A\Extensions\%%B\%%C\%%D" 2^>Nul^|TOOLS\JQ\JQ.EXE ".short_name" 2^>Nul') DO (
						>VARIABLE\%VTEXT3% ECHO %%E
						FOR /F %%X IN ('%EXEGREP% -Fxf DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME_NAME+C.DB VARIABLE\%VTEXT3% 2^>Nul') DO >>DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB ECHO %%B
						FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\COMBO\PATTERN_BROWSER_EXTENSIONS_CHROME_NAME+C.DB VARIABLE\%VTEXT3% 2^>Nul') DO >>DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB ECHO %%B
						FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\COMBO\PATTERN_ADWARE_MULTIPLUG+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO >>DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB ECHO %%B
					)
				)
			)
		)
	)
)
REM :Browser Extensions - Microsoft Edge (Searching Only)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%LOCALAPPDATA%\Microsoft\Edge\User Data\" 2^>Nul^|%EXEGREP% -Fixf DB_EXEC\CHECK\CHK_BROWSER_CHROMEPROFILE+NC.DB 2^>Nul') DO (
	FOR /F "DELIMS=" %%B IN ('DIR /B /AD "%LOCALAPPDATA%\Microsoft\Edge\User Data\%%A\Extensions\" 2^>Nul') DO (
		FOR /F "DELIMS=" %%C IN ('DIR /B /AD "%LOCALAPPDATA%\Microsoft\Edge\User Data\%%A\Extensions\%%B\" 2^>Nul') DO (
			TITLE 검사중 "%LOCALAPPDATA%\Microsoft\Edge\…\%%A\Extensions\%%B" 2>Nul
			FOR /F "DELIMS=" %%D IN ('DIR /B /A-D "%LOCALAPPDATA%\Microsoft\Edge\User Data\%%A\Extensions\%%B\%%C\" 2^>Nul') DO (
				IF /I "%%D" == "BACKGROUND.HTML" (
					FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\COMBO\PATTERN_BROWSER_EXTENSIONS_CHROME_BACKGROUND+C.DB "%LOCALAPPDATA%\Microsoft\Edge\User Data\%%A\Extensions\%%B\%%C\%%D" 2^>Nul') DO >>DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB ECHO %%B
				)
				IF /I "%%D" == "CONFIG.JSON" (
					FOR /F %%X IN ('%EXEGREP% -Ff DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME_CONFIG+C.DB "%LOCALAPPDATA%\Microsoft\Edge\User Data\%%A\Extensions\%%B\%%C\%%D" 2^>Nul') DO >>DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB ECHO %%B
				)
				IF /I "%%D" == "MANIFEST.JSON" (
					FOR /F "DELIMS=" %%E IN ('TYPE "%LOCALAPPDATA%\Microsoft\Edge\User Data\%%A\Extensions\%%B\%%C\%%D" 2^>Nul^|TOOLS\JQ\JQ.EXE ".name" 2^>Nul') DO (
						IF "%%E" == "null" (
							>>DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB ECHO %%B
						) ELSE (
							>VARIABLE\%VTEXT3% ECHO %%E
							FOR /F %%X IN ('%EXEGREP% -Fxf DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME_NAME+C.DB VARIABLE\%VTEXT3% 2^>Nul') DO >>DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB ECHO %%B
							FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\COMBO\PATTERN_BROWSER_EXTENSIONS_CHROME_NAME+C.DB VARIABLE\%VTEXT3% 2^>Nul') DO >>DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB ECHO %%B
							FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\COMBO\PATTERN_ADWARE_MULTIPLUG+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO >>DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB ECHO %%B
						)
					)
					FOR /F "DELIMS=" %%E IN ('TYPE "%LOCALAPPDATA%\Microsoft\Edge\User Data\%%A\Extensions\%%B\%%C\%%D" 2^>Nul^|TOOLS\JQ\JQ.EXE ".short_name" 2^>Nul') DO (
						>VARIABLE\%VTEXT3% ECHO %%E
						FOR /F %%X IN ('%EXEGREP% -Fxf DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME_NAME+C.DB VARIABLE\%VTEXT3% 2^>Nul') DO >>DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB ECHO %%B
						FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\COMBO\PATTERN_BROWSER_EXTENSIONS_CHROME_NAME+C.DB VARIABLE\%VTEXT3% 2^>Nul') DO >>DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB ECHO %%B
						FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\COMBO\PATTERN_ADWARE_MULTIPLUG+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO >>DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB ECHO %%B
					)
				)
			)
		)
	)
)
REM :Browser Extensions - Naver Whale (Searching Only)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%LOCALAPPDATA%\Naver\Naver Whale\User Data\" 2^>Nul^|%EXEGREP% -Fixf DB_EXEC\CHECK\CHK_BROWSER_CHROMEPROFILE+NC.DB 2^>Nul') DO (
	FOR /F "DELIMS=" %%B IN ('DIR /B /AD "%LOCALAPPDATA%\Naver\Naver Whale\User Data\%%A\Extensions\" 2^>Nul') DO (
		FOR /F "DELIMS=" %%C IN ('DIR /B /AD "%LOCALAPPDATA%\Naver\Naver Whale\User Data\%%A\Extensions\%%B\" 2^>Nul') DO (
			TITLE 검사중 "%LOCALAPPDATA%\Naver\Naver Whale\…\%%A\Extensions\%%B" 2>Nul
			FOR /F "DELIMS=" %%D IN ('DIR /B /A-D "%LOCALAPPDATA%\Naver\Naver Whale\User Data\%%A\Extensions\%%B\%%C\" 2^>Nul') DO (
				IF /I "%%D" == "BACKGROUND.HTML" (
					FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\COMBO\PATTERN_BROWSER_EXTENSIONS_CHROME_BACKGROUND+C.DB "%LOCALAPPDATA%\Naver\Naver Whale\User Data\%%A\Extensions\%%B\%%C\%%D" 2^>Nul') DO >>DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB ECHO %%B
				)
				IF /I "%%D" == "CONFIG.JSON" (
					FOR /F %%X IN ('%EXEGREP% -Ff DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME_CONFIG+C.DB "%LOCALAPPDATA%\Naver\Naver Whale\User Data\%%A\Extensions\%%B\%%C\%%D" 2^>Nul') DO >>DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB ECHO %%B
				)
				IF /I "%%D" == "MANIFEST.JSON" (
					FOR /F "DELIMS=" %%E IN ('TYPE "%LOCALAPPDATA%\Naver\Naver Whale\User Data\%%A\Extensions\%%B\%%C\%%D" 2^>Nul^|TOOLS\JQ\JQ.EXE ".name" 2^>Nul') DO (
						IF "%%E" == "null" (
							>>DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB ECHO %%B
						) ELSE (
							>VARIABLE\%VTEXT3% ECHO %%E
							FOR /F %%X IN ('%EXEGREP% -Fxf DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME_NAME+C.DB VARIABLE\%VTEXT3% 2^>Nul') DO >>DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB ECHO %%B
							FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\COMBO\PATTERN_BROWSER_EXTENSIONS_CHROME_NAME+C.DB VARIABLE\%VTEXT3% 2^>Nul') DO >>DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB ECHO %%B
							FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\COMBO\PATTERN_ADWARE_MULTIPLUG+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO >>DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB ECHO %%B
						)
					)
					FOR /F "DELIMS=" %%E IN ('TYPE "%LOCALAPPDATA%\Naver\Naver Whale\User Data\%%A\Extensions\%%B\%%C\%%D" 2^>Nul^|TOOLS\JQ\JQ.EXE ".short_name" 2^>Nul') DO (
						>VARIABLE\%VTEXT3% ECHO %%E
						FOR /F %%X IN ('%EXEGREP% -Fxf DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME_NAME+C.DB VARIABLE\%VTEXT3% 2^>Nul') DO >>DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB ECHO %%B
						FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\COMBO\PATTERN_BROWSER_EXTENSIONS_CHROME_NAME+C.DB VARIABLE\%VTEXT3% 2^>Nul') DO >>DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB ECHO %%B
						FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\COMBO\PATTERN_ADWARE_MULTIPLUG+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO >>DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB ECHO %%B
					)
				)
			)
		)
	)
)
REM :Browser Extensions - Vivaldi (Searching Only)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%LOCALAPPDATA%\Vivaldi\User Data\" 2^>Nul^|%EXEGREP% -Fixf DB_EXEC\CHECK\CHK_BROWSER_CHROMEPROFILE+NC.DB 2^>Nul') DO (
	FOR /F "DELIMS=" %%B IN ('DIR /B /AD "%LOCALAPPDATA%\Vivaldi\User Data\%%A\Extensions\" 2^>Nul') DO (
		FOR /F "DELIMS=" %%C IN ('DIR /B /AD "%LOCALAPPDATA%\Vivaldi\User Data\%%A\Extensions\%%B\" 2^>Nul') DO (
			TITLE 검사중 "%LOCALAPPDATA%\Vivaldi\…\%%A\Extensions\%%B" 2>Nul
			FOR /F "DELIMS=" %%D IN ('DIR /B /A-D "%LOCALAPPDATA%\Vivaldi\User Data\%%A\Extensions\%%B\%%C\" 2^>Nul') DO (
				IF /I "%%D" == "BACKGROUND.HTML" (
					FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\COMBO\PATTERN_BROWSER_EXTENSIONS_CHROME_BACKGROUND+C.DB "%LOCALAPPDATA%\Vivaldi\User Data\%%A\Extensions\%%B\%%C\%%D" 2^>Nul') DO >>DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB ECHO %%B
				)
				IF /I "%%D" == "CONFIG.JSON" (
					FOR /F %%X IN ('%EXEGREP% -Ff DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME_CONFIG+C.DB "%LOCALAPPDATA%\Vivaldi\User Data\%%A\Extensions\%%B\%%C\%%D" 2^>Nul') DO >>DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB ECHO %%B
				)
				IF /I "%%D" == "MANIFEST.JSON" (
					FOR /F "DELIMS=" %%E IN ('TYPE "%LOCALAPPDATA%\Vivaldi\User Data\%%A\Extensions\%%B\%%C\%%D" 2^>Nul^|TOOLS\JQ\JQ.EXE ".name" 2^>Nul') DO (
						IF "%%E" == "null" (
							>>DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB ECHO %%B
						) ELSE (
							>VARIABLE\%VTEXT3% ECHO %%E
							FOR /F %%X IN ('%EXEGREP% -Fxf DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME_NAME+C.DB VARIABLE\%VTEXT3% 2^>Nul') DO >>DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB ECHO %%B
							FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\COMBO\PATTERN_BROWSER_EXTENSIONS_CHROME_NAME+C.DB VARIABLE\%VTEXT3% 2^>Nul') DO >>DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB ECHO %%B
							FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\COMBO\PATTERN_ADWARE_MULTIPLUG+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO >>DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB ECHO %%B
						)
					)
					FOR /F "DELIMS=" %%E IN ('TYPE "%LOCALAPPDATA%\Vivaldi\User Data\%%A\Extensions\%%B\%%C\%%D" 2^>Nul^|TOOLS\JQ\JQ.EXE ".short_name" 2^>Nul') DO (
						>VARIABLE\%VTEXT3% ECHO %%E
						FOR /F %%X IN ('%EXEGREP% -Fxf DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME_NAME+C.DB VARIABLE\%VTEXT3% 2^>Nul') DO >>DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB ECHO %%B
						FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\COMBO\PATTERN_BROWSER_EXTENSIONS_CHROME_NAME+C.DB VARIABLE\%VTEXT3% 2^>Nul') DO >>DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB ECHO %%B
						FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\COMBO\PATTERN_ADWARE_MULTIPLUG+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO >>DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB ECHO %%B
					)
				)
			)
		)
	)
)
REM :Browser Extensions - Chromium
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%LOCALAPPDATA%\Chromium\User Data\" 2^>Nul^|%EXEGREP% -Fixf DB_EXEC\CHECK\CHK_BROWSER_CHROMEPROFILE+NC.DB 2^>Nul') DO (
	>VARIABLE\%VTEXT1% ECHO %MZLOCALAPPDATA%\Chromium\User Data\%%A\Local Storage\
	FOR /F "DELIMS=" %%B IN ('DIR /B /A-D "%LOCALAPPDATA%\Chromium\User Data\%%A\Local Storage\" 2^>Nul') DO (
		TITLE 검사중 "%LOCALAPPDATA%\Chromium\…\%%A\Local Storage\%%B" 2>Nul
		>VARIABLE\%VTEXT2% ECHO %%B
		FOR /F "TOKENS=2 DELIMS=_" %%C IN (VARIABLE\%VTEXT2%) DO (
			>VARIABLE\%VTEXT3% ECHO %%C
			IF EXIST "%LOCALAPPDATA%\Chromium\User Data\%%A\Local Storage\%%B" (
				FOR /F %%X IN ('%EXEGREP% -Fix -f DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB -f DB_EXEC\THREAT\FILE\DEL_BROWSER_EXTENSIONS_CHROME_LOCALSTORAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_FILE
			)
			IF EXIST "%LOCALAPPDATA%\Chromium\User Data\%%A\Local Storage\%%B" (
				FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_BROWSER_EXTENSIONS_CHROME_LOCALSTORAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
			)
			IF EXIST DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB (
				IF EXIST "%LOCALAPPDATA%\Chromium\User Data\%%A\Local Storage\%%B" (
					FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
				)
			)
		)
	)
)
REM :Browser Extensions - Google Chrome
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%LOCALAPPDATA%\Google\Chrome\User Data\" 2^>Nul^|%EXEGREP% -Fixf DB_EXEC\CHECK\CHK_BROWSER_CHROMEPROFILE+NC.DB 2^>Nul') DO (
	>VARIABLE\%VTEXT1% ECHO %MZLOCALAPPDATA%\Google\Chrome\User Data\%%A\Local Storage\
	FOR /F "DELIMS=" %%B IN ('DIR /B /A-D "%LOCALAPPDATA%\Google\Chrome\User Data\%%A\Local Storage\" 2^>Nul') DO (
		TITLE 검사중 "%LOCALAPPDATA%\Google\Chrome\…\%%A\Local Storage\%%B" 2>Nul
		>VARIABLE\%VTEXT2% ECHO %%B
		FOR /F "TOKENS=2 DELIMS=_" %%C IN (VARIABLE\%VTEXT2%) DO (
			>VARIABLE\%VTEXT3% ECHO %%C
			IF EXIST "%LOCALAPPDATA%\Google\Chrome\User Data\%%A\Local Storage\%%B" (
				FOR /F %%X IN ('%EXEGREP% -Fix -f DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB -f DB_EXEC\THREAT\FILE\DEL_BROWSER_EXTENSIONS_CHROME_LOCALSTORAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_FILE
			)
			IF EXIST "%LOCALAPPDATA%\Google\Chrome\User Data\%%A\Local Storage\%%B" (
				FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_BROWSER_EXTENSIONS_CHROME_LOCALSTORAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
			)
			IF EXIST DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB (
				IF EXIST "%LOCALAPPDATA%\Google\Chrome\User Data\%%A\Local Storage\%%B" (
					FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
				)
			)
		)
	)
)
REM :Browser Extensions - Microsoft Edge
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%LOCALAPPDATA%\Microsoft\Edge\User Data\" 2^>Nul^|%EXEGREP% -Fixf DB_EXEC\CHECK\CHK_BROWSER_CHROMEPROFILE+NC.DB 2^>Nul') DO (
	>VARIABLE\%VTEXT1% ECHO %MZLOCALAPPDATA%\Microsoft\Edge\User Data\%%A\Local Storage\
	FOR /F "DELIMS=" %%B IN ('DIR /B /A-D "%LOCALAPPDATA%\Microsoft\Edge\User Data\%%A\Local Storage\" 2^>Nul') DO (
		TITLE 검사중 "%LOCALAPPDATA%\Microsoft\Edge\…\%%A\Local Storage\%%B" 2>Nul
		>VARIABLE\%VTEXT2% ECHO %%B
		FOR /F "TOKENS=2 DELIMS=_" %%C IN (VARIABLE\%VTEXT2%) DO (
			>VARIABLE\%VTEXT3% ECHO %%C
			IF EXIST "%LOCALAPPDATA%\Microsoft\Edge\User Data\%%A\Local Storage\%%B" (
				FOR /F %%X IN ('%EXEGREP% -Fix -f DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB -f DB_EXEC\THREAT\FILE\DEL_BROWSER_EXTENSIONS_CHROME_LOCALSTORAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_FILE
			)
			IF EXIST "%LOCALAPPDATA%\Microsoft\Edge\User Data\%%A\Local Storage\%%B" (
				FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_BROWSER_EXTENSIONS_CHROME_LOCALSTORAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
			)
			IF EXIST DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB (
				IF EXIST "%LOCALAPPDATA%\Microsoft\Edge\User Data\%%A\Local Storage\%%B" (
					FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
				)
			)
		)
	)
)
REM :Browser Extensions - Naver Whale
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%LOCALAPPDATA%\Naver\Naver Whale\User Data\" 2^>Nul^|%EXEGREP% -Fixf DB_EXEC\CHECK\CHK_BROWSER_CHROMEPROFILE+NC.DB 2^>Nul') DO (
	>VARIABLE\%VTEXT1% ECHO %MZLOCALAPPDATA%\Naver\Naver Whale\User Data\%%A\Local Storage\
	FOR /F "DELIMS=" %%B IN ('DIR /B /A-D "%LOCALAPPDATA%\Naver\Naver Whale\User Data\%%A\Local Storage\" 2^>Nul') DO (
		TITLE 검사중 "%LOCALAPPDATA%\Naver\Naver Whale\…\%%A\Local Storage\%%B" 2>Nul
		>VARIABLE\%VTEXT2% ECHO %%B
		FOR /F "TOKENS=2 DELIMS=_" %%C IN (VARIABLE\%VTEXT2%) DO (
			>VARIABLE\%VTEXT3% ECHO %%C
			IF EXIST "%LOCALAPPDATA%\Naver\Naver Whale\User Data\%%A\Local Storage\%%B" (
				FOR /F %%X IN ('%EXEGREP% -Fix -f DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB -f DB_EXEC\THREAT\FILE\DEL_BROWSER_EXTENSIONS_CHROME_LOCALSTORAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_FILE
			)
			IF EXIST "%LOCALAPPDATA%\Naver\Naver Whale\User Data\%%A\Local Storage\%%B" (
				FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_BROWSER_EXTENSIONS_CHROME_LOCALSTORAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
			)
			IF EXIST DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB (
				IF EXIST "%LOCALAPPDATA%\Naver\Naver Whale\User Data\%%A\Local Storage\%%B" (
					FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
				)
			)
		)
	)
)
REM :Browser Extensions - Vivaldi
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%LOCALAPPDATA%\Vivaldi\User Data\" 2^>Nul^|%EXEGREP% -Fixf DB_EXEC\CHECK\CHK_BROWSER_CHROMEPROFILE+NC.DB 2^>Nul') DO (
	>VARIABLE\%VTEXT1% ECHO %MZLOCALAPPDATA%\Vivaldi\User Data\%%A\Local Storage\
	FOR /F "DELIMS=" %%B IN ('DIR /B /A-D "%LOCALAPPDATA%\Vivaldi\User Data\%%A\Local Storage\" 2^>Nul') DO (
		TITLE 검사중 "%LOCALAPPDATA%\Vivaldi\…\%%A\Local Storage\%%B" 2>Nul
		>VARIABLE\%VTEXT2% ECHO %%B
		FOR /F "TOKENS=2 DELIMS=_" %%C IN (VARIABLE\%VTEXT2%) DO (
			>VARIABLE\%VTEXT3% ECHO %%C
			IF EXIST "%LOCALAPPDATA%\Vivaldi\User Data\%%A\Local Storage\%%B" (
				FOR /F %%X IN ('%EXEGREP% -Fix -f DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB -f DB_EXEC\THREAT\FILE\DEL_BROWSER_EXTENSIONS_CHROME_LOCALSTORAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_FILE
			)
			IF EXIST "%LOCALAPPDATA%\Vivaldi\User Data\%%A\Local Storage\%%B" (
				FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_BROWSER_EXTENSIONS_CHROME_LOCALSTORAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
			)
			IF EXIST DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB (
				IF EXIST "%LOCALAPPDATA%\Vivaldi\User Data\%%A\Local Storage\%%B" (
					FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
				)
			)
		)
	)
)
REM :Browser Extensions - Mozilla Firefox
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%APPDATA%\Mozilla\Firefox\Profiles\" 2^>Nul') DO (
	>VARIABLE\%VTEXT1% ECHO %MZAPPDATA%\Mozilla\Firefox\Profiles\%%A\Extensions\
	FOR /F "DELIMS=" %%B IN ('DIR /B /A-D "%APPDATA%\Mozilla\Firefox\Profiles\%%A\Extensions\" 2^>Nul') DO (
		TITLE 검사중 "%APPDATA%\Mozilla\Firefox\…\%%A\Extensions\%%B" 2>Nul
		>VARIABLE\%VTEXT2% ECHO %%B
		IF EXIST "%APPDATA%\Mozilla\Firefox\Profiles\%%A\Extensions\%%B" (
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\FILE\DEL_BROWSER_EXTENSIONS_FIREFOX.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE
		)
		IF EXIST "%APPDATA%\Mozilla\Firefox\Profiles\%%A\Extensions\%%B" (
			FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_BROWSER_EXTENSIONS_FIREFOX.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE ACTIVESCAN
		)
	)
)
REM :Browser Search Plugins - Mozilla Firefox
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%APPDATA%\Mozilla\Firefox\Profiles\" 2^>Nul') DO (
	>VARIABLE\%VTEXT1% ECHO %MZAPPDATA%\Mozilla\Firefox\Profiles\%%A\SearchPlugins\
	FOR /F "DELIMS=" %%B IN ('DIR /B /A-D "%APPDATA%\Mozilla\Firefox\Profiles\%%A\SearchPlugins\" 2^>Nul') DO (
		TITLE 검사중 "%APPDATA%\Mozilla\Firefox\…\%%A\SearchPlugins\%%B" 2>Nul
		>VARIABLE\%VTEXT2% ECHO %%B
		IF EXIST "%APPDATA%\Mozilla\Firefox\Profiles\%%A\SearchPlugins\%%B" (
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\FILE\DEL_BROWSER_SEARCHPLUGINS_FIREFOX+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_FILE
		)
	)
)
REM :(Static) D:
IF /I "%DDRV%" == "TRUE" (
	TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
	FOR /F "DELIMS=" %%A IN ('TYPE DB_EXEC\THREAT\FILE\DEL_STATIC.DB 2^>Nul') DO (
		TITLE 검사중^(DB^) "%%A" 2>Nul
		IF NOT EXIST "%%A\" (
			IF EXIST "%%A" (
				>VARIABLE\%VTEXT1% ECHO %%~dpA
				>VARIABLE\%VTEXT2% ECHO %%~nxA
				CALL :DELETE_FILE
			)
		)
	)
)
REM :Result
CALL :PROCESS_RESULT RECK CHKINFECT
REM :Reset Value
CALL :RESET_VALUE

TITLE %MZTITLE% 2>Nul & PING.EXE -n 2 0 >Nul 2>Nul & ECHO. & >>"%QLog%" ECHO.

REM * Delete - Malicious Directory
ECHO ◇ 악성 및 유해 가능 폴더 제거중 . . . & >>"%QLog%" ECHO    ■ 악성 및 유해 가능 폴더 제거 :
REM :[%SYSTEMDRIVE%]
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %SYSTEMDRIVE%\
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%SYSTEMDRIVE%\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_DIR_ROOT.DB 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMDRIVE%\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMDRIVE%\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\DIRECTORY\DEL_ROOT.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY
	)
	IF EXIST "%SYSTEMDRIVE%\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_ROOT.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
	)
	IF EXIST "%SYSTEMDRIVE%\%%A\" (
		FOR /F "DELIMS=" %%B IN ('DIR /B /A-D "%SYSTEMDRIVE%\%%A\" 2^>Nul') DO (
			TITLE 검사중 "%SYSTEMDRIVE%\%%A" "%%B" 2>Nul
			IF EXIST "%SYSTEMDRIVE%\%%A\" (
				FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_ROOT_1STEP.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
					>VARIABLE\%VTEXT3% ECHO %%B
					FOR /F %%Y IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\DIRECTORY\DEL_ROOT_1STEP_FORFILE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
						FOR /F %%Z IN ('DIR /B /A-D "%SYSTEMDRIVE%\%%A\" 2^>Nul^|%EXEGREP% -c "" 2^>Nul') DO (
							IF %%Z LSS 4 CALL :DELETE_DIRECTORY
						)
					)
				)
			)
			IF EXIST "%SYSTEMDRIVE%\%%A\" (
				CALL :GET_FILESIZE "%SYSTEMDRIVE%\%%A\%%B"
				SETLOCAL ENABLEDELAYEDEXPANSION
				IF !FILESIZE! LEQ 200000000 (
					ENDLOCAL
					FOR /F "TOKENS=1" %%C IN ('TOOLS\DIRHASH\DIRHASH.EXE "%SYSTEMDRIVE%\%%A\%%B" SHA256 -quiet -nowait 2^>Nul') DO (
						FOR /F %%X IN ('%EXEGREP% -Fixe "%%C" DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_ROOT_1STEP_HYENA_FORFILE_SHA.DB 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
					)
				) ELSE (
					ENDLOCAL
				)
			)
		)
	)
)
REM :[%SYSTEMDRIVE%] (ETCs)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('TYPE DB_EXEC\THREAT\DIRECTORY\DEL_ROOT_ETCS.DB 2^>Nul') DO (
	TITLE 검사중^(DB^) "%SYSTEMDRIVE%%%A" 2>Nul
	IF EXIST "%SYSTEMDRIVE%%%A\" (
		>VARIABLE\%VTEXT1% ECHO %SYSTEMDRIVE%%%~pA
		>VARIABLE\%VTEXT2% ECHO %%~nxA
		CALL :DELETE_DIRECTORY
	)
)
REM :[%SYSTEMROOT%]
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%SYSTEMROOT%\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_DIR_SYSTEMROOT.DB 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\DIRECTORY\DEL_SYSTEMROOT.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY
	)
	IF EXIST "%SYSTEMROOT%\%%A\" (
		FOR /F "DELIMS=" %%B IN ('DIR /B /A-D "%SYSTEMROOT%\%%A\" 2^>Nul') DO (
			TITLE 검사중 "%SYSTEMROOT%\%%A" "%%B" 2>Nul
			IF EXIST "%SYSTEMROOT%\%%A\" (
				CALL :GET_FILESIZE "%SYSTEMROOT%\%%A\%%B"
				SETLOCAL ENABLEDELAYEDEXPANSION
				IF !FILESIZE! LEQ 200000000 (
					ENDLOCAL
					IF /I "%%A" == "SysWOW64" (
						FOR /F "TOKENS=1" %%C IN ('TOOLS\DIRHASH\DIRHASH.EXE "%SYSTEMROOT%\SysNative\%%B" SHA256 -quiet -nowait 2^>Nul') DO (
							FOR /F %%X IN ('%EXEGREP% -Fixe "%%C" DB_EXEC\THREAT\DIRECTORY\DEL_SYSTEMROOT_1STEP_HYENA_FORFILE_SHA+NC.DB 2^>Nul') DO CALL :DELETE_DIRECTORY
						)
					) ELSE (
						FOR /F "TOKENS=1" %%C IN ('TOOLS\DIRHASH\DIRHASH.EXE "%SYSTEMROOT%\%%A\%%B" SHA256 -quiet -nowait 2^>Nul') DO (
							FOR /F %%X IN ('%EXEGREP% -Fixe "%%C" DB_EXEC\THREAT\DIRECTORY\DEL_SYSTEMROOT_1STEP_HYENA_FORFILE_SHA+NC.DB 2^>Nul') DO CALL :DELETE_DIRECTORY
						)
					)
				) ELSE (
					ENDLOCAL
				)
			)
		)
	)
	IF EXIST "%SYSTEMROOT%\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_SYSTEMROOT+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
	)
	IF EXIST "%SYSTEMROOT%\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_SYSTEMROOT+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
	)
	IF EXIST "%SYSTEMROOT%\%%A\" (
		FOR /F %%Y IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_SYSTEMROOT_LIMITED+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
			FOR /F %%Z IN ('DIR /B /A-D "%SYSTEMROOT%\%%A\" 2^>Nul^|%EXEGREP% -c "" 2^>Nul') DO (
				IF %%Z LSS 4 CALL :DELETE_DIRECTORY ACTIVESCAN
			)
		)
	)
)
REM :[%SYSTEMROOT%] (ETCs)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('TYPE DB_EXEC\THREAT\DIRECTORY\DEL_SYSTEMROOT_ETCS.DB 2^>Nul') DO (
	TITLE 검사중^(DB^) "%SYSTEMROOT%%%A" 2>Nul
	IF EXIST "%SYSTEMROOT%%%A\" (
		>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%%%~pA
		>VARIABLE\%VTEXT2% ECHO %%~nxA
		CALL :DELETE_DIRECTORY
	)
)
REM :[%SYSTEMROOT%]\System
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\System\
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%SYSTEMROOT%\System\" 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\System\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\System\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_SYSTEMROOT_SYSTEM.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
	)
)
REM :[%SYSTEMROOT%]\System32
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\System32\
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%SYSTEMROOT%\System32\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_DIR_SYSTEM6432+NC.DB 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\System32\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\System32\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\DIRECTORY\DEL_SYSTEM6432.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY
	)
	IF EXIST "%SYSTEMROOT%\System32\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_SYSTEM6432+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
	)
	IF EXIST "%SYSTEMROOT%\System32\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_SYSTEM6432+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
	)
	IF EXIST "%SYSTEMROOT%\System32\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_SYSTEM6432_PROTECT_ACL+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
			%EXESETACL% -on "%SYSTEMROOT%\System32\%%A" -ot file -actn list -lst "f:csv;s:n" -bckp VARIABLE\%VTEXT3% -silent >Nul 2>Nul
			>VARIABLE\%VTEXT4% TYPE VARIABLE\%VTEXT3% 2>Nul
			FOR /F %%Y IN ('%EXEGREP% -Ff DB_EXEC\CHECK\CHK_DIRECTORY_PROTECT_ACL+C.DB VARIABLE\%VTEXT4% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
		)
	)
)
REM :[%SYSTEMROOT%]\SysWOW64
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\SysWOW64\
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%SYSTEMROOT%\SysWOW64\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_DIR_SYSTEM6432+NC.DB 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\SysWOW64\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\SysWOW64\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\DIRECTORY\DEL_SYSTEM6432.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY
	)
	IF EXIST "%SYSTEMROOT%\SysWOW64\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_SYSTEM6432+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
	)
	IF EXIST "%SYSTEMROOT%\SysWOW64\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_SYSTEM6432+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
	)
	IF EXIST "%SYSTEMROOT%\SysWOW64\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_SYSTEM6432_PROTECT_ACL+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
			%EXESETACL% -on "%SYSTEMROOT%\SysWOW64\%%A" -ot file -actn list -lst "f:csv;s:n" -bckp VARIABLE\%VTEXT3% -silent >Nul 2>Nul
			>VARIABLE\%VTEXT4% TYPE VARIABLE\%VTEXT3% 2>Nul
			FOR /F %%Y IN ('%EXEGREP% -Ff DB_EXEC\CHECK\CHK_DIRECTORY_PROTECT_ACL+C.DB VARIABLE\%VTEXT4% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
		)
	)
	IF EXIST "%SYSTEMROOT%\SysWOW64\%%A\" (
		FOR /F "DELIMS=" %%B IN ('DIR /B /A-D "%SYSTEMROOT%\SysWOW64\%%A\" 2^>Nul') DO (
			TITLE 검사중 "%SYSTEMROOT%\SysWOW64\%%A" "%%B" 2>Nul
			IF EXIST "%SYSTEMROOT%\SysWOW64\%%A\" (
				CALL :GET_FILESIZE "%SYSTEMROOT%\SysWOW64\%%A\%%B"
				SETLOCAL ENABLEDELAYEDEXPANSION
				IF !FILESIZE! LEQ 200000000 (
					ENDLOCAL
					FOR /F "TOKENS=1" %%C IN ('TOOLS\DIRHASH\DIRHASH.EXE "%SYSTEMROOT%\SysNative\%%A\%%B" SHA256 -quiet -nowait 2^>Nul') DO (
						FOR /F %%X IN ('%EXEGREP% -Fixe "%%C" DB_EXEC\THREAT\DIRECTORY\DEL_SYSTEM6432_1STEP_HYENA_FORFILE_SHA+NC.DB 2^>Nul') DO CALL :DELETE_DIRECTORY
					)
				) ELSE (
					ENDLOCAL
				)
			)
		)
	)
)
REM :[%SYSTEMROOT%]\System32 (Steps)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%SYSTEMROOT%\System32\" 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\SysWOW64\%%A" 2>Nul
	REM :Hyena TiWorker Coin-Miner
	FOR /F %%H IN ('ECHO %%A^|%EXEGREP% -Fixf DB_EXEC\THREAT\DIRECTORY\DEL_SYSTEM6432_HYENA_TIWORKER_COINMINER_SCANONLY+NC.DB 2^>Nul') DO (
		IF EXIST "%SYSTEMROOT%\System32\%%A\" (
			FOR /F "DELIMS=" %%B IN ('DIR /B /AD "%SYSTEMROOT%\System32\%%A\" 2^>Nul') DO (
				TITLE 검사중 "%SYSTEMROOT%\System32\%%A\%%B" 2>Nul
				IF EXIST "%SYSTEMROOT%\System32\%%A\%%B\" (
					>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\System32\%%A\
					>VARIABLE\%VTEXT2% ECHO %%B
					FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_SYSTEM6432_HYENA_TIWORKER_COINMINER+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
				)
			)
		)
	)
)
REM :[%SYSTEMROOT%]\SysWOW64 (Steps)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%SYSTEMROOT%\SysWOW64\" 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\SysWOW64\%%A" 2>Nul
	REM :Hyena TiWorker Coin-Miner
	FOR /F %%H IN ('ECHO %%A^|%EXEGREP% -Fixf DB_EXEC\THREAT\DIRECTORY\DEL_SYSTEM6432_HYENA_TIWORKER_COINMINER_SCANONLY+NC.DB 2^>Nul') DO (
		IF EXIST "%SYSTEMROOT%\SysWOW64\%%A\" (
			FOR /F "DELIMS=" %%B IN ('DIR /B /AD "%SYSTEMROOT%\SysWOW64\%%A\" 2^>Nul') DO (
				TITLE 검사중 "%SYSTEMROOT%\SysWOW64\%%A\%%B" 2>Nul
				IF EXIST "%SYSTEMROOT%\SysWOW64\%%A\%%B\" (
					>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\SysWOW64\%%A\
					>VARIABLE\%VTEXT2% ECHO %%B
					FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_SYSTEM6432_HYENA_TIWORKER_COINMINER+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
				)
			)
		)
	)
)
REM :[%SYSTEMROOT%]\System32\Com\Dmp (Hyena TiWorker Coin-Miner)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\System32\Com\Dmp\
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%SYSTEMROOT%\System32\Com\Dmp\" 2^>Nul^|%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_SYSTEM6432_HYENA_TIWORKER_COINMINER+NC.DB 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\System32\Com\Dmp\%%A" 2>Nul
	FOR /F "DELIMS=" %%B IN ('DIR /B /A-D "%SYSTEMROOT%\System32\Com\Dmp\%%A\" 2^>Nul') DO (
		TITLE 검사중 "%SYSTEMROOT%\System32\Com\Dmp\%%A" "%%B" 2>Nul
		IF EXIST "%SYSTEMROOT%\System32\Com\Dmp\%%A\%%B" (
			>VARIABLE\%VTEXT2% ECHO %%A
			>VARIABLE\%VTEXT3% ECHO %%B
			FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_SYSTEM6432_HYENA_TIWORKER_COINMINER_FORFILE+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
		)
	)
)
REM :[%SYSTEMROOT%]\SysWOW64\Com\Dmp (Hyena TiWorker Coin-Miner)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\SysWOW64\Com\Dmp\
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%SYSTEMROOT%\SysWOW64\Com\Dmp\" 2^>Nul^|%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_SYSTEM6432_HYENA_TIWORKER_COINMINER+NC.DB 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\SysWOW64\Com\Dmp\%%A" 2>Nul
	FOR /F "DELIMS=" %%B IN ('DIR /B /A-D "%SYSTEMROOT%\SysWOW64\Com\Dmp\%%A\" 2^>Nul') DO (
		TITLE 검사중 "%SYSTEMROOT%\SysWOW64\Com\Dmp\%%A" "%%B" 2>Nul
		IF EXIST "%SYSTEMROOT%\SysWOW64\Com\Dmp\%%A\%%B" (
			>VARIABLE\%VTEXT2% ECHO %%A
			>VARIABLE\%VTEXT3% ECHO %%B
			FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_SYSTEM6432_HYENA_TIWORKER_COINMINER_FORFILE+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
		)
	)
)
REM :[%SYSTEMROOT%]\System32\Config\SystemProfile\AppData\Local
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\System32\Config\SystemProfile\AppData\Local\
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Local\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_DIR_APPDATA_LOCAL+NC.DB 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Local\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Local\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -Fix -f DB_EXEC\THREAT\DIRECTORY\DEL_APPDATA.DB -f DB_EXEC\THREAT\DIRECTORY\DEL_APPDATA_LOCAL.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY
	)
	IF EXIST "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Local\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_APPDATA_LOCAL+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
	)
	IF EXIST "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Local\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\COMBO\PATTERN_ADWARE_MULTIPLUG+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
	)
	IF EXIST "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Local\%%A\" (
		FOR /F "DELIMS=" %%B IN ('DIR /B /A-D "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Local\%%A\" 2^>Nul') DO (
			TITLE 검사중 "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Local\%%A" "%%B" 2>Nul
			>VARIABLE\%VTEXT3% ECHO %%B
			IF EXIST "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Local\%%A\" (
				CALL :GET_FILESIZE "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Local\%%A\%%B"
				SETLOCAL ENABLEDELAYEDEXPANSION
				IF !FILESIZE! LEQ 200000000 (
					ENDLOCAL
					FOR /F "TOKENS=1" %%C IN ('TOOLS\DIRHASH\DIRHASH.EXE "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Local\%%A\%%B" SHA256 -quiet -nowait 2^>Nul') DO (
						FOR /F %%X IN ('%EXEGREP% -Fixe "%%C" DB_EXEC\THREAT\DIRECTORY\DEL_APPDATA_LOCAL_1STEP_HYENA_FORFILE_SHA+NC.DB 2^>Nul') DO CALL :DELETE_DIRECTORY
					)
				) ELSE (
					ENDLOCAL
				)
			)
			IF EXIST "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Local\%%A\" (
				FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_APPDATA_LOCAL_1STEP_HYENA_ELEX_SCANONLY+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
					FOR /F %%Y IN ('%EXEGREP% -ixf DB_EXEC\THREAT\DIRECTORY\DEL_APPDATA_LOCAL_1STEP_HYENA_FORFILE_ELEX+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
				)
			)
			IF EXIST "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Local\%%A\" (
				FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_APPDATA_LOCAL_1STEP_SCANONLY.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
					FOR /F %%Y IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_APPDATA_LOCAL_1STEP_HYENA_FORFILE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
				)
			)
		)
	)
	IF EXIST "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Local\%%A\" (
		FOR /F "DELIMS=" %%B IN ('DIR /B /AD "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Local\%%A\" 2^>Nul') DO (
			TITLE 검사중 "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Local\%%A\%%B" 2>Nul
			>VARIABLE\%VTEXT3% ECHO %%B
			FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\THREAT\DIRECTORY\DEL_APPDATA_LOCAL_2STEP+C.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_DIRECTORY
		)
	)
)
REM :[%SYSTEMROOT%]\System32\Config\SystemProfile\AppData\Local (Google Chrome Malicious Extensions)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\System32\Config\SystemProfile\AppData\Local\
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Local\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_DIR_APPDATA_LOCAL+NC.DB 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Local\%%A" 2>Nul
	FOR /F "DELIMS=" %%B IN ('DIR /B /AD "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Local\%%A\" 2^>Nul') DO (
		TITLE 검사중 "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Local\%%A\%%B" 2>Nul
		FOR /F "DELIMS=" %%C IN ('DIR /B /AD "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Local\%%A\%%B\" 2^>Nul') DO (
			TITLE 검사중 "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Local\%%A\%%B\%%C" 2>Nul
			IF EXIST "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Local\%%A\%%B\%%C\MANIFEST.JSON" (
				IF EXIST "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Local\%%A\%%B\%%C\BACKGROUND.JS" (
					>VARIABLE\%VTEXT2% ECHO %%A
					CALL :DELETE_DIRECTORY ACTIVESCAN
				)
			)
		)
	)
)
REM :[%SYSTEMROOT%]\SysWOW64\Config\SystemProfile\AppData\Local
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Local\
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Local\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_DIR_APPDATA_LOCAL+NC.DB 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Local\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Local\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -Fix -f DB_EXEC\THREAT\DIRECTORY\DEL_APPDATA.DB -f DB_EXEC\THREAT\DIRECTORY\DEL_APPDATA_LOCAL.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY
	)
	IF EXIST "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Local\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_APPDATA_LOCAL+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
	)
	IF EXIST "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Local\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\COMBO\PATTERN_ADWARE_MULTIPLUG+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
	)
	IF EXIST "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Local\%%A\" (
		FOR /F "DELIMS=" %%B IN ('DIR /B /A-D "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Local\%%A\" 2^>Nul') DO (
			TITLE 검사중 "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Local\%%A" "%%B" 2>Nul
			>VARIABLE\%VTEXT3% ECHO %%B
			IF EXIST "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Local\%%A\" (
				CALL :GET_FILESIZE "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Local\%%A\%%B"
				SETLOCAL ENABLEDELAYEDEXPANSION
				IF !FILESIZE! LEQ 200000000 (
					ENDLOCAL
					FOR /F "TOKENS=1" %%C IN ('TOOLS\DIRHASH\DIRHASH.EXE "%SYSTEMROOT%\SysNative\Config\SystemProfile\AppData\Local\%%A\%%B" SHA256 -quiet -nowait 2^>Nul') DO (
						FOR /F %%X IN ('%EXEGREP% -Fixe "%%C" DB_EXEC\THREAT\DIRECTORY\DEL_APPDATA_LOCAL_1STEP_HYENA_FORFILE_SHA+NC.DB 2^>Nul') DO CALL :DELETE_DIRECTORY
					)
				) ELSE (
					ENDLOCAL
				)
			)
			IF EXIST "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Local\%%A\" (
				FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_APPDATA_LOCAL_1STEP_HYENA_ELEX_SCANONLY+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
					FOR /F %%Y IN ('%EXEGREP% -ixf DB_EXEC\THREAT\DIRECTORY\DEL_APPDATA_LOCAL_1STEP_HYENA_FORFILE_ELEX+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
				)
			)
			IF EXIST "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Local\%%A\" (
				FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_APPDATA_LOCAL_1STEP_SCANONLY.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
					FOR /F %%Y IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_APPDATA_LOCAL_1STEP_HYENA_FORFILE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
				)
			)
		)
	)
	IF EXIST "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Local\%%A\" (
		FOR /F "DELIMS=" %%B IN ('DIR /B /AD "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Local\%%A\" 2^>Nul') DO (
			TITLE 검사중 "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Local\%%A\%%B" 2>Nul
			>VARIABLE\%VTEXT3% ECHO %%B
			FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\THREAT\DIRECTORY\DEL_APPDATA_LOCAL_2STEP+C.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_DIRECTORY
		)
	)
)
REM :[%SYSTEMROOT%]\SysWOW64\Config\SystemProfile\AppData\Local (Google Chrome Malicious Extensions)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Local\
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Local\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_DIR_APPDATA_LOCAL+NC.DB 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Local\%%A" 2>Nul
	FOR /F "DELIMS=" %%B IN ('DIR /B /AD "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Local\%%A\" 2^>Nul') DO (
		TITLE 검사중 "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Local\%%A\%%B" 2>Nul
		FOR /F "DELIMS=" %%C IN ('DIR /B /AD "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Local\%%A\%%B\" 2^>Nul') DO (
			TITLE 검사중 "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Local\%%A\%%B\%%C" 2>Nul
			IF EXIST "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Local\%%A\%%B\%%C\MANIFEST.JSON" (
				IF EXIST "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Local\%%A\%%B\%%C\BACKGROUND.JS" (
					>VARIABLE\%VTEXT2% ECHO %%A
					CALL :DELETE_DIRECTORY ACTIVESCAN
				)
			)
		)
	)
)
REM :[%SYSTEMROOT%]\System32\Config\SystemProfile\AppData\LocalLow
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\System32\Config\SystemProfile\AppData\LocalLow\
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\LocalLow\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_DIR_APPDATA_LOCAL+NC.DB 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\LocalLow\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\LocalLow\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -Fix -f DB_EXEC\THREAT\DIRECTORY\DEL_APPDATA.DB -f DB_EXEC\THREAT\DIRECTORY\DEL_APPDATA_LOCAL.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY
	)
	IF EXIST "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\LocalLow\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_APPDATA_LOCAL+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
	)
	IF EXIST "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\LocalLow\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\COMBO\PATTERN_ADWARE_MULTIPLUG+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
	)
	IF EXIST "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\LocalLow\%%A\" (
		FOR /F "DELIMS=" %%B IN ('DIR /B /A-D "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\LocalLow\%%A\" 2^>Nul') DO (
			TITLE 검사중 "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\LocalLow\%%A" "%%B" 2>Nul
			IF EXIST "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\LocalLow\%%A\" (
				CALL :GET_FILESIZE "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\LocalLow\%%A\%%B"
				SETLOCAL ENABLEDELAYEDEXPANSION
				IF !FILESIZE! LEQ 200000000 (
					ENDLOCAL
					FOR /F "TOKENS=1" %%C IN ('TOOLS\DIRHASH\DIRHASH.EXE "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\LocalLow\%%A\%%B" SHA256 -quiet -nowait 2^>Nul') DO (
						FOR /F %%X IN ('%EXEGREP% -Fixe "%%C" DB_EXEC\THREAT\DIRECTORY\DEL_APPDATA_LOCAL_1STEP_HYENA_FORFILE_SHA+NC.DB 2^>Nul') DO CALL :DELETE_DIRECTORY
					)
				) ELSE (
					ENDLOCAL
				)
			)
		)
	)
)
REM :[%SYSTEMROOT%]\SysWOW64\Config\SystemProfile\AppData\LocalLow
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\LocalLow\
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\LocalLow\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_DIR_APPDATA_LOCAL+NC.DB 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\LocalLow\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\LocalLow\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -Fix -f DB_EXEC\THREAT\DIRECTORY\DEL_APPDATA.DB -f DB_EXEC\THREAT\DIRECTORY\DEL_APPDATA_LOCAL.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY
	)
	IF EXIST "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\LocalLow\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_APPDATA_LOCAL+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
	)
	IF EXIST "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\LocalLow\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\COMBO\PATTERN_ADWARE_MULTIPLUG+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
	)
	IF EXIST "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\LocalLow\%%A\" (
		FOR /F "DELIMS=" %%B IN ('DIR /B /A-D "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\LocalLow\%%A\" 2^>Nul') DO (
			TITLE 검사중 "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\LocalLow\%%A" "%%B" 2>Nul
			IF EXIST "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\LocalLow\%%A\" (
				CALL :GET_FILESIZE "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\LocalLow\%%A\%%B"
				SETLOCAL ENABLEDELAYEDEXPANSION
				IF !FILESIZE! LEQ 200000000 (
					ENDLOCAL
					FOR /F "TOKENS=1" %%C IN ('TOOLS\DIRHASH\DIRHASH.EXE "%SYSTEMROOT%\SysNative\Config\SystemProfile\AppData\LocalLow\%%A\%%B" SHA256 -quiet -nowait 2^>Nul') DO (
						FOR /F %%X IN ('%EXEGREP% -Fixe "%%C" DB_EXEC\THREAT\DIRECTORY\DEL_APPDATA_LOCAL_1STEP_HYENA_FORFILE_SHA+NC.DB 2^>Nul') DO CALL :DELETE_DIRECTORY
					)
				) ELSE (
					ENDLOCAL
				)
			)
		)
	)
)
REM :[%SYSTEMROOT%]\System32\Config\SystemProfile\AppData\Roaming
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\System32\Config\SystemProfile\AppData\Roaming\
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Roaming\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_DIR_APPDATA_ROAMING+NC.DB 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Roaming\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Roaming\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -Fix -f DB_EXEC\THREAT\DIRECTORY\DEL_APPDATA.DB -f DB_EXEC\THREAT\DIRECTORY\DEL_APPDATA_ROAMING.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY
	)
	IF EXIST "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Roaming\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_APPDATA_ROAMING+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
	)
	IF EXIST "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Roaming\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -ix -f DB_EXEC\ACTIVESCAN\COMBO\PATTERN_ADWARE_MULTIPLUG+NC.DB -f DB_EXEC\ACTIVESCAN\COMBO\PATTERN_FAKE_OPTIMIZER+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
	)
	IF EXIST "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Roaming\%%A\" (
		FOR /F "DELIMS=" %%B IN ('DIR /B /A-D "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Roaming\%%A\" 2^>Nul') DO (
			TITLE 검사중 "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Roaming\%%A" "%%B" 2>Nul
			IF EXIST "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Roaming\%%A\" (
				CALL :GET_FILESIZE "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Roaming\%%A\%%B"
				SETLOCAL ENABLEDELAYEDEXPANSION
				IF !FILESIZE! LEQ 200000000 (
					ENDLOCAL
					FOR /F "TOKENS=1" %%C IN ('TOOLS\DIRHASH\DIRHASH.EXE "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Roaming\%%A\%%B" SHA256 -quiet -nowait 2^>Nul') DO (
						FOR /F %%X IN ('%EXEGREP% -Fixe "%%C" DB_EXEC\THREAT\DIRECTORY\DEL_APPDATA_ROAMING_1STEP_HYENA_FORFILE_SHA+NC.DB 2^>Nul') DO CALL :DELETE_DIRECTORY
					)
				) ELSE (
					ENDLOCAL
				)
			)
		)
	)
)
REM :[%SYSTEMROOT%]\SysWOW64\Config\SystemProfile\AppData\Roaming
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Roaming\
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Roaming\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_DIR_APPDATA_ROAMING+NC.DB 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Roaming\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Roaming\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -Fix -f DB_EXEC\THREAT\DIRECTORY\DEL_APPDATA.DB -f DB_EXEC\THREAT\DIRECTORY\DEL_APPDATA_ROAMING.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY
	)
	IF EXIST "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Roaming\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_APPDATA_ROAMING+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
	)
	IF EXIST "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Roaming\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -ix -f DB_EXEC\ACTIVESCAN\COMBO\PATTERN_ADWARE_MULTIPLUG+NC.DB -f DB_EXEC\ACTIVESCAN\COMBO\PATTERN_FAKE_OPTIMIZER+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
	)
	IF EXIST "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Roaming\%%A\" (
		FOR /F "DELIMS=" %%B IN ('DIR /B /A-D "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Roaming\%%A\" 2^>Nul') DO (
			TITLE 검사중 "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Roaming\%%A" "%%B" 2>Nul
			IF EXIST "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Roaming\%%A\" (
				CALL :GET_FILESIZE "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Roaming\%%A\%%B"
				SETLOCAL ENABLEDELAYEDEXPANSION
				IF !FILESIZE! LEQ 200000000 (
					ENDLOCAL
					FOR /F "TOKENS=1" %%C IN ('TOOLS\DIRHASH\DIRHASH.EXE "%SYSTEMROOT%\SysNative\Config\SystemProfile\AppData\Roaming\%%A\%%B" SHA256 -quiet -nowait 2^>Nul') DO (
						FOR /F %%X IN ('%EXEGREP% -Fixe "%%C" DB_EXEC\THREAT\DIRECTORY\DEL_APPDATA_ROAMING_1STEP_HYENA_FORFILE_SHA+NC.DB 2^>Nul') DO CALL :DELETE_DIRECTORY
					)
				) ELSE (
					ENDLOCAL
				)
			)
		)
	)
)
REM :[%SYSTEMROOT%]\System32\Config\SystemProfile\AppData\Roaming\Microsoft
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\System32\Config\SystemProfile\AppData\Roaming\Microsoft\
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Roaming\Microsoft\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_DIR_APPDATA_ROAMING_MICROSOFT+NC.DB 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\System32\…\AppData\Roaming\Microsoft\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Roaming\Microsoft\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_APPDATA_ROAMING_MICROSOFT+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
	)
	IF EXIST "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Roaming\Microsoft\%%A\" (
		FOR /F "DELIMS=" %%B IN ('DIR /B /A-D "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Roaming\Microsoft\%%A\" 2^>Nul') DO (
			TITLE 검사중 "%SYSTEMROOT%\System32\…\AppData\Roaming\Microsoft\%%A" "%%B" 2>Nul
			IF EXIST "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Roaming\Microsoft\%%A\" (
				CALL :GET_FILESIZE "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Roaming\Microsoft\%%A\%%B"
				SETLOCAL ENABLEDELAYEDEXPANSION
				IF !FILESIZE! LEQ 200000000 (
					ENDLOCAL
					FOR /F "TOKENS=1" %%C IN ('TOOLS\DIRHASH\DIRHASH.EXE "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Roaming\Microsoft\%%A\%%B" SHA256 -quiet -nowait 2^>Nul') DO (
						FOR /F %%X IN ('%EXEGREP% -Fixe "%%C" DB_EXEC\THREAT\DIRECTORY\DEL_APPDATA_ROAMING_MICROSOFT_1STEP_HYENA_FORFILE_SHA+NC.DB 2^>Nul') DO CALL :DELETE_DIRECTORY
					)
				) ELSE (
					ENDLOCAL
				)
			)
		)
	)
)
REM :[%SYSTEMROOT%]\SysWOW64\Config\SystemProfile\AppData\Roaming\Microsoft
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Roaming\Microsoft\
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Roaming\Microsoft\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_DIR_APPDATA_ROAMING_MICROSOFT+NC.DB 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\SysWOW64\…\AppData\Roaming\Microsoft\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Roaming\Microsoft\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_APPDATA_ROAMING_MICROSOFT+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
	)
	IF EXIST "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Roaming\Microsoft\%%A\" (
		FOR /F "DELIMS=" %%B IN ('DIR /B /A-D "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Roaming\Microsoft\%%A\" 2^>Nul') DO (
			TITLE 검사중 "%SYSTEMROOT%\SysWOW64\…\AppData\Roaming\Microsoft\%%A" "%%B" 2>Nul
			IF EXIST "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Roaming\Microsoft\%%A\" (
				CALL :GET_FILESIZE "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Roaming\Microsoft\%%A\%%B"
				SETLOCAL ENABLEDELAYEDEXPANSION
				IF !FILESIZE! LEQ 200000000 (
					ENDLOCAL
					FOR /F "TOKENS=1" %%C IN ('TOOLS\DIRHASH\DIRHASH.EXE "%SYSTEMROOT%\SysNative\Config\SystemProfile\AppData\Roaming\Microsoft\%%A\%%B" SHA256 -quiet -nowait 2^>Nul') DO (
						FOR /F %%X IN ('%EXEGREP% -Fixe "%%C" DB_EXEC\THREAT\DIRECTORY\DEL_APPDATA_ROAMING_MICROSOFT_1STEP_HYENA_FORFILE_SHA+NC.DB 2^>Nul') DO CALL :DELETE_DIRECTORY
					)
				) ELSE (
					ENDLOCAL
				)
			)
		)
	)
)
REM :[%SYSTEMROOT%]\System32\Config\SystemProfile\AppData\Roaming\Microsoft\Credentials
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\System32\Config\SystemProfile\AppData\Roaming\Microsoft\Credentials\
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Roaming\Microsoft\Credentials\" 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Roaming\Microsoft\Credentials\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Roaming\Microsoft\Credentials\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_APPDATA_ROAMING_MICROSOFT_CREDENTIALS+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
	)
)
REM :[%SYSTEMROOT%]\SysWOW64\Config\SystemProfile\AppData\Roaming\Microsoft\Credentials
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Roaming\Microsoft\Credentials\
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Roaming\Microsoft\Credentials\" 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Roaming\Microsoft\Credentials\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Roaming\Microsoft\Credentials\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_APPDATA_ROAMING_MICROSOFT_CREDENTIALS+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
	)
)
REM :[%SYSTEMROOT%]\System32\Config\SystemProfile\AppData\Roaming\Microsoft\Windows
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\System32\Config\SystemProfile\AppData\Roaming\Microsoft\Windows\
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Roaming\Microsoft\Windows\" 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Roaming\Microsoft\Windows\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Roaming\Microsoft\Windows\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_APPDATA_ROAMING_MICROSOFT_WINDOWS+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
	)
)
REM :[%SYSTEMROOT%]\SysWOW64\Config\SystemProfile\AppData\Roaming\Microsoft\Windows
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Roaming\Microsoft\Windows\
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Roaming\Microsoft\Windows\" 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Roaming\Microsoft\Windows\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Roaming\Microsoft\Windows\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_APPDATA_ROAMING_MICROSOFT_WINDOWS+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
	)
)
REM :[%SYSTEMROOT%]\System32\Config\SystemProfile\AppData\Roaming\Microsoft\Windows\Templates
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\System32\Config\SystemProfile\AppData\Roaming\Microsoft\Windows\Templates\
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Roaming\Microsoft\Windows\Templates\" 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Roaming\Microsoft\Windows\Templates\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Roaming\Microsoft\Windows\Templates\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_TEMPLATES+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
	)
)
REM :[%SYSTEMROOT%]\SysWOW64\Config\SystemProfile\AppData\Roaming\Microsoft\Windows\Templates
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Roaming\Microsoft\Windows\Templates\
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Roaming\Microsoft\Windows\Templates\" 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Roaming\Microsoft\Windows\Templates\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Roaming\Microsoft\Windows\Templates\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_TEMPLATES+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
	)
)
REM :[%SYSTEMROOT%]\System32\Microsoft\Protect (Hyena TiWorker Coin-Miner)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\System32\Microsoft\Protect\
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%SYSTEMROOT%\System32\Microsoft\Protect\" 2^>Nul^|%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_SYSTEM6432_HYENA_TIWORKER_COINMINER+NC.DB 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\System32\Microsoft\Protect\%%A" 2>Nul
	FOR /F "DELIMS=" %%B IN ('DIR /B /A-D "%SYSTEMROOT%\System32\Microsoft\Protect\%%A\" 2^>Nul') DO (
		TITLE 검사중 "%SYSTEMROOT%\System32\Microsoft\Protect\%%A" "%%B" 2>Nul
		IF EXIST "%SYSTEMROOT%\System32\Microsoft\Protect\%%A\%%B" (
			>VARIABLE\%VTEXT2% ECHO %%A
			>VARIABLE\%VTEXT3% ECHO %%B
			FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_SYSTEM6432_HYENA_TIWORKER_COINMINER_FORFILE+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
		)
	)
)
REM :[%SYSTEMROOT%]\SysWOW64\Microsoft\Protect (Hyena TiWorker Coin-Miner)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\SysWOW64\Microsoft\Protect\
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%SYSTEMROOT%\SysWOW64\Microsoft\Protect\" 2^>Nul^|%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_SYSTEM6432_HYENA_TIWORKER_COINMINER+NC.DB 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\SysWOW64\Microsoft\Protect\%%A" 2>Nul
	FOR /F "DELIMS=" %%B IN ('DIR /B /A-D "%SYSTEMROOT%\SysWOW64\Microsoft\Protect\%%A\" 2^>Nul') DO (
		TITLE 검사중 "%SYSTEMROOT%\SysWOW64\Microsoft\Protect\%%A" "%%B" 2>Nul
		IF EXIST "%SYSTEMROOT%\SysWOW64\Microsoft\Protect\%%A\%%B" (
			>VARIABLE\%VTEXT2% ECHO %%A
			>VARIABLE\%VTEXT3% ECHO %%B
			FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_SYSTEM6432_HYENA_TIWORKER_COINMINER_FORFILE+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
		)
	)
)
REM :[%SYSTEMROOT%]\System32\Speech\Engines (Hyena TiWorker Coin-Miner)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\System32\Speech\Engines\
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%SYSTEMROOT%\System32\Speech\Engines\" 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\System32\Speech\Engines\%%A" 2>Nul
	REM :Hyena TiWorker Coin-Miner
	IF EXIST "%SYSTEMROOT%\System32\Speech\Engines\%%A\" (
		>VARIABLE\%VTEXT2% ECHO %%A
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_SYSTEM6432_HYENA_TIWORKER_COINMINER+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
	)
)
REM :[%SYSTEMROOT%]\SysWOW64\Speech\Engines (Hyena TiWorker Coin-Miner)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\SysWOW64\Speech\Engines\
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%SYSTEMROOT%\SysWOW64\Speech\Engines\" 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\SysWOW64\Speech\Engines\%%A" 2>Nul
	REM :Hyena TiWorker Coin-Miner
	IF EXIST "%SYSTEMROOT%\SysWOW64\Speech\Engines\%%A\" (
		>VARIABLE\%VTEXT2% ECHO %%A
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_SYSTEM6432_HYENA_TIWORKER_COINMINER+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
	)
)
REM :[%ALLUSERSPROFILE%]
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZALLUSERSPROFILE%\
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%ALLUSERSPROFILE%\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_DIR_ALLUSERSPROFILE+NC.DB 2^>Nul') DO (
	TITLE 검사중 "%ALLUSERSPROFILE%\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	REM :Default
	IF EXIST "%ALLUSERSPROFILE%\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -Fix -f DB_EXEC\THREAT\DIRECTORY\DEL_ALLUSERSPROFILE.DB -f DB_EXEC\THREAT\DIRECTORY\DEL_PROFILE.DB -f DB_EXEC\THREAT\DIRECTORY\DEL_APPDATA.DB -f DB_EXEC\THREAT\DIRECTORY\DEL_ADWARE_XYZ+NC.DB -f DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY
	)
	IF EXIST "%ALLUSERSPROFILE%\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -x -f DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_ALLUSERSPROFILE+C.DB -f DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_PROFILE.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
	)
	IF EXIST "%ALLUSERSPROFILE%\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -ix -f DB_EXEC\ACTIVESCAN\COMBO\PATTERN_ADWARE_MULTIPLUG+NC.DB -f DB_EXEC\ACTIVESCAN\COMBO\PATTERN_FAKE_OPTIMIZER+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
	)
	IF EXIST "%ALLUSERSPROFILE%\%%A\" (
		FOR /F "DELIMS=" %%B IN ('DIR /B /A-D "%ALLUSERSPROFILE%\%%A\" 2^>Nul') DO (
			TITLE 검사중 "%ALLUSERSPROFILE%\%%A" "%%B" 2>Nul
			IF EXIST "%ALLUSERSPROFILE%\%%A\" (
				CALL :GET_FILESIZE "%ALLUSERSPROFILE%\%%A\%%B"
				SETLOCAL ENABLEDELAYEDEXPANSION
				IF !FILESIZE! LEQ 200000000 (
					ENDLOCAL
					FOR /F "TOKENS=1" %%C IN ('TOOLS\DIRHASH\DIRHASH.EXE "%ALLUSERSPROFILE%\%%A\%%B" SHA256 -quiet -nowait 2^>Nul') DO (
						FOR /F %%X IN ('%EXEGREP% -Fixe "%%C" DB_EXEC\THREAT\DIRECTORY\DEL_ALLUSERSPROFILE_1STEP_HYENA_FORFILE_SHA+NC.DB 2^>Nul') DO CALL :DELETE_DIRECTORY
					)
				) ELSE (
					ENDLOCAL
				)
			)
		)
	)
	REM :Next Step
	IF EXIST "%ALLUSERSPROFILE%\%%A\" (
		FOR /F "DELIMS=" %%B IN ('DIR /B /AD "%ALLUSERSPROFILE%\%%A\" 2^>Nul') DO (
			TITLE 검사중 "%ALLUSERSPROFILE%\%%A\%%B" 2>Nul
			REM :Next Step
			IF EXIST "%ALLUSERSPROFILE%\%%A\%%B\" (
				FOR /F "DELIMS=" %%C IN ('DIR /B /AD "%ALLUSERSPROFILE%\%%A\%%B\" 2^>Nul') DO (
					TITLE 검사중 "%ALLUSERSPROFILE%\%%A\%%B\%%C" 2>Nul
					REM :Google Chrome Malicious Extensions
					IF EXIST "%ALLUSERSPROFILE%\%%A\%%B\%%C\" (
						IF EXIST "%ALLUSERSPROFILE%\%%A\%%B\%%C\MANIFEST.JSON" (
							IF EXIST "%ALLUSERSPROFILE%\%%A\%%B\%%C\BACKGROUND.JS" (
								CALL :DELETE_DIRECTORY ACTIVESCAN
							)
						)
					)
				)
			)
		)
	)
)
REM :[%ALLUSERSPROFILE%]\Microsoft\Windows\Start Menu\Programs
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\" 2^>Nul') DO (
	TITLE 검사중 "%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\DIRECTORY\DEL_STARTMENU_PROGRAMS.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY
	)
	IF EXIST "%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\COMBO\PATTERN_FAKE_OPTIMIZER+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
	)
	IF EXIST "%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\%%A\" (
		CALL :GET_FILESIZE "%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\%%A\%%B"
		SETLOCAL ENABLEDELAYEDEXPANSION
		IF !FILESIZE! LEQ 200000000 (
			ENDLOCAL
			FOR /F "TOKENS=1" %%C IN ('TOOLS\DIRHASH\DIRHASH.EXE "%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\%%A\%%B" SHA256 -quiet -nowait 2^>Nul') DO (
				FOR /F %%X IN ('%EXEGREP% -Fixe "%%C" DB_EXEC\THREAT\DIRECTORY\DEL_STARTMENU_PROGRAMS_1STEP_HYENA_FORFILE_SHA+NC.DB 2^>Nul') DO CALL :DELETE_DIRECTORY
			)
		) ELSE (
			ENDLOCAL
		)
	)
)
REM :[%ALLUSERSPROFILE%]\Microsoft\Windows\Templates
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZALLUSERSPROFILE%\Microsoft\Windows\Templates\
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%ALLUSERSPROFILE%\Microsoft\Windows\Templates\" 2^>Nul') DO (
	TITLE 검사중 "%ALLUSERSPROFILE%\Microsoft\Windows\Templates\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%ALLUSERSPROFILE%\Microsoft\Windows\Templates\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_TEMPLATES+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
	)
)
REM :[%ALLUSERSPROFILE%]\Templates
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZALLUSERSPROFILE%\Templates\
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%ALLUSERSPROFILE%\Templates\" 2^>Nul') DO (
	TITLE 검사중 "%ALLUSERSPROFILE%\Templates\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%ALLUSERSPROFILE%\Templates\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_TEMPLATES+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
	)
)
REM :[%ALLUSERSPROFILE%] (ETCs)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('TYPE DB_EXEC\THREAT\DIRECTORY\DEL_ALLUSERSPROFILE_ETCS+NC.DB 2^>Nul') DO (
	TITLE 검사중^(DB^) "%ALLUSERSPROFILE%%%A" 2>Nul
	IF EXIST "%ALLUSERSPROFILE%%%A\" (
		>VARIABLE\%VTEXT1% ECHO %MZALLUSERSPROFILE%%%~pA
		>VARIABLE\%VTEXT2% ECHO %%~nxA
		CALL :DELETE_DIRECTORY
	)
)
REM :[%LOCALAPPDATA%]
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZLOCALAPPDATA%\
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%LOCALAPPDATA%\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_DIR_APPDATA_LOCAL+NC.DB 2^>Nul') DO (
	TITLE 검사중 "%LOCALAPPDATA%\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	REM :Default
	IF EXIST "%LOCALAPPDATA%\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -Fix -f DB_EXEC\THREAT\DIRECTORY\DEL_APPDATA.DB -f DB_EXEC\THREAT\DIRECTORY\DEL_APPDATA_LOCAL.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY
	)
	IF EXIST "%LOCALAPPDATA%\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_APPDATA_LOCAL+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
	)
	IF EXIST "%LOCALAPPDATA%\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\COMBO\PATTERN_ADWARE_MULTIPLUG+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
	)
	IF EXIST "%LOCALAPPDATA%\%%A\" (
		FOR /F "DELIMS=" %%B IN ('DIR /B /A-D "%LOCALAPPDATA%\%%A\" 2^>Nul') DO (
			TITLE 검사중 "%LOCALAPPDATA%\%%A" "%%B" 2>Nul
			>VARIABLE\%VTEXT3% ECHO %%B
			IF EXIST "%LOCALAPPDATA%\%%A\" (
				CALL :GET_FILESIZE "%LOCALAPPDATA%\%%A\%%B"
				SETLOCAL ENABLEDELAYEDEXPANSION
				IF !FILESIZE! LEQ 200000000 (
					ENDLOCAL
					FOR /F "TOKENS=1" %%C IN ('TOOLS\DIRHASH\DIRHASH.EXE "%LOCALAPPDATA%\%%A\%%B" SHA256 -quiet -nowait 2^>Nul') DO (
						FOR /F %%X IN ('%EXEGREP% -Fixe "%%C" DB_EXEC\THREAT\DIRECTORY\DEL_APPDATA_LOCAL_1STEP_HYENA_FORFILE_SHA+NC.DB 2^>Nul') DO CALL :DELETE_DIRECTORY
					)
				) ELSE (
					ENDLOCAL
				)
			)
			IF EXIST "%LOCALAPPDATA%\%%A\" (
				FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_APPDATA_LOCAL_1STEP_HYENA_ELEX_SCANONLY+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
					FOR /F %%Y IN ('%EXEGREP% -ixf DB_EXEC\THREAT\DIRECTORY\DEL_APPDATA_LOCAL_1STEP_HYENA_FORFILE_ELEX+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
				)
			)
			IF EXIST "%LOCALAPPDATA%\%%A\" (
				FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_APPDATA_LOCAL_1STEP_SCANONLY.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
					FOR /F %%Y IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_APPDATA_LOCAL_1STEP_HYENA_FORFILE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
				)
			)
		)
	)
	REM :Next Step
	IF EXIST "%LOCALAPPDATA%\%%A\" (
		FOR /F "DELIMS=" %%B IN ('DIR /B /AD "%LOCALAPPDATA%\%%A\" 2^>Nul') DO (
			TITLE 검사중 "%LOCALAPPDATA%\%%A\%%B" 2>Nul
			>VARIABLE\%VTEXT3% ECHO %%B
			REM :2-Step
			IF EXIST "%LOCALAPPDATA%\%%A\%%B\" (
				FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\THREAT\DIRECTORY\DEL_APPDATA_LOCAL_2STEP+C.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_DIRECTORY
			)
			REM :Next Step
			IF EXIST "%LOCALAPPDATA%\%%A\%%B\" (
				FOR /F "DELIMS=" %%C IN ('DIR /B /AD "%LOCALAPPDATA%\%%A\%%B\" 2^>Nul') DO (
					TITLE 검사중 "%LOCALAPPDATA%\%%A\%%B\%%C" 2>Nul
					REM :Google Chrome Malicious Extensions
					IF EXIST "%LOCALAPPDATA%\%%A\%%B\%%C\" (
						IF EXIST "%LOCALAPPDATA%\%%A\%%B\%%C\MANIFEST.JSON" (
							IF EXIST "%LOCALAPPDATA%\%%A\%%B\%%C\BACKGROUND.JS" (
								>VARIABLE\%VTEXT2% ECHO %%A
								CALL :DELETE_DIRECTORY ACTIVESCAN
							)
						)
					)
				)
			)
		)
	)
)
REM :[%LOCALAPPDATA%] (ETCs)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('TYPE DB_EXEC\THREAT\DIRECTORY\DEL_APPDATA_LOCAL_ETCS+NC.DB 2^>Nul') DO (
	TITLE 검사중^(DB^) "%LOCALAPPDATA%%%A" 2>Nul
	IF EXIST "%LOCALAPPDATA%%%A\" (
		>VARIABLE\%VTEXT1% ECHO %MZLOCALAPPDATA%%%~pA
		>VARIABLE\%VTEXT2% ECHO %%~nxA
		CALL :DELETE_DIRECTORY
	)
	TITLE 검사중^(DB^) "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Local%%A" 2>Nul
	IF EXIST "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Local%%A\" (
		>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\System32\Config\SystemProfile\AppData\Local%%~pA
		>VARIABLE\%VTEXT2% ECHO %%~nxA
		CALL :DELETE_DIRECTORY
	)
	TITLE 검사중^(DB^) "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Local%%A" 2>Nul
	IF EXIST "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Local%%A\" (
		>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Local%%~pA
		>VARIABLE\%VTEXT2% ECHO %%~nxA
		CALL :DELETE_DIRECTORY
	)
	TITLE 검사중^(DB^) "%LOCALLOWAPPDATA%%%A" 2>Nul
	IF EXIST "%LOCALLOWAPPDATA%%%A\" (
		>VARIABLE\%VTEXT1% ECHO %MZLOCALLOWAPPDATA%%%~pA
		>VARIABLE\%VTEXT2% ECHO %%~nxA
		CALL :DELETE_DIRECTORY
	)
	TITLE 검사중^(DB^) "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\LocalLow%%A" 2>Nul
	IF EXIST "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\LocalLow%%A\" (
		>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\System32\Config\SystemProfile\AppData\LocalLow%%~pA
		>VARIABLE\%VTEXT2% ECHO %%~nxA
		CALL :DELETE_DIRECTORY
	)
	TITLE 검사중^(DB^) "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\LocalLow%%A" 2>Nul
	IF EXIST "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\LocalLow%%A\" (
		>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\LocalLow%%~pA
		>VARIABLE\%VTEXT2% ECHO %%~nxA
		CALL :DELETE_DIRECTORY
	)
)
REM :[%LOCALLOWAPPDATA%]
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZLOCALLOWAPPDATA%\
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%LOCALLOWAPPDATA%\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_DIR_APPDATA_LOCAL+NC.DB 2^>Nul') DO (
	TITLE 검사중 "%LOCALLOWAPPDATA%\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%LOCALLOWAPPDATA%\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -Fix -f DB_EXEC\THREAT\DIRECTORY\DEL_APPDATA.DB -f DB_EXEC\THREAT\DIRECTORY\DEL_APPDATA_LOCAL.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY
	)
	IF EXIST "%LOCALLOWAPPDATA%\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_APPDATA_LOCAL+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
	)
	IF EXIST "%LOCALLOWAPPDATA%\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\COMBO\PATTERN_ADWARE_MULTIPLUG+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
	)
	IF EXIST "%LOCALLOWAPPDATA%\%%A\" (
		FOR /F "DELIMS=" %%B IN ('DIR /B /A-D "%LOCALLOWAPPDATA%\%%A\" 2^>Nul') DO (
			TITLE 검사중 "%LOCALLOWAPPDATA%\%%A" "%%B" 2>Nul
			IF EXIST "%LOCALLOWAPPDATA%\%%A\" (
				CALL :GET_FILESIZE "%LOCALLOWAPPDATA%\%%A\%%B"
				SETLOCAL ENABLEDELAYEDEXPANSION
				IF !FILESIZE! LEQ 200000000 (
					ENDLOCAL
					FOR /F "TOKENS=1" %%C IN ('TOOLS\DIRHASH\DIRHASH.EXE "%LOCALLOWAPPDATA%\%%A\%%B" SHA256 -quiet -nowait 2^>Nul') DO (
						FOR /F %%X IN ('%EXEGREP% -Fixe "%%C" DB_EXEC\THREAT\DIRECTORY\DEL_APPDATA_LOCAL_1STEP_HYENA_FORFILE_SHA+NC.DB 2^>Nul') DO CALL :DELETE_DIRECTORY
					)
				) ELSE (
					ENDLOCAL
				)
			)
		)
	)
)
REM :[%APPDATA%]
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZAPPDATA%\
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%APPDATA%\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_DIR_APPDATA_ROAMING+NC.DB 2^>Nul') DO (
	TITLE 검사중 "%APPDATA%\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%APPDATA%\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -Fix -f DB_EXEC\THREAT\DIRECTORY\DEL_APPDATA.DB -f DB_EXEC\THREAT\DIRECTORY\DEL_APPDATA_ROAMING.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY
	)
	IF EXIST "%APPDATA%\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_APPDATA_ROAMING+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
	)
	IF EXIST "%APPDATA%\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -ix -f DB_EXEC\ACTIVESCAN\COMBO\PATTERN_ADWARE_MULTIPLUG+NC.DB -f DB_EXEC\ACTIVESCAN\COMBO\PATTERN_FAKE_OPTIMIZER+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
	)
	IF EXIST "%APPDATA%\%%A\" (
		FOR /F "DELIMS=" %%B IN ('DIR /B /A-D "%APPDATA%\%%A\" 2^>Nul') DO (
			TITLE 검사중 "%APPDATA%\%%A" "%%B" 2>Nul
			IF EXIST "%APPDATA%\%%A\" (
				CALL :GET_FILESIZE "%APPDATA%\%%A\%%B"
				SETLOCAL ENABLEDELAYEDEXPANSION
				IF !FILESIZE! LEQ 200000000 (
					ENDLOCAL
					FOR /F "TOKENS=1" %%C IN ('TOOLS\DIRHASH\DIRHASH.EXE "%APPDATA%\%%A\%%B" SHA256 -quiet -nowait 2^>Nul') DO (
						FOR /F %%X IN ('%EXEGREP% -Fixe "%%C" DB_EXEC\THREAT\DIRECTORY\DEL_APPDATA_ROAMING_1STEP_HYENA_FORFILE_SHA+NC.DB 2^>Nul') DO CALL :DELETE_DIRECTORY
					)
				) ELSE (
					ENDLOCAL
				)
			)
		)
	)
)
REM :[%APPDATA%]\Microsoft
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZAPPDATA%\Microsoft\
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%APPDATA%\Microsoft\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_DIR_APPDATA_ROAMING_MICROSOFT+NC.DB 2^>Nul') DO (
	TITLE 검사중 "%APPDATA%\Microsoft\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%APPDATA%\Microsoft\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_APPDATA_ROAMING_MICROSOFT+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
	)
	IF EXIST "%APPDATA%\Microsoft\%%A\" (
		FOR /F "DELIMS=" %%B IN ('DIR /B /A-D "%APPDATA%\Microsoft\%%A\" 2^>Nul') DO (
			TITLE 검사중 "%APPDATA%\Microsoft\%%A" "%%B" 2>Nul
			IF EXIST "%APPDATA%\Microsoft\%%A\" (
				CALL :GET_FILESIZE "%APPDATA%\Microsoft\%%A\%%B"
				SETLOCAL ENABLEDELAYEDEXPANSION
				IF !FILESIZE! LEQ 200000000 (
					ENDLOCAL
					FOR /F "TOKENS=1" %%C IN ('TOOLS\DIRHASH\DIRHASH.EXE "%APPDATA%\Microsoft\%%A\%%B" SHA256 -quiet -nowait 2^>Nul') DO (
						FOR /F %%X IN ('%EXEGREP% -Fixe "%%C" DB_EXEC\THREAT\DIRECTORY\DEL_APPDATA_ROAMING_MICROSOFT_1STEP_HYENA_FORFILE_SHA+NC.DB 2^>Nul') DO CALL :DELETE_DIRECTORY
					)
				) ELSE (
					ENDLOCAL
				)
			)
		)
	)
)
REM :[%APPDATA%]\Microsoft\Credentials
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZAPPDATA%\Microsoft\Credentials\
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%APPDATA%\Microsoft\Credentials\" 2^>Nul') DO (
	TITLE 검사중 "%APPDATA%\Microsoft\Credentials\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%APPDATA%\Microsoft\Credentials\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_APPDATA_ROAMING_MICROSOFT_CREDENTIALS+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
	)
)
REM :[%APPDATA%]\Microsoft\Windows
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZAPPDATA%\Microsoft\Windows\
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%APPDATA%\Microsoft\Windows\" 2^>Nul') DO (
	TITLE 검사중 "%APPDATA%\Microsoft\Windows\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%APPDATA%\Microsoft\Windows\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_APPDATA_ROAMING_MICROSOFT_WINDOWS+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
	)
)
REM :[%APPDATA%]\Microsoft\Windows\Start Menu\Programs
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZAPPDATA%\Microsoft\Windows\Start Menu\Programs\
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%APPDATA%\Microsoft\Windows\Start Menu\Programs\" 2^>Nul') DO (
	TITLE 검사중 "%APPDATA%\Microsoft\Windows\Start Menu\Programs\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%APPDATA%\Microsoft\Windows\Start Menu\Programs\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\DIRECTORY\DEL_STARTMENU_PROGRAMS.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY
	)
	IF EXIST "%APPDATA%\Microsoft\Windows\Start Menu\Programs\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\COMBO\PATTERN_FAKE_OPTIMIZER+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
	)
	IF EXIST "%APPDATA%\Microsoft\Windows\Start Menu\Programs\%%A\" (
		CALL :GET_FILESIZE "%APPDATA%\Microsoft\Windows\Start Menu\Programs\%%A\%%B"
		SETLOCAL ENABLEDELAYEDEXPANSION
		IF !FILESIZE! LEQ 200000000 (
			ENDLOCAL
			FOR /F "TOKENS=1" %%C IN ('TOOLS\DIRHASH\DIRHASH.EXE "%APPDATA%\Microsoft\Windows\Start Menu\Programs\%%A\%%B" SHA256 -quiet -nowait 2^>Nul') DO (
				FOR /F %%X IN ('%EXEGREP% -Fixe "%%C" DB_EXEC\THREAT\DIRECTORY\DEL_STARTMENU_PROGRAMS_1STEP_HYENA_FORFILE_SHA+NC.DB 2^>Nul') DO CALL :DELETE_DIRECTORY
			)
		) ELSE (
			ENDLOCAL
		)
	)
)
REM :[%APPDATA%]\Microsoft\Windows\Templates
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZAPPDATA%\Microsoft\Windows\Templates\
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%APPDATA%\Microsoft\Windows\Templates\" 2^>Nul') DO (
	TITLE 검사중 "%APPDATA%\Microsoft\Windows\Templates\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%APPDATA%\Microsoft\Windows\Templates\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_TEMPLATES+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
	)
)
REM :[%APPDATA%] (ETCs)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('TYPE DB_EXEC\THREAT\DIRECTORY\DEL_APPDATA_ROAMING_ETCS+NC.DB 2^>Nul') DO (
	TITLE 검사중^(DB^) "%APPDATA%%%A" 2>Nul
	IF EXIST "%APPDATA%%%A\" (
		>VARIABLE\%VTEXT1% ECHO %MZAPPDATA%%%~pA
		>VARIABLE\%VTEXT2% ECHO %%~nxA
		CALL :DELETE_DIRECTORY
	)
	TITLE 검사중^(DB^) "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Roaming%%A" 2>Nul
	IF EXIST "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Roaming%%A\" (
		>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\System32\Config\SystemProfile\AppData\Roaming%%~pA
		>VARIABLE\%VTEXT2% ECHO %%~nxA
		CALL :DELETE_DIRECTORY
	)
	TITLE 검사중^(DB^) "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Roaming%%A" 2>Nul
	IF EXIST "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Roaming%%A\" (
		>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Roaming%%~pA
		>VARIABLE\%VTEXT2% ECHO %%~nxA
		CALL :DELETE_DIRECTORY
	)
)
REM :Application Data (ETCs)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('TYPE DB_EXEC\THREAT\DIRECTORY\DEL_APPDATA_ETCS.DB 2^>Nul') DO (
	TITLE 검사중^(DB^) "%ALLUSERSPROFILE%%%A" 2>Nul
	IF EXIST "%ALLUSERSPROFILE%%%A\" (
		>VARIABLE\%VTEXT1% ECHO %MZALLUSERSPROFILE%%%~pA
		>VARIABLE\%VTEXT2% ECHO %%~nxA
		CALL :DELETE_DIRECTORY
	)
	TITLE 검사중^(DB^) "%LOCALAPPDATA%%%A" 2>Nul
	IF EXIST "%LOCALAPPDATA%%%A\" (
		>VARIABLE\%VTEXT1% ECHO %MZLOCALAPPDATA%%%~pA
		>VARIABLE\%VTEXT2% ECHO %%~nxA
		CALL :DELETE_DIRECTORY
	)
	TITLE 검사중^(DB^) "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Local%%A" 2>Nul
	IF EXIST "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Local%%A\" (
		>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\System32\Config\SystemProfile\AppData\Local%%~pA
		>VARIABLE\%VTEXT2% ECHO %%~nxA
		CALL :DELETE_DIRECTORY
	)
	TITLE 검사중^(DB^) "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Local%%A" 2>Nul
	IF EXIST "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Local%%A\" (
		>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Local%%~pA
		>VARIABLE\%VTEXT2% ECHO %%~nxA
		CALL :DELETE_DIRECTORY
	)
	TITLE 검사중^(DB^) "%LOCALLOWAPPDATA%%%A" 2>Nul
	IF EXIST "%LOCALLOWAPPDATA%%%A\" (
		>VARIABLE\%VTEXT1% ECHO %MZLOCALLOWAPPDATA%%%~pA
		>VARIABLE\%VTEXT2% ECHO %%~nxA
		CALL :DELETE_DIRECTORY
	)
	TITLE 검사중^(DB^) "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\LocalLow%%A" 2>Nul
	IF EXIST "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\LocalLow%%A\" (
		>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\System32\Config\SystemProfile\AppData\LocalLow%%~pA
		>VARIABLE\%VTEXT2% ECHO %%~nxA
		CALL :DELETE_DIRECTORY
	)
	TITLE 검사중^(DB^) "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\LocalLow%%A" 2>Nul
	IF EXIST "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\LocalLow%%A\" (
		>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\LocalLow%%~pA
		>VARIABLE\%VTEXT2% ECHO %%~nxA
		CALL :DELETE_DIRECTORY
	)
	TITLE 검사중^(DB^) "%APPDATA%%%A" 2>Nul
	IF EXIST "%APPDATA%%%A\" (
		>VARIABLE\%VTEXT1% ECHO %MZAPPDATA%%%~pA
		>VARIABLE\%VTEXT2% ECHO %%~nxA
		CALL :DELETE_DIRECTORY
	)
	TITLE 검사중^(DB^) "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Roaming%%A" 2>Nul
	IF EXIST "%SYSTEMROOT%\System32\Config\SystemProfile\AppData\Roaming%%A\" (
		>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\System32\Config\SystemProfile\AppData\Roaming%%~pA
		>VARIABLE\%VTEXT2% ECHO %%~nxA
		CALL :DELETE_DIRECTORY
	)
	TITLE 검사중^(DB^) "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Roaming%%A" 2>Nul
	IF EXIST "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Roaming%%A\" (
		>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\SysWOW64\Config\SystemProfile\AppData\Roaming%%~pA
		>VARIABLE\%VTEXT2% ECHO %%~nxA
		CALL :DELETE_DIRECTORY
	)
)
REM :[%PUBLIC%]
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZPUBLIC%\
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%PUBLIC%\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_DIR_PROFILE+NC.DB 2^>Nul') DO (
	TITLE 검사중 "%PUBLIC%\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%PUBLIC%\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\DIRECTORY\DEL_PROFILE.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY
	)
	IF EXIST "%PUBLIC%\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_PROFILE.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
	)
	IF EXIST "%PUBLIC%\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_PROFILE_PUBLIC+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
	)
	IF EXIST "%PUBLIC%\%%A\" (
		FOR /F "DELIMS=" %%B IN ('DIR /B /A-D "%PUBLIC%\%%A\" 2^>Nul') DO (
			TITLE 검사중 "%PUBLIC%\%%A" "%%B" 2>Nul
			IF EXIST "%PUBLIC%\%%A\" (
				CALL :GET_FILESIZE "%PUBLIC%\%%A\%%B"
				SETLOCAL ENABLEDELAYEDEXPANSION
				IF !FILESIZE! LEQ 200000000 (
					ENDLOCAL
					FOR /F "TOKENS=1" %%C IN ('TOOLS\DIRHASH\DIRHASH.EXE "%PUBLIC%\%%A\%%B" SHA256 -quiet -nowait 2^>Nul') DO (
						FOR /F %%X IN ('%EXEGREP% -Fixe "%%C" DB_EXEC\THREAT\DIRECTORY\DEL_PROFILE_1STEP_HYENA_FORFILE_SHA+NC.DB 2^>Nul') DO CALL :DELETE_DIRECTORY
					)
				) ELSE (
					ENDLOCAL
				)
			)
		)
	)
)
REM :[%USERPROFILE%]
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZUSERPROFILE%\
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%USERPROFILE%\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_DIR_PROFILE+NC.DB 2^>Nul') DO (
	TITLE 검사중 "%USERPROFILE%\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%USERPROFILE%\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\DIRECTORY\DEL_PROFILE.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY
	)
	IF EXIST "%USERPROFILE%\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_PROFILE.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
	)
	IF EXIST "%USERPROFILE%\%%A\" (
		FOR /F "DELIMS=" %%B IN ('DIR /B /A-D "%USERPROFILE%\%%A\" 2^>Nul') DO (
			TITLE 검사중 "%USERPROFILE%\%%A" "%%B" 2>Nul
			IF EXIST "%USERPROFILE%\%%A\" (
				CALL :GET_FILESIZE "%USERPROFILE%\%%A\%%B"
				SETLOCAL ENABLEDELAYEDEXPANSION
				IF !FILESIZE! LEQ 200000000 (
					ENDLOCAL
					FOR /F "TOKENS=1" %%C IN ('TOOLS\DIRHASH\DIRHASH.EXE "%USERPROFILE%\%%A\%%B" SHA256 -quiet -nowait 2^>Nul') DO (
						FOR /F %%X IN ('%EXEGREP% -Fixe "%%C" DB_EXEC\THREAT\DIRECTORY\DEL_PROFILE_1STEP_HYENA_FORFILE_SHA+NC.DB 2^>Nul') DO CALL :DELETE_DIRECTORY
					)
				) ELSE (
					ENDLOCAL
				)
			)
		)
	)
)
REM :[%USERPROFILE%]\AppData
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZUSERPROFILE%\AppData\
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%USERPROFILE%\AppData\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_DIR_APPDATA+NC.DB 2^>Nul') DO (
	TITLE 검사중 "%USERPROFILE%\AppData\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%USERPROFILE%\AppData\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\DIRECTORY\DEL_APPDATA.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY
	)
)
REM :[%USERPROFILE%]\Templates
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZUSERPROFILE%\Templates\
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%USERPROFILE%\Templates\" 2^>Nul') DO (
	TITLE 검사중 "%USERPROFILE%\Templates\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%USERPROFILE%\Templates\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_TEMPLATES+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
	)
)
REM :Profiles (ETCs)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('TYPE DB_EXEC\THREAT\DIRECTORY\DEL_PROFILE_ETCS.DB 2^>Nul') DO (
	TITLE 검사중^(DB^) "%USERPROFILE%%%A" 2>Nul
	IF EXIST "%USERPROFILE%%%A\" (
		>VARIABLE\%VTEXT1% ECHO %MZUSERPROFILE%%%~pA
		>VARIABLE\%VTEXT2% ECHO %%~nxA
		CALL :DELETE_DIRECTORY
	)
	TITLE 검사중^(DB^) "%PUBLIC%%%A" 2>Nul
	IF EXIST "%PUBLIC%%%A\" (
		>VARIABLE\%VTEXT1% ECHO %MZPUBLIC%%%~pA
		>VARIABLE\%VTEXT2% ECHO %%~nxA
		CALL :DELETE_DIRECTORY
	)
	TITLE 검사중^(DB^) "%ALLUSERSPROFILE%%%A" 2>Nul
	IF EXIST "%ALLUSERSPROFILE%%%A\" (
		>VARIABLE\%VTEXT1% ECHO %MZALLUSERSPROFILE%%%~pA
		>VARIABLE\%VTEXT2% ECHO %%~nxA
		CALL :DELETE_DIRECTORY
	)
)
REM :Browser Extensions - Chromium
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%LOCALAPPDATA%\Chromium\User Data\" 2^>Nul^|%EXEGREP% -Fixf DB_EXEC\CHECK\CHK_BROWSER_CHROMEPROFILE+NC.DB 2^>Nul') DO (
	REM :Databases
	TITLE 검사중 "%LOCALAPPDATA%\Chromium\User Data\%%A\Databases" 2>Nul
	>VARIABLE\%VTEXT1% ECHO %MZLOCALAPPDATA%\Chromium\User Data\%%A\Databases\
	FOR /F "DELIMS=" %%B IN ('DIR /B /AD "%LOCALAPPDATA%\Chromium\User Data\%%A\Databases\" 2^>Nul') DO (
		TITLE 검사중 "%LOCALAPPDATA%\Chromium\…\%%A\Databases\%%B" 2>Nul
		>VARIABLE\%VTEXT2% ECHO %%B
		FOR /F "TOKENS=2 DELIMS=_" %%C IN ('ECHO %%B') DO (
			>VARIABLE\%VTEXT3% ECHO %%C
			IF EXIST "%LOCALAPPDATA%\Chromium\User Data\%%A\Databases\%%B\" (
				FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_DIRECTORY
			)
			IF EXIST DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB (
				IF EXIST "%LOCALAPPDATA%\Chromium\User Data\%%A\Databases\%%B\" (
					FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
				)
			)
		)
	)
	REM :Extensions
	TITLE 검사중 "%LOCALAPPDATA%\Chromium\User Data\%%A\Extensions" 2>Nul
	>VARIABLE\%VTEXT1% ECHO %MZLOCALAPPDATA%\Chromium\User Data\%%A\Extensions\
	FOR /F "DELIMS=" %%B IN ('DIR /B /AD "%LOCALAPPDATA%\Chromium\User Data\%%A\Extensions\" 2^>Nul') DO (
		TITLE 검사중 "%LOCALAPPDATA%\Chromium\…\%%A\Extensions\%%B" 2>Nul
		>VARIABLE\%VTEXT2% ECHO %%B
		IF EXIST "%LOCALAPPDATA%\Chromium\User Data\%%A\Extensions\%%B\" (
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY
		)
		IF EXIST DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB (
			IF EXIST "%LOCALAPPDATA%\Chromium\User Data\%%A\Extensions\%%B\" (
				FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
			)
		)
	)
	REM :Local Extension Settings
	TITLE 검사중 "%LOCALAPPDATA%\Chromium\User Data\%%A\Local Extension Settings" 2>Nul
	>VARIABLE\%VTEXT1% ECHO %MZLOCALAPPDATA%\Chromium\User Data\%%A\Local Extension Settings\
	FOR /F "DELIMS=" %%B IN ('DIR /B /AD "%LOCALAPPDATA%\Chromium\User Data\%%A\Local Extension Settings\" 2^>Nul') DO (
		TITLE 검사중 "%LOCALAPPDATA%\Chromium\…\%%A\Local Extension Settings\%%B" 2>Nul
		>VARIABLE\%VTEXT2% ECHO %%B
		IF EXIST "%LOCALAPPDATA%\Chromium\User Data\%%A\Local Extension Settings\%%B\" (
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY
		)
		IF EXIST DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB (
			IF EXIST "%LOCALAPPDATA%\Chromium\User Data\%%A\Local Extension Settings\%%B\" (
				FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
			)
		)
	)
	REM :Sync Extension Settings
	TITLE 검사중 "%LOCALAPPDATA%\Chromium\User Data\%%A\Sync Extension Settings" 2>Nul
	>VARIABLE\%VTEXT1% ECHO %MZLOCALAPPDATA%\Chromium\User Data\%%A\Sync Extension Settings\
	FOR /F "DELIMS=" %%B IN ('DIR /B /AD "%LOCALAPPDATA%\Chromium\User Data\%%A\Sync Extension Settings\" 2^>Nul') DO (
		TITLE 검사중 "%LOCALAPPDATA%\Chromium\…\%%A\Sync Extension Settings\%%B" 2>Nul
		>VARIABLE\%VTEXT2% ECHO %%B
		IF EXIST "%LOCALAPPDATA%\Chromium\User Data\%%A\Sync Extension Settings\%%B\" (
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY
		)
		IF EXIST DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB (
			IF EXIST "%LOCALAPPDATA%\Chromium\User Data\%%A\Sync Extension Settings\%%B\" (
				FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
			)
		)
	)
)
REM :Browser Extensions - Google Chrome
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%LOCALAPPDATA%\Google\Chrome\User Data\" 2^>Nul^|%EXEGREP% -Fixf DB_EXEC\CHECK\CHK_BROWSER_CHROMEPROFILE+NC.DB 2^>Nul') DO (
	REM :Databases
	TITLE 검사중 "%LOCALAPPDATA%\Google\Chrome\User Data\%%A\Databases" 2>Nul
	>VARIABLE\%VTEXT1% ECHO %MZLOCALAPPDATA%\Google\Chrome\User Data\%%A\Databases\
	FOR /F "DELIMS=" %%B IN ('DIR /B /AD "%LOCALAPPDATA%\Google\Chrome\User Data\%%A\Databases\" 2^>Nul') DO (
		TITLE 검사중 "%LOCALAPPDATA%\Google\Chrome\…\%%A\Databases\%%B" 2>Nul
		>VARIABLE\%VTEXT2% ECHO %%B
		FOR /F "TOKENS=2 DELIMS=_" %%C IN ('ECHO %%B') DO (
			>VARIABLE\%VTEXT3% ECHO %%C
			IF EXIST "%LOCALAPPDATA%\Google\Chrome\User Data\%%A\Databases\%%B\" (
				FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_DIRECTORY
			)
			IF EXIST DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB (
				IF EXIST "%LOCALAPPDATA%\Google\Chrome\User Data\%%A\Databases\%%B\" (
					FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
				)
			)
		)
	)
	REM :Extensions
	TITLE 검사중 "%LOCALAPPDATA%\Google\Chrome\User Data\%%A\Extensions" 2>Nul
	>VARIABLE\%VTEXT1% ECHO %MZLOCALAPPDATA%\Google\Chrome\User Data\%%A\Extensions\
	FOR /F "DELIMS=" %%B IN ('DIR /B /AD "%LOCALAPPDATA%\Google\Chrome\User Data\%%A\Extensions\" 2^>Nul') DO (
		TITLE 검사중 "%LOCALAPPDATA%\Google\Chrome\…\%%A\Extensions\%%B" 2>Nul
		>VARIABLE\%VTEXT2% ECHO %%B
		IF EXIST "%LOCALAPPDATA%\Google\Chrome\User Data\%%A\Extensions\%%B\" (
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY
		)
		IF EXIST DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB (
			IF EXIST "%LOCALAPPDATA%\Google\Chrome\User Data\%%A\Extensions\%%B\" (
				FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
			)
		)
	)
	REM :Local Extension Settings
	TITLE 검사중 "%LOCALAPPDATA%\Google\Chrome\User Data\%%A\Local Extension Settings" 2>Nul
	>VARIABLE\%VTEXT1% ECHO %MZLOCALAPPDATA%\Google\Chrome\User Data\%%A\Local Extension Settings\
	FOR /F "DELIMS=" %%B IN ('DIR /B /AD "%LOCALAPPDATA%\Google\Chrome\User Data\%%A\Local Extension Settings\" 2^>Nul') DO (
		TITLE 검사중 "%LOCALAPPDATA%\Google\Chrome\…\%%A\Local Extension Settings\%%B" 2>Nul
		>VARIABLE\%VTEXT2% ECHO %%B
		IF EXIST "%LOCALAPPDATA%\Google\Chrome\User Data\%%A\Local Extension Settings\%%B\" (
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY
		)
		IF EXIST DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB (
			IF EXIST "%LOCALAPPDATA%\Google\Chrome\User Data\%%A\Local Extension Settings\%%B\" (
				FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
			)
		)
	)
	REM :Sync Extension Settings
	TITLE 검사중 "%LOCALAPPDATA%\Google\Chrome\User Data\%%A\Sync Extension Settings" 2>Nul
	>VARIABLE\%VTEXT1% ECHO %MZLOCALAPPDATA%\Google\Chrome\User Data\%%A\Sync Extension Settings\
	FOR /F "DELIMS=" %%B IN ('DIR /B /AD "%LOCALAPPDATA%\Google\Chrome\User Data\%%A\Sync Extension Settings\" 2^>Nul') DO (
		TITLE 검사중 "%LOCALAPPDATA%\Google\Chrome\…\%%A\Sync Extension Settings\%%B" 2>Nul
		>VARIABLE\%VTEXT2% ECHO %%B
		IF EXIST "%LOCALAPPDATA%\Google\Chrome\User Data\%%A\Sync Extension Settings\%%B\" (
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY
		)
		IF EXIST DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB (
			IF EXIST "%LOCALAPPDATA%\Google\Chrome\User Data\%%A\Sync Extension Settings\%%B\" (
				FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
			)
		)
	)
)
REM :Browser Extensions - Microsoft Edge
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%LOCALAPPDATA%\Microsoft\Edge\User Data\" 2^>Nul^|%EXEGREP% -Fixf DB_EXEC\CHECK\CHK_BROWSER_CHROMEPROFILE+NC.DB 2^>Nul') DO (
	REM :Databases
	TITLE 검사중 "%LOCALAPPDATA%\Microsoft\Edge\User Data\%%A\Databases" 2>Nul
	>VARIABLE\%VTEXT1% ECHO %MZLOCALAPPDATA%\Microsoft\Edge\User Data\%%A\Databases\
	FOR /F "DELIMS=" %%B IN ('DIR /B /AD "%LOCALAPPDATA%\Microsoft\Edge\User Data\%%A\Databases\" 2^>Nul') DO (
		TITLE 검사중 "%LOCALAPPDATA%\Microsoft\Edge\…\%%A\Databases\%%B" 2>Nul
		>VARIABLE\%VTEXT2% ECHO %%B
		FOR /F "TOKENS=2 DELIMS=_" %%C IN ('ECHO %%B') DO (
			>VARIABLE\%VTEXT3% ECHO %%C
			IF EXIST "%LOCALAPPDATA%\Microsoft\Edge\User Data\%%A\Databases\%%B\" (
				FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_DIRECTORY
			)
			IF EXIST DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB (
				IF EXIST "%LOCALAPPDATA%\Microsoft\Edge\User Data\%%A\Databases\%%B\" (
					FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
				)
			)
		)
	)
	REM :Extensions
	TITLE 검사중 "%LOCALAPPDATA%\Microsoft\Edge\User Data\%%A\Extensions" 2>Nul
	>VARIABLE\%VTEXT1% ECHO %MZLOCALAPPDATA%\Microsoft\Edge\User Data\%%A\Extensions\
	FOR /F "DELIMS=" %%B IN ('DIR /B /AD "%LOCALAPPDATA%\Microsoft\Edge\User Data\%%A\Extensions\" 2^>Nul') DO (
		TITLE 검사중 "%LOCALAPPDATA%\Microsoft\Edge\…\%%A\Extensions\%%B" 2>Nul
		>VARIABLE\%VTEXT2% ECHO %%B
		IF EXIST "%LOCALAPPDATA%\Microsoft\Edge\User Data\%%A\Extensions\%%B\" (
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY
		)
		IF EXIST DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB (
			IF EXIST "%LOCALAPPDATA%\Microsoft\Edge\User Data\%%A\Extensions\%%B\" (
				FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
			)
		)
	)
	REM :Local Extension Settings
	TITLE 검사중 "%LOCALAPPDATA%\Microsoft\Edge\User Data\%%A\Local Extension Settings" 2>Nul
	>VARIABLE\%VTEXT1% ECHO %MZLOCALAPPDATA%\Microsoft\Edge\User Data\%%A\Local Extension Settings\
	FOR /F "DELIMS=" %%B IN ('DIR /B /AD "%LOCALAPPDATA%\Microsoft\Edge\User Data\%%A\Local Extension Settings\" 2^>Nul') DO (
		TITLE 검사중 "%LOCALAPPDATA%\Microsoft\Edge\…\%%A\Local Extension Settings\%%B" 2>Nul
		>VARIABLE\%VTEXT2% ECHO %%B
		IF EXIST "%LOCALAPPDATA%\Microsoft\Edge\User Data\%%A\Local Extension Settings\%%B\" (
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY
		)
		IF EXIST DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB (
			IF EXIST "%LOCALAPPDATA%\Microsoft\Edge\User Data\%%A\Local Extension Settings\%%B\" (
				FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
			)
		)
	)
	REM :Sync Extension Settings
	TITLE 검사중 "%LOCALAPPDATA%\Microsoft\Edge\User Data\%%A\Sync Extension Settings" 2>Nul
	>VARIABLE\%VTEXT1% ECHO %MZLOCALAPPDATA%\Microsoft\Edge\User Data\%%A\Sync Extension Settings\
	FOR /F "DELIMS=" %%B IN ('DIR /B /AD "%LOCALAPPDATA%\Microsoft\Edge\User Data\%%A\Sync Extension Settings\" 2^>Nul') DO (
		TITLE 검사중 "%LOCALAPPDATA%\Microsoft\Edge\…\%%A\Sync Extension Settings\%%B" 2>Nul
		>VARIABLE\%VTEXT2% ECHO %%B
		IF EXIST "%LOCALAPPDATA%\Microsoft\Edge\User Data\%%A\Sync Extension Settings\%%B\" (
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY
		)
		IF EXIST DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB (
			IF EXIST "%LOCALAPPDATA%\Microsoft\Edge\User Data\%%A\Sync Extension Settings\%%B\" (
				FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
			)
		)
	)
)
REM :Browser Extensions - Naver Whale
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%LOCALAPPDATA%\Naver\Naver Whale\User Data\" 2^>Nul^|%EXEGREP% -Fixf DB_EXEC\CHECK\CHK_BROWSER_CHROMEPROFILE+NC.DB 2^>Nul') DO (
	REM :Databases
	TITLE 검사중 "%LOCALAPPDATA%\Naver\Naver Whale\User Data\%%A\Databases" 2>Nul
	>VARIABLE\%VTEXT1% ECHO %MZLOCALAPPDATA%\Naver\Naver Whale\User Data\%%A\Databases\
	FOR /F "DELIMS=" %%B IN ('DIR /B /AD "%LOCALAPPDATA%\Naver\Naver Whale\User Data\%%A\Databases\" 2^>Nul') DO (
		TITLE 검사중 "%LOCALAPPDATA%\Naver\Naver Whale\…\%%A\Databases\%%B" 2>Nul
		>VARIABLE\%VTEXT2% ECHO %%B
		FOR /F "TOKENS=2 DELIMS=_" %%C IN ('ECHO %%B') DO (
			>VARIABLE\%VTEXT3% ECHO %%C
			IF EXIST "%LOCALAPPDATA%\Naver\Naver Whale\User Data\%%A\Databases\%%B\" (
				FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_DIRECTORY
			)
			IF EXIST DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB (
				IF EXIST "%LOCALAPPDATA%\Naver\Naver Whale\User Data\%%A\Databases\%%B\" (
					FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
				)
			)
		)
	)
	REM :Extensions
	TITLE 검사중 "%LOCALAPPDATA%\Naver\Naver Whale\User Data\%%A\Extensions" 2>Nul
	>VARIABLE\%VTEXT1% ECHO %MZLOCALAPPDATA%\Naver\Naver Whale\User Data\%%A\Extensions\
	FOR /F "DELIMS=" %%B IN ('DIR /B /AD "%LOCALAPPDATA%\Naver\Naver Whale\User Data\%%A\Extensions\" 2^>Nul') DO (
		TITLE 검사중 "%LOCALAPPDATA%\Naver\Naver Whale\…\%%A\Extensions\%%B" 2>Nul
		>VARIABLE\%VTEXT2% ECHO %%B
		IF EXIST "%LOCALAPPDATA%\Naver\Naver Whale\User Data\%%A\Extensions\%%B\" (
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY
		)
		IF EXIST DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB (
			IF EXIST "%LOCALAPPDATA%\Naver\Naver Whale\User Data\%%A\Extensions\%%B\" (
				FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
			)
		)
	)
	REM :Local Extension Settings
	TITLE 검사중 "%LOCALAPPDATA%\Naver\Naver Whale\User Data\%%A\Local Extension Settings" 2>Nul
	>VARIABLE\%VTEXT1% ECHO %MZLOCALAPPDATA%\Naver\Naver Whale\User Data\%%A\Local Extension Settings\
	FOR /F "DELIMS=" %%B IN ('DIR /B /AD "%LOCALAPPDATA%\Naver\Naver Whale\User Data\%%A\Local Extension Settings\" 2^>Nul') DO (
		TITLE 검사중 "%LOCALAPPDATA%\Naver\Naver Whale\…\%%A\Local Extension Settings\%%B" 2>Nul
		>VARIABLE\%VTEXT2% ECHO %%B
		IF EXIST "%LOCALAPPDATA%\Naver\Naver Whale\User Data\%%A\Local Extension Settings\%%B\" (
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY
		)
		IF EXIST DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB (
			IF EXIST "%LOCALAPPDATA%\Naver\Naver Whale\User Data\%%A\Local Extension Settings\%%B\" (
				FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
			)
		)
	)
	REM :Sync Extension Settings
	TITLE 검사중 "%LOCALAPPDATA%\Naver\Naver Whale\User Data\%%A\Sync Extension Settings" 2>Nul
	>VARIABLE\%VTEXT1% ECHO %MZLOCALAPPDATA%\Naver\Naver Whale\User Data\%%A\Sync Extension Settings\
	FOR /F "DELIMS=" %%B IN ('DIR /B /AD "%LOCALAPPDATA%\Naver\Naver Whale\User Data\%%A\Sync Extension Settings\" 2^>Nul') DO (
		TITLE 검사중 "%LOCALAPPDATA%\Naver\Naver Whale\…\%%A\Sync Extension Settings\%%B" 2>Nul
		>VARIABLE\%VTEXT2% ECHO %%B
		IF EXIST "%LOCALAPPDATA%\Naver\Naver Whale\User Data\%%A\Sync Extension Settings\%%B\" (
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY
		)
		IF EXIST DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB (
			IF EXIST "%LOCALAPPDATA%\Naver\Naver Whale\User Data\%%A\Sync Extension Settings\%%B\" (
				FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
			)
		)
	)
)
REM :Browser Extensions - Vivaldi
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%LOCALAPPDATA%\Vivaldi\User Data\" 2^>Nul^|%EXEGREP% -Fixf DB_EXEC\CHECK\CHK_BROWSER_CHROMEPROFILE+NC.DB 2^>Nul') DO (
	REM :Databases
	TITLE 검사중 "%LOCALAPPDATA%\Vivaldi\User Data\%%A\Databases" 2>Nul
	>VARIABLE\%VTEXT1% ECHO %MZLOCALAPPDATA%\Vivaldi\User Data\%%A\Databases\
	FOR /F "DELIMS=" %%B IN ('DIR /B /AD "%LOCALAPPDATA%\Vivaldi\User Data\%%A\Databases\" 2^>Nul') DO (
		TITLE 검사중 "%LOCALAPPDATA%\Vivaldi\…\%%A\Databases\%%B" 2>Nul
		>VARIABLE\%VTEXT2% ECHO %%B
		FOR /F "TOKENS=2 DELIMS=_" %%C IN ('ECHO %%B') DO (
			>VARIABLE\%VTEXT3% ECHO %%C
			IF EXIST "%LOCALAPPDATA%\Vivaldi\User Data\%%A\Databases\%%B\" (
				FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_DIRECTORY
			)
			IF EXIST DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB (
				IF EXIST "%LOCALAPPDATA%\Vivaldi\User Data\%%A\Databases\%%B\" (
					FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
				)
			)
		)
	)
	REM :Extensions
	TITLE 검사중 "%LOCALAPPDATA%\Vivaldi\User Data\%%A\Extensions" 2>Nul
	>VARIABLE\%VTEXT1% ECHO %MZLOCALAPPDATA%\Vivaldi\User Data\%%A\Extensions\
	FOR /F "DELIMS=" %%B IN ('DIR /B /AD "%LOCALAPPDATA%\Vivaldi\User Data\%%A\Extensions\" 2^>Nul') DO (
		TITLE 검사중 "%LOCALAPPDATA%\Vivaldi\…\%%A\Extensions\%%B" 2>Nul
		>VARIABLE\%VTEXT2% ECHO %%B
		IF EXIST "%LOCALAPPDATA%\Vivaldi\User Data\%%A\Extensions\%%B\" (
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY
		)
		IF EXIST DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB (
			IF EXIST "%LOCALAPPDATA%\Vivaldi\User Data\%%A\Extensions\%%B\" (
				FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
			)
		)
	)
	REM :Local Extension Settings
	TITLE 검사중 "%LOCALAPPDATA%\Vivaldi\User Data\%%A\Local Extension Settings" 2>Nul
	>VARIABLE\%VTEXT1% ECHO %MZLOCALAPPDATA%\Vivaldi\User Data\%%A\Local Extension Settings\
	FOR /F "DELIMS=" %%B IN ('DIR /B /AD "%LOCALAPPDATA%\Vivaldi\User Data\%%A\Local Extension Settings\" 2^>Nul') DO (
		TITLE 검사중 "%LOCALAPPDATA%\Vivaldi\…\%%A\Local Extension Settings\%%B" 2>Nul
		>VARIABLE\%VTEXT2% ECHO %%B
		IF EXIST "%LOCALAPPDATA%\Vivaldi\User Data\%%A\Local Extension Settings\%%B\" (
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY
		)
		IF EXIST DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB (
			IF EXIST "%LOCALAPPDATA%\Vivaldi\User Data\%%A\Local Extension Settings\%%B\" (
				FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
			)
		)
	)
	REM :Sync Extension Settings
	TITLE 검사중 "%LOCALAPPDATA%\Vivaldi\User Data\%%A\Sync Extension Settings" 2>Nul
	>VARIABLE\%VTEXT1% ECHO %MZLOCALAPPDATA%\Vivaldi\User Data\%%A\Sync Extension Settings\
	FOR /F "DELIMS=" %%B IN ('DIR /B /AD "%LOCALAPPDATA%\Vivaldi\User Data\%%A\Sync Extension Settings\" 2^>Nul') DO (
		TITLE 검사중 "%LOCALAPPDATA%\Vivaldi\…\%%A\Sync Extension Settings\%%B" 2>Nul
		>VARIABLE\%VTEXT2% ECHO %%B
		IF EXIST "%LOCALAPPDATA%\Vivaldi\User Data\%%A\Sync Extension Settings\%%B\" (
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY
		)
		IF EXIST DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB (
			IF EXIST "%LOCALAPPDATA%\Vivaldi\User Data\%%A\Sync Extension Settings\%%B\" (
				FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
			)
		)
	)
)
REM :Browser Extensions - Mozilla Firefox
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%APPDATA%\Mozilla\Firefox\Profiles\" 2^>Nul') DO (
	>VARIABLE\%VTEXT1% ECHO %MZAPPDATA%\Mozilla\Firefox\Profiles\%%A\Extensions\
	FOR /F "DELIMS=" %%B IN ('DIR /B /AD "%APPDATA%\Mozilla\Firefox\Profiles\%%A\Extensions\" 2^>Nul') DO (
		TITLE 검사중 "%APPDATA%\Mozilla\Firefox\…\%%A\Extensions\%%B" 2>Nul
		>VARIABLE\%VTEXT2% ECHO %%B
		IF EXIST "%APPDATA%\Mozilla\Firefox\Profiles\%%A\Extensions\%%B\" (
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_FIREFOX+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY
		)
		IF EXIST "%APPDATA%\Mozilla\Firefox\Profiles\%%A\Extensions\%%B\" (
			FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\COMBO\PATTERN_BROWSER_EXTENSIONS_FIREFOX+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
		)
	)
)
REM :[%PROGRAMFILES%]
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZPROGRAMFILES%\
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%PROGRAMFILES%\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_DIR_PROGRAMFILES.DB 2^>Nul') DO (
	TITLE 검사중 "%PROGRAMFILES%\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%PROGRAMFILES%\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -Fix -f DB_EXEC\THREAT\DIRECTORY\DEL_PROGRAMFILES.DB -f DB_EXEC\THREAT\DIRECTORY\DEL_ADWARE_XYZ+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY
	)
	IF EXIST "%PROGRAMFILES%\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_PROGRAMFILES.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
	)
	IF EXIST "%PROGRAMFILES%\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -ix -f DB_EXEC\ACTIVESCAN\COMBO\PATTERN_ADWARE_MULTIPLUG+NC.DB -f DB_EXEC\ACTIVESCAN\COMBO\PATTERN_FAKE_OPTIMIZER+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
	)
	IF EXIST "%PROGRAMFILES%\%%A\" (
		FOR /F "DELIMS=" %%B IN ('DIR /B /A-D "%PROGRAMFILES%\%%A\" 2^>Nul') DO (
			TITLE 검사중 "%PROGRAMFILES%\%%A" "%%B" 2>Nul
			>VARIABLE\%VTEXT3% ECHO %%B
			IF EXIST "%PROGRAMFILES%\%%A\" (
				CALL :GET_FILESIZE "%PROGRAMFILES%\%%A\%%B"
				SETLOCAL ENABLEDELAYEDEXPANSION
				IF !FILESIZE! LEQ 200000000 (
					ENDLOCAL
					FOR /F "TOKENS=1" %%C IN ('TOOLS\DIRHASH\DIRHASH.EXE "%PROGRAMFILES%\%%A\%%B" SHA256 -quiet -nowait 2^>Nul') DO (
						FOR /F %%X IN ('%EXEGREP% -Fixe "%%C" DB_EXEC\THREAT\DIRECTORY\DEL_PROGRAMFILES_1STEP_HYENA_FORFILE_SHA+NC.DB 2^>Nul') DO CALL :DELETE_DIRECTORY
					)
				) ELSE (
					ENDLOCAL
				)
			)
			IF EXIST "%PROGRAMFILES%\%%A\" (
				FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_PROGRAMFILES_1STEP_SCANONLY.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
					FOR /F %%Y IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\DIRECTORY\DEL_PROGRAMFILES_1STEP_HYENA_FORFILE+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
						FOR /F %%Z IN ('DIR /B /A-D "%PROGRAMFILES%\%%A\" 2^>Nul^|%EXEGREP% -c "" 2^>Nul') DO (
							IF %%Z LSS 4 CALL :DELETE_DIRECTORY
						)
					)
				)
			)
			IF EXIST "%PROGRAMFILES%\%%A\" (
				FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_PROGRAMFILES_1STEP_HYENA_ELEX_SCANONLY+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
					FOR /F %%Y IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\DIRECTORY\DEL_PROGRAMFILES_1STEP_HYENA_FORFILE_ELEX+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_DIRECTORY
				)
			)
			IF EXIST "%PROGRAMFILES%\%%A\" (
				FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_PROGRAMFILES_1STEP_HYENA_FASTSEARCH_SCANONLY+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
					FOR /F %%Y IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\DIRECTORY\DEL_PROGRAMFILES_1STEP_HYENA_FORFILE_FASTSEARCH+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_DIRECTORY
				)
			)
		)
	)
	IF EXIST "%PROGRAMFILES%\%%A\" (
		FOR /F %%X IN ('DIR /B /A "%PROGRAMFILES%\%%A\" 2^>Nul^|%EXEGREP% -c "" 2^>Nul') DO (
			IF %%X EQU 0 (
				FOR /F %%Y IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_PROGRAMFILES_EMPTY+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
			)
		)
	)
	IF EXIST "%PROGRAMFILES%\%%A\" (
		FOR /F "DELIMS=" %%B IN ('DIR /B /AD "%PROGRAMFILES%\%%A\" 2^>Nul') DO (
			TITLE 검사중 "%PROGRAMFILES%\%%A\%%B" 2>Nul
			>VARIABLE\%VTEXT3% ECHO %%B
			IF EXIST "%PROGRAMFILES%\%%A\" (
				FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_PROGRAMFILES_1STEP_HYENA_FORDIR+C.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
			)
		)
	)
)
REM :[%PROGRAMFILESX86%]
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZPROGRAMFILESX86%\
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%PROGRAMFILESX86%\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_DIR_PROGRAMFILES.DB 2^>Nul') DO (
	TITLE 검사중 "%PROGRAMFILESX86%\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%PROGRAMFILESX86%\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -Fix -f DB_EXEC\THREAT\DIRECTORY\DEL_PROGRAMFILES.DB -f DB_EXEC\THREAT\DIRECTORY\DEL_ADWARE_XYZ+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY
	)
	IF EXIST "%PROGRAMFILESX86%\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_PROGRAMFILES.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
	)
	IF EXIST "%PROGRAMFILESX86%\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -ix -f DB_EXEC\ACTIVESCAN\COMBO\PATTERN_ADWARE_MULTIPLUG+NC.DB -f DB_EXEC\ACTIVESCAN\COMBO\PATTERN_FAKE_OPTIMIZER+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
	)
	IF EXIST "%PROGRAMFILESX86%\%%A\" (
		FOR /F "DELIMS=" %%B IN ('DIR /B /A-D "%PROGRAMFILESX86%\%%A\" 2^>Nul') DO (
			TITLE 검사중 "%PROGRAMFILESX86%\%%A" "%%B" 2>Nul
			>VARIABLE\%VTEXT3% ECHO %%B
			IF EXIST "%PROGRAMFILESX86%\%%A\" (
				CALL :GET_FILESIZE "%PROGRAMFILESX86%\%%A\%%B"
				SETLOCAL ENABLEDELAYEDEXPANSION
				IF !FILESIZE! LEQ 200000000 (
					ENDLOCAL
					FOR /F "TOKENS=1" %%C IN ('TOOLS\DIRHASH\DIRHASH.EXE "%PROGRAMFILESX86%\%%A\%%B" SHA256 -quiet -nowait 2^>Nul') DO (
						FOR /F %%X IN ('%EXEGREP% -Fixe "%%C" DB_EXEC\THREAT\DIRECTORY\DEL_PROGRAMFILES_1STEP_HYENA_FORFILE_SHA+NC.DB 2^>Nul') DO CALL :DELETE_DIRECTORY
					)
				) ELSE (
					ENDLOCAL
				)
			)
			IF EXIST "%PROGRAMFILESX86%\%%A\" (
				FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_PROGRAMFILES_1STEP_SCANONLY.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
					FOR /F %%Y IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\DIRECTORY\DEL_PROGRAMFILES_1STEP_HYENA_FORFILE+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
						FOR /F %%Z IN ('DIR /B /A-D "%PROGRAMFILESX86%\%%A\" 2^>Nul^|%EXEGREP% -c "" 2^>Nul') DO (
							IF %%Z LSS 4 CALL :DELETE_DIRECTORY
						)
					)
				)
			)
			IF EXIST "%PROGRAMFILESX86%\%%A\" (
				FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_PROGRAMFILES_1STEP_HYENA_ELEX_SCANONLY+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
					FOR /F %%Y IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\DIRECTORY\DEL_PROGRAMFILES_1STEP_HYENA_FORFILE_ELEX+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_DIRECTORY
				)
			)
			IF EXIST "%PROGRAMFILESX86%\%%A\" (
				FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_PROGRAMFILES_1STEP_HYENA_FASTSEARCH_SCANONLY+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
					FOR /F %%Y IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\DIRECTORY\DEL_PROGRAMFILES_1STEP_HYENA_FORFILE_FASTSEARCH+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_DIRECTORY
				)
			)
		)
	)
	IF EXIST "%PROGRAMFILESX86%\%%A\" (
		FOR /F %%X IN ('DIR /B /A "%PROGRAMFILESX86%\%%A\" 2^>Nul^|%EXEGREP% -c "" 2^>Nul') DO (
			IF %%X EQU 0 (
				FOR /F %%Y IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_PROGRAMFILES_EMPTY+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
			)
		)
	)
	IF EXIST "%PROGRAMFILESX86%\%%A\" (
		FOR /F "DELIMS=" %%B IN ('DIR /B /AD "%PROGRAMFILESX86%\%%A\" 2^>Nul') DO (
			TITLE 검사중 "%PROGRAMFILESX86%\%%A\%%B" 2>Nul
			>VARIABLE\%VTEXT3% ECHO %%B
			IF EXIST "%PROGRAMFILESX86%\%%A\" (
				FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_PROGRAMFILES_1STEP_HYENA_FORDIR+C.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
			)
		)
	)
)
REM :[%PROGRAMFILES%] (Hidden) (Active Scan)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZPROGRAMFILES%\
FOR /F "DELIMS=" %%A IN ('DIR /B /AHD "%PROGRAMFILES%\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_DIR_PROGRAMFILES.DB 2^>Nul') DO (
	TITLE 검사중 "%PROGRAMFILES%\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%PROGRAMFILES%\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_PROGRAMFILES_ONLYHIDDEN.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
			FOR /F %%Y IN ('DIR /B /AD "%PROGRAMFILES%\%%A\" 2^>Nul^|%EXEGREP% -c "" 2^>Nul') DO (
				IF %%Y LEQ 1 (
					FOR /F %%Z IN ('DIR /B /A-D "%PROGRAMFILES%\%%A\" 2^>Nul^|%EXEGREP% -c "" 2^>Nul') DO (
						IF %%Z LSS 4 CALL :DELETE_DIRECTORY ACTIVESCAN
					)
				)
			)
		)
	)
)
REM :[%PROGRAMFILESX86%] (Hidden) (Active Scan)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZPROGRAMFILESX86%\
FOR /F "DELIMS=" %%A IN ('DIR /B /AHD "%PROGRAMFILESX86%\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_DIR_PROGRAMFILES.DB 2^>Nul') DO (
	TITLE 검사중 "%PROGRAMFILESX86%\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%PROGRAMFILESX86%\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_PROGRAMFILES_ONLYHIDDEN.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
			FOR /F %%Y IN ('DIR /B /AD "%PROGRAMFILESX86%\%%A\" 2^>Nul^|%EXEGREP% -c "" 2^>Nul') DO (
				IF %%Y LEQ 1 (
					FOR /F %%Z IN ('DIR /B /A-D "%PROGRAMFILESX86%\%%A\" 2^>Nul^|%EXEGREP% -c "" 2^>Nul') DO (
						IF %%Z LSS 4 CALL :DELETE_DIRECTORY ACTIVESCAN
					)
				)
			)
		)
	)
)
REM :[%PROGRAMFILES%] (Steps)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%PROGRAMFILES%\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_DIR_PROGRAMFILES_1STEP+NC.DB 2^>Nul') DO (
	IF /I NOT "%%A" == "TOXICFREE" (
		>VARIABLE\%VTEXT1% ECHO %MZPROGRAMFILES%\%%A\
		>VARIABLE\%VTEXT3% ECHO %%A
		FOR /F "DELIMS=" %%B IN ('DIR /B /AD "%PROGRAMFILES%\%%A\" 2^>Nul') DO (
			TITLE 검사중 "%PROGRAMFILES%\%%A\%%B" 2>Nul
			>VARIABLE\%VTEXT2% ECHO %%B
			IF EXIST "%PROGRAMFILES%\%%A\%%B\" (
				FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_PROGRAMFILES_1STEP+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
			)
		)
	)
)
REM :[%PROGRAMFILESX86%] (Steps)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%PROGRAMFILESX86%\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_DIR_PROGRAMFILES_1STEP+NC.DB 2^>Nul') DO (
	IF /I NOT "%%A" == "TOXICFREE" (
		>VARIABLE\%VTEXT1% ECHO %MZPROGRAMFILESX86%\%%A\
		>VARIABLE\%VTEXT3% ECHO %%A
		FOR /F "DELIMS=" %%B IN ('DIR /B /AD "%PROGRAMFILESX86%\%%A\" 2^>Nul') DO (
			TITLE 검사중 "%PROGRAMFILESX86%\%%A\%%B" 2>Nul
			>VARIABLE\%VTEXT2% ECHO %%B
			IF EXIST "%PROGRAMFILESX86%\%%A\%%B\" (
				FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_PROGRAMFILES_1STEP+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
			)
		)
	)
)
REM :[%PROGRAMFILES%]\Windows NT (Active Scan)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZPROGRAMFILES%\Windows NT\
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%PROGRAMFILES%\Windows NT\" 2^>Nul') DO (
	TITLE 검사중 "%PROGRAMFILES%\Windows NT\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%PROGRAMFILES%\Windows NT\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_PROGRAMFILES_WINDOWSNT+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
	)
)
REM :[%PROGRAMFILESX86%]\Windows NT (Active Scan)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZPROGRAMFILESX86%\Windows NT\
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%PROGRAMFILESX86%\Windows NT\" 2^>Nul') DO (
	TITLE 검사중 "%PROGRAMFILESX86%\Windows NT\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%PROGRAMFILESX86%\Windows NT\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_PROGRAMFILES_WINDOWSNT+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
	)
)
REM :[%PROGRAMFILES%]\WindowsApps (Active Scan)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZPROGRAMFILES%\WindowsApps\
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%PROGRAMFILES%\WindowsApps\" 2^>Nul') DO (
	TITLE 검사중 "%PROGRAMFILES%\WindowsApps\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%PROGRAMFILES%\WindowsApps\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_PROGRAMFILES_WINDOWSAPPS+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
	)
)
REM :[%PROGRAMFILESX86%]\WindowsApps (Active Scan)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZPROGRAMFILESX86%\WindowsApps\
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%PROGRAMFILESX86%\WindowsApps\" 2^>Nul') DO (
	TITLE 검사중 "%PROGRAMFILESX86%\WindowsApps\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%PROGRAMFILESX86%\WindowsApps\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_PROGRAMFILES_WINDOWSAPPS+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
	)
)
REM :[%PROGRAMFILES%], [%PROGRAMFILESX86%] (ETCs)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('TYPE DB_EXEC\THREAT\DIRECTORY\DEL_PROGRAMFILES_ETCS.DB 2^>Nul') DO (
	TITLE 검사중^(DB^) "%PROGRAMFILES%%%A" 2>Nul
	IF EXIST "%PROGRAMFILES%%%A\" (
		>VARIABLE\%VTEXT1% ECHO %MZPROGRAMFILES%%%~pA
		>VARIABLE\%VTEXT2% ECHO %%~nxA
		CALL :DELETE_DIRECTORY
	)
	TITLE 검사중^(DB^) "%PROGRAMFILESX86%%%A" 2>Nul
	IF EXIST "%PROGRAMFILESX86%%%A\" (
		>VARIABLE\%VTEXT1% ECHO %MZPROGRAMFILESX86%%%~pA
		>VARIABLE\%VTEXT2% ECHO %%~nxA
		CALL :DELETE_DIRECTORY
	)
)
REM :[%COMMONPROGRAMFILES%]
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZCOMMONPROGRAMFILES%\
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%COMMONPROGRAMFILES%\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_DIR_COMMONPROGRAMFILES.DB 2^>Nul') DO (
	TITLE 검사중 "%COMMONPROGRAMFILES%\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%COMMONPROGRAMFILES%\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\DIRECTORY\DEL_COMMONPROGRAMFILES.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY
	)
	IF EXIST "%COMMONPROGRAMFILES%\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_COMMONPROGRAMFILES.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
	)
)
REM :[%COMMONPROGRAMFILESX86%]
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZCOMMONPROGRAMFILESX86%\
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%COMMONPROGRAMFILESX86%\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_DIR_COMMONPROGRAMFILES.DB 2^>Nul') DO (
	TITLE 검사중 "%COMMONPROGRAMFILESX86%\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%COMMONPROGRAMFILESX86%\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\DIRECTORY\DEL_COMMONPROGRAMFILES.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY
	)
	IF EXIST "%COMMONPROGRAMFILESX86%\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_COMMONPROGRAMFILES.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
	)
)
REM :(Active Scan) [%SYSTEMDRIVE%] (Hidden)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %SYSTEMDRIVE%\
FOR /F "DELIMS=" %%A IN ('DIR /B /AHD "%SYSTEMDRIVE%\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_DIR_ROOT.DB 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMDRIVE%\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMDRIVE%\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_ROOT_ONLYHIDDEN.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
			FOR /F %%Y IN ('DIR /B /A-D "%SYSTEMDRIVE%\%%A\" 2^>Nul^|%EXEGREP% -c "" 2^>Nul') DO (
				IF %%Y LSS 5 CALL :DELETE_DIRECTORY ACTIVESCAN
			)
		)
	)
)
REM :(Active Scan) [%SYSTEMROOT%]
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%SYSTEMROOT%\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_DIR_SYSTEMROOT.DB 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\%%A" 2>Nul
	SETLOCAL ENABLEDELAYEDEXPANSION
	ECHO "%%A"|%EXEGREP% -xq "^\(\""\([0-9A-F]\{8\}\)\""\)$" >Nul 2>Nul
	IF !ERRORLEVEL! EQU 0 (
		ENDLOCAL
		FOR /F "DELIMS=" %%X IN ('DIR /B /A-D "%SYSTEMROOT%\%%A\" 2^>Nul') DO (
			SETLOCAL ENABLEDELAYEDEXPANSION
			ECHO "%%X"|%EXEGREP% -ixq "^\(\""\(SVCHSOT\.EXE\)\""\)$" >Nul 2>Nul
			IF !ERRORLEVEL! EQU 0 (
				ENDLOCAL
				>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\
				>VARIABLE\%VTEXT2% ECHO %%A
				CALL :DELETE_DIRECTORY ACTIVESCAN
			) ELSE (
				ENDLOCAL
			)
		)
	) ELSE (
		ENDLOCAL
	)
)
REM :(Active Scan) [%SYSTEMROOT%]\addins
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\addins\
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%SYSTEMROOT%\addins\" 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\addins\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\addins\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_SYSTEMROOT_ADDINS.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
	)
)
REM :(Active Scan) [%SYSTEMROOT%]\AppPatch
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\AppPatch\
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%SYSTEMROOT%\AppPatch\" 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\AppPatch\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\AppPatch\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_SYSTEMROOT_APPPATCH.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
	)
)
REM :(Active Scan) [%SYSTEMROOT%]\Downloaded Program Files
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\Downloaded Program Files\
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%SYSTEMROOT%\Downloaded Program Files\" 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\Downloaded Program Files\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\Downloaded Program Files\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_DOWNLOADEDPROGRAMFILES.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
	)
)
REM :(Active Scan) [%SYSTEMROOT%]\MUI
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\MUI\
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%SYSTEMROOT%\MUI\" 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\MUI\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\MUI\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_SYSTEMROOT_MUI.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
	)
)
REM :(Active Scan) [%SYSTEMROOT%]\Web
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\Web\
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%SYSTEMROOT%\Web\" 2^>Nul') DO (
	TITLE 검사중 "%SYSTEMROOT%\Web\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\Web\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_SYSTEMROOT_WEB.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
	)
)
REM :(Active Scan) [%ALLUSERSPROFILE%] (Hidden)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZALLUSERSPROFILE%\
FOR /F "DELIMS=" %%A IN ('DIR /B /AHD "%ALLUSERSPROFILE%\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_DIR_ALLUSERSPROFILE+NC.DB 2^>Nul') DO (
	TITLE 검사중 "%ALLUSERSPROFILE%\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%ALLUSERSPROFILE%\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_ALLUSERSPROFILE_ONLYHIDDEN+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
			FOR /F %%Y IN ('DIR /B /A-D "%ALLUSERSPROFILE%\%%A\" 2^>Nul^|%EXEGREP% -c "" 2^>Nul') DO (
				IF %%Y LSS 4 CALL :DELETE_DIRECTORY ACTIVESCAN
			)
		)
	)
)
REM :(Active Scan) [%ALLUSERSPROFILE%] (Super Hidden)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZALLUSERSPROFILE%\
FOR /F "DELIMS=" %%A IN ('DIR /B /AHSD "%ALLUSERSPROFILE%\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_DIR_ALLUSERSPROFILE+NC.DB 2^>Nul') DO (
	TITLE 검사중 "%ALLUSERSPROFILE%\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%ALLUSERSPROFILE%\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_ALLUSERSPROFILE_ONLYSUPERHIDDEN+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
			FOR /F %%Y IN ('DIR /B /A-D "%ALLUSERSPROFILE%\%%A\" 2^>Nul^|%EXEGREP% -c "" 2^>Nul') DO (
				CALL :DELETE_DIRECTORY ACTIVESCAN
			)
		)
	)
)
REM :(Active Scan) [%COMMONPROGRAMFILES%] (for 1-Step & MD5)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZCOMMONPROGRAMFILES%\
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%COMMONPROGRAMFILES%\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_DIR_COMMONPROGRAMFILES.DB 2^>Nul') DO (
	TITLE 검사중 "%COMMONPROGRAMFILES%\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_COMMONPROGRAMFILES_1STEP.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
		FOR /F "DELIMS=" %%B IN ('DIR /B /A-D "%COMMONPROGRAMFILES%\%%A\" 2^>Nul') DO (
			>VARIABLE\%VTEXT3% ECHO %%B
			IF EXIST "%COMMONPROGRAMFILES%\%%A\" (
				FOR /F %%Y IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\DIRECTORY\DEL_COMMONPROGRAMFILES_1STEP_FORFILE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
					FOR /F %%Z IN ('DIR /B /A-D "%COMMONPROGRAMFILES%\%%A\" 2^>Nul^|%EXEGREP% -c "" 2^>Nul') DO (
						IF %%Z LSS 4 CALL :DELETE_DIRECTORY ACTIVESCAN
					)
				)
			)
			IF EXIST "%COMMONPROGRAMFILES%\%%A\" (
				CALL :GET_FILESIZE "%COMMONPROGRAMFILES%\%%A\%%B"
				SETLOCAL ENABLEDELAYEDEXPANSION
				IF !FILESIZE! LEQ 200000000 (
					ENDLOCAL
					FOR /F "TOKENS=1" %%C IN ('TOOLS\DIRHASH\DIRHASH.EXE "%COMMONPROGRAMFILES%\%%A\%%B" SHA256 -quiet -nowait 2^>Nul') DO (
						FOR /F %%X IN ('%EXEGREP% -Fixe "%%C" DB_EXEC\THREAT\DIRECTORY\DEL_COMMONPROGRAMFILES_1STEP_FORFILE_MD5+NC.DB 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
					)
				) ELSE (
					ENDLOCAL
				)
			)
		)
	)
)
REM :(Active Scan) [%COMMONPROGRAMFILESX86%] (for 1-Step & MD5)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZCOMMONPROGRAMFILESX86%\
FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%COMMONPROGRAMFILESX86%\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_DIR_COMMONPROGRAMFILES.DB 2^>Nul') DO (
	TITLE 검사중 "%COMMONPROGRAMFILESX86%\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_COMMONPROGRAMFILES_1STEP.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
		FOR /F "DELIMS=" %%B IN ('DIR /B /A-D "%COMMONPROGRAMFILESX86%\%%A\" 2^>Nul') DO (
			>VARIABLE\%VTEXT3% ECHO %%B
			IF EXIST "%COMMONPROGRAMFILESX86%\%%A\" (
				FOR /F %%Y IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\DIRECTORY\DEL_COMMONPROGRAMFILES_1STEP_FORFILE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
					FOR /F %%Z IN ('DIR /B /A-D "%COMMONPROGRAMFILESX86%\%%A\" 2^>Nul^|%EXEGREP% -c "" 2^>Nul') DO (
						IF %%Z LSS 4 CALL :DELETE_DIRECTORY ACTIVESCAN
					)
				)
			)
			IF EXIST "%COMMONPROGRAMFILESX86%\%%A\" (
				CALL :GET_FILESIZE "%COMMONPROGRAMFILESX86%\%%A\%%B"
				SETLOCAL ENABLEDELAYEDEXPANSION
				IF !FILESIZE! LEQ 200000000 (
					ENDLOCAL
					FOR /F "TOKENS=1" %%C IN ('TOOLS\DIRHASH\DIRHASH.EXE "%COMMONPROGRAMFILESX86%\%%A\%%B" SHA256 -quiet -nowait 2^>Nul') DO (
						FOR /F %%X IN ('%EXEGREP% -Fixe "%%C" DB_EXEC\THREAT\DIRECTORY\DEL_COMMONPROGRAMFILES_1STEP_FORFILE_MD5+NC.DB 2^>Nul') DO CALL :DELETE_DIRECTORY ACTIVESCAN
					)
				) ELSE (
					ENDLOCAL
				)
			)
		)
	)
)
REM :(Active Scan) [%APPDATA%] (Super Hidden)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZAPPDATA%\
FOR /F "DELIMS=" %%A IN ('DIR /B /AHSD "%APPDATA%\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_DIR_APPDATA_ROAMING+NC.DB 2^>Nul') DO (
	TITLE 검사중 "%APPDATA%\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%APPDATA%\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_APPDATA_ONLYSUPERHIDDEN.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
			FOR /F %%Y IN ('DIR /B /A-D "%APPDATA%\%%A\" 2^>Nul^|%EXEGREP% -c "" 2^>Nul') DO (
				IF %%Y LSS 4 CALL :DELETE_DIRECTORY ACTIVESCAN
			)
		)
	)
	IF EXIST "%APPDATA%\%%A\" (
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_APPDATA_ROAMING_ONLYSUPERHIDDEN+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
			FOR /F %%Y IN ('DIR /B /A-D "%APPDATA%\%%A\" 2^>Nul^|%EXEGREP% -c "" 2^>Nul') DO (
				IF %%Y LSS 10 CALL :DELETE_DIRECTORY ACTIVESCAN
			)
		)
	)
)
REM :(Active Scan) D: Root (Hidden)
IF /I "%DDRV%" == "TRUE" (
	TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
	>VARIABLE\%VTEXT1% ECHO D:\
	FOR /F "DELIMS=" %%A IN ('DIR /B /AHD "D:\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_DIR_ROOT.DB 2^>Nul') DO (
		TITLE 검사중 "D:\%%A" 2>Nul
		>VARIABLE\%VTEXT2% ECHO %%A
		IF EXIST "D:\%%A\" (
			FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\DIRECTORY\PATTERN_ROOT_D_ONLYHIDDEN.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
				FOR /F %%Y IN ('DIR /B /AD "D:\%%A\" 2^>Nul^|%EXEGREP% -c "" 2^>Nul') DO (
					IF %%Y LEQ 1 (
						FOR /F %%Z IN ('DIR /B /A-D "D:\%%A\" 2^>Nul^|%EXEGREP% -c "" 2^>Nul') DO (
							IF %%Z LSS 4 CALL :DELETE_DIRECTORY ACTIVESCAN
						)
					)
				)
			)
		)
	)
)
REM :(Special) Fake Firefox
IF EXIST "%PROGRAMFILES%\Firefox\bin\" (
	TITLE 검사중 "%PROGRAMFILES%\Firefox" 2>Nul
	>VARIABLE\%VTEXT1% ECHO %MZPROGRAMFILES%\
	>VARIABLE\%VTEXT2% ECHO Firefox
	CALL :DELETE_DIRECTORY
)
REM :(Special) Fake Firefox (x86)
IF EXIST "%PROGRAMFILESX86%\Firefox\bin\" (
	TITLE 검사중 "%PROGRAMFILESX86%\Firefox" 2>Nul
	>VARIABLE\%VTEXT1% ECHO %MZPROGRAMFILESX86%\
	>VARIABLE\%VTEXT2% ECHO Firefox
	CALL :DELETE_DIRECTORY
)
REM :(Static) D:
IF /I "%DDRV%" == "TRUE" (
	TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
	FOR /F "DELIMS=" %%A IN ('TYPE DB_EXEC\THREAT\DIRECTORY\DEL_STATIC.DB 2^>Nul') DO (
		TITLE 검사중^(DB^) "%%A" 2>Nul
		IF EXIST "%%A\" (
			>VARIABLE\%VTEXT1% ECHO %%~dpA
			>VARIABLE\%VTEXT2% ECHO %%~nxA
			CALL :DELETE_DIRECTORY
		)
	)
)
REM :Result
CALL :PROCESS_RESULT RECK CHKINFECT
REM :Reset Value
CALL :RESET_VALUE

TITLE %MZTITLE% 2>Nul & PING.EXE -n 2 0 >Nul 2>Nul & ECHO. & >>"%QLog%" ECHO.

REM * Malicious Hosts File Delete
ECHO ◇ 악성 호스트 파일 제거중 . . . & >>"%QLog%" ECHO    ■ 악성 호스트 파일 제거 :
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\System32\Drivers\etc\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%SYSTEMROOT%\System32\Drivers\etc\" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_FILE_DRIVERS_ETC.DB 2^>Nul') DO (
	TITLE 검사중 "%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "%SYSTEMROOT%\System32\Drivers\etc\%%A" (
		>VARIABLE\%VCHECK% ECHO 0
		FOR /F %%X IN ('%EXEGREP% -Fif DB_EXEC\CHECK\CHK_HOSTS_STRING+NC.DB "%SYSTEMROOT%\System32\Drivers\etc\%%A" 2^>Nul^|%EXEGREP% -v "^#" 2^>Nul') DO (
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				>VARIABLE\%VCHECK% ECHO 1
				CALL :DELETE_FILE
			) ELSE (
				ENDLOCAL
			)
		)
	)
)
IF NOT EXIST "%SYSTEMROOT%\System32\Drivers\etc\hosts" (
	COPY /Y REPAIR\hosts "%SYSTEMROOT%\System32\Drivers\etc\" >Nul 2>Nul
)
REM :Result
CALL :PROCESS_RESULT NULL CHKINFECT
REM :Reset Value
CALL :RESET_VALUE

TITLE %MZTITLE% 2>Nul & PING.EXE -n 2 0 >Nul 2>Nul & ECHO. & >>"%QLog%" ECHO.

REM * Reset Network DNS Address <#1>
ECHO ◇ 네트워크 DNS 주소 상태 확인중 - 1차 . . . & >>"%QLog%" ECHO    ■ 네트워크 DNS 주소 상태 확인 - 1차 :
TITLE ^(확인중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\NameServer" 2^>Nul') DO (
	IF NOT "%%A" == "" (
		>VARIABLE\%VTEXT2% ECHO %%A
		>VARIABLE\%VCHECK% ECHO 0
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -Fxf DB_EXEC\THREAT\NETWORK\DEL_DNS_ADDRESS.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :RESET_DNS NULL NULL
		) ELSE (
			ENDLOCAL
		)
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\NETWORK\PATTERN_DNS_ADDRESS.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :RESET_DNS NULL NULL
		) ELSE (
			ENDLOCAL
		)
	)
)
TITLE ^(확인중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\DhcpNameServer" 2^>Nul') DO (
	IF NOT "%%A" == "" (
		>VARIABLE\%VTEXT2% ECHO %%A
		>VARIABLE\%VCHECK% ECHO 0
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -Fxf DB_EXEC\THREAT\NETWORK\DEL_DNS_ADDRESS.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :RESET_DNS NULL DHCP
		) ELSE (
			ENDLOCAL
		)
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\NETWORK\PATTERN_DNS_ADDRESS.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :RESET_DNS NULL DHCP
		) ELSE (
			ENDLOCAL
		)
	)
)
TITLE ^(확인중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces" 2^>Nul') DO (
	>VARIABLE\%VTEXT1% ECHO %%A
	FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\%%A\NameServer" 2^>Nul') DO (
		IF NOT "%%B" == "" (
			>VARIABLE\%VTEXT2% ECHO %%B
			>VARIABLE\%VCHECK% ECHO 0
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				FOR /F %%X IN ('%EXEGREP% -Fxf DB_EXEC\THREAT\NETWORK\DEL_DNS_ADDRESS.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :RESET_DNS DEVS NULL
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\NETWORK\PATTERN_DNS_ADDRESS.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :RESET_DNS DEVS NULL
			) ELSE (
				ENDLOCAL
			)
		)
	)
)
TITLE ^(확인중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces" 2^>Nul') DO (
	>VARIABLE\%VTEXT1% ECHO %%A
	FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\%%A\DhcpNameServer" 2^>Nul') DO (
		IF NOT "%%B" == "" (
			>VARIABLE\%VTEXT2% ECHO %%B
			>VARIABLE\%VCHECK% ECHO 0
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				FOR /F %%X IN ('%EXEGREP% -Fxf DB_EXEC\THREAT\NETWORK\DEL_DNS_ADDRESS.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :RESET_DNS DEVS DHCP
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\NETWORK\PATTERN_DNS_ADDRESS.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :RESET_DNS DEVS DHCP
			) ELSE (
				ENDLOCAL
			)
		)
	)
)
SETLOCAL ENABLEDELAYEDEXPANSION
<VARIABLE\!VSEARCH! SET /P SRCH=
IF !SRCH! EQU 0 (
	ENDLOCAL
	ECHO    문제점이 발견되지 않았습니다. & >>"%QLog%" ECHO    문제점이 발견되지 않음
) ELSE (
	ENDLOCAL
	>VARIABLE\%VXXYY% ECHO 1
	ECHO. & >>"%QLog%" ECHO.
	ECHO ⓘ 상태 초기화 후 네트워크 연결이 불가할 경우, ^<3. 문제 해결^> 문서 ^<문제 07^> 항목 참고 & >>"%QLog%" ECHO    ⓘ 상태 초기화 후 네트워크 연결이 불가할 경우, ^<3. 문제 해결^> 문서 ^<문제 07^> 항목 참고
)
REM :Reset Value
CALL :RESET_VALUE

TITLE %MZTITLE% 2>Nul & PING.EXE -n 2 0 >Nul 2>Nul & ECHO. & >>"%QLog%" ECHO.

REM * Reset WinSock Protocol
ECHO ◇ 소켓 프로토콜 상태 확인중 . . . & >>"%QLog%" ECHO    ■ 소켓 프로토콜 상태 확인 :
TITLE ^(확인중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('NETSH.EXE WINSOCK SHOW CATALOG 2^>Nul^|%EXEGREP% -i "^\(Provider Path:\|Provider Path :\|공급자 경로:\|공급자 경로 :\)" 2^>Nul') DO (
	>VARIABLE\%VTEXT3% ECHO %%~nxA
	FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\NETWORK\DEL_BAD_WINSOCK_PROTOCOL.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		>VARIABLE\%VCHECK% ECHO 1
		SETLOCAL ENABLEDELAYEDEXPANSION
		NETSH.EXE WINSOCK RESET >Nul 2>Nul
		IF !ERRORLEVEL! EQU 0 (
			ECHO    비정상 값이 확인되어 초기화를 진행합니다. ^(재부팅 필요^) & >>"!QLog!" ECHO    비정상 값이 확인되어 초기화 진행 ^(재부팅 필요^)
		) ELSE (
			ECHO    비정상 값이 확인되어 초기화를 진행하였으나 오류가 발생했습니다. & >>"!QLog!" ECHO    비정상 값이 확인되어 초기화 진행 ^(실패 - 오류 발생^)
		)
		ENDLOCAL & GOTO RS_WSLSP
	)
	>VARIABLE\%VTEXT3% ECHO %%A
	FOR /F %%X IN ('%EXEGREP% -if DB_EXEC\ACTIVESCAN\NETWORK\PATTERN_BAD_WINSOCK_PROTOCOL.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		>VARIABLE\%VCHECK% ECHO 1
		SETLOCAL ENABLEDELAYEDEXPANSION
		NETSH.EXE WINSOCK RESET >Nul 2>Nul
		IF !ERRORLEVEL! EQU 0 (
			ECHO    비정상 값이 확인되어 초기화를 진행합니다. ^(재부팅 필요^) & >>"!QLog!" ECHO    비정상 값이 확인되어 초기화 진행 ^(재부팅 필요^)
		) ELSE (
			ECHO    비정상 값이 확인되어 초기화를 진행하였으나 오류가 발생했습니다. & >>"!QLog!" ECHO    비정상 값이 확인되어 초기화 진행 ^(실패 - 오류 발생^)
		)
		ENDLOCAL & GOTO RS_WSLSP
	)
)
:RS_WSLSP
SETLOCAL ENABLEDELAYEDEXPANSION
<VARIABLE\!VCHECK! SET /P CHCK=
IF !CHCK! EQU 0 (
	ENDLOCAL
	ECHO    문제점이 발견되지 않았습니다. & >>"%QLog%" ECHO    문제점이 발견되지 않음
) ELSE (
	ENDLOCAL
	>VARIABLE\%VXXYY% ECHO 1
)
REM :Reset Value
CALL :RESET_VALUE

TITLE %MZTITLE% 2>Nul & PING.EXE -n 2 0 >Nul 2>Nul & ECHO. & >>"%QLog%" ECHO.

REM * Delete - Registry <HKEY_CLASSES_ROOT>
ECHO ◇ 악성 및 유해 가능 ^<HKEY_CLASSES_ROOT^> 레지스트리 제거중 . . . & >>"%QLog%" ECHO    ■ 악성 및 유해 가능 ^<HKEY_CLASSES_ROOT^> 레지스트리 제거 :
REM :HKCR
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k list "\HKCR" 2>Nul|%EXEGREP% -ivxf DB\EXCEPT\EX_REG_HK_PATTERN.DB 2>Nul|%EXEGREP% -Fivxf DB\EXCEPT\EX_REG_HK.DB 2>Nul >DB_ACTIVE\ACT_REG_HKCR_%UNIQ%.DB
>VARIABLE\%VTEXT1% ECHO HKCR
SET "STRTMP=HKCR"
IF EXIST "DB_ACTIVE\ACT_REG_HKCR_%UNIQ%.DB" (
	FOR /F "DELIMS=" %%A IN ('TYPE DB_ACTIVE\ACT_REG_HKCR_%UNIQ%.DB 2^>Nul') DO (
		TITLE 검사중 "HKCR\%%A" 2>Nul
		>VARIABLE\%VTEXT2% ECHO %%A
		>VARIABLE\%VCHECK% ECHO 0
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HK.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
		) ELSE (
			ENDLOCAL
		)
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_HK.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
		) ELSE (
			ENDLOCAL
		)
	)
)
REM :HKCR\APPID
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k list "\HKCR\APPID" 2>Nul|%EXEGREP% -Fivxf DB\EXCEPT\EX_REG_HK_APPID.DB 2>Nul >DB_ACTIVE\ACT_REG_HKCR_APPID_%UNIQ%.DB
>VARIABLE\%VTEXT1% ECHO HKCR\APPID
SET "STRTMP=HKCR_APPID"
IF EXIST "DB_ACTIVE\ACT_REG_HKCR_APPID_%UNIQ%.DB" (
	FOR /F "DELIMS=" %%A IN ('TYPE DB_ACTIVE\ACT_REG_HKCR_APPID_%UNIQ%.DB 2^>Nul') DO (
		TITLE 검사중 "HKCR\APPID\%%A" 2>Nul
		>VARIABLE\%VTEXT2% ECHO %%A
		>VARIABLE\%VCHECK% ECHO 0
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HK_APPID.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
		) ELSE (
			ENDLOCAL
		)
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			CALL :GET_REG_DETAILVALUE
		) ELSE (
			ENDLOCAL
		)
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -Fxf DB_EXEC\THREAT\REGISTRY\DEL_HK_APPID_DEFAULTVAL.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
		) ELSE (
			ENDLOCAL
		)
	)
)
REM :HKCR\Wow6432Node\APPID
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k list "\HKCR\Wow6432Node\APPID" 2>Nul|%EXEGREP% -Fivxf DB\EXCEPT\EX_REG_HK_APPID.DB 2>Nul >DB_ACTIVE\ACT_REG_HKCR_APPID_X86_%UNIQ%.DB
>VARIABLE\%VTEXT1% ECHO HKCR\Wow6432Node\APPID
SET "STRTMP=HKCR_APPID(x86)"
IF EXIST "DB_ACTIVE\ACT_REG_HKCR_APPID_X86_%UNIQ%.DB" (
	FOR /F "DELIMS=" %%A IN ('TYPE DB_ACTIVE\ACT_REG_HKCR_APPID_X86_%UNIQ%.DB 2^>Nul') DO (
		TITLE 검사중 "HKCR\Wow6432Node\APPID\%%A" 2>Nul
		>VARIABLE\%VTEXT2% ECHO %%A
		>VARIABLE\%VCHECK% ECHO 0
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HK_APPID.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
		) ELSE (
			ENDLOCAL
		)
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			CALL :GET_REG_DETAILVALUE
		) ELSE (
			ENDLOCAL
		)
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -Fxf DB_EXEC\THREAT\REGISTRY\DEL_HK_APPID_DEFAULTVAL.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
		) ELSE (
			ENDLOCAL
		)
	)
)
REM :HKCR\CLSID
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k list "\HKCR\CLSID" 2>Nul|%EXEGREP% -Fivxf DB\EXCEPT\EX_REG_HK_CLSID.DB 2>Nul|%EXEGREP% -ivxf DB\EXCEPT\EX_REG_HK_CLSID_PATTERN+NC.DB 2>Nul >DB_ACTIVE\ACT_REG_HKCR_CLSID_%UNIQ%.DB
>VARIABLE\%VTEXT1% ECHO HKCR\CLSID
SET "STRTMP=HKCR_CLSID"
IF EXIST "DB_ACTIVE\ACT_REG_HKCR_CLSID_%UNIQ%.DB" (
	FOR /F "DELIMS=" %%A IN ('TYPE DB_ACTIVE\ACT_REG_HKCR_CLSID_%UNIQ%.DB 2^>Nul') DO (
		TITLE 검사중 "HKCR\CLSID\%%A" 2>Nul
		>VARIABLE\%VTEXT2% ECHO %%A
		>VARIABLE\%VCHECK% ECHO 0
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HK_CLSID.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
		) ELSE (
			ENDLOCAL
		)
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_HK_CLSID.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
		) ELSE (
			ENDLOCAL
		)
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			CALL :GET_REG_DETAILVALUE
		) ELSE (
			ENDLOCAL
		)
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -Fxf DB_EXEC\THREAT\REGISTRY\DEL_HK_CLSID_DEFAULTVAL.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
				>>DB_ACTIVE\ACT_REG_HK_CLSID_%UNIQ%.DB ECHO %%A
				CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
			)
		) ELSE (
			ENDLOCAL
		)
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_HK_CLSID_DEFAULTVAL.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
				>>DB_ACTIVE\ACT_REG_HK_CLSID_%UNIQ%.DB ECHO %%A
				CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
			)
		) ELSE (
			ENDLOCAL
		)
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\COMBO\PATTERN_ADWARE_MULTIPLUG+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
				>>DB_ACTIVE\ACT_REG_HK_CLSID_%UNIQ%.DB ECHO %%A
				CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
			)
		) ELSE (
			ENDLOCAL
		)
	)
)
REM :HKCR\Wow6432Node\CLSID
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k list "\HKCR\Wow6432Node\CLSID" 2>Nul|%EXEGREP% -Fivxf DB\EXCEPT\EX_REG_HK_CLSID.DB 2>Nul|%EXEGREP% -ivxf DB\EXCEPT\EX_REG_HK_CLSID_PATTERN+NC.DB 2>Nul >DB_ACTIVE\ACT_REG_HKCR_CLSID_X86_%UNIQ%.DB
>VARIABLE\%VTEXT1% ECHO HKCR\Wow6432Node\CLSID
SET "STRTMP=HKCR_CLSID(x86)"
IF EXIST "DB_ACTIVE\ACT_REG_HKCR_CLSID_X86_%UNIQ%.DB" (
	FOR /F "DELIMS=" %%A IN ('TYPE DB_ACTIVE\ACT_REG_HKCR_CLSID_X86_%UNIQ%.DB 2^>Nul') DO (
		TITLE 검사중 "HKCR\Wow6432Node\CLSID\%%A" 2>Nul
		>VARIABLE\%VTEXT2% ECHO %%A
		>VARIABLE\%VCHECK% ECHO 0
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HK_CLSID.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
		) ELSE (
			ENDLOCAL
		)
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_HK_CLSID.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
		) ELSE (
			ENDLOCAL
		)
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			CALL :GET_REG_DETAILVALUE
		) ELSE (
			ENDLOCAL
		)
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -Fxf DB_EXEC\THREAT\REGISTRY\DEL_HK_CLSID_DEFAULTVAL.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
				>>DB_ACTIVE\ACT_REG_HK_CLSID_%UNIQ%.DB ECHO %%A
				CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
			)
		) ELSE (
			ENDLOCAL
		)
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_HK_CLSID_DEFAULTVAL.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
				>>DB_ACTIVE\ACT_REG_HK_CLSID_%UNIQ%.DB ECHO %%A
				CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
			)
		) ELSE (
			ENDLOCAL
		)
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\COMBO\PATTERN_ADWARE_MULTIPLUG+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
				>>DB_ACTIVE\ACT_REG_HK_CLSID_%UNIQ%.DB ECHO %%A
				CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
			)
		) ELSE (
			ENDLOCAL
		)
	)
)
REM :HKCR\Interface
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k list "\HKCR\Interface" 2>Nul|%EXEGREP% -Fivxf DB\EXCEPT\EX_REG_HK_INTERFACE.DB 2>Nul|%EXEGREP% -ivxf DB\EXCEPT\EX_REG_HK_INTERFACE_PATTERN+NC.DB 2>Nul >DB_ACTIVE\ACT_REG_HKCR_INTERFACE_%UNIQ%.DB
>VARIABLE\%VTEXT1% ECHO HKCR\Interface
SET "STRTMP=HKCR_Interface"
IF EXIST "DB_ACTIVE\ACT_REG_HKCR_INTERFACE_%UNIQ%.DB" (
	FOR /F "DELIMS=" %%A IN ('TYPE DB_ACTIVE\ACT_REG_HKCR_INTERFACE_%UNIQ%.DB 2^>Nul') DO (
		TITLE 검사중 "HKCR\Interface\%%A" 2>Nul
		>VARIABLE\%VTEXT2% ECHO %%A
		>VARIABLE\%VCHECK% ECHO 0
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HK_INTERFACE.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
		) ELSE (
			ENDLOCAL
		)
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			CALL :GET_REG_DETAILVALUE
		) ELSE (
			ENDLOCAL
		)
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -Fxf DB_EXEC\THREAT\REGISTRY\DEL_HK_INTERFACE_DEFAULTVAL.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
		) ELSE (
			ENDLOCAL
		)
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_HK_INTERFACE_DEFAULTVAL.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
		) ELSE (
			ENDLOCAL
		)
	)
)
REM :HKCR\Wow6432Node\Interface
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k list "\HKCR\Wow6432Node\Interface" 2>Nul|%EXEGREP% -Fivxf DB\EXCEPT\EX_REG_HK_INTERFACE.DB 2>Nul|%EXEGREP% -ivxf DB\EXCEPT\EX_REG_HK_INTERFACE_PATTERN+NC.DB 2>Nul >DB_ACTIVE\ACT_REG_HKCR_INTERFACE_X86_%UNIQ%.DB
>VARIABLE\%VTEXT1% ECHO HKCR\Wow6432Node\Interface
SET "STRTMP=HKCR_Interface(x86)"
IF EXIST "DB_ACTIVE\ACT_REG_HKCR_INTERFACE_X86_%UNIQ%.DB" (
	FOR /F "DELIMS=" %%A IN ('TYPE DB_ACTIVE\ACT_REG_HKCR_INTERFACE_X86_%UNIQ%.DB 2^>Nul') DO (
		TITLE 검사중 "HKCR\Wow6432Node\Interface\%%A" 2>Nul
		>VARIABLE\%VTEXT2% ECHO %%A
		>VARIABLE\%VCHECK% ECHO 0
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HK_INTERFACE.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
		) ELSE (
			ENDLOCAL
		)
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			CALL :GET_REG_DETAILVALUE
		) ELSE (
			ENDLOCAL
		)
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -Fxf DB_EXEC\THREAT\REGISTRY\DEL_HK_INTERFACE_DEFAULTVAL.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
		) ELSE (
			ENDLOCAL
		)
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_HK_INTERFACE_DEFAULTVAL.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
		) ELSE (
			ENDLOCAL
		)
	)
)
REM :HKCR\TypeLib
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k list "\HKCR\TypeLib" 2>Nul|%EXEGREP% -Fivxf DB\EXCEPT\EX_REG_HK_TYPELIB.DB 2>Nul >DB_ACTIVE\ACT_REG_HKCR_TYPELIB_%UNIQ%.DB
>VARIABLE\%VTEXT1% ECHO HKCR\TypeLib
SET "STRTMP=HKCR_TypeLib"
IF EXIST "DB_ACTIVE\ACT_REG_HKCR_TYPELIB_%UNIQ%.DB" (
	FOR /F "DELIMS=" %%A IN ('TYPE DB_ACTIVE\ACT_REG_HKCR_TYPELIB_%UNIQ%.DB 2^>Nul') DO (
		TITLE 검사중 "HKCR\TypeLib\%%A" 2>Nul
		>VARIABLE\%VTEXT2% ECHO %%A
		>VARIABLE\%VCHECK% ECHO 0
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HK_TYPELIB.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
		) ELSE (
			ENDLOCAL
		)
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKCR\TypeLib\%%A" 2^>Nul') DO (
				FOR /F "DELIMS=" %%C IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCR\TypeLib\%%A\%%B\\" 2^>Nul') DO (
					SETLOCAL ENABLEDELAYEDEXPANSION
					<VARIABLE\!VCHECK! SET /P CHCK=
					IF !CHCK! EQU 0 (
						ENDLOCAL
						>VARIABLE\%VTEXT3% ECHO %%C
					) ELSE (
						ENDLOCAL
					)
					SETLOCAL ENABLEDELAYEDEXPANSION
					<VARIABLE\!VCHECK! SET /P CHCK=
					IF !CHCK! EQU 0 (
						ENDLOCAL
						FOR /F %%X IN ('%EXEGREP% -Fxf DB_EXEC\THREAT\REGISTRY\DEL_HK_TYPELIB_DEFAULTVAL.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
					) ELSE (
						ENDLOCAL
					)
					SETLOCAL ENABLEDELAYEDEXPANSION
					<VARIABLE\!VCHECK! SET /P CHCK=
					IF !CHCK! EQU 0 (
						ENDLOCAL
						FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_HK_TYPELIB_DEFAULTVAL.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
					) ELSE (
						ENDLOCAL
					)
				)
			)
		) ELSE (
			ENDLOCAL
		)
	)
)
REM :HKCR\Wow6432Node\TypeLib
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k list "\HKCR\Wow6432Node\TypeLib" 2>Nul|%EXEGREP% -Fivxf DB\EXCEPT\EX_REG_HK_TYPELIB.DB 2>Nul >DB_ACTIVE\ACT_REG_HKCR_TYPELIB_X86_%UNIQ%.DB
>VARIABLE\%VTEXT1% ECHO HKCR\Wow6432Node\TypeLib
SET "STRTMP=HKCR_TypeLib(x86)"
IF EXIST "DB_ACTIVE\ACT_REG_HKCR_TYPELIB_X86_%UNIQ%.DB" (
	FOR /F "DELIMS=" %%A IN ('TYPE DB_ACTIVE\ACT_REG_HKCR_TYPELIB_X86_%UNIQ%.DB 2^>Nul') DO (
		TITLE 검사중 "HKCR\Wow6432Node\TypeLib\%%A" 2>Nul
		>VARIABLE\%VTEXT2% ECHO %%A
		>VARIABLE\%VCHECK% ECHO 0
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HK_TYPELIB.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
		) ELSE (
			ENDLOCAL
		)
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKCR\Wow6432Node\TypeLib\%%A" 2^>Nul') DO (
				FOR /F "DELIMS=" %%C IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCR\Wow6432Node\TypeLib\%%A\%%B\\" 2^>Nul') DO (
					SETLOCAL ENABLEDELAYEDEXPANSION
					<VARIABLE\!VCHECK! SET /P CHCK=
					IF !CHCK! EQU 0 (
						ENDLOCAL
						>VARIABLE\%VTEXT3% ECHO %%C
					) ELSE (
						ENDLOCAL
					)
					SETLOCAL ENABLEDELAYEDEXPANSION
					<VARIABLE\!VCHECK! SET /P CHCK=
					IF !CHCK! EQU 0 (
						ENDLOCAL
						FOR /F %%X IN ('%EXEGREP% -Fxf DB_EXEC\THREAT\REGISTRY\DEL_HK_TYPELIB_DEFAULTVAL.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
					) ELSE (
						ENDLOCAL
					)
					SETLOCAL ENABLEDELAYEDEXPANSION
					<VARIABLE\!VCHECK! SET /P CHCK=
					IF !CHCK! EQU 0 (
						ENDLOCAL
						FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_HK_TYPELIB_DEFAULTVAL.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
					) ELSE (
						ENDLOCAL
					)
				)
			)
		) ELSE (
			ENDLOCAL
		)
	)
)
REM :HKCR (ETCs)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "TOKENS=1,2 DELIMS=|" %%A IN ('TYPE DB_EXEC\THREAT\REGISTRY\DEL_HKCR_ETCS+NC.DB 2^>Nul') DO (
	IF NOT "%%B" == "" (
		TITLE 검사중^(DB^) "HKCR\%%A : %%~nxB" 2>Nul
		FOR /F %%X IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -b -q get "\HKCR\%%A\%%B" 2^>Nul') DO (
			>VARIABLE\%VTEXT1% ECHO HKCR\%%A
			>VARIABLE\%VTEXT2% ECHO %%B
			CALL :DELETE_REG_VALUE NULL BACKUP RANDOM "HKCR_ETCS"
		)
		TITLE 검사중^(DB^) "HKCR\Wow6432Node\%%A : %%~nxB" 2>Nul
		FOR /F %%X IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -b -q get "\HKCR\Wow6432Node\%%A\%%B" 2^>Nul') DO (
			>VARIABLE\%VTEXT1% ECHO HKCR\Wow6432Node\%%A
			>VARIABLE\%VTEXT2% ECHO %%B
			CALL :DELETE_REG_VALUE NULL BACKUP RANDOM "HKCR_ETCS(x86)"
		)
	) ELSE (
		TITLE 검사중^(DB^) "HKCR\%%A" 2>Nul
		FOR /F %%X IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -v -q check "\HKCR\%%A" 2^>Nul') DO (
			>VARIABLE\%VTEXT1% ECHO HKCR
			>VARIABLE\%VTEXT2% ECHO %%A
			CALL :DELETE_REG_KEY NULL BACKUP "HKCR_ETCS"
		)
		TITLE 검사중^(DB^) "HKCR\Wow6432Node\%%A" 2>Nul
		FOR /F %%X IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -v -q check "\HKCR\Wow6432Node\%%A" 2^>Nul') DO (
			>VARIABLE\%VTEXT1% ECHO HKCR\Wow6432Node
			>VARIABLE\%VTEXT2% ECHO %%A
			CALL :DELETE_REG_KEY NULL BACKUP "HKCR_ETCS(x86)"
		)
	)
)
REM :Result
CALL :PROCESS_RESULT NULL CHKINFECT
REM :Reset Value
CALL :RESET_VALUE

TITLE %MZTITLE% 2>Nul & PING.EXE -n 2 0 >Nul 2>Nul & ECHO. & >>"%QLog%" ECHO.

REM * Delete - Registry <HKEY_CURRENT_USER>
ECHO ◇ 악성 및 유해 가능 ^<HKEY_CURRENT_USER^> 레지스트리 제거중 . . . & >>"%QLog%" ECHO    ■ 악성 및 유해 가능 ^<HKEY_CURRENT_USER^> 레지스트리 제거 :
REM :HKCU\CLSID
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKCU\CLSID
SET "STRTMP=HKCU_CLSID"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKCU\CLSID" 2^>Nul') DO (
	TITLE 검사중 "HKCU\CLSID\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HKCU_CLSID.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
)
REM :HKCU\Environment (Value)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKCU\Environment
SET "STRTMP=HKCU_Environment"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKCU\Environment" 2^>Nul') DO (
	TITLE 검사중 "HKCU\Environment : %%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HK_ENVIRONMENT+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_HK_ENVIRONMENT+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
)
REM :HKCU\Environment (UserInitMprLogonScript)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKCU\Environment
SET "STRTMP=HKCU_Environment"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCU\Environment\UserInitMprLogonScript" 2^>Nul') DO (
	TITLE 검사중 "HKCU\Environment : UserInitMprLogonScript" 2>Nul
	>VARIABLE\%VTEXT2% ECHO UserInitMprLogonScript
	>VARIABLE\%VTEXT3% ECHO %%A
	FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_HKCU_USERINITMPRLOGONSCRIPT+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
)
REM :HKCU\Software
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKCU\Software
SET "STRTMP=HKCU_SW"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKCU\Software" 2^>Nul^|%EXEGREP% -Fivxf DB\EXCEPT\EX_REG_HK_SOFTWARE+NC.DB 2^>Nul') DO (
	TITLE 검사중 "HKCU\Software\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HK_SOFTWARE.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -ix -f DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_HK_SOFTWARE+NC.DB -f DB_EXEC\ACTIVESCAN\COMBO\PATTERN_FAKE_OPTIMIZER+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_HK_SOFTWARE+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
)
REM :HKCU\Software\AppDataLow\Software
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKCU\Software\AppDataLow\Software
SET "STRTMP=HKCU_SW_AppDataLow_SW"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKCU\Software\AppDataLow\Software" 2^>Nul^|%EXEGREP% -Fivxf DB\EXCEPT\EX_REG_HK_SOFTWARE+NC.DB 2^>Nul') DO (
	TITLE 검사중 "HKCU\Software\AppDataLow\Software\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HK_SOFTWARE.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -ix -f DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_HK_SOFTWARE+NC.DB -f DB_EXEC\ACTIVESCAN\COMBO\PATTERN_FAKE_OPTIMIZER+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_HK_SOFTWARE+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
)
REM :HKCU\Software\Chromium\Extensions
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKCU\Software\Chromium\Extensions
SET "STRTMP=HKCU_SW_Chromium_Extensions"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKCU\Software\Chromium\Extensions" 2^>Nul') DO (
	TITLE 검사중 "HKCU\Software\Chromium\Extensions\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	IF EXIST DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB (
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
		) ELSE (
			ENDLOCAL
		)
	)
)
REM :HKCU\Software\Chromium\PreferenceMACs\[%]\extensions.settings (Value)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKCU\Software\Chromium\PreferenceMACs" 2^>Nul') DO (
	SET "STRTMP=HKCU_SW_Chromium_PreferenceMACs_Extensions"
	>VARIABLE\%VTEXT1% ECHO HKCU\Software\Chromium\PreferenceMACs\%%A\extensions.settings
	FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKCU\Software\Chromium\PreferenceMACs\%%A\extensions.settings" 2^>Nul') DO (
		>VARIABLE\%VTEXT2% ECHO %%B
		>VARIABLE\%VCHECK% ECHO 0
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP RANDOM "%STRTMP%"
		) ELSE (
			ENDLOCAL
		)
		IF EXIST DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB (
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP RANDOM "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
		)
	)
)
REM :HKCU\Software\Google\Chrome\Extensions
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKCU\Software\Google\Chrome\Extensions
SET "STRTMP=HKCU_SW_GoogleChrome_Extensions"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKCU\Software\Google\Chrome\Extensions" 2^>Nul') DO (
	TITLE 검사중 "HKCU\Software\Google\Chrome\Extensions\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	IF EXIST DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB (
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
		) ELSE (
			ENDLOCAL
		)
	)
)
REM :HKCU\Software\Google\Chrome\PreferenceMACs\[%]\extensions.settings (Value)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKCU\Software\Google\Chrome\PreferenceMACs" 2^>Nul') DO (
	SET "STRTMP=HKCU_SW_GoogleChrome_PreferenceMACs_Extensions"
	>VARIABLE\%VTEXT1% ECHO HKCU\Software\Google\Chrome\PreferenceMACs\%%A\extensions.settings
	FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKCU\Software\Google\Chrome\PreferenceMACs\%%A\extensions.settings" 2^>Nul') DO (
		>VARIABLE\%VTEXT2% ECHO %%B
		>VARIABLE\%VCHECK% ECHO 0
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP RANDOM "%STRTMP%"
		) ELSE (
			ENDLOCAL
		)
		IF EXIST DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB (
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP RANDOM "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
		)
	)
)
REM :HKCU\Software\Microsoft
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKCU\Software\Microsoft
SET "STRTMP=HKCU_SW_Microsoft"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKCU\Software\Microsoft" 2^>Nul') DO (
	TITLE 검사중 "HKCU\Software\Microsoft\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HK_SOFTWARE_MICROSOFT+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
)
REM :HKCU\Software\AppDataLow\Software\Microsoft
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKCU\Software\AppDataLow\Software\Microsoft
SET "STRTMP=HKCU_SW_AppDataLow_SW_Microsoft"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKCU\Software\AppDataLow\Software\Microsoft" 2^>Nul') DO (
	TITLE 검사중 "HKCU\Software\AppDataLow\Software\Microsoft\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HK_SOFTWARE_MICROSOFT+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
)
REM :HKCU\Software\Microsoft\Active Setup\Installed Components
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKCU\Software\Microsoft\Active Setup\Installed Components
SET "STRTMP=HKCU_SW_ActiveSetup_InstalledComponents"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKCU\Software\Microsoft\Active Setup\Installed Components" 2^>Nul') DO (
	TITLE 검사중 "HKCU\Software\…\Installed Components\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HK_SOFTWARE_INSTCOMPONENTS.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_HK_SOFTWARE_INSTCOMPONENTS.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
)
REM :HKCU\Software\Wow6432Node\Microsoft\Active Setup\Installed Components
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKCU\Software\Wow6432Node\Microsoft\Active Setup\Installed Components
SET "STRTMP=HKCU_SW_ActiveSetup_InstalledComponents(x86)"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKCU\Software\Wow6432Node\Microsoft\Active Setup\Installed Components" 2^>Nul') DO (
	TITLE 검사중 "HKCU\Software\Wow6432Node\…\Installed Components\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HK_SOFTWARE_INSTCOMPONENTS.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_HK_SOFTWARE_INSTCOMPONENTS.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
)
REM :HKCU\Software\Microsoft\Edge\Extensions
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKCU\Software\Microsoft\Edge\Extensions
SET "STRTMP=HKCU_SW_MicrosoftEdge_Extensions"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKCU\Software\Microsoft\Edge\Extensions" 2^>Nul') DO (
	TITLE 검사중 "HKCU\Software\Microsoft\Edge\Extensions\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	IF EXIST DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB (
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
		) ELSE (
			ENDLOCAL
		)
	)
)
REM :HKCU\Software\Microsoft\Edge\PreferenceMACs\[%]\extensions.settings (Value)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKCU\Software\Microsoft\Edge\PreferenceMACs" 2^>Nul') DO (
	SET "STRTMP=HKCU_SW_MicrosoftEdge_PreferenceMACs_Extensions"
	>VARIABLE\%VTEXT1% ECHO HKCU\Software\Microsoft\Edge\PreferenceMACs\%%A\extensions.settings
	FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKCU\Software\Microsoft\Edge\PreferenceMACs\%%A\extensions.settings" 2^>Nul') DO (
		>VARIABLE\%VTEXT2% ECHO %%B
		>VARIABLE\%VCHECK% ECHO 0
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP RANDOM "%STRTMP%"
		) ELSE (
			ENDLOCAL
		)
		IF EXIST DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB (
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP RANDOM "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
		)
	)
)
REM :HKCU\Software\Microsoft\Internet Explorer (DownloadUI)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKCU\Software\Microsoft\Internet Explorer
SET "STRTMP=HKCU_SW_InternetExplorer_DownloadUI"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCU\Software\Microsoft\Internet Explorer\DownloadUI" 2^>Nul') DO (
	TITLE 검사중 "HKCU\Software\Microsoft\Internet Explorer : DownloadUI" 2>Nul
	>VARIABLE\%VTEXT2% ECHO DownloadUI
	>VARIABLE\%VTEXT3% ECHO %%A
	FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HK_CLSID.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP NULL "%STRTMP%"
)
REM :HKCU\Software\Microsoft\Internet Explorer\Approved Extensions (Value)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKCU\Software\Microsoft\Internet Explorer\Approved Extensions
SET "STRTMP=HKCU_SW_InternetExplorer_ApprovedExtensions"
%EXESETACL% -on "HKCU\Software\Microsoft\Internet Explorer\Approved Extensions" -ot reg -actn ace -ace "n:%USERNAME%;p:KEY_SET_VALUE;m:revoke;i:so" -ace "n:%USERNAME%;p:KEY_SET_VALUE;i:so" -silent >Nul 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKCU\Software\Microsoft\Internet Explorer\Approved Extensions" 2^>Nul') DO (
	TITLE 검사중 "HKCU\Software\…\Approved Extensions : %%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HK_CLSID.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_HK_CLSID.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		IF EXIST "DB_ACTIVE\ACT_REG_HK_CLSID_%UNIQ%.DB" (
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_REG_HK_CLSID_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
		)
	) ELSE (
		ENDLOCAL
	)
)
%EXESETACL% -on "HKCU\Software\Microsoft\Internet Explorer\Approved Extensions" -ot reg -actn ace -ace "n:%USERNAME%;p:KEY_SET_VALUE;m:revoke;i:so" -ace "n:%USERNAME%;p:KEY_SET_VALUE;m:deny;i:so" -silent >Nul 2>Nul
REM :HKCU\Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKCU\Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration
SET "STRTMP=HKCU_SW_InternetExplorer_ApprovedExtensionsMigration"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKCU\Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration" 2^>Nul') DO (
	TITLE 검사중 "HKCU\Software\…\ApprovedExtensionsMigration\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HK_CLSID.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_HK_CLSID.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		IF EXIST "DB_ACTIVE\ACT_REG_HK_CLSID_%UNIQ%.DB" (
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_REG_HK_CLSID_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
		)
	) ELSE (
		ENDLOCAL
	)
)
REM :HKCU\Software\Microsoft\Internet Explorer\DOMStorage
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKCU\Software\Microsoft\Internet Explorer\DOMStorage
SET "STRTMP=HKCU_SW_InternetExplorer_DOMStorage"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKCU\Software\Microsoft\Internet Explorer\DOMStorage" 2^>Nul') DO (
	TITLE 검사중 "HKCU\Software\…\DOMStorage\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HK_IE_DOMSTORAGE+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
)
REM :HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage
SET "STRTMP=HKCU_SW_InternetExplorer_LowRegistry_DOMStorage"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage" 2^>Nul') DO (
	TITLE 검사중 "HKCU\Software\…\LowRegistry\DOMStorage\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HK_IE_DOMSTORAGE+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
)
REM :HKCU\Software\Microsoft\Internet Explorer\SearchScopes
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKCU\Software\Microsoft\Internet Explorer\SearchScopes
SET "STRTMP=HKCU_SW_InternetExplorer_SearchScopes"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKCU\Software\Microsoft\Internet Explorer\SearchScopes" 2^>Nul') DO (
	TITLE 검사중 "HKCU\Software\…\SearchScopes\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HK_IE_SEARCHSCOPES.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
)
REM :HKCU\Software\Microsoft\Internet Explorer\Toolbar (Value)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKCU\Software\Microsoft\Internet Explorer\Toolbar
SET "STRTMP=HKCU_SW_InternetExplorer_Toolbar"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKCU\Software\Microsoft\Internet Explorer\Toolbar" 2^>Nul') DO (
	TITLE 검사중 "HKCU\Software\…\Toolbar : %%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HK_CLSID.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_HK_CLSID.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		IF EXIST "DB_ACTIVE\ACT_REG_HK_CLSID_%UNIQ%.DB" (
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_REG_HK_CLSID_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
		)
	) ELSE (
		ENDLOCAL
	)
)
REM :HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser (Value)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser
SET "STRTMP=HKCU_SW_InternetExplorer_Toolbar_WebBrowser"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser" 2^>Nul') DO (
	TITLE 검사중 "HKCU\Software\…\WebBrowser : %%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HK_CLSID.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_HK_CLSID.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		IF EXIST "DB_ACTIVE\ACT_REG_HK_CLSID_%UNIQ%.DB" (
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_REG_HK_CLSID_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
		)
	) ELSE (
		ENDLOCAL
	)
)
REM :HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks (Value)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks
SET "STRTMP=HKCU_SW_InternetExplorer_URLSearchHooks"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks" 2^>Nul') DO (
	TITLE 검사중 "HKCU\Software\…\URLSearchHooks : %%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HK_CLSID.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_HK_CLSID.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		IF EXIST "DB_ACTIVE\ACT_REG_HK_CLSID_%UNIQ%.DB" (
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_REG_HK_CLSID_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
		)
	) ELSE (
		ENDLOCAL
	)
)
REM :HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache
SET "STRTMP=HKCU_SW_AppManagement_ARPCache"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" 2^>Nul') DO (
	TITLE 검사중 "HKCU\Software\…\ARPCache\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HK_SOFTWARE_ARPCACHE+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
)
REM :HKCU\Software\Microsoft\Windows\CurrentVersion\App Paths
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKCU\Software\Microsoft\Windows\CurrentVersion\App Paths
SET "STRTMP=HKCU_SW_AppPaths"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKCU\Software\Microsoft\Windows\CurrentVersion\App Paths" 2^>Nul') DO (
	TITLE 검사중 "HKCU\Software\…\App Paths\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HK_SOFTWARE_APPPATHS+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
)
REM :HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs
SET "STRTMP=HKCU_SW_Explorer_MenuOrder_StartMenu2_Programs"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs" 2^>Nul') DO (
	TITLE 검사중 "HKCU\Software\…\MenuOrder\Start Menu2\Programs\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\DIRECTORY\DEL_STARTMENU_PROGRAMS.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
)
REM :HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings
SET "STRTMP=HKCU_SW_Ext_Settings"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings" 2^>Nul^|%EXEGREP% -Fivxf DB\EXCEPT\EX_REG_HK_CLSID.DB 2^>Nul') DO (
	TITLE 검사중 "HKCU\Software\…\Ext\Settings\%%A" 2>Nul
	SETLOCAL ENABLEDELAYEDEXPANSION
	TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\%%A\Flags" >Nul 2>Nul
	IF !ERRORLEVEL! NEQ 0 (
		ENDLOCAL
		>VARIABLE\%VTEXT2% ECHO %%A
		>VARIABLE\%VCHECK% ECHO 0
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HK_CLSID.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
		) ELSE (
			ENDLOCAL
		)
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_HK_CLSID.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
		) ELSE (
			ENDLOCAL
		)
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			IF EXIST "DB_ACTIVE\ACT_REG_HK_CLSID_%UNIQ%.DB" (
				FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_REG_HK_CLSID_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
			)
		) ELSE (
			ENDLOCAL
		)
	) ELSE (
		ENDLOCAL
	)
)
REM :HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats
SET "STRTMP=HKCU_SW_Ext_Stats"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats" 2^>Nul^|%EXEGREP% -Fivxf DB\EXCEPT\EX_REG_HK_CLSID.DB 2^>Nul') DO (
	TITLE 검사중 "HKCU\Software\…\Ext\Stats\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HK_CLSID.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_HK_CLSID.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		IF EXIST "DB_ACTIVE\ACT_REG_HK_CLSID_%UNIQ%.DB" (
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_REG_HK_CLSID_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
		)
	) ELSE (
		ENDLOCAL
	)
)
REM :HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings (AutoConfigURL)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings
SET "STRTMP=HKCU_SW_InternetSettings"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\AutoConfigURL" 2^>Nul') DO (
	TITLE 검사중 "HKCU\Software\…\Internet Settings : AutoConfigURL" 2>Nul
	>VARIABLE\%VTEXT2% ECHO AutoConfigURL
	>VARIABLE\%VTEXT3% ECHO %%A
	FOR /F %%X IN ('%EXEGREP% -Fif DB_EXEC\THREAT\REGISTRY\DEL_HKCU_AUTOCONFIGURL.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP NULL "%STRTMP%"
)
REM :HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings (ProxyOverride)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings
SET "STRTMP=HKCU_SW_InternetSettings"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyOverride" 2^>Nul') DO (
	TITLE 검사중 "HKCU\Software\…\Internet Settings : ProxyOverride" 2>Nul
	>VARIABLE\%VTEXT2% ECHO ProxyOverride
	>VARIABLE\%VTEXT3% ECHO %%A
	FOR /F %%X IN ('%EXEGREP% -Fif DB_EXEC\THREAT\REGISTRY\DEL_HKCU_PROXYOVERRIDE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP NULL "%STRTMP%"
)
REM :HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings (ProxyServer)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings
SET "STRTMP=HKCU_SW_InternetSettings"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer" 2^>Nul') DO (
	TITLE 검사중 "HKCU\Software\…\Internet Settings : ProxyServer" 2>Nul
	>VARIABLE\%VTEXT2% ECHO ProxyServer
	>VARIABLE\%VTEXT3% ECHO %%A
	FOR /F %%X IN ('%EXEGREP% -Fif DB_EXEC\THREAT\REGISTRY\DEL_HKCU_PROXYSERVER.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP NULL "%STRTMP%"
)
REM :HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections (DefaultConnectionSettings)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
SET "STRTMP=HKCU_SW_InternetSettings_Connections"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -b -q get "\HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\DefaultConnectionSettings" 2^>Nul') DO (
	TITLE 검사중 "HKCU\Software\…\Internet Settings\Connections : DefaultConnectionSettings" 2>Nul
	>VARIABLE\%VTEXT2% ECHO DefaultConnectionSettings
	>VARIABLE\%VTEXT3% ECHO %%A
	FOR /F %%X IN ('%EXEGREP% -Fif DB_EXEC\THREAT\REGISTRY\DEL_HKCU_CONNECTIONSCRIPT.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP NULL "%STRTMP%"
)
REM :HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections (SavedLegacySettings)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
SET "STRTMP=HKCU_SW_InternetSettings_Connections"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -b -q get "\HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\SavedLegacySettings" 2^>Nul') DO (
	TITLE 검사중 "HKCU\Software\…\Internet Settings\Connections : SavedLegacySettings" 2>Nul
	>VARIABLE\%VTEXT2% ECHO SavedLegacySettings
	>VARIABLE\%VTEXT3% ECHO %%A
	FOR /F %%X IN ('%EXEGREP% -Fif DB_EXEC\THREAT\REGISTRY\DEL_HKCU_CONNECTIONSCRIPT.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP NULL "%STRTMP%"
)
REM :HKCU\Software\MozillaPlugins
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKCU\Software\MozillaPlugins
SET "STRTMP=HKCU_SW_MozillaPlugins"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKCU\Software\MozillaPlugins" 2^>Nul') DO (
	TITLE 검사중 "HKCU\Software\MozillaPlugins\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HK_SOFTWARE_MOZILLAPLUGINS.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
)
REM :HKCU\Software\Naver\Naver Whale\Extensions
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKCU\Software\Naver\Naver Whale\Extensions
SET "STRTMP=HKCU_SW_NaverWhale_Extensions"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKCU\Software\Naver\Naver Whale\Extensions" 2^>Nul') DO (
	TITLE 검사중 "HKCU\Software\Naver\Naver Whale\Extensions\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	IF EXIST DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB (
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
		) ELSE (
			ENDLOCAL
		)
	)
)
REM :HKCU\Software\Naver\Naver Whale\PreferenceMACs\[%]\extensions.settings (Value)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKCU\Software\Naver\Naver Whale\PreferenceMACs" 2^>Nul') DO (
	SET "STRTMP=HKCU_SW_NaverWhale_PreferenceMACs_Extensions"
	>VARIABLE\%VTEXT1% ECHO HKCU\Software\Naver\Naver Whale\PreferenceMACs\%%A\extensions.settings
	FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKCU\Software\Naver\Naver Whale\PreferenceMACs\%%A\extensions.settings" 2^>Nul') DO (
		>VARIABLE\%VTEXT2% ECHO %%B
		>VARIABLE\%VCHECK% ECHO 0
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP RANDOM "%STRTMP%"
		) ELSE (
			ENDLOCAL
		)
		IF EXIST DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB (
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP RANDOM "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
		)
	)
)
REM :HKCU\Software\Vivaldi\Extensions
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKCU\Software\Vivaldi\Extensions
SET "STRTMP=HKCU_SW_Vivaldi_Extensions"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKCU\Software\Vivaldi\Extensions" 2^>Nul') DO (
	TITLE 검사중 "HKCU\Software\Vivaldi\Extensions\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	IF EXIST DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB (
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
		) ELSE (
			ENDLOCAL
		)
	)
)
REM :HKCU\Software\Vivaldi\PreferenceMACs\[%]\extensions.settings (Value)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKCU\Software\Vivaldi\PreferenceMACs" 2^>Nul') DO (
	SET "STRTMP=HKCU_SW_Vivaldi_PreferenceMACs_Extensions"
	>VARIABLE\%VTEXT1% ECHO HKCU\Software\Vivaldi\PreferenceMACs\%%A\extensions.settings
	FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKCU\Software\Vivaldi\PreferenceMACs\%%A\extensions.settings" 2^>Nul') DO (
		>VARIABLE\%VTEXT2% ECHO %%B
		>VARIABLE\%VCHECK% ECHO 0
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP RANDOM "%STRTMP%"
		) ELSE (
			ENDLOCAL
		)
		IF EXIST DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB (
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP RANDOM "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
		)
	)
)
REM :HKCU\Software (ETCs)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "TOKENS=1,2 DELIMS=|" %%A IN ('TYPE DB_EXEC\THREAT\REGISTRY\DEL_HKCU_SOFTWARE_ETCS+NC.DB 2^>Nul') DO (
	IF NOT "%%B" == "" (
		TITLE 검사중^(DB^) "HKCU\Software\%%A : %%~nxB" 2>Nul
		FOR /F %%X IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -b -q get "\HKCU\Software\%%A\%%B" 2^>Nul') DO (
			>VARIABLE\%VTEXT1% ECHO HKCU\Software\%%A
			>VARIABLE\%VTEXT2% ECHO %%B
			CALL :DELETE_REG_VALUE NULL BACKUP RANDOM "HKCU_SoftwareETCs"
		)
		TITLE 검사중^(DB^) "HKCU\Software\Wow6432Node\%%A : %%~nxB" 2>Nul
		FOR /F %%X IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -b -q get "\HKCU\Software\Wow6432Node\%%A\%%B" 2^>Nul') DO (
			>VARIABLE\%VTEXT1% ECHO HKCU\Software\Wow6432Node\%%A
			>VARIABLE\%VTEXT2% ECHO %%B
			CALL :DELETE_REG_VALUE NULL BACKUP RANDOM "HKCU_SoftwareETCs(x86)"
		)
	) ELSE (
		TITLE 검사중^(DB^) "HKCU\Software\%%A" 2>Nul
		FOR /F %%X IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -v -q check "\HKCU\Software\%%A" 2^>Nul') DO (
			>VARIABLE\%VTEXT1% ECHO HKCU\Software
			>VARIABLE\%VTEXT2% ECHO %%A
			CALL :DELETE_REG_KEY NULL BACKUP "HKCU_SoftwareETCs"
		)
		TITLE 검사중^(DB^) "HKCU\Software\Wow6432Node\%%A" 2>Nul
		FOR /F %%X IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -v -q check "\HKCU\Software\Wow6432Node\%%A" 2^>Nul') DO (
			>VARIABLE\%VTEXT1% ECHO HKCU\Software\Wow6432Node
			>VARIABLE\%VTEXT2% ECHO %%A
			CALL :DELETE_REG_KEY NULL BACKUP "HKCU_SoftwareETCs(x86)"
		)
	)
)
REM :Result
CALL :PROCESS_RESULT NULL CHKINFECT
REM :Reset Value
CALL :RESET_VALUE

TITLE %MZTITLE% 2>Nul & PING.EXE -n 2 0 >Nul 2>Nul & ECHO. & >>"%QLog%" ECHO.

ECHO ◇ 악성 및 유해 가능 ^<HKEY_LOCAL_MACHINE^> 레지스트리 제거중 . . . & >>"%QLog%" ECHO    ■ 악성 및 유해 가능 ^<HKEY_LOCAL_MACHINE^> 레지스트리 제거 :
REM :HKLM\Software
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software
SET "STRTMP=HKLM_SW"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software" 2^>Nul^|%EXEGREP% -Fivxf DB\EXCEPT\EX_REG_HK_SOFTWARE+NC.DB 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HK_SOFTWARE.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -ix -f DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_HK_SOFTWARE+NC.DB -f DB_EXEC\ACTIVESCAN\COMBO\PATTERN_FAKE_OPTIMIZER+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_HK_SOFTWARE+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
)
REM :HKLM\Software\Wow6432Node
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node
SET "STRTMP=HKLM_SW(x86)"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software\Wow6432Node" 2^>Nul^|%EXEGREP% -Fivxf DB\EXCEPT\EX_REG_HK_SOFTWARE+NC.DB 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Wow6432Node\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HK_SOFTWARE.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -ix -f DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_HK_SOFTWARE+NC.DB -f DB_EXEC\ACTIVESCAN\COMBO\PATTERN_FAKE_OPTIMIZER+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_HK_SOFTWARE+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
)
REM :HKLM\Software\Chromium\Extensions
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Chromium\Extensions
SET "STRTMP=HKLM_SW_Chromium_Extensions"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software\Chromium\Extensions" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Chromium\Extensions\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	IF EXIST DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB (
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
		) ELSE (
			ENDLOCAL
		)
	)
)
REM :HKLM\Software\Wow6432Node\Chromium\Extensions
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\Chromium\Extensions
SET "STRTMP=HKLM_SW_Chromium_Extensions(x86)"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software\Wow6432Node\Chromium\Extensions" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Wow6432Node\Chromium\Extensions\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	IF EXIST DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB (
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
		) ELSE (
			ENDLOCAL
		)
	)
)
REM :HKLM\Software\Chromium\PreferenceMACs\[%]\extensions.settings (Value)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software\Chromium\PreferenceMACs" 2^>Nul') DO (
	SET "STRTMP=HKLM_SW_Chromium_PreferenceMACs_Extensions"
	>VARIABLE\%VTEXT1% ECHO HKLM\Software\Chromium\PreferenceMACs\%%A\extensions.settings
	FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKLM\Software\Chromium\PreferenceMACs\%%A\extensions.settings" 2^>Nul') DO (
		>VARIABLE\%VTEXT2% ECHO %%B
		>VARIABLE\%VCHECK% ECHO 0
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP RANDOM "%STRTMP%"
		) ELSE (
			ENDLOCAL
		)
		IF EXIST DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB (
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP RANDOM "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
		)
	)
)
REM :HKLM\Software\Wow6432Node\Chromium\PreferenceMACs\[%]\extensions.settings (Value)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software\Wow6432Node\Chromium\PreferenceMACs" 2^>Nul') DO (
	SET "STRTMP=HKLM_SW_Chromium_PreferenceMACs_Extensions(x86)"
	>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\Chromium\PreferenceMACs\%%A\extensions.settings
	FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKLM\Software\Wow6432Node\Chromium\PreferenceMACs\%%A\extensions.settings" 2^>Nul') DO (
		>VARIABLE\%VTEXT2% ECHO %%B
		>VARIABLE\%VCHECK% ECHO 0
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP RANDOM "%STRTMP%"
		) ELSE (
			ENDLOCAL
		)
		IF EXIST DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB (
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP RANDOM "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
		)
	)
)
REM :HKLM\Software\Google\Chrome\Extensions
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Google\Chrome\Extensions
SET "STRTMP=HKLM_SW_GoogleChrome_Extensions"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software\Google\Chrome\Extensions" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Google\Chrome\Extensions\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	IF EXIST DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB (
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
		) ELSE (
			ENDLOCAL
		)
	)
)
REM :HKLM\Software\Wow6432Node\Google\Chrome\Extensions
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\Google\Chrome\Extensions
SET "STRTMP=HKLM_SW_GoogleChrome_Extensions(x86)"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software\Wow6432Node\Google\Chrome\Extensions" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Wow6432Node\Google\Chrome\Extensions\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	IF EXIST DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB (
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
		) ELSE (
			ENDLOCAL
		)
	)
)
REM :HKLM\Software\Google\Chrome\PreferenceMACs\[%]\extensions.settings (Value)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software\Google\Chrome\PreferenceMACs" 2^>Nul') DO (
	SET "STRTMP=HKLM_SW_GoogleChrome_PreferenceMACs_Extensions"
	>VARIABLE\%VTEXT1% ECHO HKLM\Software\Google\Chrome\PreferenceMACs\%%A\extensions.settings
	FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKLM\Software\Google\Chrome\PreferenceMACs\%%A\extensions.settings" 2^>Nul') DO (
		>VARIABLE\%VTEXT2% ECHO %%B
		>VARIABLE\%VCHECK% ECHO 0
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP RANDOM "%STRTMP%"
		) ELSE (
			ENDLOCAL
		)
		IF EXIST DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB (
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP RANDOM "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
		)
	)
)
REM :HKLM\Software\Wow6432Node\Google\Chrome\PreferenceMACs\[%]\extensions.settings (Value)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software\Wow6432Node\Google\Chrome\PreferenceMACs" 2^>Nul') DO (
	SET "STRTMP=HKLM_SW_GoogleChrome_PreferenceMACs_Extensions(x86)"
	>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\Google\Chrome\PreferenceMACs\%%A\extensions.settings
	FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKLM\Software\Wow6432Node\Google\Chrome\PreferenceMACs\%%A\extensions.settings" 2^>Nul') DO (
		>VARIABLE\%VTEXT2% ECHO %%B
		>VARIABLE\%VCHECK% ECHO 0
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP RANDOM "%STRTMP%"
		) ELSE (
			ENDLOCAL
		)
		IF EXIST DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB (
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP RANDOM "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
		)
	)
)
REM :HKLM\Software\Microsoft
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft
SET "STRTMP=HKLM_SW_Microsoft"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software\Microsoft" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Microsoft\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HK_SOFTWARE_MICROSOFT+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
)
REM :HKLM\Software\Wow6432Node\Microsoft
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\Microsoft
SET "STRTMP=HKLM_SW_Microsoft(x86)"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software\Wow6432Node\Microsoft" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Wow6432Node\Microsoft\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HK_SOFTWARE_MICROSOFT+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
)
REM :HKLM\Software\Microsoft\Active Setup\Installed Components
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Active Setup\Installed Components
SET "STRTMP=HKLM_SW_ActiveSetup_InstalledComponents"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software\Microsoft\Active Setup\Installed Components" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\…\Installed Components\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HK_SOFTWARE_INSTCOMPONENTS.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_HK_SOFTWARE_INSTCOMPONENTS.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
)
REM :HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components
SET "STRTMP=HKLM_SW_ActiveSetup_InstalledComponents(x86)"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Wow6432Node\…\Installed Components\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HK_SOFTWARE_INSTCOMPONENTS.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_HK_SOFTWARE_INSTCOMPONENTS.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
)
REM :HKLM\Software\Microsoft\Edge\Extensions
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Edge\Extensions
SET "STRTMP=HKLM_SW_MicrosoftEdge_Extensions"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software\Microsoft\Edge\Extensions" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Microsoft\Edge\Extensions\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	IF EXIST DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB (
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
		) ELSE (
			ENDLOCAL
		)
	)
)
REM :HKLM\Software\Wow6432Node\Microsoft\Edge\Extensions
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\Microsoft\Edge\Extensions
SET "STRTMP=HKLM_SW_MicrosoftEdge_Extensions(x86)"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software\Wow6432Node\Microsoft\Edge\Extensions" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Wow6432Node\Microsoft\Edge\Extensions\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	IF EXIST DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB (
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
		) ELSE (
			ENDLOCAL
		)
	)
)
REM :HKLM\Software\Microsoft\Edge\PreferenceMACs\[%]\extensions.settings (Value)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software\Microsoft\Edge\PreferenceMACs" 2^>Nul') DO (
	SET "STRTMP=HKLM_SW_MicrosoftEdge_PreferenceMACs_Extensions"
	>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Edge\PreferenceMACs\%%A\extensions.settings
	FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKLM\Software\Microsoft\Edge\PreferenceMACs\%%A\extensions.settings" 2^>Nul') DO (
		>VARIABLE\%VTEXT2% ECHO %%B
		>VARIABLE\%VCHECK% ECHO 0
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP RANDOM "%STRTMP%"
		) ELSE (
			ENDLOCAL
		)
		IF EXIST DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB (
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP RANDOM "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
		)
	)
)
REM :HKLM\Software\Wow6432Node\Microsoft\Edge\PreferenceMACs\[%]\extensions.settings (Value)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software\Wow6432Node\Microsoft\Edge\PreferenceMACs" 2^>Nul') DO (
	SET "STRTMP=HKLM_SW_MicrosoftEdge_PreferenceMACs_Extensions(x86)"
	>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\Microsoft\Edge\PreferenceMACs\%%A\extensions.settings
	FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKLM\Software\Wow6432Node\Microsoft\Edge\PreferenceMACs\%%A\extensions.settings" 2^>Nul') DO (
		>VARIABLE\%VTEXT2% ECHO %%B
		>VARIABLE\%VCHECK% ECHO 0
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP RANDOM "%STRTMP%"
		) ELSE (
			ENDLOCAL
		)
		IF EXIST DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB (
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP RANDOM "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
		)
	)
)
REM :HKLM\Software\Microsoft\Internet Explorer (DownloadUI)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Internet Explorer
SET "STRTMP=HKLM_SW_InternetExplorer_DownloadUI"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Microsoft\Internet Explorer\DownloadUI" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Microsoft\Internet Explorer : DownloadUI" 2>Nul
	>VARIABLE\%VTEXT2% ECHO DownloadUI
	>VARIABLE\%VTEXT3% ECHO %%A
	FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HK_CLSID.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP NULL "%STRTMP%"
)
REM :HKLM\Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration
SET "STRTMP=HKLM_SW_InternetExplorer_ApprovedExtensionsMigration"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\…\ApprovedExtensionsMigration\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HK_CLSID.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_HK_CLSID.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		IF EXIST "DB_ACTIVE\ACT_REG_HK_CLSID_%UNIQ%.DB" (
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_REG_HK_CLSID_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
		)
	) ELSE (
		ENDLOCAL
	)
)
REM :HKLM\Software\Microsoft\Internet Explorer\DOMStorage
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Internet Explorer\DOMStorage
SET "STRTMP=HKLM_SW_InternetExplorer_DOMStorage"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software\Microsoft\Internet Explorer\DOMStorage" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\…\DOMStorage\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HK_IE_DOMSTORAGE+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
)
REM :HKLM\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage
SET "STRTMP=HKLM_SW_InternetExplorer_LowRegistry_DOMStorage"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\…\LowRegistry\DOMStorage\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HK_IE_DOMSTORAGE+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
)
REM :HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy
SET "STRTMP=HKLM_SW_InternetExplorer_LowRights_ElevationPolicy"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\…\Low Rights\ElevationPolicy\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HK_CLSID.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_HK_CLSID.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		IF EXIST "DB_ACTIVE\ACT_REG_HK_CLSID_%UNIQ%.DB" (
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_REG_HK_CLSID_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
		)
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\%%A\AppName" 2^>Nul') DO (
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				>VARIABLE\%VTEXT3% ECHO %%B
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				FOR /F %%X IN ('%EXEGREP% -Fxf DB_EXEC\THREAT\REGISTRY\DEL_HKLM_IE_ELEVATIONPOLICY_APPNAME.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_HKLM_IE_ELEVATIONPOLICY_APPNAME.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
		)
	) ELSE (
		ENDLOCAL
	)
)
REM :HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy
SET "STRTMP=HKLM_SW_InternetExplorer_LowRights_ElevationPolicy(x86)"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Wow6432Node\…\Low Rights\ElevationPolicy\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HK_CLSID.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_HK_CLSID.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		IF EXIST "DB_ACTIVE\ACT_REG_HK_CLSID_%UNIQ%.DB" (
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_REG_HK_CLSID_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
		)
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\%%A\AppName" 2^>Nul') DO (
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				>VARIABLE\%VTEXT3% ECHO %%B
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				FOR /F %%X IN ('%EXEGREP% -Fxf DB_EXEC\THREAT\REGISTRY\DEL_HKLM_IE_ELEVATIONPOLICY_APPNAME.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_HKLM_IE_ELEVATIONPOLICY_APPNAME.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
		)
	) ELSE (
		ENDLOCAL
	)
)
REM :HKLM\Software\Microsoft\Internet Explorer\SearchScopes
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Internet Explorer\SearchScopes
SET "STRTMP=HKLM_SW_InternetExplorer_SearchScopes"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software\Microsoft\Internet Explorer\SearchScopes" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\…\SearchScopes\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HK_IE_SEARCHSCOPES.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
)
REM :HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes
SET "STRTMP=HKLM_SW_InternetExplorer_SearchScopes(x86)"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\…\SearchScopes\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HK_IE_SEARCHSCOPES.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
)
REM :HKLM\Software\Microsoft\Internet Explorer\Toolbar (Value)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Internet Explorer\Toolbar
SET "STRTMP=HKLM_SW_InternetExplorer_Toolbar"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKLM\Software\Microsoft\Internet Explorer\Toolbar" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\…\Toolbar : %%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HK_CLSID.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_HK_CLSID.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
)
REM :HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Toolbar (Value)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Toolbar
SET "STRTMP=HKLM_SW_InternetExplorer_Toolbar(x86)"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Toolbar" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Wow6432Node\…\Toolbar : %%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HK_CLSID.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_HK_CLSID.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
)
REM :HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache
SET "STRTMP=HKLM_SW_AppManagement_ARPCache"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\…\App Management\ARPCache\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HK_SOFTWARE_ARPCACHE+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
)
REM :HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\App Management\ARPCache
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\App Management\ARPCache
SET "STRTMP=HKLM_SW_AppManagement_ARPCache(x86)"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\App Management\ARPCache" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Wow6432Node\…\App Management\ARPCache\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HK_SOFTWARE_ARPCACHE+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
)
REM :HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths
SET "STRTMP=HKLM_SW_AppPaths"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\…\App Paths\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HK_SOFTWARE_APPPATHS+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
)
REM :HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\App Paths
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\App Paths
SET "STRTMP=HKLM_SW_AppPaths(x86)"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\App Paths" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Wow6432Node\…\App Paths\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HK_SOFTWARE_APPPATHS+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
)
REM :HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks (Value)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks
SET "STRTMP=HKLM_SW_ShellExecuteHooks"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\…\Explorer\ShellExecuteHooks : %%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HK_CLSID.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_HK_CLSID.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		IF EXIST "DB_ACTIVE\ACT_REG_HK_CLSID_%UNIQ%.DB" (
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_REG_HK_CLSID_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
		)
	) ELSE (
		ENDLOCAL
	)
)
REM :HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks (Value)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks
SET "STRTMP=HKLM_SW_ShellExecuteHooks(x86)"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Wow6432Node\…\Explorer\ShellExecuteHooks : %%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HK_CLSID.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_HK_CLSID.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		IF EXIST "DB_ACTIVE\ACT_REG_HK_CLSID_%UNIQ%.DB" (
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_REG_HK_CLSID_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
		)
	) ELSE (
		ENDLOCAL
	)
)
REM :HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved
SET "STRTMP=HKLM_SW_Ext_PreApproved"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\…\Ext\PreApproved\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HK_CLSID.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_HK_CLSID.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		IF EXIST "DB_ACTIVE\ACT_REG_HK_CLSID_%UNIQ%.DB" (
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_REG_HK_CLSID_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
		)
	) ELSE (
		ENDLOCAL
	)
)
REM :HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved
SET "STRTMP=HKLM_SW_Ext_PreApproved(x86)"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Wow6432Node\…\Ext\PreApproved\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HK_CLSID.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_HK_CLSID.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		IF EXIST "DB_ACTIVE\ACT_REG_HK_CLSID_%UNIQ%.DB" (
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_REG_HK_CLSID_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
		)
	) ELSE (
		ENDLOCAL
	)
)
REM :HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID (Value)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID
SET "STRTMP=HKLM_SW_Policies_Ext_CLSID"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID" 2^>Nul^|%EXEGREP% -Fivxf DB\EXCEPT\EX_REG_HK_CLSID.DB 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\…\Policies\Ext\CLSID : %%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HK_CLSID.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_HK_CLSID.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		IF EXIST "DB_ACTIVE\ACT_REG_HK_CLSID_%UNIQ%.DB" (
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_REG_HK_CLSID_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
		)
	) ELSE (
		ENDLOCAL
	)
)
REM :HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID (Value)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID
SET "STRTMP=HKLM_SW_Policies_Ext_CLSID(x86)"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID" 2^>Nul^|%EXEGREP% -Fivxf DB\EXCEPT\EX_REG_HK_CLSID.DB 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Wow6432Node\…\Policies\Ext\CLSID : %%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HK_CLSID.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_HK_CLSID.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		IF EXIST "DB_ACTIVE\ACT_REG_HK_CLSID_%UNIQ%.DB" (
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_REG_HK_CLSID_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
		)
	) ELSE (
		ENDLOCAL
	)
)
REM :HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Ratings\PICSRules\.Default\0\PRPolicy\{ID}\PRPPolicySub
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Ratings\PICSRules\.Default\0\PRPolicy" 2^>Nul') DO (
	>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Ratings\PICSRules\.Default\0\PRPolicy\%%A\PRPPolicySub
	FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Ratings\PICSRules\.Default\0\PRPolicy\%%A\PRPPolicySub" 2^>Nul') DO (
		SET "STRTMP=HKLM_SW_Policies_PRPolicy_%%A_PRPPolicySub_%%B"
		TITLE 검사중 "HKLM\Software\…\PRPolicy\%%A\PRPPolicySub\%%B" 2>Nul
		FOR /F "DELIMS=" %%C IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Ratings\PICSRules\.Default\0\PRPolicy\%%A\PRPPolicySub\%%B\PRBUHost" 2^>Nul') DO (
			>VARIABLE\%VTEXT2% ECHO %%B
			>VARIABLE\%VTEXT3% ECHO %%C
			>VARIABLE\%VCHECK% ECHO 0
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HKLM_PRPOLICY+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
		)
	)
)
REM :HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options (Debugger)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
SET "STRTMP=HKLM_SW_ImageFileExecutionOptions"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options" 2^>Nul') DO (
	IF /I NOT "%%A" == "YOUR IMAGE FILE NAME HERE WITHOUT A PATH" (
		TITLE 검사중 "HKLM\Software\…\Image File Execution Options\%%A" 2>Nul
		>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\%%A
		>VARIABLE\%VTEXT2% ECHO Debugger
		>VARIABLE\%VTEXT3% ECHO %%A
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HKLM_SOFTWARE_IMGFILEEXECOP+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
			FOR /F "DELIMS=" %%Y IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\%%A\Debugger" 2^>Nul') DO (
				IF EXIST "DB\EXCEPT\DEBUGGER_%%A.DB" (
					>VARIABLE\%VTEXT3% ECHO %%~nxY
					FOR /F %%Z IN ('%EXEGREP% -Fixvf "DB\EXCEPT\DEBUGGER_%%A.DB" VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP RANDOM "%STRTMP%"
				) ELSE (
					CALL :DELETE_REG_VALUE NULL BACKUP RANDOM "%STRTMP%"
				)
			)
		)
		FOR /F "DELIMS=" %%X IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\%%A\Debugger" 2^>Nul') DO (
			>VARIABLE\%VTEXT3% ECHO %%~nxX
			FOR /F %%Y IN ('%EXEGREP% -Fixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_HKLM_SOFTWARE_IMGFILEEXECOP.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP RANDOM "%STRTMP%"
		)
	)
)
REM :HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options (Debugger)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
SET "STRTMP=HKLM_SW_ImageFileExecutionOptions(x86)"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options" 2^>Nul') DO (
	IF /I NOT "%%A" == "YOUR IMAGE FILE NAME HERE WITHOUT A PATH" (
		TITLE 검사중 "HKLM\Software\Wow6432Node\…\Image File Execution Options\%%A" 2>Nul
		>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\%%A
		>VARIABLE\%VTEXT2% ECHO Debugger
		>VARIABLE\%VTEXT3% ECHO %%A
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HKLM_SOFTWARE_IMGFILEEXECOP+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
			FOR /F "DELIMS=" %%Y IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\%%A\Debugger" 2^>Nul') DO (
				IF EXIST "DB\EXCEPT\DEBUGGER_%%A.DB" (
					>VARIABLE\%VTEXT3% ECHO %%~nxY
					FOR /F %%Z IN ('%EXEGREP% -Fixvf "DB\EXCEPT\DEBUGGER_%%A.DB" VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP RANDOM "%STRTMP%"
				) ELSE (
					CALL :DELETE_REG_VALUE NULL BACKUP RANDOM "%STRTMP%"
				)
			)
		)
		FOR /F "DELIMS=" %%X IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\%%A\Debugger" 2^>Nul') DO (
			>VARIABLE\%VTEXT3% ECHO %%~nxX
			FOR /F %%Y IN ('%EXEGREP% -Fixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_HKLM_SOFTWARE_IMGFILEEXECOP.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP RANDOM "%STRTMP%"
		)
	)
)
REM :HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures (Value)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures
SET "STRTMP=HKLM_SW_Schedule_CompatibilityAdapter_Signatures"
%EXESETACL% -on "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures" -ot reg -actn setowner -ownr "n:Administrators" -rec yes -silent >Nul 2>Nul
%EXESETACL% -on "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures" -ot reg -actn ace -ace "n:Everyone;p:full" -rec yes -silent >Nul 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\…\Schedule\CompatibilityAdapter\Signatures : %%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fix -f DB_EXEC\THREAT\FILE\DEL_TASKS_JOB.DB -f DB_EXEC\THREAT\REGISTRY\DEL_TASKS_JOB.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		IF EXIST "DB_ACTIVE\ACT_REG_TASKS_JOB_%UNIQ%.DB" (
			FOR /F %%X IN ('%EXEGREP% -Fxf DB_ACTIVE\ACT_REG_TASKS_JOB_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
		)
	) ELSE (
		ENDLOCAL
	)
)
%EXESETACL% -on "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures" -ot reg -actn trustee -trst "n1:Everyone;ta:remtrst;w:dacl" -rec yes -silent >Nul 2>Nul
%EXESETACL% -on "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures" -ot reg -actn setowner -ownr "n:SYSTEM" -rec yes -silent >Nul 2>Nul
REM :HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures (Value)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures
SET "STRTMP=HKLM_SW_Schedule_CompatibilityAdapter_Signatures(x86)"
%EXESETACL% -on "HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures" -ot reg -actn setowner -ownr "n:Administrators" -rec yes -silent >Nul 2>Nul
%EXESETACL% -on "HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures" -ot reg -actn ace -ace "n:Everyone;p:full" -rec yes -silent >Nul 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Wow6432Node\…\Schedule\CompatibilityAdapter\Signatures : %%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fix -f DB_EXEC\THREAT\FILE\DEL_TASKS_JOB.DB -f DB_EXEC\THREAT\REGISTRY\DEL_TASKS_JOB.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		IF EXIST "DB_ACTIVE\ACT_REG_TASKS_JOB_%UNIQ%.DB" (
			FOR /F %%X IN ('%EXEGREP% -Fxf DB_ACTIVE\ACT_REG_TASKS_JOB_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
		)
	) ELSE (
		ENDLOCAL
	)
)
%EXESETACL% -on "HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures" -ot reg -actn trustee -trst "n1:Everyone;ta:remtrst;w:dacl" -rec yes -silent >Nul 2>Nul
%EXESETACL% -on "HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures" -ot reg -actn setowner -ownr "n:SYSTEM" -rec yes -silent >Nul 2>Nul
REM :HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree
SET "STRTMP=HKLM_SW_Schedule_TaskCache_Tree"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_REG_TASKS+NC.DB 2^>Nul^|%EXEGREP% -ixvf DB\EXCEPT\EX_REG_TASKS_PATTERN+NC.DB 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\…\Schedule\TaskCache\Tree\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	FOR /F "DELIMS=" %%X IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\%%A\Id" 2^>Nul') DO (
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%Y IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\FILE\DEL_TASKS_TREE.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
				>>DB_ACTIVE\ACT_REG_TASKS_CLSID_%UNIQ%.DB ECHO %%X
				CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
			)
		) ELSE (
			ENDLOCAL
		)
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%Y IN ('%EXEGREP% -ix -f DB_EXEC\ACTIVESCAN\FILE\PATTERN_TASKS.DB -f DB_EXEC\ACTIVESCAN\COMBO\PATTERN_FAKE_OPTIMIZER+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
				>>DB_ACTIVE\ACT_REG_TASKS_CLSID_%UNIQ%.DB ECHO %%X
				CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
			)
		) ELSE (
			ENDLOCAL
		)
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%Y IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\FILE\PATTERN_TASKS+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
				>>DB_ACTIVE\ACT_REG_TASKS_CLSID_%UNIQ%.DB ECHO %%X
				CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
			)
		) ELSE (
			ENDLOCAL
		)
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			IF EXIST "DB_ACTIVE\ACT_REG_TASKS_TREE_%UNIQ%.DB" (
				FOR /F %%Y IN ('%EXEGREP% -Fxf DB_ACTIVE\ACT_REG_TASKS_TREE_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
					>>DB_ACTIVE\ACT_REG_TASKS_CLSID_%UNIQ%.DB ECHO %%X
					CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
				)
			)
		) ELSE (
			ENDLOCAL
		)
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%Y IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_TASKS_TREE+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
)
REM :HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree
SET "STRTMP=HKLM_SW_Schedule_TaskCache_Tree(x86)"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree" 2^>Nul^|%EXEGREP% -Fixvf DB\EXCEPT\EX_REG_TASKS+NC.DB 2^>Nul^|%EXEGREP% -ixvf DB\EXCEPT\EX_REG_TASKS_PATTERN+NC.DB 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Wow6432Node\…\Schedule\TaskCache\Tree\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	FOR /F "DELIMS=" %%X IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\%%A\Id" 2^>Nul') DO (
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%Y IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\FILE\DEL_TASKS_TREE.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
				>>DB_ACTIVE\ACT_REG_TASKS_CLSID_%UNIQ%.DB ECHO %%X
				CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
			)
		) ELSE (
			ENDLOCAL
		)
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%Y IN ('%EXEGREP% -ix -f DB_EXEC\ACTIVESCAN\FILE\PATTERN_TASKS.DB -f DB_EXEC\ACTIVESCAN\COMBO\PATTERN_FAKE_OPTIMIZER+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
				>>DB_ACTIVE\ACT_REG_TASKS_CLSID_%UNIQ%.DB ECHO %%X
				CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
			)
		) ELSE (
			ENDLOCAL
		)
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%Y IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\FILE\PATTERN_TASKS+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
				>>DB_ACTIVE\ACT_REG_TASKS_CLSID_%UNIQ%.DB ECHO %%X
				CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
			)
		) ELSE (
			ENDLOCAL
		)
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			IF EXIST "DB_ACTIVE\ACT_REG_TASKS_TREE_%UNIQ%.DB" (
				FOR /F %%Y IN ('%EXEGREP% -Fxf DB_ACTIVE\ACT_REG_TASKS_TREE_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
					>>DB_ACTIVE\ACT_REG_TASKS_CLSID_%UNIQ%.DB ECHO %%X
					CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
				)
			)
		) ELSE (
			ENDLOCAL
		)
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%Y IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_TASKS_TREE+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
)
REM :HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree (Active)
IF EXIST "DB_ACTIVE\ACT_FILE_TASKS_%UNIQ%.DB" (
	TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
	SET "STRTMP=HKLM_SW_Schedule_TaskCache_Tree"
	FOR /F "DELIMS=" %%A IN ('TYPE DB_ACTIVE\ACT_FILE_TASKS_%UNIQ%.DB 2^>Nul') DO (
		TITLE 검사중 "HKLM\Software\…\Schedule\TaskCache\Tree%%A" 2>Nul
		FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree%%A\Id" 2^>Nul') DO (
			>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree%%~pA
			>VARIABLE\%VTEXT2% ECHO %%~nxA
			>>DB_ACTIVE\ACT_REG_TASKS_CLSID_%UNIQ%.DB ECHO %%B
			CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%" 1
		)
	)
)
REM :HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree (Active)
IF EXIST "DB_ACTIVE\ACT_FILE_TASKS_%UNIQ%.DB" (
	TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
	SET "STRTMP=HKLM_SW_Schedule_TaskCache_Tree(x86)"
	FOR /F "DELIMS=" %%A IN ('TYPE DB_ACTIVE\ACT_FILE_TASKS_%UNIQ%.DB 2^>Nul') DO (
		TITLE 검사중 "HKLM\Software\…\Schedule\TaskCache\Tree%%A" 2>Nul
		FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree%%A\Id" 2^>Nul') DO (
			>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree%%~pA
			>VARIABLE\%VTEXT2% ECHO %%~nxA
			>>DB_ACTIVE\ACT_REG_TASKS_CLSID_%UNIQ%.DB ECHO %%B
			CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%" 1
		)
	)
)
REM :HKLM\Software\Microsoft\Windows NT\CurrentVersion\Svchost (Value)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Windows NT\CurrentVersion\Svchost
SET "STRTMP=HKLM_SW_Svchost"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKLM\Software\Microsoft\Windows NT\CurrentVersion\Svchost" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\…\Svchost : %%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HKLM_SVCHOST.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
)
REM :HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Svchost (Value)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Svchost
SET "STRTMP=HKLM_SW_Svchost(x86)"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Svchost" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Wow6432Node\…\Svchost : %%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HKLM_SVCHOST.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
)
REM :HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon
SET "STRTMP=HKLM_SW_Schedule_TaskCache_Logon"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\…\Schedule\TaskCache\Logon\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "DB_ACTIVE\ACT_REG_TASKS_CLSID_%UNIQ%.DB" (
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_REG_TASKS_CLSID_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%_%%A"
	)
)
REM :HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon
SET "STRTMP=HKLM_SW_Schedule_TaskCache_Logon(x86)"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Wow6432Node\…\Schedule\TaskCache\Logon\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "DB_ACTIVE\ACT_REG_TASKS_CLSID_%UNIQ%.DB" (
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_REG_TASKS_CLSID_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%_%%A"
	)
)
REM :HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain
SET "STRTMP=HKLM_SW_Schedule_TaskCache_Plain"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\…\Schedule\TaskCache\Plain\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "DB_ACTIVE\ACT_REG_TASKS_CLSID_%UNIQ%.DB" (
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_REG_TASKS_CLSID_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%_%%A"
	)
)
REM :HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain
SET "STRTMP=HKLM_SW_Schedule_TaskCache_Plain(x86)"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Wow6432Node\…\Schedule\TaskCache\Plain\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "DB_ACTIVE\ACT_REG_TASKS_CLSID_%UNIQ%.DB" (
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_REG_TASKS_CLSID_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%_%%A"
	)
)
REM :HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks
SET "STRTMP=HKLM_SW_Schedule_TaskCache_Tasks"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\…\Schedule\TaskCache\Tasks\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "DB_ACTIVE\ACT_REG_TASKS_CLSID_%UNIQ%.DB" (
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_REG_TASKS_CLSID_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%_%%A"
	)
)
REM :HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks
SET "STRTMP=HKLM_SW_Schedule_TaskCache_Tasks(x86)"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Wow6432Node\…\Schedule\TaskCache\Tasks\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	IF EXIST "DB_ACTIVE\ACT_REG_TASKS_CLSID_%UNIQ%.DB" (
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_REG_TASKS_CLSID_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%_%%A"
	)
)
REM :HKLM\Software\Mozilla\Firefox\Extensions
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Mozilla\Firefox\Extensions
SET "STRTMP=HKLM_Mozilla_Firefox_Extensions"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKLM\Software\Mozilla\Firefox\Extensions" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Mozilla\Firefox\Extensions : %%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_FIREFOX+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\COMBO\PATTERN_BROWSER_EXTENSIONS_FIREFOX+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
)
REM :HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions
SET "STRTMP=HKLM_Mozilla_Firefox_Extensions(x86)"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Mozilla\Firefox\Extensions : %%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_FIREFOX+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\COMBO\PATTERN_BROWSER_EXTENSIONS_FIREFOX+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
)
REM :HKLM\Software\MozillaPlugins
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\MozillaPlugins
SET "STRTMP=HKCU_SW_MozillaPlugins"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software\MozillaPlugins" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\MozillaPlugins\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HK_SOFTWARE_MOZILLAPLUGINS.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
)
REM :HKLM\Software\Wow6432Node\MozillaPlugins
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\MozillaPlugins
SET "STRTMP=HKCU_SW_MozillaPlugins(x86)"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software\Wow6432Node\MozillaPlugins" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Wow6432Node\MozillaPlugins\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HK_SOFTWARE_MOZILLAPLUGINS.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
)
REM :HKLM\Software\Naver\Naver Whale\Extensions
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Naver\Naver Whale\Extensions
SET "STRTMP=HKLM_SW_NaverWhale_Extensions"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software\Naver\Naver Whale\Extensions" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Naver\Naver Whale\Extensions\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	IF EXIST DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB (
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
		) ELSE (
			ENDLOCAL
		)
	)
)
REM :HKLM\Software\Wow6432Node\Naver\Naver Whale\Extensions
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\Naver\Naver Whale\Extensions
SET "STRTMP=HKLM_SW_NaverWhale_Extensions(x86)"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software\Wow6432Node\Naver\Naver Whale\Extensions" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Wow6432Node\Naver\Naver Whale\Extensions\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	IF EXIST DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB (
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
		) ELSE (
			ENDLOCAL
		)
	)
)
REM :HKLM\Software\Naver\Naver Whale\PreferenceMACs\[%]\extensions.settings (Value)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software\Naver\Naver Whale\PreferenceMACs" 2^>Nul') DO (
	SET "STRTMP=HKLM_SW_NaverWhale_PreferenceMACs_Extensions"
	>VARIABLE\%VTEXT1% ECHO HKLM\Software\Naver\Naver Whale\PreferenceMACs\%%A\extensions.settings
	FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKLM\Software\Naver\Naver Whale\PreferenceMACs\%%A\extensions.settings" 2^>Nul') DO (
		>VARIABLE\%VTEXT2% ECHO %%B
		>VARIABLE\%VCHECK% ECHO 0
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP RANDOM "%STRTMP%"
		) ELSE (
			ENDLOCAL
		)
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP RANDOM "%STRTMP%"
		) ELSE (
			ENDLOCAL
		)
	)
)
REM :HKLM\Software\Wow6432Node\Naver\Naver Whale\PreferenceMACs\[%]\extensions.settings (Value)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software\Wow6432Node\Naver\Naver Whale\PreferenceMACs" 2^>Nul') DO (
	SET "STRTMP=HKLM_SW_NaverWhale_PreferenceMACs_Extensions(x86)"
	>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\Naver\Naver Whale\PreferenceMACs\%%A\extensions.settings
	FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKLM\Software\Wow6432Node\Naver\Naver Whale\PreferenceMACs\%%A\extensions.settings" 2^>Nul') DO (
		>VARIABLE\%VTEXT2% ECHO %%B
		>VARIABLE\%VCHECK% ECHO 0
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP RANDOM "%STRTMP%"
		) ELSE (
			ENDLOCAL
		)
		IF EXIST DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB (
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP RANDOM "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
		)
	)
)
REM :HKLM\Software\Policies\Chromium (DefaultSearchProviderNewTabURL)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Policies\Chromium
SET "STRTMP=HKLM_SW_Policies_Chromium_DefaultSearchProviderNewTabURL"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Policies\Chromium\DefaultSearchProviderNewTabURL" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Policies\Chromium : DefaultSearchProviderNewTabURL" 2>Nul
	>VARIABLE\%VTEXT2% ECHO DefaultSearchProviderNewTabURL
	>VARIABLE\%VTEXT3% ECHO %%A
	FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
)
REM :HKLM\Software\Policies\Chromium (DefaultSearchProviderSearchURL)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Policies\Chromium
SET "STRTMP=HKLM_SW_Policies_Chromium_DefaultSearchProviderSearchURL"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Policies\Chromium\DefaultSearchProviderSearchURL" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Policies\Chromium : DefaultSearchProviderSearchURL" 2>Nul
	>VARIABLE\%VTEXT2% ECHO DefaultSearchProviderSearchURL
	>VARIABLE\%VTEXT3% ECHO %%A
	FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
)
REM :HKLM\Software\Policies\Chromium (DefaultSearchProviderSuggestURL)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Policies\Chromium
SET "STRTMP=HKLM_SW_Policies_Chromium_DefaultSearchProviderSuggestURL"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Policies\Chromium\DefaultSearchProviderSuggestURL" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Policies\Chromium : DefaultSearchProviderSuggestURL" 2>Nul
	>VARIABLE\%VTEXT2% ECHO DefaultSearchProviderSuggestURL
	>VARIABLE\%VTEXT3% ECHO %%A
	FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
)
REM :HKLM\Software\Policies\Chromium\ExtensionInstallForcelist (Value)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Policies\Chromium\ExtensionInstallForcelist
SET "STRTMP=HKLM_SW_Policies_Chromium_ExtensionInstallForcelist"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKLM\Software\Policies\Chromium\ExtensionInstallForcelist" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Policies\Chromium\ExtensionInstallForcelist : %%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	FOR /F "DELIMS=" %%X IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Policies\Chromium\ExtensionInstallForcelist\%%A" 2^>Nul') DO (
		>VARIABLE\%VTEXT3% ECHO %%X
		FOR /F %%Y IN ('%EXEGREP% -Fif DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP NULL "%STRTMP%"
	)
)
REM :HKLM\Software\Policies\Chromium\ExtensionInstallWhitelist (Value)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Policies\Chromium\ExtensionInstallWhitelist
SET "STRTMP=HKLM_SW_Policies_Chromium_ExtensionInstallWhitelist"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKLM\Software\Policies\Chromium\ExtensionInstallWhitelist" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Policies\Chromium\ExtensionInstallWhitelist : %%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	FOR /F "DELIMS=" %%X IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Policies\Chromium\ExtensionInstallWhitelist\%%A" 2^>Nul') DO (
		>VARIABLE\%VTEXT3% ECHO %%X
		FOR /F %%Y IN ('%EXEGREP% -Fif DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP NULL "%STRTMP%"
	)
)
REM :HKLM\Software\Policies\Google\Chrome (DefaultSearchProviderNewTabURL)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Policies\Google\Chrome
SET "STRTMP=HKLM_SW_Policies_GoogleChrome_DefaultSearchProviderNewTabURL"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Policies\Google\Chrome\DefaultSearchProviderNewTabURL" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Policies\Google\Chrome : DefaultSearchProviderNewTabURL" 2>Nul
	>VARIABLE\%VTEXT2% ECHO DefaultSearchProviderNewTabURL
	>VARIABLE\%VTEXT3% ECHO %%A
	FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
)
REM :HKLM\Software\Policies\Google\Chrome (DefaultSearchProviderSearchURL)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Policies\Google\Chrome
SET "STRTMP=HKLM_SW_Policies_GoogleChrome_DefaultSearchProviderSearchURL"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Policies\Google\Chrome\DefaultSearchProviderSearchURL" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Policies\Google\Chrome : DefaultSearchProviderSearchURL" 2>Nul
	>VARIABLE\%VTEXT2% ECHO DefaultSearchProviderSearchURL
	>VARIABLE\%VTEXT3% ECHO %%A
	FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
)
REM :HKLM\Software\Policies\Google\Chrome (DefaultSearchProviderSuggestURL)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Policies\Google\Chrome
SET "STRTMP=HKLM_SW_Policies_GoogleChrome_DefaultSearchProviderSuggestURL"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Policies\Google\Chrome\DefaultSearchProviderSuggestURL" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Policies\Google\Chrome : DefaultSearchProviderSuggestURL" 2>Nul
	>VARIABLE\%VTEXT2% ECHO DefaultSearchProviderSuggestURL
	>VARIABLE\%VTEXT3% ECHO %%A
	FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
)
REM :HKLM\Software\Policies\Google\Chrome\ExtensionInstallForcelist (Value)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Policies\Google\Chrome\ExtensionInstallForcelist
SET "STRTMP=HKLM_SW_Policies_GoogleChrome_ExtensionInstallForcelist"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKLM\Software\Policies\Google\Chrome\ExtensionInstallForcelist" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Policies\Google\Chrome\ExtensionInstallForcelist : %%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	FOR /F "DELIMS=" %%X IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Policies\Google\Chrome\ExtensionInstallForcelist\%%A" 2^>Nul') DO (
		>VARIABLE\%VTEXT3% ECHO %%X
		FOR /F %%Y IN ('%EXEGREP% -Fif DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP NULL "%STRTMP%"
	)
)
REM :HKLM\Software\Policies\Google\Chrome\ExtensionInstallWhitelist (Value)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Policies\Google\Chrome\ExtensionInstallWhitelist
SET "STRTMP=HKLM_SW_Policies_GoogleChrome_ExtensionInstallWhitelist"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKLM\Software\Policies\Google\Chrome\ExtensionInstallWhitelist" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Policies\Google\Chrome\ExtensionInstallWhitelist : %%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	FOR /F "DELIMS=" %%X IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Policies\Google\Chrome\ExtensionInstallWhitelist\%%A" 2^>Nul') DO (
		>VARIABLE\%VTEXT3% ECHO %%X
		FOR /F %%Y IN ('%EXEGREP% -Fif DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP NULL "%STRTMP%"
	)
)
REM :HKLM\Software\Policies\Google\Chrome\NotificationsAllowedForUrls (Value)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Policies\Google\Chrome\NotificationsAllowedForUrls
SET "STRTMP=HKLM_SW_Policies_GoogleChrome_NotificationsAllowedForUrls"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKLM\Software\Policies\Google\Chrome\NotificationsAllowedForUrls" 2^>Nul') DO (
	TITLE 확인중 "HKLM\Software\Policies\Google\Chrome\NotificationsAllowedForUrls : %%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	FOR /F "DELIMS=" %%X IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Policies\Google\Chrome\NotificationsAllowedForUrls\%%A" 2^>Nul') DO (
		>VARIABLE\%VTEXT3% ECHO %%X
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\FILE\PATTERN_BROWSER_CHROME_NOTIFICATIONS+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
	)
)
REM :HKLM\Software\Policies\Microsoft\Windows\IPSec\Policy\Local
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Policies\Microsoft\Windows\IPSec\Policy\Local
SET "STRTMP=HKLM_SW_Policies_IPSecLocal"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software\Policies\Microsoft\Windows\IPSec\Policy\Local" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Policies\…\IPSec\Policy\Local\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	FOR /F "DELIMS=" %%X IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Policies\Microsoft\Windows\IPSec\Policy\Local\%%A\ipsecName" 2^>Nul') DO (
		>VARIABLE\%VTEXT3% ECHO %%X
		FOR /F %%Y IN ('%EXEGREP% -Fxf DB_EXEC\THREAT\REGISTRY\DEL_IPSEC_POLICY.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	)
)
REM :HKLM\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths
SET "STRTMP=HKLM_SW_Policies_Safer_CodeIdentifiers"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Policies\…\Safer\CodeIdentifiers\0\Paths\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	FOR /F "DELIMS=" %%X IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\%%A\ItemData" 2^>Nul') DO (
		>VARIABLE\%VTEXT3% ECHO %%X
		FOR /F %%Y IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HKLM_POLICIES_SAFER_PATHS+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	)
)
REM :HKLM\Software\Policies\Vivaldi (DefaultSearchProviderNewTabURL)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Policies\Vivaldi
SET "STRTMP=HKLM_SW_Policies_Vivaldi_DefaultSearchProviderNewTabURL"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Policies\Vivaldi\DefaultSearchProviderNewTabURL" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Policies\Vivaldi : DefaultSearchProviderNewTabURL" 2>Nul
	>VARIABLE\%VTEXT2% ECHO DefaultSearchProviderNewTabURL
	>VARIABLE\%VTEXT3% ECHO %%A
	FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
)
REM :HKLM\Software\Policies\Vivaldi (DefaultSearchProviderSearchURL)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Policies\Vivaldi
SET "STRTMP=HKLM_SW_Policies_Vivaldi_DefaultSearchProviderSearchURL"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Policies\Vivaldi\DefaultSearchProviderSearchURL" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Policies\Vivaldi : DefaultSearchProviderSearchURL" 2>Nul
	>VARIABLE\%VTEXT2% ECHO DefaultSearchProviderSearchURL
	>VARIABLE\%VTEXT3% ECHO %%A
	FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
)
REM :HKLM\Software\Policies\Vivaldi (DefaultSearchProviderSuggestURL)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Policies\Vivaldi
SET "STRTMP=HKLM_SW_Policies_Vivaldi_DefaultSearchProviderSuggestURL"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Policies\Vivaldi\DefaultSearchProviderSuggestURL" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Policies\Vivaldi : DefaultSearchProviderSuggestURL" 2>Nul
	>VARIABLE\%VTEXT2% ECHO DefaultSearchProviderSuggestURL
	>VARIABLE\%VTEXT3% ECHO %%A
	FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
)
REM :HKLM\Software\Policies\Vivaldi\ExtensionInstallForcelist (Value)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Policies\Vivaldi\ExtensionInstallForcelist
SET "STRTMP=HKLM_SW_Policies_Vivaldi_ExtensionInstallForcelist"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKLM\Software\Policies\Vivaldi\ExtensionInstallForcelist" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Policies\Vivaldi\ExtensionInstallForcelist : %%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	FOR /F "DELIMS=" %%X IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Policies\Vivaldi\ExtensionInstallForcelist\%%A" 2^>Nul') DO (
		>VARIABLE\%VTEXT3% ECHO %%X
		FOR /F %%Y IN ('%EXEGREP% -Fif DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP NULL "%STRTMP%"
	)
)
REM :HKLM\Software\Policies\Vivaldi\ExtensionInstallWhitelist (Value)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Policies\Vivaldi\ExtensionInstallWhitelist
SET "STRTMP=HKLM_SW_Policies_Vivaldi_ExtensionInstallWhitelist"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKLM\Software\Policies\Vivaldi\ExtensionInstallWhitelist" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Policies\Vivaldi\ExtensionInstallWhitelist : %%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	FOR /F "DELIMS=" %%X IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Policies\Vivaldi\ExtensionInstallWhitelist\%%A" 2^>Nul') DO (
		>VARIABLE\%VTEXT3% ECHO %%X
		FOR /F %%Y IN ('%EXEGREP% -Fif DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP NULL "%STRTMP%"
	)
)
REM :HKLM\Software\Vivaldi\Extensions
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Vivaldi\Extensions
SET "STRTMP=HKLM_SW_Vivaldi_Extensions"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software\Vivaldi\Extensions" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Vivaldi\Extensions\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	IF EXIST DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB (
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
		) ELSE (
			ENDLOCAL
		)
	)
)
REM :HKLM\Software\Wow6432Node\Vivaldi\Extensions
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\Vivaldi\Extensions
SET "STRTMP=HKLM_SW_Vivaldi_Extensions(x86)"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software\Wow6432Node\Vivaldi\Extensions" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Wow6432Node\Vivaldi\Extensions\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	IF EXIST DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB (
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
		) ELSE (
			ENDLOCAL
		)
	)
)
REM :HKLM\Software\Vivaldi\PreferenceMACs\[%]\extensions.settings (Value)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software\Vivaldi\PreferenceMACs" 2^>Nul') DO (
	SET "STRTMP=HKLM_SW_Vivaldi_PreferenceMACs_Extensions"
	>VARIABLE\%VTEXT1% ECHO HKLM\Software\Vivaldi\PreferenceMACs\%%A\extensions.settings
	FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKLM\Software\Vivaldi\PreferenceMACs\%%A\extensions.settings" 2^>Nul') DO (
		>VARIABLE\%VTEXT2% ECHO %%B
		>VARIABLE\%VCHECK% ECHO 0
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP RANDOM "%STRTMP%"
		) ELSE (
			ENDLOCAL
		)
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP RANDOM "%STRTMP%"
		) ELSE (
			ENDLOCAL
		)
	)
)
REM :HKLM\Software\Wow6432Node\Vivaldi\PreferenceMACs\[%]\extensions.settings (Value)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software\Wow6432Node\Vivaldi\PreferenceMACs" 2^>Nul') DO (
	SET "STRTMP=HKLM_SW_Vivaldi_PreferenceMACs_Extensions(x86)"
	>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\Vivaldi\PreferenceMACs\%%A\extensions.settings
	FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKLM\Software\Wow6432Node\Vivaldi\PreferenceMACs\%%A\extensions.settings" 2^>Nul') DO (
		>VARIABLE\%VTEXT2% ECHO %%B
		>VARIABLE\%VCHECK% ECHO 0
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP RANDOM "%STRTMP%"
		) ELSE (
			ENDLOCAL
		)
		IF EXIST DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB (
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP RANDOM "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
		)
	)
)
REM :HKLM\Software (ETCs)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "TOKENS=1,2 DELIMS=|" %%A IN ('TYPE DB_EXEC\THREAT\REGISTRY\DEL_HKLM_SOFTWARE_ETCS+NC.DB 2^>Nul') DO (
	IF NOT "%%B" == "" (
		TITLE 검사중^(DB^) "HKLM\Software\%%A : %%~nxB" 2>Nul
		FOR /F %%X IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -b -q get "\HKLM\Software\%%A\%%B" 2^>Nul') DO (
			>VARIABLE\%VTEXT1% ECHO HKLM\Software\%%A
			>VARIABLE\%VTEXT2% ECHO %%B
			CALL :DELETE_REG_VALUE NULL BACKUP RANDOM "HKLM_SoftwareETCs"
		)
		TITLE 검사중^(DB^) "HKLM\Software\Wow6432Node\%%A : %%~nxB" 2>Nul
		FOR /F %%X IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -b -q get "\HKLM\Software\Wow6432Node\%%A\%%B" 2^>Nul') DO (
			>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\%%A
			>VARIABLE\%VTEXT2% ECHO %%B
			CALL :DELETE_REG_VALUE NULL BACKUP RANDOM "HKLM_SoftwareETCs(x86)"
		)
	) ELSE (
		TITLE 검사중^(DB^) "HKLM\Software\%%A" 2>Nul
		FOR /F %%X IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -v -q check "\HKLM\Software\%%A" 2^>Nul') DO (
			>VARIABLE\%VTEXT1% ECHO HKLM\Software
			>VARIABLE\%VTEXT2% ECHO %%A
			CALL :DELETE_REG_KEY NULL BACKUP "HKLM_SoftwareETCs"
		)
		TITLE 검사중^(DB^) "HKLM\Software\Wow6432Node\%%A" 2>Nul
		FOR /F %%X IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -v -q check "\HKLM\Software\Wow6432Node\%%A" 2^>Nul') DO (
			>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node
			>VARIABLE\%VTEXT2% ECHO %%A
			CALL :DELETE_REG_KEY NULL BACKUP "HKLM_SoftwareETCs(x86)"
		)
	)
)
REM :HKLM\System\CurrentControlSet\Control\Session Manager\Environment (Value)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\System\CurrentControlSet\Control\Session Manager\Environment
SET "STRTMP=HKLM_Environment"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKLM\System\CurrentControlSet\Control\Session Manager\Environment" 2^>Nul') DO (
	TITLE 검사중 "HKLM\System\…\Environment : %%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HK_ENVIRONMENT+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_HK_ENVIRONMENT+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
)
REM :HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal
SET "STRTMP=HKLM_Services_SafeBoot_Minimal"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal" 2^>Nul') DO (
	TITLE 검사중 "HKLM\System\…\Control\SafeBoot\Minimal\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HKLM_SAFEBOOT+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
)
REM :HKLM\System\CurrentControlSet\Control\SafeBoot\Network
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\System\CurrentControlSet\Control\SafeBoot\Network
SET "STRTMP=HKLM_Services_SafeBoot_Network"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\System\CurrentControlSet\Control\SafeBoot\Network" 2^>Nul') DO (
	TITLE 검사중 "HKLM\System\…\Control\SafeBoot\Network\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HKLM_SAFEBOOT+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
)
REM :HKLM\System\CurrentControlSet\Services\EventLog\Application
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\System\CurrentControlSet\Services\EventLog\Application
SET "STRTMP=HKLM_Services_EventLog_Application"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\System\CurrentControlSet\Services\EventLog\Application" 2^>Nul^|%EXEGREP% -Fivxf DB\EXCEPT\EX_REG_EVENTLOG_APPLICATION.DB 2^>Nul') DO (
	TITLE 검사중 "HKLM\System\CurrentControlSet\Services\EventLog\Application\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VTEXT3% ECHO %%A^|
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\SERVICE\DEL_SERVICE+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\SERVICE\PATTERN_SERVICE+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\SERVICE\PATTERN_SERVICE+C.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
)
REM :HKLM\System\CurrentControlSet\Services\IPHlpSvc\Parameters\ProxyMgr\{CLSID}
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\System\CurrentControlSet\Services\IPHlpSvc\Parameters\ProxyMgr
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\System\CurrentControlSet\Services\IPHlpSvc\Parameters\ProxyMgr" 2^>Nul') DO (
	SET "STRTMP=HKLM_Services_IPHlpSvc_ProxyMgr@%%A"
	TITLE 검사중 "HKLM\System\…\Services\IPHlpSvc\Parameters\ProxyMgr\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\IPHlpSvc\Parameters\ProxyMgr\%%A\AutoConfigURL" 2^>Nul') DO (
		>VARIABLE\%VTEXT3% ECHO %%B
		FOR /F %%X IN ('%EXEGREP% -Fif DB_EXEC\THREAT\REGISTRY\DEL_HKCU_AUTOCONFIGURL.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	)
)
REM :HKLM\System\CurrentControlSet (ETCs)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "TOKENS=1,2 DELIMS=|" %%A IN ('TYPE DB_EXEC\THREAT\REGISTRY\DEL_HKLM_SYSTEM_ETCS+NC.DB 2^>Nul') DO (
	IF NOT "%%B" == "" (
		TITLE 검사중^(DB^) "HKLM\System\CurrentControlSet\%%A : %%B" 2>Nul
		FOR /F %%X IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -b -q get "\HKLM\System\CurrentControlSet\%%A\%%B" 2^>Nul') DO (
			>VARIABLE\%VTEXT1% ECHO HKLM\System\CurrentControlSet\%%A
			>VARIABLE\%VTEXT2% ECHO %%B
			CALL :DELETE_REG_VALUE NULL BACKUP RANDOM "HKLM_System_CurrentControlSet_ETCs"
		)
	) ELSE (
		TITLE 검사중^(DB^) "HKLM\System\CurrentControlSet\%%A" 2>Nul
		FOR /F %%X IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -v -q check "\HKLM\System\CurrentControlSet\%%A" 2^>Nul') DO (
			>VARIABLE\%VTEXT1% ECHO HKLM\System\CurrentControlSet
			>VARIABLE\%VTEXT2% ECHO %%A
			CALL :DELETE_REG_KEY NULL BACKUP "HKLM_System_CurrentControlSet_ETCs"
		)
	)
)
REM :Result
CALL :PROCESS_RESULT NULL CHKINFECT
REM :Reset Value
CALL :RESET_VALUE

TITLE %MZTITLE% 2>Nul & PING.EXE -n 2 0 >Nul 2>Nul & ECHO. & >>"%QLog%" ECHO.

ECHO ◇ 악성 및 유해 가능 ^<HKEY_USERS^> 레지스트리 제거중 . . . & >>"%QLog%" ECHO    ■ 악성 및 유해 가능 ^<HKEY_USERS^> 레지스트리 제거 :
REM :HKU\.Default\Software
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKU\.Default\Software
SET "STRTMP=HKU_SW"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKU\.Default\Software" 2^>Nul^|%EXEGREP% -Fivxf DB\EXCEPT\EX_REG_HK_SOFTWARE+NC.DB 2^>Nul') DO (
	TITLE 검사중 "HKU\.Default\Software\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HK_SOFTWARE.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -ix -f DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_HK_SOFTWARE+NC.DB -f DB_EXEC\ACTIVESCAN\COMBO\PATTERN_FAKE_OPTIMIZER+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_HK_SOFTWARE+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
)
REM :HKU\[%SID%]\Software
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKU\%SID%\Software
SET "STRTMP=HKU_%SID%_SW"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKU\%SID%\Software" 2^>Nul^|%EXEGREP% -Fivxf DB\EXCEPT\EX_REG_HK_SOFTWARE+NC.DB 2^>Nul') DO (
	TITLE 검사중 "HKU\%SID%\Software\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HK_SOFTWARE.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -ix -f DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_HK_SOFTWARE+NC.DB -f DB_EXEC\ACTIVESCAN\COMBO\PATTERN_FAKE_OPTIMIZER+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_HK_SOFTWARE+C.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
)
REM :HKU\[%SID%]\Software\Microsoft\Windows\CurrentVersion\Internet Settings (AutoConfigURL)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKU\%SID%\Software\Microsoft\Windows\CurrentVersion\Internet Settings
SET "STRTMP=HKU_%SID%_SW_InternetSettings"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKU\%SID%\Software\Microsoft\Windows\CurrentVersion\Internet Settings\AutoConfigURL" 2^>Nul') DO (
	TITLE 검사중 "HKU\%SID%\Software\…\Internet Settings : AutoConfigURL" 2>Nul
	>VARIABLE\%VTEXT2% ECHO AutoConfigURL
	>VARIABLE\%VTEXT3% ECHO %%A
	FOR /F %%X IN ('%EXEGREP% -Fif DB_EXEC\THREAT\REGISTRY\DEL_HKCU_AUTOCONFIGURL.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP NULL "%STRTMP%"
)
REM :HKU\[%SID%]\Software\Microsoft\Windows\CurrentVersion\Internet Settings (ProxyOverride)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKU\%SID%\Software\Microsoft\Windows\CurrentVersion\Internet Settings
SET "STRTMP=HKU_%SID%_SW_InternetSettings"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKU\%SID%\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyOverride" 2^>Nul') DO (
	TITLE 검사중 "HKU\%SID%\Software\…\Internet Settings : ProxyOverride" 2>Nul
	>VARIABLE\%VTEXT2% ECHO ProxyOverride
	>VARIABLE\%VTEXT3% ECHO %%A
	FOR /F %%X IN ('%EXEGREP% -Fif DB_EXEC\THREAT\REGISTRY\DEL_HKCU_PROXYOVERRIDE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP NULL "%STRTMP%"
)
REM :HKU\[%SID%]\Software\Microsoft\Windows\CurrentVersion\Internet Settings (ProxyServer)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKU\%SID%\Software\Microsoft\Windows\CurrentVersion\Internet Settings
SET "STRTMP=HKU_%SID%_SW_InternetSettings"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKU\%SID%\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer" 2^>Nul') DO (
	TITLE 검사중 "HKU\%SID%\Software\…\Internet Settings : ProxyServer" 2>Nul
	>VARIABLE\%VTEXT2% ECHO ProxyServer
	>VARIABLE\%VTEXT3% ECHO %%A
	FOR /F %%X IN ('%EXEGREP% -Fif DB_EXEC\THREAT\REGISTRY\DEL_HKCU_PROXYSERVER.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP NULL "%STRTMP%"
)
REM :HKU\[%SID%]\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections (DefaultConnectionSettings)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKU\%SID%\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
SET "STRTMP=HKU_%SID%_SW_InternetSettings_Connections"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -b -q get "\HKU\%SID%\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\DefaultConnectionSettings" 2^>Nul') DO (
	TITLE 검사중 "HKU\%SID%\Software\…\Internet Settings\Connections : DefaultConnectionSettings" 2>Nul
	>VARIABLE\%VTEXT2% ECHO DefaultConnectionSettings
	>VARIABLE\%VTEXT3% ECHO %%A
	FOR /F %%X IN ('%EXEGREP% -Fif DB_EXEC\THREAT\REGISTRY\DEL_HKCU_CONNECTIONSCRIPT.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP NULL "%STRTMP%"
)
REM :HKU\[%SID%]\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections (SavedLegacySettings)
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKU\%SID%\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
SET "STRTMP=HKU_%SID%_SW_InternetSettings_Connections"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -b -q get "\HKU\%SID%\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\SavedLegacySettings" 2^>Nul') DO (
	TITLE 검사중 "HKU\%SID%\Software\…\Internet Settings\Connections : SavedLegacySettings" 2>Nul
	>VARIABLE\%VTEXT2% ECHO SavedLegacySettings
	>VARIABLE\%VTEXT3% ECHO %%A
	FOR /F %%X IN ('%EXEGREP% -Fif DB_EXEC\THREAT\REGISTRY\DEL_HKCU_CONNECTIONSCRIPT.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP NULL "%STRTMP%"
)
REM :Result
CALL :PROCESS_RESULT NULL CHKINFECT
REM :Reset Value
CALL :RESET_VALUE

TITLE %MZTITLE% 2>Nul & PING.EXE -n 2 0 >Nul 2>Nul & ECHO. & >>"%QLog%" ECHO.

REM * Delete - Registry <Malicious BHO(Browser Helper Object)>
ECHO ◇ 악성 및 유해 가능 BHO^(Browser Helper Object^) 제거중 . . . & >>"%QLog%" ECHO    ■ 악성 및 유해 가능 BHO^(Browser Helper Object^) 제거 :
REM :HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
SET "STRTMP=HKLM_BrowserHelperObjects"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects" 2^>Nul^|%EXEGREP% -Fivxf DB\EXCEPT\EX_REG_HK_CLSID.DB 2^>Nul') DO (
	TITLE 검사중 "Browser Helper Objects : %%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HK_CLSID.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_HK_CLSID.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		CALL :GET_REG_DETAILVALUE
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%Y IN ('%EXEGREP% -Fxf DB_EXEC\THREAT\REGISTRY\DEL_HK_CLSID_DEFAULTVAL.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%Y IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_HK_CLSID_DEFAULTVAL.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%Y IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\COMBO\PATTERN_ADWARE_MULTIPLUG+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		IF EXIST "DB_ACTIVE\ACT_REG_HK_CLSID_%UNIQ%.DB" (
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_REG_HK_CLSID_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
		)
	) ELSE (
		ENDLOCAL
	)
)
REM :HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
SET "STRTMP=HKLM_BrowserHelperObjects(x86)"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects" 2^>Nul^|%EXEGREP% -Fivxf DB\EXCEPT\EX_REG_HK_CLSID.DB 2^>Nul') DO (
	TITLE 검사중 "Browser Helper Objects (x64) : %%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HK_CLSID.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_HK_CLSID.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		CALL :GET_REG_DETAILVALUE
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%Y IN ('%EXEGREP% -Fxf DB_EXEC\THREAT\REGISTRY\DEL_HK_CLSID_DEFAULTVAL.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%Y IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_HK_CLSID_DEFAULTVAL.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%Y IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\COMBO\PATTERN_ADWARE_MULTIPLUG+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		IF EXIST "DB_ACTIVE\ACT_REG_HK_CLSID_%UNIQ%.DB" (
			FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_REG_HK_CLSID_%UNIQ%.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
		)
	) ELSE (
		ENDLOCAL
	)
)
REM :Result
CALL :PROCESS_RESULT NULL CHKINFECT
REM :Reset Value
CALL :RESET_VALUE

TITLE %MZTITLE% 2>Nul & PING.EXE -n 2 0 >Nul 2>Nul & ECHO. & >>"%QLog%" ECHO.

REM * Delete - Registry <Malicious Firewall Rules>
ECHO ◇ 악성 및 유해 가능 방화벽 규칙 제거중 . . . & >>"%QLog%" ECHO    ■ 악성 및 유해 가능 방화벽 규칙 제거 :
REM :HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules
SET "STRTMP=HKLM_FirewallPolicy_FirewallRules"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules" 2^>Nul^|%EXEGREP% -Eix "\{[0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12}\}" 2^>Nul') DO (
	FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\%%A" 2^>Nul') DO (
		TITLE 검사중 "HKLM\System\…\FirewallPolicy\FirewallRules : %%A" 2>Nul
		>VARIABLE\%VTEXT2% ECHO %%A
		>VARIABLE\%VTEXT3% ECHO %%B
		FOR /F %%X IN ('%EXEGREP% -Ff DB_EXEC\THREAT\NETWORK\DEL_BAD_FIREWALL_RULES.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP NULL "%STRTMP%"
	)
)
REM :HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List
SET "STRTMP=HKLM_FirewallPolicy_AuthorizedApplications_List"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List" 2^>Nul') DO (
	FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\%%A" 2^>Nul') DO (
		TITLE 검사중 "HKLM\System\…\AuthorizedApplications\List : %%A" 2>Nul
		>VARIABLE\%VTEXT2% ECHO %%A
		>VARIABLE\%VTEXT3% ECHO %%B
		FOR /F %%X IN ('%EXEGREP% -Ff DB_EXEC\THREAT\NETWORK\DEL_BAD_FIREWALL_AUTHORIZEDAPPLICATIONS_RULES.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP NULL "%STRTMP%"
	)
)
REM :Result
CALL :PROCESS_RESULT NULL CHKINFECT
REM :Reset Value
CALL :RESET_VALUE

TITLE %MZTITLE% 2>Nul & PING.EXE -n 2 0 >Nul 2>Nul & ECHO. & >>"%QLog%" ECHO.

REM * Delete - Registry <Malicious Browser Extensions>
ECHO ◇ 악성 및 유해 가능 브라우저 확장 기능 제거중 . . . & >>"%QLog%" ECHO    ■ 악성 및 유해 가능 브라우저 확장 기능 제거 :
REM :HKCU\Software\Microsoft\Internet Explorer\Extensions
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKCU\Software\Microsoft\Internet Explorer\Extensions
SET "STRTMP=HKCU_InternetExplorerExtensions"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKCU\Software\Microsoft\Internet Explorer\Extensions" 2^>Nul') DO (
	TITLE 검사중 "HKCU\Software\Microsoft\Internet Explorer\Extensions\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	FOR /F %%X IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -v -q check "\HKCU\Software\Microsoft\Internet Explorer\Extensions\%%A" 2^>Nul') DO (
		FOR /F %%Y IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_EXTENSIONS_IE+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	)
)
REM :HKCU\Software\Wow6432Node\Microsoft\Internet Explorer\Extensions
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKCU\Software\Wow6432Node\Microsoft\Internet Explorer\Extensions
SET "STRTMP=HKCU_InternetExplorerExtensions(x86)"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKCU\Software\Wow6432Node\Microsoft\Internet Explorer\Extensions" 2^>Nul') DO (
	TITLE 검사중 "HKCU\Software\Wow6432Node\Microsoft\Internet Explorer\Extensions\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	FOR /F %%X IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -v -q check "\HKCU\Software\Wow6432Node\Microsoft\Internet Explorer\Extensions\%%A" 2^>Nul') DO (
		FOR /F %%Y IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_EXTENSIONS_IE+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	)
)
REM :HKLM\Software\Microsoft\Internet Explorer\Extensions
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Internet Explorer\Extensions
SET "STRTMP=HKLM_InternetExplorerExtensions"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software\Microsoft\Internet Explorer\Extensions" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Microsoft\Internet Explorer\Extensions\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	FOR /F %%X IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -v -q check "\HKLM\Software\Microsoft\Internet Explorer\Extensions\%%A" 2^>Nul') DO (
		FOR /F %%Y IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_EXTENSIONS_IE+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	)
)
REM :HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Extensions
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Extensions
SET "STRTMP=HKLM_InternetExplorerExtensions(x86)"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Extensions" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Extensions\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	FOR /F %%X IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -v -q check "\HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Extensions\%%A" 2^>Nul') DO (
		FOR /F %%Y IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_EXTENSIONS_IE+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	)
)
REM :Result
CALL :PROCESS_RESULT NULL CHKINFECT
REM :Reset Value
CALL :RESET_VALUE

TITLE %MZTITLE% 2>Nul & PING.EXE -n 2 0 >Nul 2>Nul & ECHO. & >>"%QLog%" ECHO.

REM * Reset Internet Explorer Start & Search Page
ECHO ◇ 웹 브라우저 - 마이크로소프트 인터넷 익스플로러 악성 시작 및 검색 페이지 확인중 . . . & >>"%QLog%" ECHO    ■ 웹 브라우저 - 마이크로소프트 인터넷 익스플로러 악성 시작 및 검색 페이지 확인 :
REM :HKCU\Software\Microsoft\Internet Explorer\Main (Default_Page_URL)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCU\Software\Microsoft\Internet Explorer\Main\Default_Page_URL" 2^>Nul') DO (
	TITLE 검사중 "HKCU\Software\Microsoft\Internet Explorer\Main : Default_Page_URL" 2>Nul
	>VARIABLE\%VTEXT1% ECHO HKCU\Software\Microsoft\Internet Explorer\Main
	>VARIABLE\%VTEXT2% ECHO Default_Page_URL
	>VARIABLE\%VTEXT3% ECHO %%~A
	FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		CALL :DELETE_REG_VALUE NULL BACKUP NULL "HKCU_InternetExplorer_Main_DefaultPageURL"
		REG.EXE ADD "HKCU\Software\Microsoft\Internet Explorer\Main" /v "Default_Page_URL" /d "https://www.msn.com" /f >Nul 2>Nul
	)
)
REM :HKCU\Software\Wow6432Node\Microsoft\Internet Explorer\Main (Default_Page_URL)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCU\Software\Wow6432Node\Microsoft\Internet Explorer\Main\Default_Page_URL" 2^>Nul') DO (
	TITLE 검사중 "HKCU\Software\Wow6432Node\Microsoft\Internet Explorer\Main : Default_Page_URL" 2>Nul
	>VARIABLE\%VTEXT1% ECHO HKCU\Software\Wow6432Node\Microsoft\Internet Explorer\Main
	>VARIABLE\%VTEXT2% ECHO Default_Page_URL
	>VARIABLE\%VTEXT3% ECHO %%~A
	FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		CALL :DELETE_REG_VALUE NULL BACKUP NULL "HKCU_InternetExplorer_Main_DefaultPageURL(x86)"
		REG.EXE ADD "HKCU\Software\Wow6432Node\Microsoft\Internet Explorer\Main" /v "Default_Page_URL" /d "https://www.msn.com" /f >Nul 2>Nul
	)
)
REM :HKCU\Software\Microsoft\Internet Explorer\Main (Default_Search_URL)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCU\Software\Microsoft\Internet Explorer\Main\Default_Search_URL" 2^>Nul') DO (
	TITLE 검사중 "HKCU\Software\Microsoft\Internet Explorer\Main : Default_Search_URL" 2>Nul
	>VARIABLE\%VTEXT1% ECHO HKCU\Software\Microsoft\Internet Explorer\Main
	>VARIABLE\%VTEXT2% ECHO Default_Search_URL
	>VARIABLE\%VTEXT3% ECHO %%~A
	FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		CALL :DELETE_REG_VALUE NULL BACKUP NULL "HKCU_InternetExplorer_Main_DefaultSearchURL"
		REG.EXE ADD "HKCU\Software\Microsoft\Internet Explorer\Main" /v "Default_Search_URL" /d "https://www.bing.com" /f >Nul 2>Nul
	)
)
REM :HKCU\Software\Wow6432Node\Microsoft\Internet Explorer\Main (Default_Search_URL)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCU\Software\Wow6432Node\Microsoft\Internet Explorer\Main\Default_Search_URL" 2^>Nul') DO (
	TITLE 검사중 "HKCU\Software\Wow6432Node\Microsoft\Internet Explorer\Main : Default_Search_URL" 2>Nul
	>VARIABLE\%VTEXT1% ECHO HKCU\Software\Wow6432Node\Microsoft\Internet Explorer\Main
	>VARIABLE\%VTEXT2% ECHO Default_Search_URL
	>VARIABLE\%VTEXT3% ECHO %%~A
	FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		CALL :DELETE_REG_VALUE NULL BACKUP NULL "HKCU_InternetExplorer_Main_DefaultSearchURL(x86)"
		REG.EXE ADD "HKCU\Software\Wow6432Node\Microsoft\Internet Explorer\Main" /v "Default_Search_URL" /d "https://www.bing.com" /f >Nul 2>Nul
	)
)
REM :HKCU\Software\Microsoft\Internet Explorer\Main (Start Page)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCU\Software\Microsoft\Internet Explorer\Main\Start Page" 2^>Nul') DO (
	TITLE 검사중 "HKCU\Software\Microsoft\Internet Explorer\Main : Start Page" 2>Nul
	>VARIABLE\%VTEXT1% ECHO HKCU\Software\Microsoft\Internet Explorer\Main
	>VARIABLE\%VTEXT2% ECHO Start Page
	>VARIABLE\%VTEXT3% ECHO %%~A
	FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		CALL :DELETE_REG_VALUE NULL BACKUP NULL "HKCU_InternetExplorer_Main_StartPage"
		REG.EXE ADD "HKCU\Software\Microsoft\Internet Explorer\Main" /v "Start Page" /d "https://boho.or.kr" /f >Nul 2>Nul
	)
)
REM :HKCU\Software\Wow6432Node\Microsoft\Internet Explorer\Main (Start Page)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCU\Software\Wow6432Node\Microsoft\Internet Explorer\Main\Start Page" 2^>Nul') DO (
	TITLE 검사중 "HKCU\Software\Wow6432Node\Microsoft\Internet Explorer\Main : Start Page" 2>Nul
	>VARIABLE\%VTEXT1% ECHO HKCU\Software\Wow6432Node\Microsoft\Internet Explorer\Main
	>VARIABLE\%VTEXT2% ECHO Start Page
	>VARIABLE\%VTEXT3% ECHO %%~A
	FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		CALL :DELETE_REG_VALUE NULL BACKUP NULL "HKCU_InternetExplorer_Main_StartPage(x86)"
		REG.EXE ADD "HKCU\Software\Wow6432Node\Microsoft\Internet Explorer\Main" /v "Start Page" /d "https://boho.or.kr" /f >Nul 2>Nul
	)
)
REM :HKCU\Software\Microsoft\Internet Explorer\Main (Start Page Redirect Cache)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCU\Software\Microsoft\Internet Explorer\Main\Start Page Redirect Cache" 2^>Nul') DO (
	TITLE 검사중 "HKCU\Software\Microsoft\Internet Explorer\Main : Start Page Redirect Cache" 2>Nul
	>VARIABLE\%VTEXT1% ECHO HKCU\Software\Microsoft\Internet Explorer\Main
	>VARIABLE\%VTEXT2% ECHO Start Page Redirect Cache
	>VARIABLE\%VTEXT3% ECHO %%~A
	FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		CALL :DELETE_REG_VALUE NULL BACKUP NULL "HKCU_InternetExplorer_Main_StartPageRedirectCache"
	)
)
REM :HKCU\Software\Wow6432Node\Microsoft\Internet Explorer\Main (Start Page Redirect Cache)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCU\Software\Wow6432Node\Microsoft\Internet Explorer\Main\Start Page Redirect Cache" 2^>Nul') DO (
	TITLE 검사중 "HKCU\Software\Wow6432Node\Microsoft\Internet Explorer\Main : Start Page Redirect Cache" 2>Nul
	>VARIABLE\%VTEXT1% ECHO HKCU\Software\Wow6432Node\Microsoft\Internet Explorer\Main
	>VARIABLE\%VTEXT2% ECHO Start Page Redirect Cache
	>VARIABLE\%VTEXT3% ECHO %%~A
	FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		CALL :DELETE_REG_VALUE NULL BACKUP NULL "HKCU_InternetExplorer_Main_StartPageRedirectCache(x86)"
	)
)
REM :HKCU\Software\Microsoft\Internet Explorer\Main (Secondary Start Pages)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCU\Software\Microsoft\Internet Explorer\Main\Secondary Start Pages" 2^>Nul') DO (
	TITLE 검사중 "HKCU\Software\Microsoft\Internet Explorer\Main : Secondary Start Pages" 2>Nul
	>VARIABLE\%VTEXT1% ECHO HKCU\Software\Microsoft\Internet Explorer\Main
	>VARIABLE\%VTEXT2% ECHO Secondary Start Pages
	>VARIABLE\%VTEXT3% ECHO %%~A
	FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		CALL :DELETE_REG_VALUE NULL BACKUP NULL "HKCU_InternetExplorer_Main_SecondaryStartPages"
	)
)
REM :HKCU\Software\Wow6432Node\Microsoft\Internet Explorer\Main (Secondary Start Pages)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCU\Software\Wow6432Node\Microsoft\Internet Explorer\Main\Secondary Start Pages" 2^>Nul') DO (
	TITLE 검사중 "HKCU\Software\Wow6432Node\Microsoft\Internet Explorer\Main : Secondary Start Pages" 2>Nul
	>VARIABLE\%VTEXT1% ECHO HKCU\Software\Wow6432Node\Microsoft\Internet Explorer\Main
	>VARIABLE\%VTEXT2% ECHO Secondary Start Pages
	>VARIABLE\%VTEXT3% ECHO %%~A
	FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		CALL :DELETE_REG_VALUE NULL BACKUP NULL "HKCU_InternetExplorer_Main_SecondaryStartPages(x86)"
	)
)
REM :HKCU\Software\Microsoft\Internet Explorer\Main (Search Bar)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCU\Software\Microsoft\Internet Explorer\Main\Search Bar" 2^>Nul') DO (
	TITLE 검사중 "HKCU\Software\Microsoft\Internet Explorer\Main : Search Bar" 2>Nul
	>VARIABLE\%VTEXT1% ECHO HKCU\Software\Microsoft\Internet Explorer\Main
	>VARIABLE\%VTEXT2% ECHO Search Bar
	>VARIABLE\%VTEXT3% ECHO %%~A
	FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		CALL :DELETE_REG_VALUE NULL BACKUP NULL "HKCU_InternetExplorer_Main_SearchBar"
		REG.EXE ADD "HKCU\Software\Microsoft\Internet Explorer\Main" /v "Search Bar" /d "https://www.bing.com" /f >Nul 2>Nul
	)
)
REM :HKCU\Software\Wow6432Node\Microsoft\Internet Explorer\Main (Search Bar)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCU\Software\Wow6432Node\Microsoft\Internet Explorer\Main\Search Bar" 2^>Nul') DO (
	TITLE 검사중 "HKCU\Software\Wow6432Node\Microsoft\Internet Explorer\Main : Search Bar" 2>Nul
	>VARIABLE\%VTEXT1% ECHO HKCU\Software\Wow6432Node\Microsoft\Internet Explorer\Main
	>VARIABLE\%VTEXT2% ECHO Search Bar
	>VARIABLE\%VTEXT3% ECHO %%~A
	FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		CALL :DELETE_REG_VALUE NULL BACKUP NULL "HKCU_InternetExplorer_Main_SearchBar(x86)"
		REG.EXE ADD "HKCU\Software\Wow6432Node\Microsoft\Internet Explorer\Main" /v "Search Bar" /d "https://www.bing.com" /f >Nul 2>Nul
	)
)
REM :HKCU\Software\Microsoft\Internet Explorer\Main (Search Page)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCU\Software\Microsoft\Internet Explorer\Main\Search Page" 2^>Nul') DO (
	TITLE 검사중 "HKCU\Software\Microsoft\Internet Explorer\Main : Search Page" 2>Nul
	>VARIABLE\%VTEXT1% ECHO HKCU\Software\Microsoft\Internet Explorer\Main
	>VARIABLE\%VTEXT2% ECHO Search Page
	>VARIABLE\%VTEXT3% ECHO %%~A
	FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		CALL :DELETE_REG_VALUE NULL BACKUP NULL "HKCU_InternetExplorer_Main_SearchPage"
		REG.EXE ADD "HKCU\Software\Microsoft\Internet Explorer\Main" /v "Search Page" /d "https://www.bing.com" /f >Nul 2>Nul
	)
)
REM :HKCU\Software\Wow6432Node\Microsoft\Internet Explorer\Main (Search Page)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCU\Software\Wow6432Node\Microsoft\Internet Explorer\Main\Search Page" 2^>Nul') DO (
	TITLE 검사중 "HKCU\Software\Wow6432Node\Microsoft\Internet Explorer\Main : Search Page" 2>Nul
	>VARIABLE\%VTEXT1% ECHO HKCU\Software\Wow6432Node\Microsoft\Internet Explorer\Main
	>VARIABLE\%VTEXT2% ECHO Search Page
	>VARIABLE\%VTEXT3% ECHO %%~A
	FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		CALL :DELETE_REG_VALUE NULL BACKUP NULL "HKCU_InternetExplorer_Main_SearchPage(x86)"
		REG.EXE ADD "HKCU\Software\Wow6432Node\Microsoft\Internet Explorer\Main" /v "Search Page" /d "https://www.bing.com" /f >Nul 2>Nul
	)
)
REM :HKCU\Software\Microsoft\Internet Explorer\Main (SearchAssistant)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCU\Software\Microsoft\Internet Explorer\Main\SearchAssistant" 2^>Nul') DO (
	TITLE 검사중 "HKCU\Software\Microsoft\Internet Explorer\Main : SearchAssistant" 2>Nul
	>VARIABLE\%VTEXT1% ECHO HKCU\Software\Microsoft\Internet Explorer\Main
	>VARIABLE\%VTEXT2% ECHO SearchAssistant
	>VARIABLE\%VTEXT3% ECHO %%~A
	FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		CALL :DELETE_REG_VALUE NULL BACKUP NULL "HKCU_InternetExplorer_Main_SearchAssistant"
	)
)
REM :HKCU\Software\Wow6432Node\Microsoft\Internet Explorer\Main (SearchAssistant)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCU\Software\Wow6432Node\Microsoft\Internet Explorer\Main\SearchAssistant" 2^>Nul') DO (
	TITLE 검사중 "HKCU\Software\Wow6432Node\Microsoft\Internet Explorer\Main : SearchAssistant" 2>Nul
	>VARIABLE\%VTEXT1% ECHO HKCU\Software\Wow6432Node\Microsoft\Internet Explorer\Main
	>VARIABLE\%VTEXT2% ECHO SearchAssistant
	>VARIABLE\%VTEXT3% ECHO %%~A
	FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		CALL :DELETE_REG_VALUE NULL BACKUP NULL "HKCU_InternetExplorer_Main_SearchAssistant(x86)"
	)
)
REM :HKCU\Software\Microsoft\Internet Explorer\Search (CustomizeSearch)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCU\Software\Microsoft\Internet Explorer\Search\CustomizeSearch" 2^>Nul') DO (
	TITLE 검사중 "HKCU\Software\Microsoft\Internet Explorer\Search : CustomizeSearch" 2>Nul
	>VARIABLE\%VTEXT1% ECHO HKCU\Software\Microsoft\Internet Explorer\Search
	>VARIABLE\%VTEXT2% ECHO CustomizeSearch
	>VARIABLE\%VTEXT3% ECHO %%~A
	FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		CALL :DELETE_REG_VALUE NULL BACKUP NULL "HKCU_InternetExplorer_Search_CustomizeSearch"
	)
)
REM :HKCU\Software\Microsoft\Internet Explorer\Search (Default_Search_URL)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCU\Software\Microsoft\Internet Explorer\Search\Default_Search_URL" 2^>Nul') DO (
	TITLE 검사중 "HKCU\Software\Microsoft\Internet Explorer\Search : Default_Search_URL" 2>Nul
	>VARIABLE\%VTEXT1% ECHO HKCU\Software\Microsoft\Internet Explorer\Search
	>VARIABLE\%VTEXT2% ECHO Default_Search_URL
	>VARIABLE\%VTEXT3% ECHO %%~A
	FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		CALL :DELETE_REG_VALUE NULL BACKUP NULL "HKCU_InternetExplorer_Search_DefaultSearchURL"
	)
)
REM :HKCU\Software\Microsoft\Internet Explorer\Search (SearchAssistant)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCU\Software\Microsoft\Internet Explorer\Search\SearchAssistant" 2^>Nul') DO (
	TITLE 검사중 "HKCU\Software\Microsoft\Internet Explorer\Search : SearchAssistant" 2>Nul
	>VARIABLE\%VTEXT1% ECHO HKCU\Software\Microsoft\Internet Explorer\Search
	>VARIABLE\%VTEXT2% ECHO SearchAssistant
	>VARIABLE\%VTEXT3% ECHO %%~A
	FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		CALL :DELETE_REG_VALUE NULL BACKUP NULL "HKCU_InternetExplorer_Search_SearchAssistant"
	)
)
REM :HKLM\Software\Microsoft\Internet Explorer\Main (Default_Page_URL)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Microsoft\Internet Explorer\Main\Default_Page_URL" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Microsoft\Internet Explorer\Main : Default_Page_URL" 2>Nul
	>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Internet Explorer\Main
	>VARIABLE\%VTEXT2% ECHO Default_Page_URL
	>VARIABLE\%VTEXT3% ECHO %%~A
	FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		CALL :DELETE_REG_VALUE NULL BACKUP NULL "HKLM_InternetExplorer_Main_DefaultPageURL"
		REG.EXE ADD "HKLM\Software\Microsoft\Internet Explorer\Main" /v "Default_Page_URL" /d "https://www.msn.com" /f >Nul 2>Nul
	)
)
REM :HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main (Default_Page_URL)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\Default_Page_URL" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main : Default_Page_URL" 2>Nul
	>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main
	>VARIABLE\%VTEXT2% ECHO Default_Page_URL
	>VARIABLE\%VTEXT3% ECHO %%~A
	FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		CALL :DELETE_REG_VALUE NULL BACKUP NULL "HKLM_InternetExplorer_Main_DefaultPageURL(x86)"
		REG.EXE ADD "HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main" /v "Default_Page_URL" /d "https://www.msn.com" /f >Nul 2>Nul
	)
)
REM :HKLM\Software\Microsoft\Internet Explorer\Main (Default_Search_URL)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Microsoft\Internet Explorer\Main\Default_Search_URL" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Microsoft\Internet Explorer\Main : Default_Search_URL" 2>Nul
	>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Internet Explorer\Main
	>VARIABLE\%VTEXT2% ECHO Default_Search_URL
	>VARIABLE\%VTEXT3% ECHO %%~A
	FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		CALL :DELETE_REG_VALUE NULL BACKUP NULL "HKLM_InternetExplorer_Main_DefaultSearchURL"
		REG.EXE ADD "HKLM\Software\Microsoft\Internet Explorer\Main" /v "Default_Search_URL" /d "https://www.bing.com" /f >Nul 2>Nul
	)
)
REM :HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main (Default_Search_URL)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\Default_Search_URL" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main : Default_Search_URL" 2>Nul
	>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main
	>VARIABLE\%VTEXT2% ECHO Default_Search_URL
	>VARIABLE\%VTEXT3% ECHO %%~A
	FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		CALL :DELETE_REG_VALUE NULL BACKUP NULL "HKLM_InternetExplorer_Main_DefaultSearchURL(x86)"
		REG.EXE ADD "HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main" /v "Default_Search_URL" /d "https://www.bing.com" /f >Nul 2>Nul
	)
)
REM :HKLM\Software\Microsoft\Internet Explorer\Main (Start Page)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Microsoft\Internet Explorer\Main\Start Page" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Microsoft\Internet Explorer\Main : Start Page" 2>Nul
	>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Internet Explorer\Main
	>VARIABLE\%VTEXT2% ECHO Start Page
	>VARIABLE\%VTEXT3% ECHO %%~A
	FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		CALL :DELETE_REG_VALUE NULL BACKUP NULL "HKLM_InternetExplorer_Main_StartPage"
		REG.EXE ADD "HKLM\Software\Microsoft\Internet Explorer\Main" /v "Start Page" /d "https://boho.or.kr" /f >Nul 2>Nul
	)
)
REM :HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main (Start Page)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\Start Page" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main : Start Page" 2>Nul
	>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main
	>VARIABLE\%VTEXT2% ECHO Start Page
	>VARIABLE\%VTEXT3% ECHO %%~A
	FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		CALL :DELETE_REG_VALUE NULL BACKUP NULL "HKLM_InternetExplorer_Main_StartPage(x86)"
		REG.EXE ADD "HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main" /v "Start Page" /d "https://boho.or.kr" /f >Nul 2>Nul
	)
)
REM :HKLM\Software\Microsoft\Internet Explorer\Main (Start Page Redirect Cache)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Microsoft\Internet Explorer\Main\Start Page Redirect Cache" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Microsoft\Internet Explorer\Main : Start Page Redirect Cache" 2>Nul
	>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Internet Explorer\Main
	>VARIABLE\%VTEXT2% ECHO Start Page Redirect Cache
	>VARIABLE\%VTEXT3% ECHO %%~A
	FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		CALL :DELETE_REG_VALUE NULL BACKUP NULL "HKLM_InternetExplorer_Main_StartPageRedirectCache"
	)
)
REM :HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main (Start Page Redirect Cache)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\Start Page Redirect Cache" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main : Start Page Redirect Cache" 2>Nul
	>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main
	>VARIABLE\%VTEXT2% ECHO Start Page Redirect Cache
	>VARIABLE\%VTEXT3% ECHO %%~A
	FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		CALL :DELETE_REG_VALUE NULL BACKUP NULL "HKLM_InternetExplorer_Main_StartPageRedirectCache(x86)"
	)
)
REM :HKLM\Software\Microsoft\Internet Explorer\Main (Search Bar)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Microsoft\Internet Explorer\Main\Search Bar" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Microsoft\Internet Explorer\Main : Search Bar" 2>Nul
	>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Internet Explorer\Main
	>VARIABLE\%VTEXT2% ECHO Search Bar
	>VARIABLE\%VTEXT3% ECHO %%~A
	FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		CALL :DELETE_REG_VALUE NULL BACKUP NULL "HKLM_InternetExplorer_Main_SearchBar"
		REG.EXE ADD "HKLM\Software\Microsoft\Internet Explorer\Main" /v "Search Bar" /d "https://www.bing.com" /f >Nul 2>Nul
	)
)
REM :HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main (Search Bar)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\Search Bar" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main : Search Bar" 2>Nul
	>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main
	>VARIABLE\%VTEXT2% ECHO Search Bar
	>VARIABLE\%VTEXT3% ECHO %%~A
	FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		CALL :DELETE_REG_VALUE NULL BACKUP NULL "HKLM_InternetExplorer_Main_SearchBar(x86)"
		REG.EXE ADD "HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main" /v "Search Bar" /d "https://www.bing.com" /f >Nul 2>Nul
	)
)
REM :HKLM\Software\Microsoft\Internet Explorer\Main (Search Page)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Microsoft\Internet Explorer\Main\Search Page" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Microsoft\Internet Explorer\Main : Search Page" 2>Nul
	>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Internet Explorer\Main
	>VARIABLE\%VTEXT2% ECHO Search Page
	>VARIABLE\%VTEXT3% ECHO %%~A
	FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		CALL :DELETE_REG_VALUE NULL BACKUP NULL "HKLM_InternetExplorer_Main_SearchPage"
		REG.EXE ADD "HKLM\Software\Microsoft\Internet Explorer\Main" /v "Search Page" /d "https://www.bing.com" /f >Nul 2>Nul
	)
)
REM :HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main (Search Page)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\Search Page" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main : Search Page" 2>Nul
	>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main
	>VARIABLE\%VTEXT2% ECHO Search Page
	>VARIABLE\%VTEXT3% ECHO %%~A
	FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		CALL :DELETE_REG_VALUE NULL BACKUP NULL "HKLM_InternetExplorer_Main_SearchPage(x86)"
		REG.EXE ADD "HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main" /v "Search Page" /d "https://www.bing.com" /f >Nul 2>Nul
	)
)
REM :HKLM\Software\Microsoft\Internet Explorer\Main (SearchAssistant)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Microsoft\Internet Explorer\Main\SearchAssistant" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Microsoft\Internet Explorer\Main : SearchAssistant" 2>Nul
	>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Internet Explorer\Main
	>VARIABLE\%VTEXT2% ECHO SearchAssistant
	>VARIABLE\%VTEXT3% ECHO %%~A
	FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		CALL :DELETE_REG_VALUE NULL BACKUP NULL "HKLM_InternetExplorer_Main_SearchAssistant"
	)
)
REM :HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main (SearchAssistant)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\SearchAssistant" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main : SearchAssistant" 2>Nul
	>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main
	>VARIABLE\%VTEXT2% ECHO SearchAssistant
	>VARIABLE\%VTEXT3% ECHO %%~A
	FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		CALL :DELETE_REG_VALUE NULL BACKUP NULL "HKLM_InternetExplorer_Main_SearchAssistant(x86)"
	)
)
REM :HKLM\Software\Microsoft\Internet Explorer\Search (CustomizeSearch)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Microsoft\Internet Explorer\Search\CustomizeSearch" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Microsoft\Internet Explorer\Search : CustomizeSearch" 2>Nul
	>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Internet Explorer\Search
	>VARIABLE\%VTEXT2% ECHO CustomizeSearch
	>VARIABLE\%VTEXT3% ECHO %%~A
	FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		CALL :DELETE_REG_VALUE NULL BACKUP NULL "HKLM_InternetExplorer_Search_CustomizeSearch"
	)
)
REM :HKLM\Software\Microsoft\Internet Explorer\Search (Default_Search_URL)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Microsoft\Internet Explorer\Search\Default_Search_URL" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Microsoft\Internet Explorer\Search : Default_Search_URL" 2>Nul
	>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Internet Explorer\Search
	>VARIABLE\%VTEXT2% ECHO Default_Search_URL
	>VARIABLE\%VTEXT3% ECHO %%~A
	FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		CALL :DELETE_REG_VALUE NULL BACKUP NULL "HKLM_InternetExplorer_Search_DefaultSearchURL"
	)
)
REM :HKLM\Software\Microsoft\Internet Explorer\Search (SearchAssistant)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Microsoft\Internet Explorer\Search\SearchAssistant" 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Microsoft\Internet Explorer\Search : SearchAssistant" 2>Nul
	>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Internet Explorer\Search
	>VARIABLE\%VTEXT2% ECHO SearchAssistant
	>VARIABLE\%VTEXT3% ECHO %%~A
	FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		CALL :DELETE_REG_VALUE NULL BACKUP NULL "HKLM_InternetExplorer_Search_SearchAssistant"
	)
)
REM :Result
CALL :PROCESS_RESULT NULL CHKINFECT
REM :Reset Value
CALL :RESET_VALUE

TITLE %MZTITLE% 2>Nul & PING.EXE -n 2 0 >Nul 2>Nul & ECHO. & >>"%QLog%" ECHO.

REM * Reset Mozilla Firefox Malicious Start & Search Page
IF EXIST "%APPDATA%\Mozilla\Firefox\Profiles\" (
	ECHO ◇ 웹 브라우저 - 모질라 파이어폭스 악성 시작 및 검색 페이지 확인중 . . . & >>"%QLog%" ECHO    ■ 웹 브라우저 - 모질라 파이어폭스 악성 시작 및 검색 페이지 확인 :
	TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
	FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%APPDATA%\Mozilla\Firefox\Profiles\" 2^>Nul') DO (
		IF EXIST "%APPDATA%\Mozilla\Firefox\Profiles\%%A\permissions.sqlite" (
			TITLE 검사중 "%APPDATA%\Mozilla\Firefox\Profiles\%%A\permissions.sqlite" 2>Nul
			CALL :FIREFOX_NOTIFICATION "%APPDATA%\Mozilla\Firefox\Profiles\%%A\permissions.sqlite" ixf "DB_EXEC\ACTIVESCAN\FILE\PATTERN_BROWSER_CHROME_NOTIFICATIONS+NC.DB"
		)
		IF EXIST "%APPDATA%\Mozilla\Firefox\Profiles\%%A\prefs.js" (
			TITLE 검사중 "%APPDATA%\Mozilla\Firefox\Profiles\%%A\prefs.js" 2>Nul
			SETLOCAL ENABLEDELAYEDEXPANSION
			!EXEGREP! -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB "!APPDATA!\Mozilla\Firefox\Profiles\%%A\prefs.js" >Nul 2>Nul
			IF !ERRORLEVEL! EQU 0 (
				ENDLOCAL
				>VARIABLE\%VCHECK% ECHO 1
				TOOLS\RXREPL\RXREPL.EXE -m line -s "user_pref\(\"browser\.newtab\.url\",(.*)" -r "" -f "%APPDATA%\Mozilla\Firefox\Profiles\%%A\prefs.js" -e utf8 -a --no-backup >Nul 2>Nul
				TOOLS\RXREPL\RXREPL.EXE -m line -s "user_pref\(\"browser\.search\.defaultenginename\",(.*)" -r "" -f "%APPDATA%\Mozilla\Firefox\Profiles\%%A\prefs.js" -e utf8 -a --no-backup >Nul 2>Nul
				TOOLS\RXREPL\RXREPL.EXE -m line -s "user_pref\(\"browser\.search\.selectedEngine\",(.*)" -r "" -f "%APPDATA%\Mozilla\Firefox\Profiles\%%A\prefs.js" -e utf8 -a --no-backup >Nul 2>Nul
				TOOLS\RXREPL\RXREPL.EXE -m line -s "user_pref\(\"browser\.startup\.homepage\",(.*)" -r "" -f "%APPDATA%\Mozilla\Firefox\Profiles\%%A\prefs.js" -e utf8 -a --no-backup >Nul 2>Nul
			) ELSE (
				ENDLOCAL
			)
		)
		IF EXIST "%APPDATA%\Mozilla\Firefox\Profiles\%%A\user.js" (
			TITLE 검사중 "%APPDATA%\Mozilla\Firefox\Profiles\%%A\user.js" 2>Nul
			SETLOCAL ENABLEDELAYEDEXPANSION
			!EXEGREP! -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB "!APPDATA!\Mozilla\Firefox\Profiles\%%A\user.js" >Nul 2>Nul
			IF !ERRORLEVEL! EQU 0 (
				ENDLOCAL
				>VARIABLE\%VCHECK% ECHO 1
				TOOLS\RXREPL\RXREPL.EXE -m line -s "user_pref\(\"browser\.newtab\.url\",(.*)" -r "" -f "%APPDATA%\Mozilla\Firefox\Profiles\%%A\user.js" -e utf8 -a --no-backup >Nul 2>Nul
				TOOLS\RXREPL\RXREPL.EXE -m line -s "user_pref\(\"browser\.search\.defaultenginename\",(.*)" -r "" -f "%APPDATA%\Mozilla\Firefox\Profiles\%%A\user.js" -e utf8 -a --no-backup >Nul 2>Nul
				TOOLS\RXREPL\RXREPL.EXE -m line -s "user_pref\(\"browser\.search\.selectedEngine\",(.*)" -r "" -f "%APPDATA%\Mozilla\Firefox\Profiles\%%A\user.js" -e utf8 -a --no-backup >Nul 2>Nul
				TOOLS\RXREPL\RXREPL.EXE -m line -s "user_pref\(\"browser\.startup\.homepage\",(.*)" -r "" -f "%APPDATA%\Mozilla\Firefox\Profiles\%%A\user.js" -e utf8 -a --no-backup >Nul 2>Nul
			) ELSE (
				ENDLOCAL
			)
		)
	)
	REM :Result
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		ECHO    발견되지 않았습니다. & >>"%QLog%" ECHO    발견되지 않음
	) ELSE (
		ENDLOCAL
		ECHO    비정상 값이 확인되어 제거하였습니다. & >>"%QLog%" ECHO    비정상 값이 확인되어 제거 진행
		>VARIABLE\%VXXXX% ECHO 1
		COLOR 4F
	)
	REM :Reset Value
	CALL :RESET_VALUE

	TITLE %MZTITLE% 2>Nul & PING.EXE -n 2 0 >Nul 2>Nul & ECHO. & >>"%QLog%" ECHO.
)

REM * Reset Chromium Malicious Start & Search Page
IF EXIST "%LOCALAPPDATA%\Chromium\User Data\" (
	ECHO ◇ 웹 브라우저 - 크로미엄 악성 시작 및 검색 페이지 확인중 . . . & >>"%QLog%" ECHO    ■ 웹 브라우저 - 크로미엄 악성 시작 및 검색 페이지 확인 :
	FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%LOCALAPPDATA%\Chromium\User Data\" 2^>Nul^|%EXEGREP% -Fixf DB_EXEC\CHECK\CHK_BROWSER_CHROMEPROFILE+NC.DB 2^>Nul') DO (
		IF EXIST "%LOCALAPPDATA%\Chromium\User Data\%%A\Web Data" (
			TITLE 검사중 "%LOCALAPPDATA%\Chromium\User Data\%%A\Web Data" 2>Nul
			CALL :CHROME_URL url "%LOCALAPPDATA%\Chromium\User Data\%%A\Web Data" ixf "DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB"
			CALL :CHROME_URL originating_url "%LOCALAPPDATA%\Chromium\User Data\%%A\Web Data" ixf "DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB"
			CALL :CHROME_URL suggest_url "%LOCALAPPDATA%\Chromium\User Data\%%A\Web Data" ixf "DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB"
			CALL :CHROME_URL new_tab_url "%LOCALAPPDATA%\Chromium\User Data\%%A\Web Data" ixf "DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB"
		)
		IF EXIST "%LOCALAPPDATA%\Chromium\User Data\%%A\Secure Preferences" (
			TITLE 검사중 "%LOCALAPPDATA%\Chromium\User Data\%%A\Secure Preferences" 2>Nul
			CALL :CHROME_PREFERENCES "Secure Preferences" Chromium "%LOCALAPPDATA%\Chromium\User Data\%%A\Secure Preferences" ".session.startup_urls[]" 2 ".session.startup_urls[]" ixf "DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB"
			CALL :CHROME_PREFERENCES "Secure Preferences" Chromium "%LOCALAPPDATA%\Chromium\User Data\%%A\Secure Preferences" ".extensions.settings | to_entries[] | .key" 1 ".extensions.settings" Fixf "DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB"
			CALL :CHROME_PREFERENCES "Secure Preferences" Chromium "%LOCALAPPDATA%\Chromium\User Data\%%A\Secure Preferences" ".protection.macs.extensions.settings | to_entries[] | .key" 1 ".protection.macs.extensions.settings" Fixf "DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB"
			IF EXIST DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB (
				CALL :CHROME_PREFERENCES "Secure Preferences" Chromium "%LOCALAPPDATA%\Chromium\User Data\%%A\Secure Preferences" ".extensions.settings | to_entries[] | .key" 1 ".extensions.settings" Fixf "DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB"
				CALL :CHROME_PREFERENCES "Secure Preferences" Chromium "%LOCALAPPDATA%\Chromium\User Data\%%A\Secure Preferences" ".protection.macs.extensions.settings | to_entries[] | .key" 1 ".protection.macs.extensions.settings" Fixf "DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB"
			)
		)
		IF EXIST "%LOCALAPPDATA%\Chromium\User Data\%%A\Preferences" (
			TITLE 검사중 "%LOCALAPPDATA%\Chromium\User Data\%%A\Preferences" 2>Nul
			CALL :CHROME_PREFERENCES "Preferences" Chromium "%LOCALAPPDATA%\Chromium\User Data\%%A\Preferences" ".profile.content_settings.exceptions.notifications | to_entries[] | select(.value.setting == 1) | .key" 1 ".profile.content_settings.exceptions.notifications" ixf "DB_EXEC\ACTIVESCAN\FILE\PATTERN_BROWSER_CHROME_NOTIFICATIONS+NC.DB"
			CALL :CHROME_PREFERENCES "Preferences" Chromium "%LOCALAPPDATA%\Chromium\User Data\%%A\Preferences" ".extensions.install_signature.ids[]" 2 ".extensions.install_signature.ids[]" Fixf "DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB"
			CALL :CHROME_PREFERENCES "Preferences" Chromium "%LOCALAPPDATA%\Chromium\User Data\%%A\Preferences" ".extensions.install_signature.invalid_ids[]" 2 ".extensions.install_signature.invalid_ids[]" Fixf "DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB"
			CALL :CHROME_PREFERENCES "Preferences" Chromium "%LOCALAPPDATA%\Chromium\User Data\%%A\Preferences" ".extensions.toolbar[]" 2 ".extensions.toolbar[]" Fixf "DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB"
			IF EXIST DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB (
				CALL :CHROME_PREFERENCES "Preferences" Chromium "%LOCALAPPDATA%\Chromium\User Data\%%A\Preferences" ".extensions.install_signature.ids[]" 2 ".extensions.install_signature.ids[]" Fixf "DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB"
				CALL :CHROME_PREFERENCES "Preferences" Chromium "%LOCALAPPDATA%\Chromium\User Data\%%A\Preferences" ".extensions.install_signature.invalid_ids[]" 2 ".extensions.install_signature.invalid_ids[]" Fixf "DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB"
				CALL :CHROME_PREFERENCES "Preferences" Chromium "%LOCALAPPDATA%\Chromium\User Data\%%A\Preferences" ".extensions.toolbar[]" 2 ".extensions.toolbar[]" Fixf "DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB"
			)
		)
	)
	REM :Result
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		ECHO    발견되지 않았습니다. & >>"%QLog%" ECHO    발견되지 않음
	) ELSE (
		ENDLOCAL
		ECHO    비정상 값이 확인되어 제거하였습니다. & >>"%QLog%" ECHO    비정상 값이 확인되어 제거 진행
		>VARIABLE\%VXXXX% ECHO 1
		COLOR 4F
	)
	REM :Reset Value
	CALL :RESET_VALUE

	TITLE %MZTITLE% 2>Nul & PING.EXE -n 2 0 >Nul 2>Nul & ECHO. & >>"%QLog%" ECHO.
)

REM * Reset Google Chrome Malicious Start & Search Page
IF EXIST "%LOCALAPPDATA%\Google\Chrome\User Data\" (
	ECHO ◇ 웹 브라우저 - 구글 크롬 악성 시작 및 검색 페이지 확인중 . . . & >>"%QLog%" ECHO    ■ 웹 브라우저 - 구글 크롬 악성 시작 및 검색 페이지 확인 :
	FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%LOCALAPPDATA%\Google\Chrome\User Data\" 2^>Nul^|%EXEGREP% -Fixf DB_EXEC\CHECK\CHK_BROWSER_CHROMEPROFILE+NC.DB 2^>Nul') DO (
		IF EXIST "%LOCALAPPDATA%\Google\Chrome\User Data\%%A\Web Data" (
			TITLE 검사중 "%LOCALAPPDATA%\Google\Chrome\User Data\%%A\Web Data" 2>Nul
			CALL :CHROME_URL url "%LOCALAPPDATA%\Google\Chrome\User Data\%%A\Web Data" ixf "DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB"
			CALL :CHROME_URL originating_url "%LOCALAPPDATA%\Google\Chrome\User Data\%%A\Web Data" ixf "DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB"
			CALL :CHROME_URL suggest_url "%LOCALAPPDATA%\Google\Chrome\User Data\%%A\Web Data" ixf "DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB"
			CALL :CHROME_URL new_tab_url "%LOCALAPPDATA%\Google\Chrome\User Data\%%A\Web Data" ixf "DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB"
		)
		IF EXIST "%LOCALAPPDATA%\Google\Chrome\User Data\%%A\Secure Preferences" (
			TITLE 검사중 "%LOCALAPPDATA%\Google\Chrome\User Data\%%A\Secure Preferences" 2>Nul
			CALL :CHROME_PREFERENCES "Secure Preferences" Google.Chrome "%LOCALAPPDATA%\Google\Chrome\User Data\%%A\Secure Preferences" ".session.startup_urls[]" 2 ".session.startup_urls[]" ixf "DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB"
			CALL :CHROME_PREFERENCES "Secure Preferences" Google.Chrome "%LOCALAPPDATA%\Google\Chrome\User Data\%%A\Secure Preferences" ".extensions.settings | to_entries[] | .key" 1 ".extensions.settings" Fixf "DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB"
			CALL :CHROME_PREFERENCES "Secure Preferences" Google.Chrome "%LOCALAPPDATA%\Google\Chrome\User Data\%%A\Secure Preferences" ".protection.macs.extensions.settings | to_entries[] | .key" 1 ".protection.macs.extensions.settings" Fixf "DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB"
			IF EXIST DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB (
				CALL :CHROME_PREFERENCES "Secure Preferences" Google.Chrome "%LOCALAPPDATA%\Google\Chrome\User Data\%%A\Secure Preferences" ".extensions.settings | to_entries[] | .key" 1 ".extensions.settings" Fixf "DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB"
				CALL :CHROME_PREFERENCES "Secure Preferences" Google.Chrome "%LOCALAPPDATA%\Google\Chrome\User Data\%%A\Secure Preferences" ".protection.macs.extensions.settings | to_entries[] | .key" 1 ".protection.macs.extensions.settings" Fixf "DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB"
			)
		)
		IF EXIST "%LOCALAPPDATA%\Google\Chrome\User Data\%%A\Preferences" (
			TITLE 검사중 "%LOCALAPPDATA%\Google\Chrome\User Data\%%A\Preferences" 2>Nul
			CALL :CHROME_PREFERENCES "Preferences" Google.Chrome "%LOCALAPPDATA%\Google\Chrome\User Data\%%A\Preferences" ".profile.content_settings.exceptions.notifications | to_entries[] | select(.value.setting == 1) | .key" 1 ".profile.content_settings.exceptions.notifications" ixf "DB_EXEC\ACTIVESCAN\FILE\PATTERN_BROWSER_CHROME_NOTIFICATIONS+NC.DB"
			CALL :CHROME_PREFERENCES "Preferences" Google.Chrome "%LOCALAPPDATA%\Google\Chrome\User Data\%%A\Preferences" ".extensions.install_signature.ids[]" 2 ".extensions.install_signature.ids[]" Fixf "DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB"
			CALL :CHROME_PREFERENCES "Preferences" Google.Chrome "%LOCALAPPDATA%\Google\Chrome\User Data\%%A\Preferences" ".extensions.install_signature.invalid_ids[]" 2 ".extensions.install_signature.invalid_ids[]" Fixf "DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB"
			CALL :CHROME_PREFERENCES "Preferences" Google.Chrome "%LOCALAPPDATA%\Google\Chrome\User Data\%%A\Preferences" ".extensions.toolbar[]" 2 ".extensions.toolbar[]" Fixf "DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB"
			IF EXIST DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB (
				CALL :CHROME_PREFERENCES "Preferences" Google.Chrome "%LOCALAPPDATA%\Google\Chrome\User Data\%%A\Preferences" ".extensions.install_signature.ids[]" 2 ".extensions.install_signature.ids[]" Fixf "DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB"
				CALL :CHROME_PREFERENCES "Preferences" Google.Chrome "%LOCALAPPDATA%\Google\Chrome\User Data\%%A\Preferences" ".extensions.install_signature.invalid_ids[]" 2 ".extensions.install_signature.invalid_ids[]" Fixf "DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB"
				CALL :CHROME_PREFERENCES "Preferences" Google.Chrome "%LOCALAPPDATA%\Google\Chrome\User Data\%%A\Preferences" ".extensions.toolbar[]" 2 ".extensions.toolbar[]" Fixf "DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB"
			)
		)
	)
	REM :Result
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		ECHO    발견되지 않았습니다. & >>"%QLog%" ECHO    발견되지 않음
	) ELSE (
		ENDLOCAL
		ECHO    비정상 값이 확인되어 제거하였습니다. & >>"%QLog%" ECHO    비정상 값이 확인되어 제거 진행
		>VARIABLE\%VXXXX% ECHO 1
		COLOR 4F
	)
	REM :Reset Value
	CALL :RESET_VALUE

	TITLE %MZTITLE% 2>Nul & PING.EXE -n 2 0 >Nul 2>Nul & ECHO. & >>"%QLog%" ECHO.
)

REM * Reset Microsoft Edge Malicious Start & Search Page
IF EXIST "%LOCALAPPDATA%\Microsoft\Edge\User Data\" (
	ECHO ◇ 웹 브라우저 - 마이크로소프트 엣지 악성 시작 및 검색 페이지 확인중 . . . & >>"%QLog%" ECHO    ■ 웹 브라우저 - 마이크로소프트 엣지 악성 시작 및 검색 페이지 확인 :
	FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%LOCALAPPDATA%\Microsoft\Edge\User Data\" 2^>Nul^|%EXEGREP% -Fixf DB_EXEC\CHECK\CHK_BROWSER_CHROMEPROFILE+NC.DB 2^>Nul') DO (
		IF EXIST "%LOCALAPPDATA%\Microsoft\Edge\User Data\%%A\Web Data" (
			TITLE 검사중 "%LOCALAPPDATA%\Microsoft\Edge\User Data\%%A\Web Data" 2>Nul
			CALL :CHROME_URL url "%LOCALAPPDATA%\Microsoft\Edge\User Data\%%A\Web Data" ixf "DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB"
			CALL :CHROME_URL originating_url "%LOCALAPPDATA%\Microsoft\Edge\User Data\%%A\Web Data" ixf "DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB"
			CALL :CHROME_URL suggest_url "%LOCALAPPDATA%\Microsoft\Edge\User Data\%%A\Web Data" ixf "DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB"
			CALL :CHROME_URL new_tab_url "%LOCALAPPDATA%\Microsoft\Edge\User Data\%%A\Web Data" ixf "DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB"
		)
		IF EXIST "%LOCALAPPDATA%\Microsoft\Edge\User Data\%%A\Secure Preferences" (
			TITLE 검사중 "%LOCALAPPDATA%\Microsoft\Edge\User Data\%%A\Secure Preferences" 2>Nul
			CALL :CHROME_PREFERENCES "Secure Preferences" Microsoft.Edge "%LOCALAPPDATA%\Microsoft\Edge\User Data\%%A\Secure Preferences" ".session.startup_urls[]" 2 ".session.startup_urls[]" ixf "DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB"
			CALL :CHROME_PREFERENCES "Secure Preferences" Microsoft.Edge "%LOCALAPPDATA%\Microsoft\Edge\User Data\%%A\Secure Preferences" ".extensions.settings | to_entries[] | .key" 1 ".extensions.settings" Fixf "DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB"
			CALL :CHROME_PREFERENCES "Secure Preferences" Microsoft.Edge "%LOCALAPPDATA%\Microsoft\Edge\User Data\%%A\Secure Preferences" ".protection.macs.extensions.settings | to_entries[] | .key" 1 ".protection.macs.extensions.settings" Fixf "DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB"
			IF EXIST DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB (
				CALL :CHROME_PREFERENCES "Secure Preferences" Microsoft.Edge "%LOCALAPPDATA%\Microsoft\Edge\User Data\%%A\Secure Preferences" ".extensions.settings | to_entries[] | .key" 1 ".extensions.settings" Fixf "DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB"
				CALL :CHROME_PREFERENCES "Secure Preferences" Microsoft.Edge "%LOCALAPPDATA%\Microsoft\Edge\User Data\%%A\Secure Preferences" ".protection.macs.extensions.settings | to_entries[] | .key" 1 ".protection.macs.extensions.settings" Fixf "DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB"
			)
		)
		IF EXIST "%LOCALAPPDATA%\Microsoft\Edge\User Data\%%A\Preferences" (
			TITLE 검사중 "%LOCALAPPDATA%\Microsoft\Edge\User Data\%%A\Preferences" 2>Nul
			CALL :CHROME_PREFERENCES "Preferences" Microsoft.Edge "%LOCALAPPDATA%\Microsoft\Edge\User Data\%%A\Preferences" ".profile.content_settings.exceptions.notifications | to_entries[] | select(.value.setting == 1) | .key" 1 ".profile.content_settings.exceptions.notifications" ixf "DB_EXEC\ACTIVESCAN\FILE\PATTERN_BROWSER_CHROME_NOTIFICATIONS+NC.DB"
			CALL :CHROME_PREFERENCES "Preferences" Microsoft.Edge "%LOCALAPPDATA%\Microsoft\Edge\User Data\%%A\Preferences" ".extensions.install_signature.ids[]" 2 ".extensions.install_signature.ids[]" Fixf "DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB"
			CALL :CHROME_PREFERENCES "Preferences" Microsoft.Edge "%LOCALAPPDATA%\Microsoft\Edge\User Data\%%A\Preferences" ".extensions.install_signature.invalid_ids[]" 2 ".extensions.install_signature.invalid_ids[]" Fixf "DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB"
			CALL :CHROME_PREFERENCES "Preferences" Microsoft.Edge "%LOCALAPPDATA%\Microsoft\Edge\User Data\%%A\Preferences" ".extensions.toolbar[]" 2 ".extensions.toolbar[]" Fixf "DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB"
			IF EXIST DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB (
				CALL :CHROME_PREFERENCES "Preferences" Microsoft.Edge "%LOCALAPPDATA%\Microsoft\Edge\User Data\%%A\Preferences" ".extensions.install_signature.ids[]" 2 ".extensions.install_signature.ids[]" Fixf "DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB"
				CALL :CHROME_PREFERENCES "Preferences" Microsoft.Edge "%LOCALAPPDATA%\Microsoft\Edge\User Data\%%A\Preferences" ".extensions.install_signature.invalid_ids[]" 2 ".extensions.install_signature.invalid_ids[]" Fixf "DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB"
				CALL :CHROME_PREFERENCES "Preferences" Microsoft.Edge "%LOCALAPPDATA%\Microsoft\Edge\User Data\%%A\Preferences" ".extensions.toolbar[]" 2 ".extensions.toolbar[]" Fixf "DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB"
			)
		)
	)
	REM :Result
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		ECHO    발견되지 않았습니다. & >>"%QLog%" ECHO    발견되지 않음
	) ELSE (
		ENDLOCAL
		ECHO    비정상 값이 확인되어 제거하였습니다. & >>"%QLog%" ECHO    비정상 값이 확인되어 제거 진행
		>VARIABLE\%VXXXX% ECHO 1
		COLOR 4F
	)
	REM :Reset Value
	CALL :RESET_VALUE

	TITLE %MZTITLE% 2>Nul & PING.EXE -n 2 0 >Nul 2>Nul & ECHO. & >>"%QLog%" ECHO.
)

REM * Reset Naver Whale Malicious Start & Search Page
IF EXIST "%LOCALAPPDATA%\Naver\Naver Whale\User Data\" (
	ECHO ◇ 웹 브라우저 - 네이버 웨일 악성 시작 및 검색 페이지 확인중 . . . & >>"%QLog%" ECHO    ■ 웹 브라우저 - 네이버 웨일 악성 시작 및 검색 페이지 확인 :
	FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%LOCALAPPDATA%\Naver\Naver Whale\User Data\" 2^>Nul^|%EXEGREP% -Fixf DB_EXEC\CHECK\CHK_BROWSER_CHROMEPROFILE+NC.DB 2^>Nul') DO (
		IF EXIST "%LOCALAPPDATA%\Naver\Naver Whale\User Data\%%A\Web Data" (
			TITLE 검사중 "%LOCALAPPDATA%\Naver\Naver Whale\User Data\%%A\Web Data" 2>Nul
			CALL :CHROME_URL url "%LOCALAPPDATA%\Naver\Naver Whale\User Data\%%A\Web Data" ixf "DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB"
			CALL :CHROME_URL originating_url "%LOCALAPPDATA%\Naver\Naver Whale\User Data\%%A\Web Data" ixf "DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB"
			CALL :CHROME_URL suggest_url "%LOCALAPPDATA%\Naver\Naver Whale\User Data\%%A\Web Data" ixf "DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB"
			CALL :CHROME_URL new_tab_url "%LOCALAPPDATA%\Naver\Naver Whale\User Data\%%A\Web Data" ixf "DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB"
		)
		IF EXIST "%LOCALAPPDATA%\Naver\Naver Whale\User Data\%%A\Secure Preferences" (
			TITLE 검사중 "%LOCALAPPDATA%\Naver\Naver Whale\User Data\%%A\Secure Preferences" 2>Nul
			CALL :CHROME_PREFERENCES "Secure Preferences" Naver.Whale "%LOCALAPPDATA%\Naver\Naver Whale\User Data\%%A\Secure Preferences" ".session.startup_urls[]" 2 ".session.startup_urls[]" ixf "DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB"
			CALL :CHROME_PREFERENCES "Secure Preferences" Naver.Whale "%LOCALAPPDATA%\Naver\Naver Whale\User Data\%%A\Secure Preferences" ".extensions.settings | to_entries[] | .key" 1 ".extensions.settings" Fixf "DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB"
			CALL :CHROME_PREFERENCES "Secure Preferences" Naver.Whale "%LOCALAPPDATA%\Naver\Naver Whale\User Data\%%A\Secure Preferences" ".protection.macs.extensions.settings | to_entries[] | .key" 1 ".protection.macs.extensions.settings" Fixf "DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB"
			IF EXIST DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB (
				CALL :CHROME_PREFERENCES "Secure Preferences" Naver.Whale "%LOCALAPPDATA%\Naver\Naver Whale\User Data\%%A\Secure Preferences" ".extensions.settings | to_entries[] | .key" 1 ".extensions.settings" Fixf "DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB"
				CALL :CHROME_PREFERENCES "Secure Preferences" Naver.Whale "%LOCALAPPDATA%\Naver\Naver Whale\User Data\%%A\Secure Preferences" ".protection.macs.extensions.settings | to_entries[] | .key" 1 ".protection.macs.extensions.settings" Fixf "DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB"
			)
		)
		IF EXIST "%LOCALAPPDATA%\Naver\Naver Whale\User Data\%%A\Preferences" (
			TITLE 검사중 "%LOCALAPPDATA%\Naver\Naver Whale\User Data\%%A\Preferences" 2>Nul
			CALL :CHROME_PREFERENCES "Preferences" Naver.Whale "%LOCALAPPDATA%\Naver\Naver Whale\User Data\%%A\Preferences" ".profile.content_settings.exceptions.notifications | to_entries[] | select(.value.setting == 1) | .key" 1 ".profile.content_settings.exceptions.notifications" ixf "DB_EXEC\ACTIVESCAN\FILE\PATTERN_BROWSER_CHROME_NOTIFICATIONS+NC.DB"
			CALL :CHROME_PREFERENCES "Preferences" Naver.Whale "%LOCALAPPDATA%\Naver\Naver Whale\User Data\%%A\Preferences" ".extensions.install_signature.ids[]" 2 ".extensions.install_signature.ids[]" Fixf "DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB"
			CALL :CHROME_PREFERENCES "Preferences" Naver.Whale "%LOCALAPPDATA%\Naver\Naver Whale\User Data\%%A\Preferences" ".extensions.install_signature.invalid_ids[]" 2 ".extensions.install_signature.invalid_ids[]" Fixf "DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB"
			CALL :CHROME_PREFERENCES "Preferences" Naver.Whale "%LOCALAPPDATA%\Naver\Naver Whale\User Data\%%A\Preferences" ".extensions.toolbar[]" 2 ".extensions.toolbar[]" Fixf "DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB"
			IF EXIST DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB (
				CALL :CHROME_PREFERENCES "Preferences" Naver.Whale "%LOCALAPPDATA%\Naver\Naver Whale\User Data\%%A\Preferences" ".extensions.install_signature.ids[]" 2 ".extensions.install_signature.ids[]" Fixf "DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB"
				CALL :CHROME_PREFERENCES "Preferences" Naver.Whale "%LOCALAPPDATA%\Naver\Naver Whale\User Data\%%A\Preferences" ".extensions.install_signature.invalid_ids[]" 2 ".extensions.install_signature.invalid_ids[]" Fixf "DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB"
				CALL :CHROME_PREFERENCES "Preferences" Naver.Whale "%LOCALAPPDATA%\Naver\Naver Whale\User Data\%%A\Preferences" ".extensions.toolbar[]" 2 ".extensions.toolbar[]" Fixf "DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB"
			)
		)
	)
	REM :Result
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		ECHO    발견되지 않았습니다. & >>"%QLog%" ECHO    발견되지 않음
	) ELSE (
		ENDLOCAL
		ECHO    비정상 값이 확인되어 제거하였습니다. & >>"%QLog%" ECHO    비정상 값이 확인되어 제거 진행
		>VARIABLE\%VXXXX% ECHO 1
		COLOR 4F
	)
	REM :Reset Value
	CALL :RESET_VALUE

	TITLE %MZTITLE% 2>Nul & PING.EXE -n 2 0 >Nul 2>Nul & ECHO. & >>"%QLog%" ECHO.
)

REM * Reset Vivaldi Malicious Start & Search Page
IF EXIST "%LOCALAPPDATA%\Vivaldi\User Data\" (
	ECHO ◇ 웹 브라우저 - 비발디 악성 시작 및 검색 페이지 확인중 . . . & >>"%QLog%" ECHO    ■ 웹 브라우저 - 비발디 악성 시작 및 검색 페이지 확인 :
	FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%LOCALAPPDATA%\Vivaldi\User Data\" 2^>Nul^|%EXEGREP% -Fixf DB_EXEC\CHECK\CHK_BROWSER_CHROMEPROFILE+NC.DB 2^>Nul') DO (
		IF EXIST "%LOCALAPPDATA%\Vivaldi\User Data\%%A\Web Data" (
			TITLE 검사중 "%LOCALAPPDATA%\Vivaldi\User Data\%%A\Web Data" 2>Nul
			CALL :CHROME_URL url "%LOCALAPPDATA%\Vivaldi\User Data\%%A\Web Data" ixf "DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB"
			CALL :CHROME_URL originating_url "%LOCALAPPDATA%\Vivaldi\User Data\%%A\Web Data" ixf "DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB"
			CALL :CHROME_URL suggest_url "%LOCALAPPDATA%\Vivaldi\User Data\%%A\Web Data" ixf "DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB"
			CALL :CHROME_URL new_tab_url "%LOCALAPPDATA%\Vivaldi\User Data\%%A\Web Data" ixf "DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB"
		)
		IF EXIST "%LOCALAPPDATA%\Vivaldi\User Data\%%A\Secure Preferences" (
			TITLE 검사중 "%LOCALAPPDATA%\Vivaldi\User Data\%%A\Secure Preferences" 2>Nul
			CALL :CHROME_PREFERENCES "Secure Preferences" Vivaldi "%LOCALAPPDATA%\Vivaldi\User Data\%%A\Secure Preferences" ".session.startup_urls[]" 2 ".session.startup_urls[]" ixf "DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB"
			CALL :CHROME_PREFERENCES "Secure Preferences" Vivaldi "%LOCALAPPDATA%\Vivaldi\User Data\%%A\Secure Preferences" ".extensions.settings | to_entries[] | .key" 1 ".extensions.settings" Fixf "DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB"
			CALL :CHROME_PREFERENCES "Secure Preferences" Vivaldi "%LOCALAPPDATA%\Vivaldi\User Data\%%A\Secure Preferences" ".protection.macs.extensions.settings | to_entries[] | .key" 1 ".protection.macs.extensions.settings" Fixf "DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB"
			IF EXIST DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB (
				CALL :CHROME_PREFERENCES "Secure Preferences" Vivaldi "%LOCALAPPDATA%\Vivaldi\User Data\%%A\Secure Preferences" ".extensions.settings | to_entries[] | .key" 1 ".extensions.settings" Fixf "DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB"
				CALL :CHROME_PREFERENCES "Secure Preferences" Vivaldi "%LOCALAPPDATA%\Vivaldi\User Data\%%A\Secure Preferences" ".protection.macs.extensions.settings | to_entries[] | .key" 1 ".protection.macs.extensions.settings" Fixf "DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB"
			)
		)
		IF EXIST "%LOCALAPPDATA%\Vivaldi\User Data\%%A\Preferences" (
			TITLE 검사중 "%LOCALAPPDATA%\Vivaldi\User Data\%%A\Preferences" 2>Nul
			CALL :CHROME_PREFERENCES "Preferences" Vivaldi "%LOCALAPPDATA%\Vivaldi\User Data\%%A\Preferences" ".profile.content_settings.exceptions.notifications | to_entries[] | select(.value.setting == 1) | .key" 1 ".profile.content_settings.exceptions.notifications" ixf "DB_EXEC\ACTIVESCAN\FILE\PATTERN_BROWSER_CHROME_NOTIFICATIONS+NC.DB"
			CALL :CHROME_PREFERENCES "Preferences" Vivaldi "%LOCALAPPDATA%\Vivaldi\User Data\%%A\Preferences" ".extensions.install_signature.ids[]" 2 ".extensions.install_signature.ids[]" Fixf "DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB"
			CALL :CHROME_PREFERENCES "Preferences" Vivaldi "%LOCALAPPDATA%\Vivaldi\User Data\%%A\Preferences" ".extensions.install_signature.invalid_ids[]" 2 ".extensions.install_signature.invalid_ids[]" Fixf "DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB"
			CALL :CHROME_PREFERENCES "Preferences" Vivaldi "%LOCALAPPDATA%\Vivaldi\User Data\%%A\Preferences" ".extensions.toolbar[]" 2 ".extensions.toolbar[]" Fixf "DB_EXEC\THREAT\COMBO\DEL_BROWSER_EXTENSIONS_CHROME+NC.DB"
			IF EXIST DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB (
				CALL :CHROME_PREFERENCES "Preferences" Vivaldi "%LOCALAPPDATA%\Vivaldi\User Data\%%A\Preferences" ".extensions.install_signature.ids[]" 2 ".extensions.install_signature.ids[]" Fixf "DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB"
				CALL :CHROME_PREFERENCES "Preferences" Vivaldi "%LOCALAPPDATA%\Vivaldi\User Data\%%A\Preferences" ".extensions.install_signature.invalid_ids[]" 2 ".extensions.install_signature.invalid_ids[]" Fixf "DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB"
				CALL :CHROME_PREFERENCES "Preferences" Vivaldi "%LOCALAPPDATA%\Vivaldi\User Data\%%A\Preferences" ".extensions.toolbar[]" 2 ".extensions.toolbar[]" Fixf "DB_ACTIVE\ACT_BROWSER_EXTENSIONS_CHROME_%UNIQ%.DB"
			)
		)
	)
	REM :Result
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		ECHO    발견되지 않았습니다. & >>"%QLog%" ECHO    발견되지 않음
	) ELSE (
		ENDLOCAL
		ECHO    비정상 값이 확인되어 제거하였습니다. & >>"%QLog%" ECHO    비정상 값이 확인되어 제거 진행
		>VARIABLE\%VXXXX% ECHO 1
		COLOR 4F
	)
	REM :Reset Value
	CALL :RESET_VALUE

	TITLE %MZTITLE% 2>Nul & PING.EXE -n 2 0 >Nul 2>Nul & ECHO. & >>"%QLog%" ECHO.
)


REM * Reset Internet Browser Shortcut Value
ECHO ◇ 초기화 대상 웹 브라우저 바로 가기 확인중 . . . & >>"%QLog%" ECHO    ■ 초기화 대상 웹 브라우저 바로 가기 확인 :
REM :[%SYSTEMROOT%]\System32\Config\SystemProfile\Desktop
TITLE ^(확인중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\System32\Config\SystemProfile\Desktop\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%SYSTEMROOT%\System32\Config\SystemProfile\Desktop\*.LNK" 2^>Nul') DO (
	TITLE 확인중 "%SYSTEMROOT%\System32\Config\SystemProfile\Desktop\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	FOR /F %%B IN ('%EXEGREP% -Fixf DB_EXEC\CHECK\CHK_BROWSER_SHORTCUT+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
		FOR /F "TOKENS=1,* DELIMS==" %%C IN ('TOOLS\SHORTCUT\SHORTCUT.EXE /A:Q /F:"%SYSTEMROOT%\System32\Config\SystemProfile\Desktop\%%A" 2^>Nul^|%EXEGREP% -F "Arguments=" 2^>Nul^|%EXEGREP% -Fxv "Arguments=" 2^>Nul') DO (
			>VARIABLE\%VTEXT3% ECHO %%D
			FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
				CALL :RESET_SHORTCUT
			)
		)
	)
)
REM :[%SYSTEMROOT%]\SysWOW64\Config\SystemProfile\Desktop
TITLE ^(확인중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZSYSTEMROOT%\SysWOW64\Config\SystemProfile\Desktop\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\Desktop\*.LNK" 2^>Nul') DO (
	TITLE 확인중 "%SYSTEMROOT%\SysWOW64\Config\SystemProfile\Desktop\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	FOR /F %%B IN ('%EXEGREP% -Fixf DB_EXEC\CHECK\CHK_BROWSER_SHORTCUT+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
		FOR /F "TOKENS=1,* DELIMS==" %%C IN ('TOOLS\SHORTCUT\SHORTCUT.EXE /A:Q /F:"%SYSTEMROOT%\SysWOW64\Config\SystemProfile\Desktop\%%A" 2^>Nul^|%EXEGREP% -F "Arguments=" 2^>Nul^|%EXEGREP% -Fxv "Arguments=" 2^>Nul') DO (
			>VARIABLE\%VTEXT3% ECHO %%D
			FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
				CALL :RESET_SHORTCUT
			)
		)
	)
)
REM :[%PUBLIC%]\Desktop
TITLE ^(확인중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZPUBLIC%\Desktop\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%PUBLIC%\Desktop\*.LNK" 2^>Nul') DO (
	TITLE 확인중 "%PUBLIC%\Desktop\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	FOR /F %%B IN ('%EXEGREP% -Fixf DB_EXEC\CHECK\CHK_BROWSER_SHORTCUT+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
		FOR /F "TOKENS=1,* DELIMS==" %%C IN ('TOOLS\SHORTCUT\SHORTCUT.EXE /A:Q /F:"%PUBLIC%\Desktop\%%A" 2^>Nul^|%EXEGREP% -F "Arguments=" 2^>Nul^|%EXEGREP% -Fxv "Arguments=" 2^>Nul') DO (
			>VARIABLE\%VTEXT3% ECHO %%D
			FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
				CALL :RESET_SHORTCUT
			)
		)
	)
)
REM :[%USERPROFILE%]\Desktop
TITLE ^(확인중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZUSERPROFILE%\Desktop\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%USERPROFILE%\Desktop\*.LNK" 2^>Nul') DO (
	TITLE 확인중 "%USERPROFILE%\Desktop\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	FOR /F %%B IN ('%EXEGREP% -Fixf DB_EXEC\CHECK\CHK_BROWSER_SHORTCUT+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
		FOR /F "TOKENS=1,* DELIMS==" %%C IN ('TOOLS\SHORTCUT\SHORTCUT.EXE /A:Q /F:"%USERPROFILE%\Desktop\%%A" 2^>Nul^|%EXEGREP% -F "Arguments=" 2^>Nul^|%EXEGREP% -Fxv "Arguments=" 2^>Nul') DO (
			>VARIABLE\%VTEXT3% ECHO %%D
			FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
				CALL :RESET_SHORTCUT
			)
		)
	)
)
REM :[%ALLUSERSPROFILE%]\Microsoft\Internet Explorer\Quick Launch
TITLE ^(확인중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZALLUSERSPROFILE%\Microsoft\Internet Explorer\Quick Launch\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%ALLUSERSPROFILE%\Microsoft\Internet Explorer\Quick Launch\*.LNK" 2^>Nul') DO (
	TITLE 확인중 "%ALLUSERSPROFILE%\Microsoft\Internet Explorer\Quick Launch\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	FOR /F %%B IN ('%EXEGREP% -Fixf DB_EXEC\CHECK\CHK_BROWSER_SHORTCUT+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
		FOR /F "TOKENS=1,* DELIMS==" %%C IN ('TOOLS\SHORTCUT\SHORTCUT.EXE /A:Q /F:"%ALLUSERSPROFILE%\Microsoft\Internet Explorer\Quick Launch\%%A" 2^>Nul^|%EXEGREP% -F "Arguments=" 2^>Nul^|%EXEGREP% -Fxv "Arguments=" 2^>Nul') DO (
			>VARIABLE\%VTEXT3% ECHO %%D
			FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
				CALL :RESET_SHORTCUT
			)
		)
	)
)
REM :[%APPDATA%]\Microsoft\Internet Explorer\Quick Launch
TITLE ^(확인중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZAPPDATA%\Microsoft\Internet Explorer\Quick Launch\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.LNK" 2^>Nul') DO (
	TITLE 확인중 "%APPDATA%\Microsoft\Internet Explorer\Quick Launch\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	FOR /F %%B IN ('%EXEGREP% -Fixf DB_EXEC\CHECK\CHK_BROWSER_SHORTCUT+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
		FOR /F "TOKENS=1,* DELIMS==" %%C IN ('TOOLS\SHORTCUT\SHORTCUT.EXE /A:Q /F:"%APPDATA%\Microsoft\Internet Explorer\Quick Launch\%%A" 2^>Nul^|%EXEGREP% -F "Arguments=" 2^>Nul^|%EXEGREP% -Fxv "Arguments=" 2^>Nul') DO (
			>VARIABLE\%VTEXT3% ECHO %%D
			FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
				CALL :RESET_SHORTCUT
			)
		)
	)
)
REM :[%ALLUSERSPROFILE%]\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\360c22b137d62ce9
TITLE ^(확인중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZALLUSERSPROFILE%\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\360c22b137d62ce9\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%ALLUSERSPROFILE%\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\360c22b137d62ce9\LNK" 2^>Nul') DO (
	TITLE 확인중 "%ALLUSERSPROFILE%\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\360c22b137d62ce9\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	FOR /F %%B IN ('%EXEGREP% -Fixf DB_EXEC\CHECK\CHK_BROWSER_SHORTCUT+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
		FOR /F "TOKENS=1,* DELIMS==" %%C IN ('TOOLS\SHORTCUT\SHORTCUT.EXE /A:Q /F:"%ALLUSERSPROFILE%\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\360c22b137d62ce9\%%A" 2^>Nul^|%EXEGREP% -F "Arguments=" 2^>Nul^|%EXEGREP% -Fxv "Arguments=" 2^>Nul') DO (
			>VARIABLE\%VTEXT3% ECHO %%D
			FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
				CALL :RESET_SHORTCUT
			)
		)
	)
)
REM :[%APPDATA%]\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\360c22b137d62ce9
TITLE ^(확인중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZAPPDATA%\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\360c22b137d62ce9\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%APPDATA%\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\360c22b137d62ce9\*.LNK" 2^>Nul') DO (
	TITLE 확인중 "%APPDATA%\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\360c22b137d62ce9\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	FOR /F %%B IN ('%EXEGREP% -Fixf DB_EXEC\CHECK\CHK_BROWSER_SHORTCUT+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
		FOR /F "TOKENS=1,* DELIMS==" %%C IN ('TOOLS\SHORTCUT\SHORTCUT.EXE /A:Q /F:"%APPDATA%\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\360c22b137d62ce9\%%A" 2^>Nul^|%EXEGREP% -F "Arguments=" 2^>Nul^|%EXEGREP% -Fxv "Arguments=" 2^>Nul') DO (
			>VARIABLE\%VTEXT3% ECHO %%D
			FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
				CALL :RESET_SHORTCUT
			)
		)
	)
)
REM :[%ALLUSERSPROFILE%]\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu
TITLE ^(확인중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZALLUSERSPROFILE%\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%ALLUSERSPROFILE%\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\*.LNK" 2^>Nul') DO (
	TITLE 확인중 "%ALLUSERSPROFILE%\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	FOR /F %%B IN ('%EXEGREP% -Fixf DB_EXEC\CHECK\CHK_BROWSER_SHORTCUT+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
		FOR /F "TOKENS=1,* DELIMS==" %%C IN ('TOOLS\SHORTCUT\SHORTCUT.EXE /A:Q /F:"%ALLUSERSPROFILE%\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\%%A" 2^>Nul^|%EXEGREP% -F "Arguments=" 2^>Nul^|%EXEGREP% -Fxv "Arguments=" 2^>Nul') DO (
			>VARIABLE\%VTEXT3% ECHO %%D
			FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
				CALL :RESET_SHORTCUT
			)
		)
	)
)
REM :[%APPDATA%]\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu
TITLE ^(확인중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZAPPDATA%\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%APPDATA%\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\*.LNK" 2^>Nul') DO (
	TITLE 확인중 "%APPDATA%\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	FOR /F %%B IN ('%EXEGREP% -Fixf DB_EXEC\CHECK\CHK_BROWSER_SHORTCUT+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
		FOR /F "TOKENS=1,* DELIMS==" %%C IN ('TOOLS\SHORTCUT\SHORTCUT.EXE /A:Q /F:"%APPDATA%\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\%%A" 2^>Nul^|%EXEGREP% -F "Arguments=" 2^>Nul^|%EXEGREP% -Fxv "Arguments=" 2^>Nul') DO (
			>VARIABLE\%VTEXT3% ECHO %%D
			FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
				CALL :RESET_SHORTCUT
			)
		)
	)
)
REM :[%ALLUSERSPROFILE%]\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar
TITLE ^(확인중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZALLUSERSPROFILE%\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%ALLUSERSPROFILE%\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\*.LNK" 2^>Nul') DO (
	TITLE 확인중 "%ALLUSERSPROFILE%\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	FOR /F %%B IN ('%EXEGREP% -Fixf DB_EXEC\CHECK\CHK_BROWSER_SHORTCUT+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
		FOR /F "TOKENS=1,* DELIMS==" %%C IN ('TOOLS\SHORTCUT\SHORTCUT.EXE /A:Q /F:"%ALLUSERSPROFILE%\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\%%A" 2^>Nul^|%EXEGREP% -F "Arguments=" 2^>Nul^|%EXEGREP% -Fxv "Arguments=" 2^>Nul') DO (
			>VARIABLE\%VTEXT3% ECHO %%D
			FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
				CALL :RESET_SHORTCUT
			)
		)
	)
)
REM :[%APPDATA%]\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar
TITLE ^(확인중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZAPPDATA%\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%APPDATA%\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\*.LNK" 2^>Nul') DO (
	TITLE 확인중 "%APPDATA%\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	FOR /F %%B IN ('%EXEGREP% -Fixf DB_EXEC\CHECK\CHK_BROWSER_SHORTCUT+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
		FOR /F "TOKENS=1,* DELIMS==" %%C IN ('TOOLS\SHORTCUT\SHORTCUT.EXE /A:Q /F:"%APPDATA%\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\%%A" 2^>Nul^|%EXEGREP% -F "Arguments=" 2^>Nul^|%EXEGREP% -Fxv "Arguments=" 2^>Nul') DO (
			>VARIABLE\%VTEXT3% ECHO %%D
			FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
				CALL :RESET_SHORTCUT
			)
		)
	)
)
REM :[%ALLUSERSPROFILE%]\Microsoft\Windows\Start Menu
TITLE ^(확인중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZALLUSERSPROFILE%\Microsoft\Windows\Start Menu\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\*.LNK" 2^>Nul') DO (
	TITLE 확인중 "%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	FOR /F %%B IN ('%EXEGREP% -Fixf DB_EXEC\CHECK\CHK_BROWSER_SHORTCUT+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
		FOR /F "TOKENS=1,* DELIMS==" %%C IN ('TOOLS\SHORTCUT\SHORTCUT.EXE /A:Q /F:"%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\%%A" 2^>Nul^|%EXEGREP% -F "Arguments=" 2^>Nul^|%EXEGREP% -Fxv "Arguments=" 2^>Nul') DO (
			>VARIABLE\%VTEXT3% ECHO %%D
			FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
				CALL :RESET_SHORTCUT
			)
		)
	)
)
REM :[%APPDATA%]\Microsoft\Windows\Start Menu
TITLE ^(확인중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZAPPDATA%\Microsoft\Windows\Start Menu\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%APPDATA%\Microsoft\Windows\Start Menu\*.LNK" 2^>Nul') DO (
	TITLE 확인중 "%APPDATA%\Microsoft\Windows\Start Menu\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	FOR /F %%B IN ('%EXEGREP% -Fixf DB_EXEC\CHECK\CHK_BROWSER_SHORTCUT+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
		FOR /F "TOKENS=1,* DELIMS==" %%C IN ('TOOLS\SHORTCUT\SHORTCUT.EXE /A:Q /F:"%APPDATA%\Microsoft\Windows\Start Menu\%%A" 2^>Nul^|%EXEGREP% -F "Arguments=" 2^>Nul^|%EXEGREP% -Fxv "Arguments=" 2^>Nul') DO (
			>VARIABLE\%VTEXT3% ECHO %%D
			FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
				CALL :RESET_SHORTCUT
			)
		)
	)
)
REM :[%ALLUSERSPROFILE%]\Microsoft\Windows\Start Menu\Programs
TITLE ^(확인중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\*.LNK" 2^>Nul') DO (
	TITLE 확인중 "%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	FOR /F %%B IN ('%EXEGREP% -Fixf DB_EXEC\CHECK\CHK_BROWSER_SHORTCUT+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
		FOR /F "TOKENS=1,* DELIMS==" %%C IN ('TOOLS\SHORTCUT\SHORTCUT.EXE /A:Q /F:"%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\%%A" 2^>Nul^|%EXEGREP% -F "Arguments=" 2^>Nul^|%EXEGREP% -Fxv "Arguments=" 2^>Nul') DO (
			>VARIABLE\%VTEXT3% ECHO %%D
			FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
				CALL :RESET_SHORTCUT
			)
		)
	)
)
REM :[%APPDATA%]\Microsoft\Windows\Start Menu\Programs
TITLE ^(확인중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZAPPDATA%\Microsoft\Windows\Start Menu\Programs\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%APPDATA%\Microsoft\Windows\Start Menu\Programs\*.LNK" 2^>Nul') DO (
	TITLE 확인중 "%APPDATA%\Microsoft\Windows\Start Menu\Programs\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	FOR /F %%B IN ('%EXEGREP% -Fixf DB_EXEC\CHECK\CHK_BROWSER_SHORTCUT+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
		FOR /F "TOKENS=1,* DELIMS==" %%C IN ('TOOLS\SHORTCUT\SHORTCUT.EXE /A:Q /F:"%APPDATA%\Microsoft\Windows\Start Menu\Programs\%%A" 2^>Nul^|%EXEGREP% -F "Arguments=" 2^>Nul^|%EXEGREP% -Fxv "Arguments=" 2^>Nul') DO (
			>VARIABLE\%VTEXT3% ECHO %%D
			FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
				CALL :RESET_SHORTCUT
			)
		)
	)
)
REM :[%ALLUSERSPROFILE%]\Microsoft\Windows\Start Menu\Programs // Google Chrome
TITLE ^(확인중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\Chrome\
FOR /F "TOKENS=1,* DELIMS==" %%A IN ('TOOLS\SHORTCUT\SHORTCUT.EXE /A:Q /F:"%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\Chrome\Chrome.lnk" 2^>Nul^|%EXEGREP% -F "Arguments=" 2^>Nul^|%EXEGREP% -Fxv "Arguments=" 2^>Nul') DO (
	TITLE 확인중 "%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\Chrome\Chrome.lnk" 2>Nul
	>VARIABLE\%VTEXT2% ECHO Chrome.lnk
	>VARIABLE\%VTEXT3% ECHO %%B
	FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		CALL :RESET_SHORTCUT
	)
)
REM :[%APPDATA%]\Microsoft\Windows\Start Menu\Programs // Google Chrome
TITLE ^(확인중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZAPPDATA%\Microsoft\Windows\Start Menu\Programs\Chrome\
FOR /F "TOKENS=1,* DELIMS==" %%A IN ('TOOLS\SHORTCUT\SHORTCUT.EXE /A:Q /F:"%APPDATA%\Microsoft\Windows\Start Menu\Programs\Chrome\Chrome.lnk" 2^>Nul^|%EXEGREP% -F "Arguments=" 2^>Nul^|%EXEGREP% -Fxv "Arguments=" 2^>Nul') DO (
	TITLE 확인중 "%APPDATA%\Microsoft\Windows\Start Menu\Programs\Chrome\Chrome.lnk" 2>Nul
	>VARIABLE\%VTEXT2% ECHO Chrome.lnk
	>VARIABLE\%VTEXT3% ECHO %%B
	FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		CALL :RESET_SHORTCUT
	)
)
REM :[%APPDATA%]\Microsoft\Windows\Start Menu\Programs\Accessories
TITLE ^(확인중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZAPPDATA%\Microsoft\Windows\Start Menu\Programs\Accessories\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%APPDATA%\Microsoft\Windows\Start Menu\Programs\Accessories\*.LNK" 2^>Nul') DO (
	TITLE 확인중 "%APPDATA%\Microsoft\Windows\Start Menu\Programs\Accessories\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	FOR /F %%B IN ('%EXEGREP% -Fixf DB_EXEC\CHECK\CHK_BROWSER_SHORTCUT+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
		FOR /F "TOKENS=1,* DELIMS==" %%C IN ('TOOLS\SHORTCUT\SHORTCUT.EXE /A:Q /F:"%APPDATA%\Microsoft\Windows\Start Menu\Programs\Accessories\%%A" 2^>Nul^|%EXEGREP% -F "Arguments=" 2^>Nul^|%EXEGREP% -Fxv "Arguments=" 2^>Nul') DO (
			>VARIABLE\%VTEXT3% ECHO %%D
			FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
				CALL :RESET_SHORTCUT
			)
		)
	)
)
REM :[%APPDATA%]\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools
TITLE ^(확인중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO %MZAPPDATA%\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\
FOR /F "DELIMS=" %%A IN ('DIR /B /A-D "%APPDATA%\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\*.LNK" 2^>Nul') DO (
	TITLE 확인중 "%APPDATA%\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	FOR /F %%B IN ('%EXEGREP% -Fixf DB_EXEC\CHECK\CHK_BROWSER_SHORTCUT+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO (
		FOR /F "TOKENS=1,* DELIMS==" %%C IN ('TOOLS\SHORTCUT\SHORTCUT.EXE /A:Q /F:"%APPDATA%\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\%%A" 2^>Nul^|%EXEGREP% -F "Arguments=" 2^>Nul^|%EXEGREP% -Fxv "Arguments=" 2^>Nul') DO (
			>VARIABLE\%VTEXT3% ECHO %%D
			FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
				CALL :RESET_SHORTCUT
			)
		)
	)
)
REM :Result
SETLOCAL ENABLEDELAYEDEXPANSION
<VARIABLE\!VSEARCH! SET /P SRCH=
<VARIABLE\!VSUCCESS! SET /P SUCC=
<VARIABLE\!VFAIL! SET /P FAIL=
IF !SRCH! EQU 0 (
	ECHO    문제점이 발견되지 않았습니다. & >>"!QLog!" ECHO    문제점이 발견되지 않음
) ELSE (
	ECHO    발견: !SRCH! / 초기화: !SUCC! / 초기화 실패: !FAIL!
	>VARIABLE\!VXXYY! ECHO 1
)
ENDLOCAL
REM :Reset Value
CALL :RESET_VALUE

TITLE %MZTITLE% 2>Nul & PING.EXE -n 2 0 >Nul 2>Nul & ECHO. & >>"%QLog%" ECHO.

REM * Reset Service & Registry
ECHO ◇ 초기화 대상 서비스 및 레지스트리 확인중 . . . & >>"%QLog%" ECHO    ■ 초기화 대상 서비스 및 레지스트리 확인 :
TITLE ^(확인중^) 잠시만 기다려주세요 . . . 2>Nul
REM :HKCR\.exe (Default)
TITLE 확인중 "HKCR\.exe : (Default)" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCR\.exe\\" 2^>Nul') DO (
	IF NOT "%%A" == "exefile" (
		>VARIABLE\%VTEXT1% ECHO HKCR\.exe
		>VARIABLE\%VTEXT2% ECHO exefile
		CALL :RESET_REGISTRY "(Default)" NULL BACKUP "HKCR_EXE_Default"
	)
)
REM :HKCR\exefile\shell\open\command (Default)
TITLE 확인중 "HKCR\exefile\shell\open\command : (Default)" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCR\exefile\shell\open\command\\" 2^>Nul') DO (
	IF NOT "%%A" == ""%%1" %%*" (
		>VARIABLE\%VTEXT1% ECHO HKCR\exefile\shell\open\command
		>VARIABLE\%VTEXT2% ECHO "%%1" %%*
		CALL :RESET_REGISTRY "(Default)" NULL BACKUP "HKCR_EXEFileShell_OpenCommand"
	)
)
REM :HKCR\exefile\shell\runas\command (Default)
TITLE 확인중 "HKCR\exefile\shell\runas\command : (Default)" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCR\exefile\shell\runas\command\\" 2^>Nul') DO (
	IF NOT "%%A" == ""%%1" %%*" (
		>VARIABLE\%VTEXT1% ECHO HKCR\exefile\shell\runas\command
		>VARIABLE\%VTEXT2% ECHO "%%1" %%*
		CALL :RESET_REGISTRY "(Default)" NULL BACKUP "HKCR_EXEFileShell_RunASCommand"
	)
)
REM :HKCR\mscfile\shell\open\command (Default)
TITLE 확인중 "HKCR\mscfile\shell\open\command : (Default)" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCR\mscfile\shell\open\command\\" 2^>Nul') DO (
	IF /I NOT "%%A" == "%%SYSTEMROOT%%\SYSTEM32\MMC.EXE "%%1" %%*" (
		IF /I NOT "%%A" == ""%%SYSTEMROOT%%\SYSTEM32\MMC.EXE" "%%1" %%*" (
			IF /I NOT "%%A" == "%%SYSTEMROOT%%\SYSWOW64\MMC.EXE "%%1" %%*" (
				IF /I NOT "%%A" == ""%%SYSTEMROOT%%\SYSWOW64\MMC.EXE" "%%1" %%*" (
					>VARIABLE\%VTEXT1% ECHO HKCR\mscfile\shell\open\command
					>VARIABLE\%VTEXT2% ECHO %%SystemRoot%%\System32\mmc.exe "%%1" %%*
					CALL :RESET_REGISTRY "(Default)" REG_EXPAND_SZ BACKUP "HKCR_MSCFileShell_OpenCommand"
				)
			)
		)
	)
)
REM :HKCR\Unknown\shell\openas\command (Default) // Advance-System-Care
TITLE 확인중 "HKCR\Unknown\shell\openas\command : windowsfileopener.Dat" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCR\Unknown\shell\openas\command\windowsfileopener.Dat" 2^>Nul') DO (
	>VARIABLE\%VTEXT1% ECHO HKCR\Unknown\shell\openas\command
	>VARIABLE\%VTEXT2% ECHO %%A
	CALL :RESET_REGISTRY "(Default)" REG_EXPAND_SZ BACKUP "HKCR_UnknownShell_OpenASCommand"
	REG.EXE DELETE "HKCR\Unknown\shell\openas\command" /v "windowsfileopener.Dat" /f >Nul 2>Nul
)
REM :HKCR\Unknown\shell\openas\command (Default) // File Scout
TITLE 확인중 "HKCR\Unknown\shell\openas\command : fs_backup" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCR\Unknown\shell\openas\command\fs_backup" 2^>Nul') DO (
	>VARIABLE\%VTEXT1% ECHO HKCR\Unknown\shell\openas\command
	>VARIABLE\%VTEXT2% ECHO %%A
	CALL :RESET_REGISTRY "(Default)" REG_EXPAND_SZ BACKUP "HKCR_UnknownShell_OpenASCommand"
	REG.EXE DELETE "HKCR\Unknown\shell\openas\command" /v "fs_backup" /f >Nul 2>Nul
)
REM :HKCR\Unknown\shell\openas\command (Default) // File Type Assistant
TITLE 확인중 "HKCR\Unknown\shell\openas\command : tsa_backup" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCR\Unknown\shell\openas\command\tsa_backup" 2^>Nul') DO (
	>VARIABLE\%VTEXT1% ECHO HKCR\Unknown\shell\openas\command
	>VARIABLE\%VTEXT2% ECHO %%A
	CALL :RESET_REGISTRY "(Default)" REG_EXPAND_SZ BACKUP "HKCR_UnknownShell_OpenASCommand"
	REG.EXE DELETE "HKCR\Unknown\shell\openas\command" /v "tsa_backup" /f >Nul 2>Nul
)
REM :HKCR\Unknown\shell\openas\command (Default) // PC TuneUp Maestro
TITLE 확인중 "HKCR\Unknown\shell\openas\command : PC TuneUp Maestro.old" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCR\Unknown\shell\openas\command\PC TuneUp Maestro.old" 2^>Nul') DO (
	>VARIABLE\%VTEXT1% ECHO HKCR\Unknown\shell\openas\command
	>VARIABLE\%VTEXT2% ECHO %%A
	CALL :RESET_REGISTRY "(Default)" REG_EXPAND_SZ BACKUP "HKCR_UnknownShell_OpenASCommand"
	REG.EXE DELETE "HKCR\Unknown\shell\openas\command" /v "PC TuneUp Maestro.old" /f >Nul 2>Nul
)
REM :HKCR\Unknown\shell\opendlg\command (Default) // Advance-System-Care
TITLE 확인중 "HKCR\Unknown\shell\opendlg\command : windowsfileopener.Dat" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCR\Unknown\shell\opendlg\command\windowsfileopener.Dat" 2^>Nul') DO (
	>VARIABLE\%VTEXT1% ECHO HKCR\Unknown\shell\opendlg\command
	>VARIABLE\%VTEXT2% ECHO %%A
	CALL :RESET_REGISTRY "(Default)" REG_EXPAND_SZ BACKUP "HKCR_UnknownShell_OpenASCommand"
	REG.EXE DELETE "HKCR\Unknown\shell\opendlg\command" /v "windowsfileopener.Dat" /f >Nul 2>Nul
)
REM :HKCR\Unknown\shell\opendlg\command (Default) // File Scout
TITLE 확인중 "HKCR\Unknown\shell\opendlg\command : fs_backup" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCR\Unknown\shell\opendlg\command\fs_backup" 2^>Nul') DO (
	>VARIABLE\%VTEXT1% ECHO HKCR\Unknown\shell\opendlg\command
	>VARIABLE\%VTEXT2% ECHO %%A
	CALL :RESET_REGISTRY "(Default)" REG_EXPAND_SZ BACKUP "HKCR_UnknownShell_OpenASCommand"
	REG.EXE DELETE "HKCR\Unknown\shell\opendlg\command" /v "fs_backup" /f >Nul 2>Nul
)
REM :HKCR\Unknown\shell\opendlg\command (Default) // File Type Assistant
TITLE 확인중 "HKCR\Unknown\shell\opendlg\command : tsa_backup" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCR\Unknown\shell\opendlg\command\tsa_backup" 2^>Nul') DO (
	>VARIABLE\%VTEXT1% ECHO HKCR\Unknown\shell\opendlg\command
	>VARIABLE\%VTEXT2% ECHO %%A
	CALL :RESET_REGISTRY "(Default)" REG_EXPAND_SZ BACKUP "HKCR_UnknownShell_OpenASCommand"
	REG.EXE DELETE "HKCR\Unknown\shell\opendlg\command" /v "tsa_backup" /f >Nul 2>Nul
)
REM :HKCR\Unknown\shell\opendlg\command (Default) // PC TuneUp Maestro
TITLE 확인중 "HKCR\Unknown\shell\opendlg\command : PC TuneUp Maestro.old" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCR\Unknown\shell\opendlg\command\PC TuneUp Maestro.old" 2^>Nul') DO (
	>VARIABLE\%VTEXT1% ECHO HKCR\Unknown\shell\opendlg\command
	>VARIABLE\%VTEXT2% ECHO %%A
	CALL :RESET_REGISTRY "(Default)" REG_EXPAND_SZ BACKUP "HKCR_UnknownShell_OpenASCommand"
	REG.EXE DELETE "HKCR\Unknown\shell\opendlg\command" /v "PC TuneUp Maestro.old" /f >Nul 2>Nul
)
REM :HKCU\Control Panel\Desktop (SCRNSAVE.EXE)
TITLE 확인중 "HKCU\Control Panel\Desktop : SCRNSAVE.EXE" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCU\Control Panel\Desktop\SCRNSAVE.EXE" 2^>Nul') DO (
	>VARIABLE\%VTEXT1% ECHO HKCU\Control Panel\Desktop
	FOR /F %%X IN ('ECHO "%%A"^|%EXEGREP% -Fie "WINDOWS\IEUPDATE" 2^>Nul') DO (
		>VARIABLE\%VTEXT2% ECHO NULL
		CALL :RESET_REGISTRY "SCRNSAVE.EXE" NULL BACKUP "HKCU_ControlPanelDesktop_ScrnSave"
	)
)
REM :HKCU\Software\Microsoft\Command Processor (AutoRun)
TITLE 확인중 "HKCU\Software\Microsoft\Command Processor : AutoRun" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCU\Software\Microsoft\Command Processor\AutoRun" 2^>Nul') DO (
	>VARIABLE\%VTEXT3% ECHO %%A
	FOR /F %%X IN ('%EXEGREP% -Fif DB_EXEC\THREAT\REGISTRY\DEL_HK_COMMANDPROCESSOR_AUTORUN+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		>VARIABLE\%VTEXT1% ECHO HKCU\Software\Microsoft\Command Processor
		>VARIABLE\%VTEXT2% ECHO NULL
		CALL :RESET_REGISTRY AutoRun NULL BACKUP "HKCU_CommandProcessor_AutoRun"
	)
	FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_HK_COMMANDPROCESSOR_AUTORUN+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		>VARIABLE\%VTEXT1% ECHO HKCU\Software\Microsoft\Command Processor
		>VARIABLE\%VTEXT2% ECHO NULL
		CALL :RESET_REGISTRY AutoRun NULL BACKUP "HKCU_CommandProcessor_AutoRun"
	)
)
REM :HKCU\Software\Microsoft\Internet Explorer\SearchUrl (Default)
TITLE 확인중 "HKCU\Software\Microsoft\Internet Explorer\SearchUrl : (Default)" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCU\Software\Microsoft\Internet Explorer\SearchUrl\\" 2^>Nul') DO (
	>VARIABLE\%VTEXT3% ECHO %%~A
	FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		>VARIABLE\%VTEXT1% ECHO HKCU\Software\Microsoft\Internet Explorer\SearchUrl
		>VARIABLE\%VTEXT2% ECHO NULL
		CALL :RESET_REGISTRY "(Default)" NULL BACKUP "HKCU_InternetExplorer_SearchUrl"
	)
)
REM :HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders (Startup)
TITLE 확인중 "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders : Startup" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Startup" 2^>Nul') DO (
	>VARIABLE\%VTEXT3% ECHO %%A
	FOR /F %%X IN ('%EXEGREP% -if DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_HKCU_USERSHELLFOLDERS_STARTUP+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		>VARIABLE\%VTEXT1% ECHO HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
		>VARIABLE\%VTEXT2% ECHO %%USERPROFILE%%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
		CALL :RESET_REGISTRY Startup NULL BACKUP "HKCU_UserShellFolders_Startup"
	)
)
REM :HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings (DnsCacheEnabled)
TITLE 확인중 "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings : DnsCacheEnabled" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\DnsCacheEnabled" 2^>Nul') DO (
	IF "%%A" == "0" (
		>VARIABLE\%VTEXT1% ECHO HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings
		>VARIABLE\%VTEXT2% ECHO DELETECOMMAND
		CALL :RESET_REGISTRY DnsCacheEnabled NULL BACKUP "HKCU_InternetSettings_DnsCacheEnabled"
	)
)
REM :HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings (DnsCacheTimeout)
TITLE 확인중 "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings : DnsCacheTimeout" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\DnsCacheTimeout" 2^>Nul') DO (
	IF "%%A" == "0" (
		>VARIABLE\%VTEXT1% ECHO HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings
		>VARIABLE\%VTEXT2% ECHO DELETECOMMAND
		CALL :RESET_REGISTRY DnsCacheTimeout NULL BACKUP "HKCU_InternetSettings_DnsCacheTimeout"
	)
)
REM :HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings (ServerInfoTimeOut)
TITLE 확인중 "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings : ServerInfoTimeOut" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ServerInfoTimeOut" 2^>Nul') DO (
	IF "%%A" == "0" (
		>VARIABLE\%VTEXT1% ECHO HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings
		>VARIABLE\%VTEXT2% ECHO DELETECOMMAND
		CALL :RESET_REGISTRY ServerInfoTimeOut NULL BACKUP "HKCU_InternetSettings_ServerInfoTimeOut"
	)
)
REM :HKCU\Software\Microsoft\Windows\CurrentVersion\Run (Default)
TITLE 확인중 "HKCU\Software\Microsoft\Windows\CurrentVersion\Run : (Default)" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\" 2^>Nul') DO (
	>VARIABLE\%VTEXT3% ECHO %%A
	FOR /F %%X IN ('%EXEGREP% -Fivf DB\EXCEPT\EX_REG_AUTORUN.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		>VARIABLE\%VTEXT1% ECHO HKCU\Software\Microsoft\Windows\CurrentVersion\Run
		>VARIABLE\%VTEXT2% ECHO NULL
		CALL :RESET_REGISTRY "(Default)" NULL BACKUP "HKCU_Run"
	)
)
REM :HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce (Default)
TITLE 확인중 "HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce : (Default)" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce\\" 2^>Nul') DO (
	>VARIABLE\%VTEXT3% ECHO %%A
	FOR /F %%X IN ('%EXEGREP% -Fivf DB\EXCEPT\EX_REG_AUTORUN.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		>VARIABLE\%VTEXT1% ECHO HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce
		>VARIABLE\%VTEXT2% ECHO NULL
		CALL :RESET_REGISTRY "(Default)" NULL BACKUP "HKCU_RunOnce"
	)
)
REM :HKCU\Software\Microsoft\Windows\CurrentVersion\RunServices (Default)
TITLE 확인중 "HKCU\Software\Microsoft\Windows\CurrentVersion\RunServices : (Default)" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCU\Software\Microsoft\Windows\CurrentVersion\RunServices\\" 2^>Nul') DO (
	>VARIABLE\%VTEXT3% ECHO %%A
	FOR /F %%X IN ('%EXEGREP% -Fivf DB\EXCEPT\EX_REG_AUTORUN.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		>VARIABLE\%VTEXT1% ECHO HKCU\Software\Microsoft\Windows\CurrentVersion\RunServices
		>VARIABLE\%VTEXT2% ECHO NULL
		CALL :RESET_REGISTRY "(Default)" NULL BACKUP "HKCU_RunServices"
	)
)
REM :HKCU\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce (Default)
TITLE 확인중 "HKCU\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce : (Default)" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCU\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce\\" 2^>Nul') DO (
	>VARIABLE\%VTEXT3% ECHO %%A
	FOR /F %%X IN ('%EXEGREP% -Fivf DB\EXCEPT\EX_REG_AUTORUN.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		>VARIABLE\%VTEXT1% ECHO HKCU\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce
		>VARIABLE\%VTEXT2% ECHO NULL
		CALL :RESET_REGISTRY "(Default)" NULL BACKUP "HKCU_RunServicesOnce"
	)
)
REM :HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer (NoFolderOptions)
TITLE 확인중 "HKCU\Software\…\Policies\Explorer : NoFolderOptions" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions" 2^>Nul') DO (
	IF NOT "%%A" == "0" (
		>VARIABLE\%VTEXT1% ECHO HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
		>VARIABLE\%VTEXT2% ECHO 0
		CALL :RESET_REGISTRY NoFolderOptions REG_DWORD BACKUP "HKCU_PoliciesExplorer"
	)
)
REM :HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer (NoWindowsUpdate)
TITLE 확인중 "HKCU\Software\…\Policies\Explorer : NoWindowsUpdate" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoWindowsUpdate" 2^>Nul') DO (
	IF NOT "%%A" == "0" (
		>VARIABLE\%VTEXT1% ECHO HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
		>VARIABLE\%VTEXT2% ECHO 0
		CALL :RESET_REGISTRY NoWindowsUpdate REG_DWORD BACKUP "HKCU_PoliciesExplorer"
	)
)
REM :HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run (Default)
TITLE 확인중 "HKCU\Software\…\Policies\Explorer\Run : (Default)" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\\" 2^>Nul') DO (
	>VARIABLE\%VTEXT3% ECHO %%A
	FOR /F %%X IN ('%EXEGREP% -Fivf DB\EXCEPT\EX_REG_AUTORUN.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		>VARIABLE\%VTEXT1% ECHO HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
		>VARIABLE\%VTEXT2% ECHO NULL
		CALL :RESET_REGISTRY "(Default)" NULL BACKUP "HKCU_PoliciesExplorerRun"
	)
)
REM :HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext (DisableAddonLoadTimePerformanceNotifications)
TITLE 확인중 "HKCU\Software\…\Policies\Ext : DisableAddonLoadTimePerformanceNotifications" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext\DisableAddonLoadTimePerformanceNotifications" 2^>Nul') DO (
	IF NOT "%%A" == "0" (
		>VARIABLE\%VTEXT1% ECHO HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext
		>VARIABLE\%VTEXT2% ECHO 0
		CALL :RESET_REGISTRY DisableAddonLoadTimePerformanceNotifications REG_DWORD BACKUP "HKCU_PoliciesExt"
	)
)
REM :HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext (IgnoreFrameApprovalCheck)
TITLE 확인중 "HKCU\Software\…\Policies\Ext : IgnoreFrameApprovalCheck" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext\IgnoreFrameApprovalCheck" 2^>Nul') DO (
	IF NOT "%%A" == "0" (
		>VARIABLE\%VTEXT1% ECHO HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext
		>VARIABLE\%VTEXT2% ECHO 0
		CALL :RESET_REGISTRY IgnoreFrameApprovalCheck REG_DWORD BACKUP "HKCU_PoliciesExt"
	)
)
REM :HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System (DisableTaskMgr)
TITLE 확인중 "HKCU\Software\…\Policies\System : DisableTaskMgr" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr" 2^>Nul') DO (
	IF NOT "%%A" == "0" (
		>VARIABLE\%VTEXT1% ECHO HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System
		>VARIABLE\%VTEXT2% ECHO 0
		CALL :RESET_REGISTRY DisableTaskMgr REG_DWORD BACKUP "HKCU_PoliciesSystem"
	)
)
REM :HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System (Shell)
TITLE 확인중 "HKCU\Software\…\Policies\System : Shell" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System\Shell" 2^>Nul') DO (
	>VARIABLE\%VTEXT1% ECHO HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System
	>VARIABLE\%VTEXT2% ECHO NULL
	CALL :RESET_REGISTRY Shell NULL BACKUP "HKCU_PoliciesSystem"
)
REM :HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows (Load)
TITLE 확인중 "HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows : Load" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows\Load" 2^>Nul') DO (
	>VARIABLE\%VTEXT1% ECHO HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows
	>VARIABLE\%VTEXT2% ECHO NULL
	CALL :RESET_REGISTRY Load NULL BACKUP "HKCU_WinNT_Windows"
)
REM :HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows (Run)
TITLE 확인중 "HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows : Run" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows\Run" 2^>Nul') DO (
	>VARIABLE\%VTEXT1% ECHO HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows
	>VARIABLE\%VTEXT2% ECHO NULL
	CALL :RESET_REGISTRY Run NULL BACKUP "HKCU_WinNT_Windows"
)
REM :HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon (Shell)
TITLE 확인중 "HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon : Shell" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell" 2^>Nul') DO (
	>VARIABLE\%VTEXT3% ECHO %%~nxA
	FOR /F %%X IN ('%EXEGREP% -Fixvf DB\EXCEPT\EX_REG_WINLOGON_SHELL.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		>VARIABLE\%VTEXT1% ECHO HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
		>VARIABLE\%VTEXT2% ECHO explorer.exe
		CALL :RESET_REGISTRY Shell NULL BACKUP "HKCU_WinNT_Winlogon"
	)
)
REM :HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon (Userinit)
TITLE 확인중 "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon : Userinit" 2>Nul
TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit" >Nul 2>Nul
IF %ERRORLEVEL% EQU 1 (
	>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
	>VARIABLE\%VTEXT2% ECHO %MZSYSTEMROOT%\System32\Userinit.exe,
	CALL :RESET_REGISTRY Userinit NULL NULL NULL
) ELSE (
	>VARIABLE\%VCHECK% ECHO 0
	FOR /F "TOKENS=1,2,3,4,5 DELIMS=," %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit" 2^>Nul') DO (
		IF NOT "%%A" == "" (
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				>VARIABLE\%VTEXT3% ECHO %%~nxA
				FOR /F %%X IN ('%EXEGREP% -Fivxf DB_EXEC\CHECK\CHK_TRUSTED_USERINIT+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
					>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
					>VARIABLE\%VTEXT2% ECHO %MZSYSTEMROOT%\System32\Userinit.exe,
					CALL :RESET_REGISTRY Userinit NULL BACKUP "HKLM_WinNT_Winlogon"
				)
			) ELSE (
				ENDLOCAL
			)
		)
		IF NOT "%%B" == "" (
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				>VARIABLE\%VTEXT3% ECHO %%~nxB
				FOR /F %%X IN ('%EXEGREP% -Fivxf DB_EXEC\CHECK\CHK_TRUSTED_USERINIT+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
					>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
					>VARIABLE\%VTEXT2% ECHO %MZSYSTEMROOT%\System32\Userinit.exe,
					CALL :RESET_REGISTRY Userinit NULL BACKUP "HKLM_WinNT_Winlogon"
				)
			) ELSE (
				ENDLOCAL
			)
		)
		IF NOT "%%C" == "" (
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				>VARIABLE\%VTEXT3% ECHO %%~nxC
				FOR /F %%X IN ('%EXEGREP% -Fivxf DB_EXEC\CHECK\CHK_TRUSTED_USERINIT+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
					>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
					>VARIABLE\%VTEXT2% ECHO %MZSYSTEMROOT%\System32\Userinit.exe,
					CALL :RESET_REGISTRY Userinit NULL BACKUP "HKLM_WinNT_Winlogon"
				)
			) ELSE (
				ENDLOCAL
			)
		)
		IF NOT "%%D" == "" (
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				>VARIABLE\%VTEXT3% ECHO %%~nxD
				FOR /F %%X IN ('%EXEGREP% -Fivxf DB_EXEC\CHECK\CHK_TRUSTED_USERINIT+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
					>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
					>VARIABLE\%VTEXT2% ECHO %MZSYSTEMROOT%\System32\Userinit.exe,
					CALL :RESET_REGISTRY Userinit NULL BACKUP "HKLM_WinNT_Winlogon"
				)
			) ELSE (
				ENDLOCAL
			)
		)
		IF NOT "%%E" == "" (
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				>VARIABLE\%VTEXT3% ECHO %%~nxE
				FOR /F %%X IN ('%EXEGREP% -Fivxf DB_EXEC\CHECK\CHK_TRUSTED_USERINIT+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
					>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
					>VARIABLE\%VTEXT2% ECHO %MZSYSTEMROOT%\System32\Userinit.exe,
					CALL :RESET_REGISTRY Userinit NULL BACKUP "HKLM_WinNT_Winlogon"
				)
			) ELSE (
				ENDLOCAL
			)
		)
	)
)
REM :HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions (NoBrowserOptions)
TITLE 확인중 "HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions : NoBrowserOptions" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions\NoBrowserOptions" 2^>Nul') DO (
	IF NOT "%%A" == "0" (
		>VARIABLE\%VTEXT1% ECHO HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions
		>VARIABLE\%VTEXT2% ECHO DELETECOMMAND
		CALL :RESET_REGISTRY NoBrowserOptions NULL BACKUP "HKCU_Policies_IE_Restrictions_NoBrowserOptions"
	)
)
REM :HKCU\Software\Wow6432Node\Policies\Microsoft\Internet Explorer\Restrictions (NoBrowserOptions)
TITLE 확인중 "HKCU\Software\Wow6432Node\Policies\Microsoft\Internet Explorer\Restrictions : NoBrowserOptions" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCU\Software\Wow6432Node\Policies\Microsoft\Internet Explorer\Restrictions\NoBrowserOptions" 2^>Nul') DO (
	IF NOT "%%A" == "0" (
		>VARIABLE\%VTEXT1% ECHO HKCU\Software\Wow6432Node\Policies\Microsoft\Internet Explorer\Restrictions
		>VARIABLE\%VTEXT2% ECHO DELETECOMMAND
		CALL :RESET_REGISTRY NoBrowserOptions NULL BACKUP "HKCU_Policies_IE_Restrictions_NoBrowserOptions(x86)"
	)
)
REM :HKLM\Software\Clients\StartMenuInternet\firefox.exe\shell\open\command (Default)
TITLE 확인중 "HKLM\Software\Clients\StartMenuInternet\firefox.EXE\shell\open\command : (Default)" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Clients\StartMenuInternet\firefox.exe\shell\open\command\\" 2^>Nul') DO (
	>VARIABLE\%VTEXT3% ECHO %%A
	FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		>VARIABLE\%VTEXT1% ECHO HKLM\Software\Clients\StartMenuInternet\firefox.exe\shell\open\command
		>VARIABLE\%VTEXT2% ECHO "%PROGRAMFILESX86%\Mozilla Firefox\firefox.exe"
		CALL :RESET_REGISTRY "(Default)" NULL BACKUP "HKLM_SW_Clients_StartMenuInternet_MozillaFirefox_ShellOpenCommand"
	)
)
REM :HKLM\Software\Wow6432Node\Clients\StartMenuInternet\firefox.exe\shell\open\command (Default)
TITLE 확인중 "HKLM\Software\Wow6432Node\Clients\StartMenuInternet\firefox.EXE\shell\open\command : (Default)" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Wow6432Node\Clients\StartMenuInternet\firefox.exe\shell\open\command\\" 2^>Nul') DO (
	>VARIABLE\%VTEXT3% ECHO %%A
	FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\Clients\StartMenuInternet\firefox.exe\shell\open\command
		>VARIABLE\%VTEXT2% ECHO "%PROGRAMFILESX86%\Mozilla Firefox\firefox.exe"
		CALL :RESET_REGISTRY "(Default)" NULL BACKUP "HKLM_SW_Clients_StartMenuInternet_MozillaFirefox_ShellOpenCommand(x86)"
	)
)
REM :HKLM\Software\Clients\StartMenuInternet\Google Chrome\shell\open\command (Default)
TITLE 확인중 "HKLM\Software\Clients\StartMenuInternet\Google Chrome\shell\open\command : (Default)" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Clients\StartMenuInternet\Google Chrome\shell\open\command\\" 2^>Nul') DO (
	>VARIABLE\%VTEXT3% ECHO %%A
	FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		>VARIABLE\%VTEXT1% ECHO HKLM\Software\Clients\StartMenuInternet\Google Chrome\shell\open\command
		>VARIABLE\%VTEXT2% ECHO "%PROGRAMFILESX86%\Google\Chrome\Application\chrome.exe"
		CALL :RESET_REGISTRY "(Default)" NULL BACKUP "HKLM_SW_Clients_StartMenuInternet_GoogleChrome_ShellOpenCommand"
	)
)
REM :HKLM\Software\Wow6432Node\Clients\StartMenuInternet\Google Chrome\shell\open\command (Default)
TITLE 확인중 "HKLM\Software\Wow6432Node\Clients\StartMenuInternet\Google Chrome\shell\open\command : (Default)" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Wow6432Node\Clients\StartMenuInternet\Google Chrome\shell\open\command\\" 2^>Nul') DO (
	>VARIABLE\%VTEXT3% ECHO %%A
	FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\Clients\StartMenuInternet\Google Chrome\shell\open\command
		>VARIABLE\%VTEXT2% ECHO "%PROGRAMFILESX86%\Google\Chrome\Application\chrome.exe"
		CALL :RESET_REGISTRY "(Default)" NULL BACKUP "HKLM_SW_Clients_StartMenuInternet_GoogleChrome_ShellOpenCommand(x86)"
	)
)
REM :HKLM\Software\Clients\StartMenuInternet\iexplore.exe\shell\open\command (Default)
TITLE 확인중 "HKLM\Software\Clients\StartMenuInternet\iexplore.EXE\shell\open\command : (Default)" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Clients\StartMenuInternet\iexplore.exe\shell\open\command\\" 2^>Nul') DO (
	>VARIABLE\%VTEXT3% ECHO %%A
	FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		>VARIABLE\%VTEXT1% ECHO HKLM\Software\Clients\StartMenuInternet\iexplore.exe\shell\open\command
		>VARIABLE\%VTEXT2% ECHO %MZPROGRAMFILES%\Internet Explorer\iexplore.exe
		CALL :RESET_REGISTRY "(Default)" NULL BACKUP "HKLM_SW_Clients_StartMenuInternet_InternetExplorer_ShellOpenCommand"
	)
)
REM :HKLM\Software\Wow6432Node\Clients\StartMenuInternet\iexplore.exe\shell\open\command (Default)
TITLE 확인중 "HKLM\Software\Wow6432Node\Clients\StartMenuInternet\iexplore.EXE\shell\open\command : (Default)" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Wow6432Node\Clients\StartMenuInternet\iexplore.exe\shell\open\command\\" 2^>Nul') DO (
	>VARIABLE\%VTEXT3% ECHO %%A
	FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\Clients\StartMenuInternet\iexplore.exe\shell\open\command
		>VARIABLE\%VTEXT2% ECHO %MZPROGRAMFILES%\Internet Explorer\iexplore.exe
		CALL :RESET_REGISTRY "(Default)" NULL BACKUP "HKLM_SW_Clients_StartMenuInternet_InternetExplorer_ShellOpenCommand(x86)"
	)
)
REM :HKLM\Software\Clients\StartMenuInternet\Microsoft Edge Dev\shell\open\command (Default)
TITLE 확인중 "HKLM\Software\Clients\StartMenuInternet\Microsoft Edge Dev\shell\open\command : (Default)" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Clients\StartMenuInternet\Microsoft Edge Dev\shell\open\command\\" 2^>Nul') DO (
	>VARIABLE\%VTEXT3% ECHO %%A
	FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		>VARIABLE\%VTEXT1% ECHO HKLM\Software\Clients\StartMenuInternet\Microsoft Edge Dev\shell\open\command
		>VARIABLE\%VTEXT2% ECHO "%PROGRAMFILESX86%\Microsoft\Edge\Application\msedge.exe"
		CALL :RESET_REGISTRY "(Default)" NULL BACKUP "HKLM_SW_Clients_StartMenuInternet_MicrosoftEdge_ShellOpenCommand"
	)
)
REM :HKLM\Software\Wow6432Node\Clients\StartMenuInternet\Microsoft Edge Dev\shell\open\command (Default)
TITLE 확인중 "HKLM\Software\Wow6432Node\Clients\StartMenuInternet\Microsoft Edge Dev\shell\open\command : (Default)" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Wow6432Node\Clients\StartMenuInternet\Microsoft Edge Dev\shell\open\command\\" 2^>Nul') DO (
	>VARIABLE\%VTEXT3% ECHO %%A
	FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\Clients\StartMenuInternet\Microsoft Edge Dev\shell\open\command
		>VARIABLE\%VTEXT2% ECHO "%PROGRAMFILESX86%\Microsoft\Edge\Application\msedge.exe"
		CALL :RESET_REGISTRY "(Default)" NULL BACKUP "HKLM_SW_Clients_StartMenuInternet_MicrosoftEdge_ShellOpenCommand(x86)"
	)
)
REM :HKLM\Software\Clients\StartMenuInternet\Naver Whale\shell\open\command (Default)
TITLE 확인중 "HKLM\Software\Clients\StartMenuInternet\Naver Whale\shell\open\command : (Default)" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Clients\StartMenuInternet\Naver Whale\shell\open\command\\" 2^>Nul') DO (
	>VARIABLE\%VTEXT3% ECHO %%A
	FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		>VARIABLE\%VTEXT1% ECHO HKLM\Software\Clients\StartMenuInternet\Naver Whale\shell\open\command
		>VARIABLE\%VTEXT2% ECHO "%PROGRAMFILESX86%\Naver\Naver Whale\Application\whale.exe"
		CALL :RESET_REGISTRY "(Default)" NULL BACKUP "HKLM_SW_Clients_StartMenuInternet_NaverWhale_ShellOpenCommand"
	)
)
REM :HKLM\Software\Wow6432Node\Clients\StartMenuInternet\Naver Whale\shell\open\command (Default)
TITLE 확인중 "HKLM\Software\Wow6432Node\Clients\StartMenuInternet\Naver Whale\shell\open\command : (Default)" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Wow6432Node\Clients\StartMenuInternet\Naver Whale\shell\open\command\\" 2^>Nul') DO (
	>VARIABLE\%VTEXT3% ECHO %%A
	FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\Clients\StartMenuInternet\Naver Whale\shell\open\command
		>VARIABLE\%VTEXT2% ECHO "%PROGRAMFILESX86%\Naver\Naver Whale\Application\whale.exe"
		CALL :RESET_REGISTRY "(Default)" NULL BACKUP "HKLM_SW_Clients_StartMenuInternet_NaverWhale_ShellOpenCommand(x86)"
	)
)
REM :HKLM\Software\Microsoft\Command Processor (AutoRun)
TITLE 확인중 "HKLM\Software\Microsoft\Command Processor : AutoRun" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Microsoft\Command Processor\AutoRun" 2^>Nul') DO (
	>VARIABLE\%VTEXT3% ECHO %%A
	FOR /F %%X IN ('%EXEGREP% -Fif DB_EXEC\THREAT\REGISTRY\DEL_HK_COMMANDPROCESSOR_AUTORUN+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Command Processor
		>VARIABLE\%VTEXT2% ECHO NULL
		CALL :RESET_REGISTRY AutoRun NULL BACKUP "HKLM_CommandProcessor_AutoRun"
	)
	FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_HK_COMMANDPROCESSOR_AUTORUN+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Command Processor
		>VARIABLE\%VTEXT2% ECHO NULL
		CALL :RESET_REGISTRY AutoRun NULL BACKUP "HKLM_CommandProcessor_AutoRun"
	)
)
REM :HKLM\Software\Microsoft\Internet Explorer\SearchUrl (Default)
TITLE 확인중 "HKLM\Software\Microsoft\Internet Explorer\SearchUrl : (Default)" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Microsoft\Internet Explorer\SearchUrl\\" 2^>Nul') DO (
	>VARIABLE\%VTEXT3% ECHO %%~A
	FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Internet Explorer\SearchUrl
		>VARIABLE\%VTEXT2% ECHO NULL
		CALL :RESET_REGISTRY "(Default)" NULL BACKUP "HKLM_InternetExplorer_SearchUrl"
	)
)
REM :HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchUrl (Default)
TITLE 확인중 "HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchUrl : (Default)" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchUrl\\" 2^>Nul') DO (
	>VARIABLE\%VTEXT3% ECHO %%~A
	FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\THREAT\REGISTRY\DEL_BROWSER_STARTPAGE.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchUrl
		>VARIABLE\%VTEXT2% ECHO NULL
		CALL :RESET_REGISTRY "(Default)" NULL BACKUP "HKLM_InternetExplorer_SearchUrl(x86)"
	)
)
REM :HKLM\Software\Microsoft\Security Center (AntiVirusDisableNotify)
TITLE 확인중 "HKLM\Software\Microsoft\Security Center : AntiVirusDisableNotify" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Microsoft\Security Center\AntiVirusDisableNotify" 2^>Nul') DO (
	IF NOT "%%A" == "0" (
		>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Security Center
		>VARIABLE\%VTEXT2% ECHO 0
		CALL :RESET_REGISTRY AntiVirusDisableNotify REG_DWORD BACKUP "HKLM_SecurityCenter"
	)
)
REM :HKLM\Software\Microsoft\Security Center (FirewallDisableNotify)
TITLE 확인중 "HKLM\Software\Microsoft\Security Center : FirewallDisableNotify" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Microsoft\Security Center\FirewallDisableNotify" 2^>Nul') DO (
	IF NOT "%%A" == "0" (
		>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Security Center
		>VARIABLE\%VTEXT2% ECHO 0
		CALL :RESET_REGISTRY FirewallDisableNotify REG_DWORD BACKUP "HKLM_SecurityCenter"
	)
)
REM :HKLM\Software\Microsoft\Security Center (UpdatesDisableNotify)
TITLE 확인중 "HKLM\Software\Microsoft\Security Center : UpdatesDisableNotify" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Microsoft\Security Center\UpdatesDisableNotify" 2^>Nul') DO (
	IF NOT "%%A" == "0" (
		>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Security Center
		>VARIABLE\%VTEXT2% ECHO 0
		CALL :RESET_REGISTRY UpdatesDisableNotify REG_DWORD BACKUP "HKLM_SecurityCenter"
	)
)
REM :HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden (Type)
TITLE 확인중 "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden : Type" 2>Nul
TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\Type" >Nul 2>Nul
IF %ERRORLEVEL% EQU 1 (
	>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden
	>VARIABLE\%VTEXT2% ECHO group
	CALL :RESET_REGISTRY Type NULL NULL NULL
)
REM :HKLM\Software\Microsoft\Windows\CurrentVersion\Run (Default)
TITLE 확인중 "HKLM\Software\Microsoft\Windows\CurrentVersion\Run : (Default)" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\" 2^>Nul') DO (
	>VARIABLE\%VTEXT3% ECHO %%A
	FOR /F %%X IN ('%EXEGREP% -Fivf DB\EXCEPT\EX_REG_AUTORUN.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Windows\CurrentVersion\Run
		>VARIABLE\%VTEXT2% ECHO NULL
		CALL :RESET_REGISTRY "(Default)" NULL BACKUP "HKLM_Run"
	)
)
REM :HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run (Default)
TITLE 확인중 "HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run : (Default)" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\\" 2^>Nul') DO (
	>VARIABLE\%VTEXT3% ECHO %%A
	FOR /F %%X IN ('%EXEGREP% -Fivf DB\EXCEPT\EX_REG_AUTORUN.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run
		>VARIABLE\%VTEXT2% ECHO NULL
		CALL :RESET_REGISTRY "(Default)" NULL BACKUP "HKLM_Run(x86)"
	)
)
REM :HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce (Default)
TITLE 확인중 "HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce : (Default)" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce\\" 2^>Nul') DO (
	>VARIABLE\%VTEXT3% ECHO %%A
	FOR /F %%X IN ('%EXEGREP% -Fivf DB\EXCEPT\EX_REG_AUTORUN.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce
		>VARIABLE\%VTEXT2% ECHO NULL
		CALL :RESET_REGISTRY "(Default)" NULL BACKUP "HKLM_RunOnce"
	)
)
REM :HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce (Default)
TITLE 확인중 "HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce : (Default)" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce\\" 2^>Nul') DO (
	>VARIABLE\%VTEXT3% ECHO %%A
	FOR /F %%X IN ('%EXEGREP% -Fivf DB\EXCEPT\EX_REG_AUTORUN.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce
		>VARIABLE\%VTEXT2% ECHO NULL
		CALL :RESET_REGISTRY "(Default)" NULL BACKUP "HKLM_RunOnce(x86)"
	)
)
REM :HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices (Default)
TITLE 확인중 "HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices : (Default)" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices\\" 2^>Nul') DO (
	>VARIABLE\%VTEXT3% ECHO %%A
	FOR /F %%X IN ('%EXEGREP% -Fivf DB\EXCEPT\EX_REG_AUTORUN.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices
		>VARIABLE\%VTEXT2% ECHO NULL
		CALL :RESET_REGISTRY "(Default)" NULL BACKUP "HKLM_RunServices"
	)
)
REM :HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunServices (Default)
TITLE 확인중 "HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunServices : (Default)" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunServices\\" 2^>Nul') DO (
	>VARIABLE\%VTEXT3% ECHO %%A
	FOR /F %%X IN ('%EXEGREP% -Fivf DB\EXCEPT\EX_REG_AUTORUN.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunServices
		>VARIABLE\%VTEXT2% ECHO NULL
		CALL :RESET_REGISTRY "(Default)" NULL BACKUP "HKLM_RunServices(x86)"
	)
)
REM :HKLM\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce (Default)
TITLE 확인중 "HKLM\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce : (Default)" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce\\" 2^>Nul') DO (
	>VARIABLE\%VTEXT3% ECHO %%A
	FOR /F %%X IN ('%EXEGREP% -Fivf DB\EXCEPT\EX_REG_AUTORUN.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce
		>VARIABLE\%VTEXT2% ECHO NULL
		CALL :RESET_REGISTRY "(Default)" NULL BACKUP "HKLM_RunServicesOnce"
	)
)
REM :HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunServicesOnce (Default)
TITLE 확인중 "HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunServicesOnce : (Default)" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunServicesOnce\\" 2^>Nul') DO (
	>VARIABLE\%VTEXT3% ECHO %%A
	FOR /F %%X IN ('%EXEGREP% -Fivf DB\EXCEPT\EX_REG_AUTORUN.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunServicesOnce
		>VARIABLE\%VTEXT2% ECHO NULL
		CALL :RESET_REGISTRY "(Default)" NULL BACKUP "HKLM_RunServicesOnce(x86)"
	)
)
REM :HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer (NoFolderOptions)
TITLE 확인중 "HKLM\Software\…\Policies\Explorer : NoFolderOptions" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions" 2^>Nul') DO (
	IF NOT "%%A" == "0" (
		>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
		>VARIABLE\%VTEXT2% ECHO 0
		CALL :RESET_REGISTRY NoFolderOptions REG_DWORD BACKUP "HKLM_PoliciesExplorer"
	)
)
REM :HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Policies\Explorer (NoFolderOptions)
TITLE 확인중 "HKLM\Software\Wow6432Node\…\Policies\Explorer : NoFolderOptions" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions" 2^>Nul') DO (
	IF NOT "%%A" == "0" (
		>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Policies\Explorer
		>VARIABLE\%VTEXT2% ECHO 0
		CALL :RESET_REGISTRY NoFolderOptions REG_DWORD BACKUP "HKLM_PoliciesExplorer(x86)"
	)
)
REM :HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer (NoControlPanel)
TITLE 확인중 "HKLM\Software\…\Policies\Explorer : NoControlPanel" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoControlPanel" 2^>Nul') DO (
	IF NOT "%%A" == "0" (
		>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
		>VARIABLE\%VTEXT2% ECHO 0
		CALL :RESET_REGISTRY NoControlPanel REG_DWORD BACKUP "HKLM_PoliciesExplorer"
	)
)
REM :HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Policies\Explorer (NoControlPanel)
TITLE 확인중 "HKLM\Software\Wow6432Node\…\Policies\Explorer : NoControlPanel" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoControlPanel" 2^>Nul') DO (
	IF NOT "%%A" == "0" (
		>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Policies\Explorer
		>VARIABLE\%VTEXT2% ECHO 0
		CALL :RESET_REGISTRY NoControlPanel REG_DWORD BACKUP "HKLM_PoliciesExplorer(x86)"
	)
)
REM :HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer (NoTrayItemsDisplay)
TITLE 확인중 "HKLM\Software\…\Policies\Explorer : NoTrayItemsDisplay" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoTrayItemsDisplay" 2^>Nul') DO (
	IF NOT "%%A" == "0" (
		>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
		>VARIABLE\%VTEXT2% ECHO 0
		CALL :RESET_REGISTRY NoTrayItemsDisplay REG_DWORD BACKUP "HKLM_PoliciesExplorer"
	)
)
REM :HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Policies\Explorer (NoTrayItemsDisplay)
TITLE 확인중 "HKLM\Software\Wow6432Node\…\Policies\Explorer : NoTrayItemsDisplay" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoTrayItemsDisplay" 2^>Nul') DO (
	IF NOT "%%A" == "0" (
		>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Policies\Explorer
		>VARIABLE\%VTEXT2% ECHO 0
		CALL :RESET_REGISTRY NoTrayItemsDisplay REG_DWORD BACKUP "HKLM_PoliciesExplorer(x86)"
	)
)
REM :HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run (Default)
TITLE 확인중 "HKLM\Software\…\Policies\Explorer\Run : (Default)" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\\" 2^>Nul') DO (
	>VARIABLE\%VTEXT3% ECHO %%A
	FOR /F %%X IN ('%EXEGREP% -Fivf DB\EXCEPT\EX_REG_AUTORUN.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
		>VARIABLE\%VTEXT2% ECHO NULL
		CALL :RESET_REGISTRY "(Default)" NULL BACKUP "HKLM_PoliciesExplorerRun"
	)
)
REM :HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run (Default)
TITLE 확인중 "HKLM\Software\Wow6432Node\…\Policies\Explorer\Run : (Default)" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\\" 2^>Nul') DO (
	>VARIABLE\%VTEXT3% ECHO %%A
	FOR /F %%X IN ('%EXEGREP% -Fivf DB\EXCEPT\EX_REG_AUTORUN.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
		>VARIABLE\%VTEXT2% ECHO NULL
		CALL :RESET_REGISTRY "(Default)" NULL BACKUP "HKLM_PoliciesExplorerRun(x86)"
	)
)
REM :HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Ext (DisableAddonLoadTimePerformanceNotifications)
TITLE 확인중 "HKLM\Software\…\Policies\Ext : DisableAddonLoadTimePerformanceNotifications" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Ext\DisableAddonLoadTimePerformanceNotifications" 2^>Nul') DO (
	IF NOT "%%A" == "0" (
		>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Ext
		>VARIABLE\%VTEXT2% ECHO 0
		CALL :RESET_REGISTRY DisableAddonLoadTimePerformanceNotifications REG_DWORD BACKUP "HKLM_PoliciesExt"
	)
)
REM :HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Policies\Ext (DisableAddonLoadTimePerformanceNotifications)
TITLE 확인중 "HKLM\Software\Wow6432Node\…\Policies\Ext : DisableAddonLoadTimePerformanceNotifications" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Policies\Ext\DisableAddonLoadTimePerformanceNotifications" 2^>Nul') DO (
	IF NOT "%%A" == "0" (
		>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Policies\Ext
		>VARIABLE\%VTEXT2% ECHO 0
		CALL :RESET_REGISTRY DisableAddonLoadTimePerformanceNotifications REG_DWORD BACKUP "HKLM_PoliciesExt(x86)"
	)
)
REM :HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Ext (IgnoreFrameApprovalCheck)
TITLE 확인중 "HKLM\Software\…\Policies\Ext : IgnoreFrameApprovalCheck" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Ext\IgnoreFrameApprovalCheck" 2^>Nul') DO (
	IF NOT "%%A" == "0" (
		>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Ext
		>VARIABLE\%VTEXT2% ECHO 0
		CALL :RESET_REGISTRY IgnoreFrameApprovalCheck REG_DWORD BACKUP "HKLM_PoliciesExt"
	)
)
REM :HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Policies\Ext (IgnoreFrameApprovalCheck)
TITLE 확인중 "HKLM\Software\Wow6432Node\…\Policies\Ext : IgnoreFrameApprovalCheck" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Policies\Ext\IgnoreFrameApprovalCheck" 2^>Nul') DO (
	IF NOT "%%A" == "0" (
		>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Policies\Ext
		>VARIABLE\%VTEXT2% ECHO 0
		CALL :RESET_REGISTRY IgnoreFrameApprovalCheck REG_DWORD BACKUP "HKLM_PoliciesExt(x86)"
	)
)
REM :HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon (Shell)
TITLE 확인중 "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon : Shell" 2>Nul
>VARIABLE\%VTEXT3% TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell" 2>Nul
FOR /F "DELIMS=" %%A IN ('DIR /B /S VARIABLE\%VTEXT3% 2^>Nul') DO (
	IF %%~zA LEQ 4 (
		>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
		>VARIABLE\%VTEXT2% ECHO explorer.exe
		CALL :RESET_REGISTRY Shell NULL NULL NULL
	) ELSE (
		FOR /F %%X IN ('%EXEGREP% -Fixvf DB\EXCEPT\EX_REG_WINLOGON_SHELL.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
			>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
			>VARIABLE\%VTEXT2% ECHO explorer.exe
			CALL :RESET_REGISTRY Shell NULL BACKUP "HKLM_WinNT_Winlogon"
		)
	)
)
REM :HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon (Shell)
TITLE 확인중 "HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon : Shell" 2>Nul
>VARIABLE\%VTEXT3% TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell" 2>Nul
FOR /F "DELIMS=" %%A IN ('DIR /B /S VARIABLE\%VTEXT3% 2^>Nul') DO (
	IF %%~zA LEQ 4 (
		>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon
		>VARIABLE\%VTEXT2% ECHO explorer.exe
		CALL :RESET_REGISTRY Shell NULL NULL NULL
	) ELSE (
		FOR /F %%X IN ('%EXEGREP% -Fixvf DB\EXCEPT\EX_REG_WINLOGON_SHELL.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
			>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon
			>VARIABLE\%VTEXT2% ECHO explorer.exe
			CALL :RESET_REGISTRY Shell NULL BACKUP "HKLM_WinNT_Winlogon(x86)"
		)
	)
)
REM :HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon (System)
TITLE 확인중 "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon : System" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\System" 2^>Nul') DO (
	>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
	>VARIABLE\%VTEXT2% ECHO NULL
	CALL :RESET_REGISTRY System NULL BACKUP "HKLM_WinNT_Winlogon"
)
REM :HKLM\Software\Policies\Google\Update (DisableAutoUpdateChecksCheckboxValue)
TITLE 확인중 "HKLM\Software\Policies\Google\Update : DisableAutoUpdateChecksCheckboxValue" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Policies\Google\Update\DisableAutoUpdateChecksCheckboxValue" 2^>Nul') DO (
	IF NOT "%%A" == "0" (
		>VARIABLE\%VTEXT1% ECHO HKLM\Software\Policies\Google\Update
		>VARIABLE\%VTEXT2% ECHO 0
		CALL :RESET_REGISTRY DisableAutoUpdateChecksCheckboxValue REG_DWORD BACKUP "HKLM_PoliciesGoogleUpdate"
	)
)
REM :HKLM\Software\Wow6432Node\Policies\Google\Update (DisableAutoUpdateChecksCheckboxValue)
TITLE 확인중 "HKLM\Software\Wow6432Node\Policies\Google\Update : DisableAutoUpdateChecksCheckboxValue" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Wow6432Node\Policies\Google\Update\DisableAutoUpdateChecksCheckboxValue" 2^>Nul') DO (
	IF NOT "%%A" == "0" (
		>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\Policies\Google\Update
		>VARIABLE\%VTEXT2% ECHO 0
		CALL :RESET_REGISTRY DisableAutoUpdateChecksCheckboxValue REG_DWORD BACKUP "HKLM_PoliciesGoogleUpdate(x86)"
	)
)
REM :HKLM\Software\Policies\Google\Update (UpdateDefault)
TITLE 확인중 "HKLM\Software\Policies\Google\Update : UpdateDefault" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Policies\Google\Update\UpdateDefault" 2^>Nul') DO (
	IF NOT "%%A" == "1" (
		>VARIABLE\%VTEXT1% ECHO HKLM\Software\Policies\Google\Update
		>VARIABLE\%VTEXT2% ECHO 1
		CALL :RESET_REGISTRY UpdateDefault REG_DWORD BACKUP "HKLM_PoliciesGoogleUpdate"
	)
)
REM :HKLM\Software\Wow6432Node\Policies\Google\Update (UpdateDefault)
TITLE 확인중 "HKLM\Software\Wow6432Node\Policies\Google\Update : UpdateDefault" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Wow6432Node\Policies\Google\Update\UpdateDefault" 2^>Nul') DO (
	IF NOT "%%A" == "1" (
		>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\Policies\Google\Update
		>VARIABLE\%VTEXT2% ECHO 1
		CALL :RESET_REGISTRY UpdateDefault REG_DWORD BACKUP "HKLM_PoliciesGoogleUpdate(x86)"
	)
)
REM :HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions (NoBrowserOptions)
TITLE 확인중 "HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions : NoBrowserOptions" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions\NoBrowserOptions" 2^>Nul') DO (
	IF NOT "%%A" == "0" (
		>VARIABLE\%VTEXT1% ECHO HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions
		>VARIABLE\%VTEXT2% ECHO DELETECOMMAND
		CALL :RESET_REGISTRY NoBrowserOptions NULL BACKUP "HKLM_Policies_IE_Restrictions_NoBrowserOptions"
	)
)
REM :HKLM\Software\Wow6432Node\Policies\Microsoft\Internet Explorer\Restrictions (NoBrowserOptions)
TITLE 확인중 "HKLM\Software\Wow6432Node\Policies\Microsoft\Internet Explorer\Restrictions : NoBrowserOptions" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Wow6432Node\Policies\Microsoft\Internet Explorer\Restrictions\NoBrowserOptions" 2^>Nul') DO (
	IF NOT "%%A" == "0" (
		>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\Policies\Microsoft\Internet Explorer\Restrictions
		>VARIABLE\%VTEXT2% ECHO DELETECOMMAND
		CALL :RESET_REGISTRY NoBrowserOptions NULL BACKUP "HKLM_Policies_IE_Restrictions_NoBrowserOptions(x86)"
	)
)
REM :HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings (ProxySettingsPerUser)
TITLE 확인중 "HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings : ProxySettingsPerUser" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ProxySettingsPerUser" 2^>Nul') DO (
	IF "%%A" == "0" (
		>VARIABLE\%VTEXT1% ECHO HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
		>VARIABLE\%VTEXT2% ECHO DELETECOMMAND
		CALL :RESET_REGISTRY ProxySettingsPerUser NULL BACKUP "HKLM_Policies_InternetSettings_ProxySettingsPerUser"
	)
)
REM :HKLM\Software\Wow6432Node\Policies\Microsoft\Windows\CurrentVersion\Internet Settings (ProxySettingsPerUser)
TITLE 확인중 "HKLM\Software\Wow6432Node\Policies\Microsoft\Windows\CurrentVersion\Internet Settings : ProxySettingsPerUser" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Wow6432Node\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ProxySettingsPerUser" 2^>Nul') DO (
	IF "%%A" == "0" (
		>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
		>VARIABLE\%VTEXT2% ECHO DELETECOMMAND
		CALL :RESET_REGISTRY ProxySettingsPerUser NULL BACKUP "HKLM_Policies_InternetSettings_ProxySettingsPerUser(x86)"
	)
)
REM :HKLM\System\CurrentControlSet\Control\SafeBoot (AlternateShell)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Control\SafeBoot\AlternateShell" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "CMD.EXE" (
		>VARIABLE\%VTEXT1% ECHO HKLM\System\CurrentControlSet\Control\SafeBoot
		>VARIABLE\%VTEXT2% ECHO cmd.exe
		CALL :RESET_REGISTRY AlternateShell REG_SZ BACKUP "Control_SafeBoot_AlternateShell"
	)
)
REM :HKLM\System\CurrentControlSet\Services\6to4\Parameters (ServiceDll)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\6to4\Parameters\ServiceDll" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "6TO4SVC.DLL" (
		>VARIABLE\%VTEXT1% ECHO HKLM\System\CurrentControlSet\Services\6to4\Parameters
		>VARIABLE\%VTEXT2% ECHO %%SystemRoot%%\System32\6to4svc.dll
		CALL :RESET_REGISTRY ServiceDll REG_EXPAND_SZ BACKUP "Services_6to4_Params"
	)
)
REM :HKLM\System\CurrentControlSet\Services\AeLookupSvc\Parameters (ServiceDll)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\AeLookupSvc\ParametersServiceDll" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "AELUPSVC.DLL" (
		>VARIABLE\%VTEXT1% ECHO HKLM\System\CurrentControlSet\Services\AeLookupSvc\Parameters
		>VARIABLE\%VTEXT2% ECHO %%SystemRoot%%\System32\aelupsvc.dll
		CALL :RESET_REGISTRY ServiceDll REG_EXPAND_SZ BACKUP "Services_AeLookupSvc_Params"
	)
)
REM :HKLM\System\CurrentControlSet\Services\Appinfo\Parameters (ServiceDll)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\Appinfo\Parameters\ServiceDll" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "APPINFO.DLL" (
		>VARIABLE\%VTEXT1% ECHO HKLM\System\CurrentControlSet\Services\Appinfo\Parameters
		>VARIABLE\%VTEXT2% ECHO %%SystemRoot%%\System32\appinfo.dll
		CALL :RESET_REGISTRY ServiceDll REG_EXPAND_SZ BACKUP "Services_Appinfo_Params"
	)
)
REM :HKLM\System\CurrentControlSet\Services\AppMgmt\Parameters (ServiceDll)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\AppMgmt\Parameters\ServiceDll" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "APPMGMTS.DLL" (
		>VARIABLE\%VTEXT1% ECHO HKLM\System\CurrentControlSet\Services\AppMgmt\Parameters
		>VARIABLE\%VTEXT2% ECHO %%SystemRoot%%\System32\appmgmts.dll
		CALL :RESET_REGISTRY ServiceDll REG_EXPAND_SZ BACKUP "Services_AppMgmt_Params"
	)
)
REM :HKLM\System\CurrentControlSet\Services\BITS (Type)
FOR /F "TOKENS=3 DELIMS= " %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\BITS\Type" 2^>Nul') DO (
	IF /I NOT "%%A" == "32" (
		>VARIABLE\%VTEXT1% ECHO HKLM\System\CurrentControlSet\Services\BITS
		>VARIABLE\%VTEXT2% ECHO 32
		CALL :RESET_REGISTRY Type REG_DWORD BACKUP "Services_BITS"
	)
)
REM :HKLM\System\CurrentControlSet\Services\BITS\Parameters (ServiceDll)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\BITS\Parameters\ServiceDll" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "QMGR.DLL" (
		>VARIABLE\%VTEXT1% ECHO HKLM\System\CurrentControlSet\Services\BITS\Parameters
		>VARIABLE\%VTEXT2% ECHO %%SystemRoot%%\System32\qmgr.dll
		CALL :RESET_REGISTRY ServiceDll REG_EXPAND_SZ BACKUP "Services_BITS_Params"
	)
)
REM :HKLM\System\CurrentControlSet\Services\Browser\Parameters (ServiceDll)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\Browser\Parameters\ServiceDll" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "BROWSER.DLL" (
		>VARIABLE\%VTEXT1% ECHO HKLM\System\CurrentControlSet\Services\Browser\Parameters
		>VARIABLE\%VTEXT2% ECHO %%SystemRoot%%\System32\browser.dll
		CALL :RESET_REGISTRY ServiceDll REG_EXPAND_SZ BACKUP "Services_Browser_Params"
	)
)
REM :HKLM\System\CurrentControlSet\Services\circlass (ImagePath)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\circlass\ImagePath" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "CIRCLASS.SYS" (
		>VARIABLE\%VTEXT1% ECHO HKLM\System\CurrentControlSet\Services\circlass
		>VARIABLE\%VTEXT2% ECHO %%SystemRoot%%\System32\drivers\circlass.sys
		CALL :RESET_REGISTRY ImagePath REG_EXPAND_SZ BACKUP "Services_circlass"
	)
)
REM :HKLM\System\CurrentControlSet\Services\dmserver\Parameters (ServiceDll)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\dmserver\Parameters\ServiceDll" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "DMSERVER.DLL" (
		>VARIABLE\%VTEXT1% ECHO HKLM\System\CurrentControlSet\Services\dmserver\Parameters
		>VARIABLE\%VTEXT2% ECHO %%SystemRoot%%\System32\dmserver.dll
		CALL :RESET_REGISTRY ServiceDll REG_EXPAND_SZ BACKUP "Services_dmserver_Params"
	)
)
REM :HKLM\System\CurrentControlSet\Services\dmvsc (ImagePath)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\dmvsc\ImagePath" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "DMVSC.SYS" (
		>VARIABLE\%VTEXT1% ECHO HKLM\System\CurrentControlSet\Services\dmvsc
		>VARIABLE\%VTEXT2% ECHO %%SystemRoot%%\System32\drivers\dmvsc.sys
		CALL :RESET_REGISTRY ImagePath REG_EXPAND_SZ BACKUP "Services_dmvsc"
	)
)
REM :HKLM\System\CurrentControlSet\Services\DsmSvc\Parameters (ServiceDll)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\DsmSvc\Parameters\ServiceDll" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "DEVICESETUPMANAGER.DLL" (
		>VARIABLE\%VTEXT1% ECHO HKLM\System\CurrentControlSet\Services\DsmSvc\Parameters
		>VARIABLE\%VTEXT2% ECHO %%SystemRoot%%\System32\DeviceSetupManager.dll
		CALL :RESET_REGISTRY ServiceDll REG_EXPAND_SZ BACKUP "Services_DsmSvc_Params"
	)
)
REM :HKLM\System\CurrentControlSet\Services\FastUserSwitchingCompatibility\Parameters (ServiceDll)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\FastUserSwitchingCompatibility\Parameters\ServiceDll" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "SHSVCS.DLL" (
		>VARIABLE\%VTEXT1% ECHO HKLM\System\CurrentControlSet\Services\FastUserSwitchingCompatibility\Parameters
		>VARIABLE\%VTEXT2% ECHO %%SystemRoot%%\System32\shsvcs.dll
		CALL :RESET_REGISTRY ServiceDll REG_EXPAND_SZ BACKUP "Services_FastUserSwitchingCompatibility_Params"
	)
)
REM :HKLM\System\CurrentControlSet\Services\HidIr (ImagePath)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\HidIr\ImagePath" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "HIDIR.SYS" (
		>VARIABLE\%VTEXT1% ECHO HKLM\System\CurrentControlSet\Services\HidIr
		>VARIABLE\%VTEXT2% ECHO %%SystemRoot%%\System32\drivers\hidir.sys
		CALL :RESET_REGISTRY ImagePath REG_EXPAND_SZ BACKUP "Services_HidIr"
	)
)
REM :HKLM\System\CurrentControlSet\Services\Ias\Parameters (ServiceDll)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\Ias\Parameters\ServiceDll" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "IAS.DLL" (
		>VARIABLE\%VTEXT1% ECHO HKLM\System\CurrentControlSet\Services\Ias\Parameters
		>VARIABLE\%VTEXT2% ECHO %%SystemRoot%%\System32\ias.dll
		CALL :RESET_REGISTRY ServiceDll REG_EXPAND_SZ BACKUP "Services_Ias_Params"
	)
)
REM :HKLM\System\CurrentControlSet\Services\IKEEXT\Parameters (ServiceDll)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\IKEEXT\Parameters\ServiceDll" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "IKEEXT.DLL" (
		>VARIABLE\%VTEXT1% ECHO HKLM\System\CurrentControlSet\Services\IKEEXT\Parameters
		>VARIABLE\%VTEXT2% ECHO %%SystemRoot%%\System32\ikeext.dll
		CALL :RESET_REGISTRY ServiceDll REG_EXPAND_SZ BACKUP "Services_IKEEXT_Params"
	)
)
REM :HKLM\System\CurrentControlSet\Services\Irmon\Parameters (ServiceDll)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\Irmon\Parameters\ServiceDll" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "IRMON.DLL" (
		>VARIABLE\%VTEXT1% ECHO HKLM\System\CurrentControlSet\Services\Irmon\Parameters
		>VARIABLE\%VTEXT2% ECHO %%SystemRoot%%\System32\irmon.dll
		CALL :RESET_REGISTRY ServiceDll REG_EXPAND_SZ BACKUP "Services_Irmon_Params"
	)
)
REM :HKLM\System\CurrentControlSet\Services\MSiSCSI\Parameters (ServiceDll)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\MSiSCSI\Parameters\ServiceDll" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "ISCSIEXE.DLL" (
		>VARIABLE\%VTEXT1% ECHO HKLM\System\CurrentControlSet\Services\MSiSCSI\Parameters
		>VARIABLE\%VTEXT2% ECHO %%SystemRoot%%\System32\iscsiexe.dll
		CALL :RESET_REGISTRY ServiceDll REG_EXPAND_SZ BACKUP "Services_MSiSCSI_Params"
	)
)
REM :HKLM\System\CurrentControlSet\Services\MSPQM (ImagePath)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\MSPQM\ImagePath" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "MSPQM.SYS" (
		>VARIABLE\%VTEXT1% ECHO HKLM\System\CurrentControlSet\Services\MSPQM
		>VARIABLE\%VTEXT2% ECHO %%SystemRoot%%\System32\drivers\mspqm.sys
		CALL :RESET_REGISTRY ImagePath REG_EXPAND_SZ BACKUP "Services_MSPQM"
	)
)
REM :HKLM\System\CurrentControlSet\Services\NlaSvc\Parameters\Internet\ManualProxies (Default)
TITLE 확인중 "HKLM\System\…\Services\NlaSvc\Parameters\Internet\ManualProxies : Default" 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\NlaSvc\Parameters\Internet\ManualProxies\\" 2^>Nul') DO (
	>VARIABLE\%VTEXT3% ECHO %%A
	FOR /F %%X IN ('%EXEGREP% -Fif DB_EXEC\THREAT\REGISTRY\DEL_HKCU_AUTOCONFIGURL.DB VARIABLE\%VTEXT3% 2^>Nul') DO (
		>VARIABLE\%VTEXT1% ECHO HKLM\System\CurrentControlSet\Services\NlaSvc\Parameters\Internet\ManualProxies
		>VARIABLE\%VTEXT2% ECHO NULL
		CALL :RESET_REGISTRY "(Default)" NULL BACKUP "Services_NlaSvc_Internet@ManualProxies"
	)
)
REM :HKLM\System\CurrentControlSet\Services\NWCWorkstation\Parameters (ServiceDll)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\NWCWorkstation\Parameters\ServiceDll" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "NWWKS.DLL" (
		>VARIABLE\%VTEXT1% ECHO HKLM\System\CurrentControlSet\Services\NWCWorkstation\Parameters
		>VARIABLE\%VTEXT2% ECHO %%SystemRoot%%\System32\nwwks.dll
		CALL :RESET_REGISTRY ServiceDll REG_EXPAND_SZ BACKUP "Services_NWCWorkstation_Params"
	)
)
REM :HKLM\System\CurrentControlSet\Services\RemoteAccess\RouterManagers\Ip (DllPath)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\RemoteAccess\RouterManagers\Ip\DllPath" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "IPRTRMGR.DLL" (
		>VARIABLE\%VTEXT1% ECHO HKLM\System\CurrentControlSet\Services\RemoteAccess\RouterManagers\Ip
		>VARIABLE\%VTEXT2% ECHO %%SystemRoot%%\System32\iprtrmgr.dll
		CALL :RESET_REGISTRY DllPath REG_EXPAND_SZ BACKUP "Services_RemoteAccessRouterManagersIp_DllPath"
	)
)
REM :HKLM\System\CurrentControlSet\Services\RemoteAccess\RouterManagers\Ipv6 (DllPath)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\RemoteAccess\RouterManagers\Ipv6\DllPath" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "IPRTRMGR.DLL" (
		>VARIABLE\%VTEXT1% ECHO HKLM\System\CurrentControlSet\Services\RemoteAccess\RouterManagers\Ipv6
		>VARIABLE\%VTEXT2% ECHO %%SystemRoot%%\System32\iprtrmgr.dll
		CALL :RESET_REGISTRY DllPath REG_EXPAND_SZ BACKUP "Services_RemoteAccessRouterManagersIpv6_DllPath"
	)
)
REM :HKLM\System\CurrentControlSet\Services\RemoteAccess\RouterManagers\Ipx (DllPath)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\RemoteAccess\RouterManagers\Ipx\DllPath" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "IPXRTMGR.DLL" (
		>VARIABLE\%VTEXT1% ECHO HKLM\System\CurrentControlSet\Services\RemoteAccess\RouterManagers\Ipx
		>VARIABLE\%VTEXT2% ECHO %%SystemRoot%%\System32\ipxrtmgr.dll
		CALL :RESET_REGISTRY DllPath REG_EXPAND_SZ BACKUP "Services_RemoteAccessRouterManagersIpx_DllPath"
	)
)
REM :HKLM\System\CurrentControlSet\Services\SENS\Parameters (ServiceDll)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\SENS\Parameters\ServiceDll" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "SENS.DLL" (
		>VARIABLE\%VTEXT1% ECHO HKLM\System\CurrentControlSet\Services\SENS\Parameters
		>VARIABLE\%VTEXT2% ECHO %%SystemRoot%%\System32\sens.dll
		CALL :RESET_REGISTRY ServiceDll REG_EXPAND_SZ BACKUP "Services_SENS_Params"
	)
)
REM :HKLM\System\CurrentControlSet\Services\Schedule\Parameters (ServiceDll)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\Schedule\Parameters\ServiceDll" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "SCHEDSVC.DLL" (
		>VARIABLE\%VTEXT1% ECHO HKLM\System\CurrentControlSet\Services\Schedule\Parameters
		>VARIABLE\%VTEXT2% ECHO %%SystemRoot%%\System32\schedsvc.dll
		CALL :RESET_REGISTRY ServiceDll REG_EXPAND_SZ BACKUP "Services_Schedule_Params"
	)
)
REM :HKLM\System\CurrentControlSet\Services\StiSvc\Parameters (ServiceDll)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\StiSvc\Parameters\ServiceDll" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "WIASERVC.DLL" (
		>VARIABLE\%VTEXT1% ECHO HKLM\System\CurrentControlSet\Services\StiSvc\Parameters
		>VARIABLE\%VTEXT2% ECHO %%SystemRoot%%\System32\wiaservc.dll
		CALL :RESET_REGISTRY ServiceDll REG_EXPAND_SZ BACKUP "Services_StiSvc_Params"
	)
)
REM :HKLM\System\CurrentControlSet\Services\SuperProServer (ImagePath)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\SuperProServer\ImagePath" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "SPNSRVNT.EXE" (
		>VARIABLE\%VTEXT1% ECHO HKLM\System\CurrentControlSet\Services\SuperProServer
		>VARIABLE\%VTEXT2% ECHO %%SystemRoot%%\System32\spnsrvnt.exe
		CALL :RESET_REGISTRY ImagePath REG_EXPAND_SZ BACKUP "Services_SuperProServer"
	)
)
REM :HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Winsock (HelperDllName)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Winsock\HelperDllName" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "WSHTCPIP.DLL" (
		>VARIABLE\%VTEXT1% ECHO HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Winsock
		>VARIABLE\%VTEXT2% ECHO %%SystemRoot%%\System32\wshtcpip.dll
		CALL :RESET_REGISTRY HelperDllName REG_EXPAND_SZ BACKUP "Services_Tcpip_ParamsWinsock"
	)
)
REM :HKLM\System\CurrentControlSet\Services\TermService\Parameters (ServiceDll)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\TermService\Parameters\ServiceDll" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "TERMSRV.DLL" (
		IF /I NOT "%%~nxA" == "RDPWRAP.DLL" (
			>VARIABLE\%VTEXT1% ECHO HKLM\System\CurrentControlSet\Services\TermService\Parameters
			>VARIABLE\%VTEXT2% ECHO %%SystemRoot%%\System32\termsrv.dll
			CALL :RESET_REGISTRY ServiceDll REG_EXPAND_SZ BACKUP "Services_TermService_Params"
		)
	)
)
REM :HKLM\System\CurrentControlSet\Services\UmPass (ImagePath)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\UmPass\ImagePath" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "UMPASS.SYS" (
		>VARIABLE\%VTEXT1% ECHO HKLM\System\CurrentControlSet\Services\UmPass
		>VARIABLE\%VTEXT2% ECHO %%SystemRoot%%\System32\drivers\umpass.sys
		CALL :RESET_REGISTRY ImagePath REG_EXPAND_SZ BACKUP "Services_UmPass"
	)
)
REM :HKLM\System\CurrentControlSet\Services\UxSms\Parameters (ServiceDll)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\UxSms\Parameters\ServiceDll" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "UXSMS.DLL" (
		>VARIABLE\%VTEXT1% ECHO HKLM\System\CurrentControlSet\Services\UxSms\Parameters
		>VARIABLE\%VTEXT2% ECHO %%SystemRoot%%\System32\uxsms.dll
		CALL :RESET_REGISTRY ServiceDll REG_EXPAND_SZ BACKUP "Services_UxSms_Params"
	)
)
REM :HKLM\System\CurrentControlSet\Services\Winmgmt\Parameters (ServiceDll)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\Winmgmt\Parameters\ServiceDll" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "WMISVC.DLL" (
		>VARIABLE\%VTEXT1% ECHO HKLM\System\CurrentControlSet\Services\Winmgmt\Parameters
		>VARIABLE\%VTEXT2% ECHO %%SystemRoot%%\System32\wbem\WMIsvc.dll
		CALL :RESET_REGISTRY ServiceDll REG_EXPAND_SZ BACKUP "Services_Winmgmt_Params"
	)
)
REM :HKLM\System\CurrentControlSet\Services\WmdmPmSN\Parameters (ServiceDll)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\WmdmPmSN\Parameters\ServiceDll" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "MSPMSNSV.DLL" (
		>VARIABLE\%VTEXT1% ECHO HKLM\System\CurrentControlSet\Services\WmdmPmSN\Parameters
		>VARIABLE\%VTEXT2% ECHO %%SystemRoot%%\System32\mspmsnsv.dll
		CALL :RESET_REGISTRY ServiceDll REG_EXPAND_SZ BACKUP "Services_WmdmPmSN_Params"
	)
)
REM :HKLM\System\CurrentControlSet\Services\WmdmPmSp\Parameters (ServiceDll)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\WmdmPmSp\Parameters\ServiceDll" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "MSPMSPSV.DLL" (
		>VARIABLE\%VTEXT1% ECHO HKLM\System\CurrentControlSet\Services\WmdmPmSp\Parameters
		>VARIABLE\%VTEXT2% ECHO %%SystemRoot%%\System32\mspmspsv.dll
		CALL :RESET_REGISTRY ServiceDll REG_EXPAND_SZ BACKUP "Services_WmdmPmSp_Params"
	)
)
REM :HKLM\System\CurrentControlSet\Services\wuauserv\Parameters (ServiceDll)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\wuauserv\Parameters\ServiceDll" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "WUAUSERV.DLL" (
		IF /I NOT "%%~nxA" == "WUAUENG.DLL" (
			IF EXIST "%SYSTEMROOT%\System32\wuaueng.dll" (
				IF NOT EXIST "%SYSTEMROOT%\System32\wuauserv.dll" (
					>VARIABLE\%VTEXT1% ECHO HKLM\System\CurrentControlSet\Services\wuauserv\Parameters
					>VARIABLE\%VTEXT2% ECHO %%SystemRoot%%\System32\wuaueng.dll
					CALL :RESET_REGISTRY ServiceDll REG_EXPAND_SZ BACKUP "Services_wuauserv_Params"
				)
			)
			IF EXIST "%SYSTEMROOT%\System32\wuauserv.dll" (
				IF NOT EXIST "%SYSTEMROOT%\System32\wuaueng.dll" (
					>VARIABLE\%VTEXT1% ECHO HKLM\System\CurrentControlSet\Services\wuauserv\Parameters
					>VARIABLE\%VTEXT2% ECHO %%SystemRoot%%\System32\wuauserv.dll
					CALL :RESET_REGISTRY ServiceDll REG_EXPAND_SZ BACKUP "Services_wuauserv_Params"
				)
			)
		)
	)
)
REM :HKLM\System\CurrentControlSet\Services\xmlprov\Parameters (ServiceDll)
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\xmlprov\Parameters\ServiceDll" 2^>Nul') DO (
	IF /I NOT "%%~nxA" == "XMLPROV.DLL" (
		>VARIABLE\%VTEXT1% ECHO HKLM\System\CurrentControlSet\Services\xmlprov\Parameters
		>VARIABLE\%VTEXT2% ECHO %%SystemRoot%%\System32\xmlprov.dll
		CALL :RESET_REGISTRY ServiceDll REG_EXPAND_SZ BACKUP "Services_xmlprov_Params"
	)
)
REM :Result
SETLOCAL ENABLEDELAYEDEXPANSION
<VARIABLE\!VSEARCH! SET /P SRCH=
<VARIABLE\!VSUCCESS! SET /P SUCC=
<VARIABLE\!VFAIL! SET /P FAIL=
IF !SRCH! EQU 0 (
	ECHO    문제점이 발견되지 않았습니다. & >>"!QLog!" ECHO    문제점이 발견되지 않음
) ELSE (
	ECHO    발견: !SRCH! / 초기화: !SUCC! / 초기화 실패: !FAIL!
	>VARIABLE\!VXXYY! ECHO 1
)
ENDLOCAL
REM :Reset Value
CALL :RESET_VALUE

TITLE %MZTITLE% 2>Nul & PING.EXE -n 2 0 >Nul 2>Nul & ECHO. & >>"%QLog%" ECHO.

REM * Delete - Registry <Program Uninstall>
ECHO ◇ 악성 및 유해 가능 프로그램 설치 정보 레지스트리 제거중 . . . & >>"%QLog%" ECHO    ■ 악성 및 유해 가능 프로그램 설치 정보 레지스트리 제거 :
REM :HKCU\Software\Classes\Installer\Products
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKCU\Software\Classes\Installer\Products
SET "STRTMP=HKCU_Installer_Products"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKCU\Software\Classes\Installer\Products" 2^>Nul^|%EXEGREP% -Fivxf DB\EXCEPT\EX_REG_UNINSTALL_PRODUCTS+NC.DB 2^>Nul') DO (
	TITLE 검사중 "HKCU\Software\Classes\Installer\Products\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_UNINSTALL_PRODUCTS+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCU\Software\Classes\Installer\Products\%%A\ProductName" 2^>Nul') DO (
			>VARIABLE\%VTEXT3% ECHO %%B
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_UNINSTALL_DISPLAYNAME+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -ix -f DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_UNINSTALL_DISPLAYNAME+NC.DB -f DB_EXEC\ACTIVESCAN\COMBO\PATTERN_FAKE_OPTIMIZER+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
		)
	) ELSE (
		ENDLOCAL
	)
)
REM :HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall
SET "STRTMP=HKCU_Uninstall"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall" 2^>Nul^|%EXEGREP% -Fivxf DB\EXCEPT\EX_REG_UNINSTALL+NC.DB 2^>Nul') DO (
	TITLE 검사중 "HKCU\Software\…\Uninstall\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VTEXT3% ECHO %%A^|
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_UNINSTALL+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_UNINSTALL+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_UNINSTALL+C.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\%%A\DisplayName" 2^>Nul') DO (
			>VARIABLE\%VTEXT3% ECHO %%B
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_UNINSTALL_DISPLAYNAME+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -ix -f DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_UNINSTALL_DISPLAYNAME+NC.DB -f DB_EXEC\ACTIVESCAN\COMBO\PATTERN_FAKE_OPTIMIZER+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
		)
	) ELSE (
		ENDLOCAL
	)
)
REM :HKCU\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKCU\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall
SET "STRTMP=HKCU_Uninstall(x86)"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKCU\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall" 2^>Nul^|%EXEGREP% -Fivxf DB\EXCEPT\EX_REG_UNINSTALL+NC.DB 2^>Nul') DO (
	TITLE 검사중 "HKCU\Software\Wow6432Node\…\Uninstall\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VTEXT3% ECHO %%A^|
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_UNINSTALL+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_UNINSTALL+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_UNINSTALL+C.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCU\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\%%A\DisplayName" 2^>Nul') DO (
			>VARIABLE\%VTEXT3% ECHO %%B
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_UNINSTALL_DISPLAYNAME+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -ix -f DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_UNINSTALL_DISPLAYNAME+NC.DB -f DB_EXEC\ACTIVESCAN\COMBO\PATTERN_FAKE_OPTIMIZER+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
		)
	) ELSE (
		ENDLOCAL
	)
)
REM :HKLM\Software\Classes\Installer\Products
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Classes\Installer\Products
SET "STRTMP=HKLM_Installer_Products"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software\Classes\Installer\Products" 2^>Nul^|%EXEGREP% -Fivxf DB\EXCEPT\EX_REG_UNINSTALL_PRODUCTS+NC.DB 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Classes\Installer\Products\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_UNINSTALL_PRODUCTS+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Classes\Installer\Products\%%A\ProductName" 2^>Nul') DO (
			>VARIABLE\%VTEXT3% ECHO %%B
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_UNINSTALL_DISPLAYNAME+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -ix -f DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_UNINSTALL_DISPLAYNAME+NC.DB -f DB_EXEC\ACTIVESCAN\COMBO\PATTERN_FAKE_OPTIMIZER+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
		)
	) ELSE (
		ENDLOCAL
	)
)
REM :HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products
SET "STRTMP=HKLM_Installer_UserData_Products"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products" 2^>Nul^|%EXEGREP% -Fivxf DB\EXCEPT\EX_REG_UNINSTALL_PRODUCTS+NC.DB 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\…\Installer\UserData\S-1-5-18\Products\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_UNINSTALL_PRODUCTS+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Classes\Installer\Products\%%A\ProductName" 2^>Nul') DO (
			>VARIABLE\%VTEXT3% ECHO %%B
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_UNINSTALL_DISPLAYNAME+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -ix -f DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_UNINSTALL_DISPLAYNAME+NC.DB -f DB_EXEC\ACTIVESCAN\COMBO\PATTERN_FAKE_OPTIMIZER+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
		)
	) ELSE (
		ENDLOCAL
	)
)
REM :HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall
SET "STRTMP=HKLM_Uninstall"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall" 2^>Nul^|%EXEGREP% -Fivxf DB\EXCEPT\EX_REG_UNINSTALL+NC.DB 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\…\Uninstall\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VTEXT3% ECHO %%A^|
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_UNINSTALL+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_UNINSTALL+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_UNINSTALL+C.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\%%A\DisplayName" 2^>Nul') DO (
			>VARIABLE\%VTEXT3% ECHO %%B
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_UNINSTALL_DISPLAYNAME+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -ix -f DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_UNINSTALL_DISPLAYNAME+NC.DB -f DB_EXEC\ACTIVESCAN\COMBO\PATTERN_FAKE_OPTIMIZER+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
		)
	) ELSE (
		ENDLOCAL
	)
)
REM :HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall
SET "STRTMP=HKLM_Uninstall(x86)"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall" 2^>Nul^|%EXEGREP% -Fivxf DB\EXCEPT\EX_REG_UNINSTALL+NC.DB 2^>Nul') DO (
	TITLE 검사중 "HKLM\Software\Wow6432Node\…\Uninstall\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VTEXT3% ECHO %%A^|
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_UNINSTALL+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_UNINSTALL+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_UNINSTALL+C.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\%%A\DisplayName" 2^>Nul') DO (
			>VARIABLE\%VTEXT3% ECHO %%B
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_UNINSTALL_DISPLAYNAME+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -ix -f DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_UNINSTALL_DISPLAYNAME+NC.DB -f DB_EXEC\ACTIVESCAN\COMBO\PATTERN_FAKE_OPTIMIZER+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
		)
	) ELSE (
		ENDLOCAL
	)
)
REM :HKU\.Default\Software\Microsoft\Windows\CurrentVersion\Uninstall
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKU\.Default\Software\Microsoft\Windows\CurrentVersion\Uninstall
SET "STRTMP=HKU_Uninstall"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKU\.Default\Software\Microsoft\Windows\CurrentVersion\Uninstall" 2^>Nul^|%EXEGREP% -Fivxf DB\EXCEPT\EX_REG_UNINSTALL+NC.DB 2^>Nul') DO (
	TITLE 검사중 "HKU\.Default\Software\…\Uninstall\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VTEXT3% ECHO %%A^|
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_UNINSTALL+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_UNINSTALL+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_UNINSTALL+C.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKU\.Default\Software\Microsoft\Windows\CurrentVersion\Uninstall\%%A\DisplayName" 2^>Nul') DO (
			>VARIABLE\%VTEXT3% ECHO %%B
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_UNINSTALL_DISPLAYNAME+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -ix -f DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_UNINSTALL_DISPLAYNAME+NC.DB -f DB_EXEC\ACTIVESCAN\COMBO\PATTERN_FAKE_OPTIMIZER+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
		)
	) ELSE (
		ENDLOCAL
	)
)
REM :HKU\.Default\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKU\.Default\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall
SET "STRTMP=HKU_Uninstall(x86)"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKU\.Default\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall" 2^>Nul^|%EXEGREP% -Fivxf DB\EXCEPT\EX_REG_UNINSTALL+NC.DB 2^>Nul') DO (
	TITLE 검사중 "HKU\.Default\Software\Wow6432Node\…\Uninstall\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VTEXT3% ECHO %%A^|
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_UNINSTALL+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_UNINSTALL+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_UNINSTALL+C.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKU\.Default\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\%%A\DisplayName" 2^>Nul') DO (
			>VARIABLE\%VTEXT3% ECHO %%B
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_UNINSTALL_DISPLAYNAME+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -ix -f DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_UNINSTALL_DISPLAYNAME+NC.DB -f DB_EXEC\ACTIVESCAN\COMBO\PATTERN_FAKE_OPTIMIZER+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
		)
	) ELSE (
		ENDLOCAL
	)
)
REM :HKU\[%SID%]\Software\Classes\Installer\Products
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKU\%SID%\Software\Classes\Installer\Products
SET "STRTMP=HKU_%SID%_Installer_Products"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKU\%SID%\Software\Classes\Installer\Products" 2^>Nul^|%EXEGREP% -Fivxf DB\EXCEPT\EX_REG_UNINSTALL_PRODUCTS+NC.DB 2^>Nul') DO (
	TITLE 검사중 "HKU\%SID%\Software\Classes\Installer\Products\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_UNINSTALL_PRODUCTS+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKU\%SID%\Software\Classes\Installer\Products\%%A\ProductName" 2^>Nul') DO (
			>VARIABLE\%VTEXT3% ECHO %%B
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_UNINSTALL_DISPLAYNAME+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -ix -f DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_UNINSTALL_DISPLAYNAME+NC.DB -f DB_EXEC\ACTIVESCAN\COMBO\PATTERN_FAKE_OPTIMIZER+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
		)
	) ELSE (
		ENDLOCAL
	)
)
REM :HKU\[%SID%]\Software\Microsoft\Windows\CurrentVersion\Uninstall
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKU\%SID%\Software\Microsoft\Windows\CurrentVersion\Uninstall
SET "STRTMP=HKU_%SID%_Uninstall"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKU\%SID%\Software\Microsoft\Windows\CurrentVersion\Uninstall" 2^>Nul^|%EXEGREP% -Fivxf DB\EXCEPT\EX_REG_UNINSTALL+NC.DB 2^>Nul') DO (
	TITLE 검사중 "HKU\%SID%\Software\…\Uninstall\%%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VTEXT3% ECHO %%A^|
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_UNINSTALL+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_UNINSTALL+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_UNINSTALL+C.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKU\%SID%\Software\Microsoft\Windows\CurrentVersion\Uninstall\%%A\DisplayName" 2^>Nul') DO (
			>VARIABLE\%VTEXT3% ECHO %%B
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_UNINSTALL_DISPLAYNAME+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_UNINSTALL_DISPLAYNAME+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
		)
	) ELSE (
		ENDLOCAL
	)
)
REM :Result
CALL :PROCESS_RESULT NULL CHKINFECT
REM :Reset Value
CALL :RESET_VALUE

TITLE %MZTITLE% 2>Nul & PING.EXE -n 2 0 >Nul 2>Nul & ECHO. & >>"%QLog%" ECHO.

REM * Delete - Registry <Startup>
ECHO ◇ 악성 및 유해 가능 시작 프로그램 레지스트리 제거중 . . . & >>"%QLog%" ECHO    ■ 악성 및 유해 가능 시작 프로그램 레지스트리 제거 :
REM :HKCU\Software\Microsoft\Windows\CurrentVersion\Run
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
%EXESETACL% -on "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" -ot reg -actn setowner -ownr "n:Administrators" -rec yes -silent >Nul 2>Nul
%EXESETACL% -on "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" -ot reg -actn setprot -op "dacl:np;sacl:np" -actn clear -clr "dacl,sacl" -actn setowner -ownr "n:SYSTEM" -rec yes -silent >Nul 2>Nul
>VARIABLE\%VTEXT1% ECHO HKCU\Software\Microsoft\Windows\CurrentVersion\Run
SET "STRTMP=HKCU_SW_Run"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKCU\Software\Microsoft\Windows\CurrentVersion\Run" 2^>Nul^|%EXEGREP% -Fivxf DB\EXCEPT\EX_REG_AUTORUN_NAME.DB 2^>Nul^|%EXEGREP% -vxf DB\EXCEPT\EX_REG_AUTORUN_NAME_PATTERN+C.DB 2^>Nul') DO (
	TITLE 검사중 "Run (HKCU) : %%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_AUTORUN.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_NAME.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCU\Software\Microsoft\Windows\CurrentVersion\Run\%%A" 2^>Nul^|%EXEGREP% -Fivf DB\EXCEPT\EX_REG_AUTORUN.DB 2^>Nul') DO (
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				>VARIABLE\%VTEXT3% ECHO %%B
				FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_FILE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				>VARIABLE\%VTEXT3% ECHO %%B
				FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_FILE_CASE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				IF EXIST DB_ACTIVE\ACT_FILE_AUTORUN_%UNIQ%.DB (
					>VARIABLE\%VTEXT3% ECHO "%%~dpnxB"
					FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_FILE_AUTORUN_%UNIQ%.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
				)
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				IF EXIST DB_ACTIVE\ACT_DIRECTORY_AUTORUN_%UNIQ%.DB (
					>VARIABLE\%VTEXT3% ECHO "%%~dpB"
					FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_DIRECTORY_AUTORUN_%UNIQ%.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
				)
			) ELSE (
				ENDLOCAL
			)
		)
	) ELSE (
		ENDLOCAL
	)
)
REM :HKCU\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
%EXESETACL% -on "HKCU\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run" -ot reg -actn setowner -ownr "n:Administrators" -rec yes -silent >Nul 2>Nul
%EXESETACL% -on "HKCU\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run" -ot reg -actn setprot -op "dacl:np;sacl:np" -actn clear -clr "dacl,sacl" -actn setowner -ownr "n:SYSTEM" -rec yes -silent >Nul 2>Nul
>VARIABLE\%VTEXT1% ECHO HKCU\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run
SET "STRTMP=HKCU_SW_Run(x86)"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKCU\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run" 2^>Nul^|%EXEGREP% -Fivxf DB\EXCEPT\EX_REG_AUTORUN_NAME.DB 2^>Nul^|%EXEGREP% -vxf DB\EXCEPT\EX_REG_AUTORUN_NAME_PATTERN+C.DB 2^>Nul') DO (
	TITLE 검사중 "Run (HKCU x86) : %%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_AUTORUN.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_NAME.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCU\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\%%A" 2^>Nul^|%EXEGREP% -Fivf DB\EXCEPT\EX_REG_AUTORUN.DB 2^>Nul') DO (
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				>VARIABLE\%VTEXT3% ECHO %%B
				FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_FILE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				>VARIABLE\%VTEXT3% ECHO %%B
				FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_FILE_CASE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				IF EXIST DB_ACTIVE\ACT_FILE_AUTORUN_%UNIQ%.DB (
					>VARIABLE\%VTEXT3% ECHO "%%~dpnxB"
					FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_FILE_AUTORUN_%UNIQ%.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
				)
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				IF EXIST DB_ACTIVE\ACT_DIRECTORY_AUTORUN_%UNIQ%.DB (
					>VARIABLE\%VTEXT3% ECHO "%%~dpB"
					FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_DIRECTORY_AUTORUN_%UNIQ%.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
				)
			) ELSE (
				ENDLOCAL
			)
		)
	) ELSE (
		ENDLOCAL
	)
)
REM :HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
%EXESETACL% -on "HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce" -ot reg -actn setowner -ownr "n:Administrators" -rec yes -silent >Nul 2>Nul
%EXESETACL% -on "HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce" -ot reg -actn setprot -op "dacl:np;sacl:np" -actn clear -clr "dacl,sacl" -actn setowner -ownr "n:SYSTEM" -rec yes -silent >Nul 2>Nul
>VARIABLE\%VTEXT1% ECHO HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce
SET "STRTMP=HKCU_SW_RunOnce"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce" 2^>Nul^|%EXEGREP% -Fivxf DB\EXCEPT\EX_REG_AUTORUN_NAME.DB 2^>Nul^|%EXEGREP% -vxf DB\EXCEPT\EX_REG_AUTORUN_NAME_PATTERN+C.DB 2^>Nul') DO (
	TITLE 검사중 "RunOnce (HKCU) : %%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_AUTORUN.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_NAME.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce\%%A" 2^>Nul^|%EXEGREP% -Fivf DB\EXCEPT\EX_REG_AUTORUN.DB 2^>Nul') DO (
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				>VARIABLE\%VTEXT3% ECHO %%B
				FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_FILE_RUNONCE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
		)
	) ELSE (
		ENDLOCAL
	)
)
REM :HKCU\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
%EXESETACL% -on "HKCU\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce" -ot reg -actn setowner -ownr "n:Administrators" -rec yes -silent >Nul 2>Nul
%EXESETACL% -on "HKCU\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce" -ot reg -actn setprot -op "dacl:np;sacl:np" -actn clear -clr "dacl,sacl" -actn setowner -ownr "n:SYSTEM" -rec yes -silent >Nul 2>Nul
>VARIABLE\%VTEXT1% ECHO HKCU\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce
SET "STRTMP=HKCU_SW_RunOnce(x86)"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKCU\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce" 2^>Nul^|%EXEGREP% -Fivxf DB\EXCEPT\EX_REG_AUTORUN_NAME.DB 2^>Nul^|%EXEGREP% -vxf DB\EXCEPT\EX_REG_AUTORUN_NAME_PATTERN+C.DB 2^>Nul') DO (
	TITLE 검사중 "RunOnce (HKCU x86) : %%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_AUTORUN.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_NAME.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCU\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce\%%A" 2^>Nul^|%EXEGREP% -Fivf DB\EXCEPT\EX_REG_AUTORUN.DB 2^>Nul') DO (
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				>VARIABLE\%VTEXT3% ECHO %%B
				FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_FILE_RUNONCE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
		)
	) ELSE (
		ENDLOCAL
	)
)
REM :HKCU\Software\Microsoft\Windows\CurrentVersion\RunServices
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
%EXESETACL% -on "HKCU\Software\Microsoft\Windows\CurrentVersion\RunServices" -ot reg -actn setowner -ownr "n:Administrators" -rec yes -silent >Nul 2>Nul
%EXESETACL% -on "HKCU\Software\Microsoft\Windows\CurrentVersion\RunServices" -ot reg -actn setprot -op "dacl:np;sacl:np" -actn clear -clr "dacl,sacl" -actn setowner -ownr "n:SYSTEM" -rec yes -silent >Nul 2>Nul
>VARIABLE\%VTEXT1% ECHO HKCU\Software\Microsoft\Windows\CurrentVersion\RunServices
SET "STRTMP=HKCU_SW_RunServices"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKCU\Software\Microsoft\Windows\CurrentVersion\RunServices" 2^>Nul^|%EXEGREP% -Fivxf DB\EXCEPT\EX_REG_AUTORUN_NAME.DB 2^>Nul^|%EXEGREP% -vxf DB\EXCEPT\EX_REG_AUTORUN_NAME_PATTERN+C.DB 2^>Nul') DO (
	TITLE 검사중 "RunServices (HKCU) : %%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_AUTORUN.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_NAME.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCU\Software\Microsoft\Windows\CurrentVersion\RunServices\%%A" 2^>Nul^|%EXEGREP% -Fivf DB\EXCEPT\EX_REG_AUTORUN.DB 2^>Nul') DO (
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				>VARIABLE\%VTEXT3% ECHO %%B
				FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_FILE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				>VARIABLE\%VTEXT3% ECHO %%B
				FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_FILE_CASE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				IF EXIST DB_ACTIVE\ACT_FILE_AUTORUN_%UNIQ%.DB (
					>VARIABLE\%VTEXT3% ECHO "%%~dpnxB"
					FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_FILE_AUTORUN_%UNIQ%.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
				)
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				IF EXIST DB_ACTIVE\ACT_DIRECTORY_AUTORUN_%UNIQ%.DB (
					>VARIABLE\%VTEXT3% ECHO "%%~dpB"
					FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_DIRECTORY_AUTORUN_%UNIQ%.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
				)
			) ELSE (
				ENDLOCAL
			)
		)
	) ELSE (
		ENDLOCAL
	)
)
REM :HKCU\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunServices
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
%EXESETACL% -on "HKCU\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunServices" -ot reg -actn setowner -ownr "n:Administrators" -rec yes -silent >Nul 2>Nul
%EXESETACL% -on "HKCU\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunServices" -ot reg -actn setprot -op "dacl:np;sacl:np" -actn clear -clr "dacl,sacl" -actn setowner -ownr "n:SYSTEM" -rec yes -silent >Nul 2>Nul
>VARIABLE\%VTEXT1% ECHO HKCU\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunServices
SET "STRTMP=HKCU_SW_RunServices(x86)"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKCU\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunServices" 2^>Nul^|%EXEGREP% -Fivxf DB\EXCEPT\EX_REG_AUTORUN_NAME.DB 2^>Nul^|%EXEGREP% -vxf DB\EXCEPT\EX_REG_AUTORUN_NAME_PATTERN+C.DB 2^>Nul') DO (
	TITLE 검사중 "RunServices (HKCU x86) : %%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_AUTORUN.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_NAME.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCU\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunServices\%%A" 2^>Nul^|%EXEGREP% -Fivf DB\EXCEPT\EX_REG_AUTORUN.DB 2^>Nul') DO (
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				>VARIABLE\%VTEXT3% ECHO %%B
				FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_FILE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				>VARIABLE\%VTEXT3% ECHO %%B
				FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_FILE_CASE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				IF EXIST DB_ACTIVE\ACT_FILE_AUTORUN_%UNIQ%.DB (
					>VARIABLE\%VTEXT3% ECHO "%%~dpnxB"
					FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_FILE_AUTORUN_%UNIQ%.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
				)
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				IF EXIST DB_ACTIVE\ACT_DIRECTORY_AUTORUN_%UNIQ%.DB (
					>VARIABLE\%VTEXT3% ECHO "%%~dpB"
					FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_DIRECTORY_AUTORUN_%UNIQ%.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
				)
			) ELSE (
				ENDLOCAL
			)
		)
	) ELSE (
		ENDLOCAL
	)
)
REM :HKCU\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
%EXESETACL% -on "HKCU\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce" -ot reg -actn setowner -ownr "n:Administrators" -rec yes -silent >Nul 2>Nul
%EXESETACL% -on "HKCU\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce" -ot reg -actn setprot -op "dacl:np;sacl:np" -actn clear -clr "dacl,sacl" -actn setowner -ownr "n:SYSTEM" -rec yes -silent >Nul 2>Nul
>VARIABLE\%VTEXT1% ECHO HKCU\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce
SET "STRTMP=HKCU_SW_RunServicesOnce"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKCU\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce" 2^>Nul^|%EXEGREP% -Fivxf DB\EXCEPT\EX_REG_AUTORUN_NAME.DB 2^>Nul^|%EXEGREP% -vxf DB\EXCEPT\EX_REG_AUTORUN_NAME_PATTERN+C.DB 2^>Nul') DO (
	TITLE 검사중 "RunServicesOnce (HKCU) : %%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_AUTORUN.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_NAME.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCU\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce\%%A" 2^>Nul^|%EXEGREP% -Fivf DB\EXCEPT\EX_REG_AUTORUN.DB 2^>Nul') DO (
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				>VARIABLE\%VTEXT3% ECHO %%B
				FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_FILE_RUNONCE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
		)
	) ELSE (
		ENDLOCAL
	)
)
REM :HKCU\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunServicesOnce
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
%EXESETACL% -on "HKCU\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunServicesOnce" -ot reg -actn setowner -ownr "n:Administrators" -rec yes -silent >Nul 2>Nul
%EXESETACL% -on "HKCU\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunServicesOnce" -ot reg -actn setprot -op "dacl:np;sacl:np" -actn clear -clr "dacl,sacl" -actn setowner -ownr "n:SYSTEM" -rec yes -silent >Nul 2>Nul
>VARIABLE\%VTEXT1% ECHO HKCU\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunServicesOnce
SET "STRTMP=HKCU_SW_RunServicesOnce(x86)"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKCU\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunServicesOnce" 2^>Nul^|%EXEGREP% -Fivxf DB\EXCEPT\EX_REG_AUTORUN_NAME.DB 2^>Nul^|%EXEGREP% -vxf DB\EXCEPT\EX_REG_AUTORUN_NAME_PATTERN+C.DB 2^>Nul') DO (
	TITLE 검사중 "RunServicesOnce (HKCU x86) : %%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_AUTORUN.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_NAME.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCU\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunServicesOnce\%%A" 2^>Nul^|%EXEGREP% -Fivf DB\EXCEPT\EX_REG_AUTORUN.DB 2^>Nul') DO (
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				>VARIABLE\%VTEXT3% ECHO %%B
				FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_FILE_RUNONCE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
		)
	) ELSE (
		ENDLOCAL
	)
)
REM :HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
%EXESETACL% -on "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run" -ot reg -actn setowner -ownr "n:Administrators" -rec yes -silent >Nul 2>Nul
%EXESETACL% -on "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run" -ot reg -actn setprot -op "dacl:np;sacl:np" -actn clear -clr "dacl,sacl" -actn setowner -ownr "n:SYSTEM" -rec yes -silent >Nul 2>Nul
>VARIABLE\%VTEXT1% ECHO HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
SET "STRTMP=HKCU_SW_PoliciesExplorerRun"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run" 2^>Nul^|%EXEGREP% -Fivxf DB\EXCEPT\EX_REG_AUTORUN_NAME.DB 2^>Nul^|%EXEGREP% -vxf DB\EXCEPT\EX_REG_AUTORUN_NAME_PATTERN+C.DB 2^>Nul') DO (
	TITLE 검사중 "Policies Run (HKCU) : %%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_AUTORUN.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_NAME.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\%%A" 2^>Nul^|%EXEGREP% -Fivf DB\EXCEPT\EX_REG_AUTORUN.DB 2^>Nul') DO (
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				>VARIABLE\%VTEXT3% ECHO %%B
				FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_FILE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				>VARIABLE\%VTEXT3% ECHO %%B
				FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_FILE_CASE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				IF EXIST DB_ACTIVE\ACT_FILE_AUTORUN_%UNIQ%.DB (
					>VARIABLE\%VTEXT3% ECHO "%%~dpnxB"
					FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_FILE_AUTORUN_%UNIQ%.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
				)
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				IF EXIST DB_ACTIVE\ACT_DIRECTORY_AUTORUN_%UNIQ%.DB (
					>VARIABLE\%VTEXT3% ECHO "%%~dpB"
					FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_DIRECTORY_AUTORUN_%UNIQ%.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
				)
			) ELSE (
				ENDLOCAL
			)
		)
	) ELSE (
		ENDLOCAL
	)
)
REM :HKCU\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
%EXESETACL% -on "HKCU\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run" -ot reg -actn setowner -ownr "n:Administrators" -rec yes -silent >Nul 2>Nul
%EXESETACL% -on "HKCU\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run" -ot reg -actn setprot -op "dacl:np;sacl:np" -actn clear -clr "dacl,sacl" -actn setowner -ownr "n:SYSTEM" -rec yes -silent >Nul 2>Nul
>VARIABLE\%VTEXT1% ECHO HKCU\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
SET "STRTMP=HKCU_SW_PoliciesExplorerRun(x86)"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKCU\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run" 2^>Nul^|%EXEGREP% -Fivxf DB\EXCEPT\EX_REG_AUTORUN_NAME.DB 2^>Nul^|%EXEGREP% -vxf DB\EXCEPT\EX_REG_AUTORUN_NAME_PATTERN+C.DB 2^>Nul') DO (
	TITLE 검사중 "Policies Run (HKCU x86) : %%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_AUTORUN.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_NAME.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKCU\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\%%A" 2^>Nul^|%EXEGREP% -Fivf DB\EXCEPT\EX_REG_AUTORUN.DB 2^>Nul') DO (
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				>VARIABLE\%VTEXT3% ECHO %%B
				FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_FILE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				>VARIABLE\%VTEXT3% ECHO %%B
				FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_FILE_CASE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				IF EXIST DB_ACTIVE\ACT_FILE_AUTORUN_%UNIQ%.DB (
					>VARIABLE\%VTEXT3% ECHO "%%~dpnxB"
					FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_FILE_AUTORUN_%UNIQ%.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
				)
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				IF EXIST DB_ACTIVE\ACT_DIRECTORY_AUTORUN_%UNIQ%.DB (
					>VARIABLE\%VTEXT3% ECHO "%%~dpB"
					FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_DIRECTORY_AUTORUN_%UNIQ%.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
				)
			) ELSE (
				ENDLOCAL
			)
		)
	) ELSE (
		ENDLOCAL
	)
)
REM :HKLM\Software\Microsoft\Shared Tools\MSConfig\Services
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Shared Tools\MSConfig\Services
SET "STRTMP=HKLM_SW_MSConfig_Services"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software\Microsoft\Shared Tools\MSConfig\Services" 2^>Nul^|%EXEGREP% -Fixvf DB_EXEC\CHECK\CHK_TRUSTED_SERVICES+NC.DB 2^>Nul^|%EXEGREP% -ixvf DB_EXEC\CHECK\CHK_TRUSTED_SERVICES_PATTERN+NC.DB 2^>Nul') DO (
	TITLE 검사중 "Services : %%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VTEXT3% ECHO %%A^|
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\SERVICE\DEL_SERVICE+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\SERVICE\PATTERN_SERVICE+NC.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\SERVICE\PATTERN_SERVICE+C.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
)
REM :HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg
SET "STRTMP=HKLM_SW_MSConfig_StartupReg"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg" 2^>Nul^|%EXEGREP% -Fivxf DB\EXCEPT\EX_REG_AUTORUN_NAME.DB 2^>Nul^|%EXEGREP% -vxf DB\EXCEPT\EX_REG_AUTORUN_NAME_PATTERN+C.DB 2^>Nul') DO (
	TITLE 검사중 "Disable Run : %%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_AUTORUN.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_NAME.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\%%A\command" 2^>Nul^|%EXEGREP% -Fivf DB\EXCEPT\EX_REG_AUTORUN.DB 2^>Nul') DO (
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				>VARIABLE\%VTEXT3% ECHO %%B
				FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_FILE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				>VARIABLE\%VTEXT3% ECHO %%B
				FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_FILE_CASE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				IF EXIST DB_ACTIVE\ACT_FILE_AUTORUN_%UNIQ%.DB (
					>VARIABLE\%VTEXT3% ECHO "%%~dpnxB"
					FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_FILE_AUTORUN_%UNIQ%.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
				)
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				IF EXIST DB_ACTIVE\ACT_DIRECTORY_AUTORUN_%UNIQ%.DB (
					>VARIABLE\%VTEXT3% ECHO "%%~dpB"
					FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_DIRECTORY_AUTORUN_%UNIQ%.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_KEY ACTIVESCAN BACKUP "%STRTMP%"
				)
			) ELSE (
				ENDLOCAL
			)
		)
	) ELSE (
		ENDLOCAL
	)
)
REM :HKLM\Software\Microsoft\Windows\CurrentVersion\Run
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
%EXESETACL% -on "HKLM\Software\Microsoft\Windows\CurrentVersion\Run" -ot reg -actn setprot -op "dacl:np;sacl:np" -actn clear -clr "dacl,sacl" -rec yes -silent >Nul 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Windows\CurrentVersion\Run
SET "STRTMP=HKLM_SoftwareRun"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKLM\Software\Microsoft\Windows\CurrentVersion\Run" 2^>Nul^|%EXEGREP% -Fivxf DB\EXCEPT\EX_REG_AUTORUN_NAME.DB 2^>Nul^|%EXEGREP% -vxf DB\EXCEPT\EX_REG_AUTORUN_NAME_PATTERN+C.DB 2^>Nul') DO (
	TITLE 검사중 "Run (HKLM) : %%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_AUTORUN.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_NAME.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Microsoft\Windows\CurrentVersion\Run\%%A" 2^>Nul^|%EXEGREP% -Fivf DB\EXCEPT\EX_REG_AUTORUN.DB 2^>Nul') DO (
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				>VARIABLE\%VTEXT3% ECHO %%B
				FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_FILE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				>VARIABLE\%VTEXT3% ECHO %%B
				FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_FILE_CASE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				IF EXIST DB_ACTIVE\ACT_FILE_AUTORUN_%UNIQ%.DB (
					>VARIABLE\%VTEXT3% ECHO "%%~dpnxB"
					FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_FILE_AUTORUN_%UNIQ%.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
				)
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				IF EXIST DB_ACTIVE\ACT_DIRECTORY_AUTORUN_%UNIQ%.DB (
					>VARIABLE\%VTEXT3% ECHO "%%~dpB"
					FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_DIRECTORY_AUTORUN_%UNIQ%.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
				)
			) ELSE (
				ENDLOCAL
			)
		)
	) ELSE (
		ENDLOCAL
	)
)
REM :HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
%EXESETACL% -on "HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run" -ot reg -actn setprot -op "dacl:np;sacl:np" -actn clear -clr "dacl,sacl" -rec yes -silent >Nul 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run
SET "STRTMP=HKLM_SoftwareRun(x86)"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run" 2^>Nul^|%EXEGREP% -Fivxf DB\EXCEPT\EX_REG_AUTORUN_NAME.DB 2^>Nul^|%EXEGREP% -vxf DB\EXCEPT\EX_REG_AUTORUN_NAME_PATTERN+C.DB 2^>Nul') DO (
	TITLE 검사중 "Run (HKLM x86) : %%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_AUTORUN.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_NAME.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\%%A" 2^>Nul^|%EXEGREP% -Fivf DB\EXCEPT\EX_REG_AUTORUN.DB 2^>Nul') DO (
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				>VARIABLE\%VTEXT3% ECHO %%B
				FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_FILE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				>VARIABLE\%VTEXT3% ECHO %%B
				FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_FILE_CASE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				IF EXIST DB_ACTIVE\ACT_FILE_AUTORUN_%UNIQ%.DB (
					>VARIABLE\%VTEXT3% ECHO "%%~dpnxB"
					FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_FILE_AUTORUN_%UNIQ%.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
				)
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				IF EXIST DB_ACTIVE\ACT_DIRECTORY_AUTORUN_%UNIQ%.DB (
					>VARIABLE\%VTEXT3% ECHO "%%~dpB"
					FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_DIRECTORY_AUTORUN_%UNIQ%.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
				)
			) ELSE (
				ENDLOCAL
			)
		)
	) ELSE (
		ENDLOCAL
	)
)
REM :HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
%EXESETACL% -on "HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce" -ot reg -actn setprot -op "dacl:np;sacl:np" -actn clear -clr "dacl,sacl" -rec yes -silent >Nul 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce
SET "STRTMP=HKLM_SW_RunOnce"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce" 2^>Nul^|%EXEGREP% -Fivxf DB\EXCEPT\EX_REG_AUTORUN_NAME.DB 2^>Nul^|%EXEGREP% -vxf DB\EXCEPT\EX_REG_AUTORUN_NAME_PATTERN+C.DB 2^>Nul') DO (
	TITLE 검사중 "RunOnce (HKLM) : %%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_AUTORUN.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_NAME.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce\%%A" 2^>Nul^|%EXEGREP% -Fivf DB\EXCEPT\EX_REG_AUTORUN.DB 2^>Nul') DO (
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				>VARIABLE\%VTEXT3% ECHO %%B
				FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_FILE_RUNONCE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
		)
	) ELSE (
		ENDLOCAL
	)
)
REM :HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
%EXESETACL% -on "HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce" -ot reg -actn setprot -op "dacl:np;sacl:np" -actn clear -clr "dacl,sacl" -rec yes -silent >Nul 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce
SET "STRTMP=HKLM_SW_RunOnce(x86)"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce" 2^>Nul^|%EXEGREP% -Fivxf DB\EXCEPT\EX_REG_AUTORUN_NAME.DB 2^>Nul^|%EXEGREP% -vxf DB\EXCEPT\EX_REG_AUTORUN_NAME_PATTERN+C.DB 2^>Nul') DO (
	TITLE 검사중 "RunOnce (HKLM x86) : %%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_AUTORUN.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_NAME.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce\%%A" 2^>Nul^|%EXEGREP% -Fivf DB\EXCEPT\EX_REG_AUTORUN.DB 2^>Nul') DO (
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				>VARIABLE\%VTEXT3% ECHO %%B
				FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_FILE_RUNONCE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
		)
	) ELSE (
		ENDLOCAL
	)
)
REM :HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
%EXESETACL% -on "HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices" -ot reg -actn setprot -op "dacl:np;sacl:np" -actn clear -clr "dacl,sacl" -rec yes -silent >Nul 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices
SET "STRTMP=HKLM_SW_RunServices"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices" 2^>Nul^|%EXEGREP% -Fivxf DB\EXCEPT\EX_REG_AUTORUN_NAME.DB 2^>Nul^|%EXEGREP% -vxf DB\EXCEPT\EX_REG_AUTORUN_NAME_PATTERN+C.DB 2^>Nul') DO (
	TITLE 검사중 "RunServices (HKLM) : %%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_AUTORUN.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_NAME.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices\%%A" 2^>Nul^|%EXEGREP% -Fivf DB\EXCEPT\EX_REG_AUTORUN.DB 2^>Nul') DO (
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				>VARIABLE\%VTEXT3% ECHO %%B
				FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_FILE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				>VARIABLE\%VTEXT3% ECHO %%B
				FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_FILE_CASE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				IF EXIST DB_ACTIVE\ACT_FILE_AUTORUN_%UNIQ%.DB (
					>VARIABLE\%VTEXT3% ECHO "%%~dpnxB"
					FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_FILE_AUTORUN_%UNIQ%.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
				)
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				IF EXIST DB_ACTIVE\ACT_DIRECTORY_AUTORUN_%UNIQ%.DB (
					>VARIABLE\%VTEXT3% ECHO "%%~dpB"
					FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_DIRECTORY_AUTORUN_%UNIQ%.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
				)
			) ELSE (
				ENDLOCAL
			)
		)
	) ELSE (
		ENDLOCAL
	)
)
REM :HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunServices
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
%EXESETACL% -on "HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunServices" -ot reg -actn setprot -op "dacl:np;sacl:np" -actn clear -clr "dacl,sacl" -rec yes -silent >Nul 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunServices
SET "STRTMP=HKLM_SW_RunServices(x86)"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunServices" 2^>Nul^|%EXEGREP% -Fivxf DB\EXCEPT\EX_REG_AUTORUN_NAME.DB 2^>Nul^|%EXEGREP% -vxf DB\EXCEPT\EX_REG_AUTORUN_NAME_PATTERN+C.DB 2^>Nul') DO (
	TITLE 검사중 "RunServices (HKLM x86) : %%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_AUTORUN.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_NAME.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunServices\%%A" 2^>Nul^|%EXEGREP% -Fivf DB\EXCEPT\EX_REG_AUTORUN.DB 2^>Nul') DO (
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				>VARIABLE\%VTEXT3% ECHO %%B
				FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_FILE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				>VARIABLE\%VTEXT3% ECHO %%B
				FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_FILE_CASE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				IF EXIST DB_ACTIVE\ACT_FILE_AUTORUN_%UNIQ%.DB (
					>VARIABLE\%VTEXT3% ECHO "%%~dpnxB"
					FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_FILE_AUTORUN_%UNIQ%.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
				)
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				IF EXIST DB_ACTIVE\ACT_DIRECTORY_AUTORUN_%UNIQ%.DB (
					>VARIABLE\%VTEXT3% ECHO "%%~dpB"
					FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_DIRECTORY_AUTORUN_%UNIQ%.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
				)
			) ELSE (
				ENDLOCAL
			)
		)
	) ELSE (
		ENDLOCAL
	)
)
REM :HKLM\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
%EXESETACL% -on "HKLM\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce" -ot reg -actn setprot -op "dacl:np;sacl:np" -actn clear -clr "dacl,sacl" -rec yes -silent >Nul 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce
SET "STRTMP=HKLM_SW_RunServicesOnce"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKLM\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce" 2^>Nul^|%EXEGREP% -Fivxf DB\EXCEPT\EX_REG_AUTORUN_NAME.DB 2^>Nul^|%EXEGREP% -vxf DB\EXCEPT\EX_REG_AUTORUN_NAME_PATTERN+C.DB 2^>Nul') DO (
	TITLE 검사중 "RunServicesOnce (HKLM) : %%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_AUTORUN.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_NAME.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce\%%A" 2^>Nul^|%EXEGREP% -Fivf DB\EXCEPT\EX_REG_AUTORUN.DB 2^>Nul') DO (
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				>VARIABLE\%VTEXT3% ECHO %%B
				FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_FILE_RUNONCE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
		)
	) ELSE (
		ENDLOCAL
	)
)
REM :HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunServicesOnce
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
%EXESETACL% -on "HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunServicesOnce" -ot reg -actn setprot -op "dacl:np;sacl:np" -actn clear -clr "dacl,sacl" -rec yes -silent >Nul 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunServicesOnce
SET "STRTMP=HKLM_SW_RunServicesOnce(x86)"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunServicesOnce" 2^>Nul^|%EXEGREP% -Fivxf DB\EXCEPT\EX_REG_AUTORUN_NAME.DB 2^>Nul^|%EXEGREP% -vxf DB\EXCEPT\EX_REG_AUTORUN_NAME_PATTERN+C.DB 2^>Nul') DO (
	TITLE 검사중 "RunServicesOnce (HKLM x86) : %%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_AUTORUN.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_NAME.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunServicesOnce\%%A" 2^>Nul^|%EXEGREP% -Fivf DB\EXCEPT\EX_REG_AUTORUN.DB 2^>Nul') DO (
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				>VARIABLE\%VTEXT3% ECHO %%B
				FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_FILE_RUNONCE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
		)
	) ELSE (
		ENDLOCAL
	)
)
REM :HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
%EXESETACL% -on "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run" -ot reg -actn setprot -op "dacl:np;sacl:np" -actn clear -clr "dacl,sacl" -rec yes -silent >Nul 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
SET "STRTMP=HKLM_SW_PoliciesExplorerRun"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run" 2^>Nul^|%EXEGREP% -Fivxf DB\EXCEPT\EX_REG_AUTORUN_NAME.DB 2^>Nul^|%EXEGREP% -vxf DB\EXCEPT\EX_REG_AUTORUN_NAME_PATTERN+C.DB 2^>Nul') DO (
	TITLE 검사중 "Policies Run (HKLM) : %%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_AUTORUN.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_NAME.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\%%A" 2^>Nul^|%EXEGREP% -Fivf DB\EXCEPT\EX_REG_AUTORUN.DB 2^>Nul') DO (
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				>VARIABLE\%VTEXT3% ECHO %%B
				FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_FILE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				>VARIABLE\%VTEXT3% ECHO %%B
				FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_FILE_CASE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				IF EXIST DB_ACTIVE\ACT_FILE_AUTORUN_%UNIQ%.DB (
					>VARIABLE\%VTEXT3% ECHO "%%~dpnxB"
					FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_FILE_AUTORUN_%UNIQ%.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
				)
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				IF EXIST DB_ACTIVE\ACT_DIRECTORY_AUTORUN_%UNIQ%.DB (
					>VARIABLE\%VTEXT3% ECHO "%%~dpB"
					FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_DIRECTORY_AUTORUN_%UNIQ%.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
				)
			) ELSE (
				ENDLOCAL
			)
		)
	) ELSE (
		ENDLOCAL
	)
)
REM :HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
%EXESETACL% -on "HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run" -ot reg -actn setprot -op "dacl:np;sacl:np" -actn clear -clr "dacl,sacl" -rec yes -silent >Nul 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
SET "STRTMP=HKLM_SW_PoliciesExplorerRun(x86)"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run" 2^>Nul^|%EXEGREP% -Fivxf DB\EXCEPT\EX_REG_AUTORUN_NAME.DB 2^>Nul^|%EXEGREP% -vxf DB\EXCEPT\EX_REG_AUTORUN_NAME_PATTERN+C.DB 2^>Nul') DO (
	TITLE 검사중 "Policies Run (HKLM x86) : %%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_AUTORUN.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_NAME.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\%%A" 2^>Nul^|%EXEGREP% -Fivf DB\EXCEPT\EX_REG_AUTORUN.DB 2^>Nul') DO (
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				>VARIABLE\%VTEXT3% ECHO %%B
				FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_FILE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				>VARIABLE\%VTEXT3% ECHO %%B
				FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_FILE_CASE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				IF EXIST DB_ACTIVE\ACT_FILE_AUTORUN_%UNIQ%.DB (
					>VARIABLE\%VTEXT3% ECHO "%%~dpnxB"
					FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_FILE_AUTORUN_%UNIQ%.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
				)
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				IF EXIST DB_ACTIVE\ACT_DIRECTORY_AUTORUN_%UNIQ%.DB (
					>VARIABLE\%VTEXT3% ECHO "%%~dpB"
					FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_DIRECTORY_AUTORUN_%UNIQ%.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
				)
			) ELSE (
				ENDLOCAL
			)
		)
	) ELSE (
		ENDLOCAL
	)
)
REM :HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify
SET "STRTMP=HKLM_WinlogonNotify"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify" 2^>Nul') DO (
	TITLE 검사중 "Notify : %%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HKLM_WINLOGON_NOTIFY+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
)
REM :HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
>VARIABLE\%VTEXT1% ECHO HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify
SET "STRTMP=HKLM_WinlogonNotify(x86)"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify" 2^>Nul') DO (
	TITLE 검사중 "Notify (x86) : %%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_HKLM_WINLOGON_NOTIFY+NC.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_KEY NULL BACKUP "%STRTMP%"
)
REM :HKU\.Default\Software\Microsoft\Windows\CurrentVersion\Run
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
%EXESETACL% -on "HKU\.Default\Software\Microsoft\Windows\CurrentVersion\Run" -ot reg -actn setowner -ownr "n:Administrators" -rec yes -silent >Nul 2>Nul
%EXESETACL% -on "HKU\.Default\Software\Microsoft\Windows\CurrentVersion\Run" -ot reg -actn setprot -op "dacl:np;sacl:np" -actn clear -clr "dacl,sacl" -actn setowner -ownr "n:SYSTEM" -rec yes -silent >Nul 2>Nul
>VARIABLE\%VTEXT1% ECHO HKU\.Default\Software\Microsoft\Windows\CurrentVersion\Run
SET "STRTMP=HKU_SW_Run"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKU\.Default\Software\Microsoft\Windows\CurrentVersion\Run" 2^>Nul^|%EXEGREP% -Fivxf DB\EXCEPT\EX_REG_AUTORUN_NAME.DB 2^>Nul^|%EXEGREP% -vxf DB\EXCEPT\EX_REG_AUTORUN_NAME_PATTERN+C.DB 2^>Nul') DO (
	TITLE 검사중 "Run (HKU) : %%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_AUTORUN.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_NAME.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKU\.Default\Software\Microsoft\Windows\CurrentVersion\Run\%%A" 2^>Nul^|%EXEGREP% -Fivf DB\EXCEPT\EX_REG_AUTORUN.DB 2^>Nul') DO (
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				>VARIABLE\%VTEXT3% ECHO %%B
				FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_FILE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				>VARIABLE\%VTEXT3% ECHO %%B
				FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_FILE_CASE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				IF EXIST DB_ACTIVE\ACT_FILE_AUTORUN_%UNIQ%.DB (
					>VARIABLE\%VTEXT3% ECHO "%%~dpnxB"
					FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_FILE_AUTORUN_%UNIQ%.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
				)
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				IF EXIST DB_ACTIVE\ACT_DIRECTORY_AUTORUN_%UNIQ%.DB (
					>VARIABLE\%VTEXT3% ECHO "%%~dpB"
					FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_DIRECTORY_AUTORUN_%UNIQ%.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
				)
			) ELSE (
				ENDLOCAL
			)
		)
	) ELSE (
		ENDLOCAL
	)
)
REM :HKU\.Default\Software\Microsoft\Windows\CurrentVersion\RunOnce
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
%EXESETACL% -on "HKU\.Default\Software\Microsoft\Windows\CurrentVersion\RunOnce" -ot reg -actn setowner -ownr "n:Administrators" -rec yes -silent >Nul 2>Nul
%EXESETACL% -on "HKU\.Default\Software\Microsoft\Windows\CurrentVersion\RunOnce" -ot reg -actn setprot -op "dacl:np;sacl:np" -actn clear -clr "dacl,sacl" -actn setowner -ownr "n:SYSTEM" -rec yes -silent >Nul 2>Nul
>VARIABLE\%VTEXT1% ECHO HKU\.Default\Software\Microsoft\Windows\CurrentVersion\RunOnce
SET "STRTMP=HKU_SW_RunOnce"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKU\.Default\Software\Microsoft\Windows\CurrentVersion\RunOnce" 2^>Nul^|%EXEGREP% -Fivxf DB\EXCEPT\EX_REG_AUTORUN_NAME.DB 2^>Nul^|%EXEGREP% -vxf DB\EXCEPT\EX_REG_AUTORUN_NAME_PATTERN+C.DB 2^>Nul') DO (
	TITLE 검사중 "RunOnce (HKU) : %%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_AUTORUN.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_NAME.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKU\.Default\Software\Microsoft\Windows\CurrentVersion\RunOnce\%%A" 2^>Nul^|%EXEGREP% -Fivf DB\EXCEPT\EX_REG_AUTORUN.DB 2^>Nul') DO (
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				>VARIABLE\%VTEXT3% ECHO %%B
				FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_FILE_RUNONCE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
		)
	) ELSE (
		ENDLOCAL
	)
)
REM :HKU\.Default\Software\Microsoft\Windows\CurrentVersion\RunServices
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
%EXESETACL% -on "HKU\.Default\Software\Microsoft\Windows\CurrentVersion\RunServices" -ot reg -actn setowner -ownr "n:Administrators" -rec yes -silent >Nul 2>Nul
%EXESETACL% -on "HKU\.Default\Software\Microsoft\Windows\CurrentVersion\RunServices" -ot reg -actn setprot -op "dacl:np;sacl:np" -actn clear -clr "dacl,sacl" -actn setowner -ownr "n:SYSTEM" -rec yes -silent >Nul 2>Nul
>VARIABLE\%VTEXT1% ECHO HKU\.Default\Software\Microsoft\Windows\CurrentVersion\RunServices
SET "STRTMP=HKU_SW_RunServices"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKU\.Default\Software\Microsoft\Windows\CurrentVersion\RunServices" 2^>Nul^|%EXEGREP% -Fivxf DB\EXCEPT\EX_REG_AUTORUN_NAME.DB 2^>Nul^|%EXEGREP% -vxf DB\EXCEPT\EX_REG_AUTORUN_NAME_PATTERN+C.DB 2^>Nul') DO (
	TITLE 검사중 "RunServices (HKU) : %%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_AUTORUN.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_NAME.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKU\.Default\Software\Microsoft\Windows\CurrentVersion\RunServices\%%A" 2^>Nul^|%EXEGREP% -Fivf DB\EXCEPT\EX_REG_AUTORUN.DB 2^>Nul') DO (
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				>VARIABLE\%VTEXT3% ECHO %%B
				FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_FILE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				>VARIABLE\%VTEXT3% ECHO %%B
				FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_FILE_CASE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				IF EXIST DB_ACTIVE\ACT_FILE_AUTORUN_%UNIQ%.DB (
					>VARIABLE\%VTEXT3% ECHO "%%~dpnxB"
					FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_FILE_AUTORUN_%UNIQ%.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
				)
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				IF EXIST DB_ACTIVE\ACT_DIRECTORY_AUTORUN_%UNIQ%.DB (
					>VARIABLE\%VTEXT3% ECHO "%%~dpB"
					FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_DIRECTORY_AUTORUN_%UNIQ%.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
				)
			) ELSE (
				ENDLOCAL
			)
		)
	) ELSE (
		ENDLOCAL
	)
)
REM :HKU\.Default\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
%EXESETACL% -on "HKU\.Default\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce" -ot reg -actn setowner -ownr "n:Administrators" -rec yes -silent >Nul 2>Nul
%EXESETACL% -on "HKU\.Default\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce" -ot reg -actn setprot -op "dacl:np;sacl:np" -actn clear -clr "dacl,sacl" -actn setowner -ownr "n:SYSTEM" -rec yes -silent >Nul 2>Nul
>VARIABLE\%VTEXT1% ECHO HKU\.Default\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce
SET "STRTMP=HKU_SW_RunServicesOnce"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKU\.Default\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce" 2^>Nul^|%EXEGREP% -Fivxf DB\EXCEPT\EX_REG_AUTORUN_NAME.DB 2^>Nul^|%EXEGREP% -vxf DB\EXCEPT\EX_REG_AUTORUN_NAME_PATTERN+C.DB 2^>Nul') DO (
	TITLE 검사중 "RunServicesOnce (HKU) : %%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_AUTORUN.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_NAME.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKU\.Default\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce\%%A" 2^>Nul^|%EXEGREP% -Fivf DB\EXCEPT\EX_REG_AUTORUN.DB 2^>Nul') DO (
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				>VARIABLE\%VTEXT3% ECHO %%B
				FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_FILE_RUNONCE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
		)
	) ELSE (
		ENDLOCAL
	)
)
REM :HKU\.Default\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
%EXESETACL% -on "HKU\.Default\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run" -ot reg -actn setowner -ownr "n:Administrators" -rec yes -silent >Nul 2>Nul
%EXESETACL% -on "HKU\.Default\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run" -ot reg -actn setprot -op "dacl:np;sacl:np" -actn clear -clr "dacl,sacl" -actn setowner -ownr "n:SYSTEM" -rec yes -silent >Nul 2>Nul
>VARIABLE\%VTEXT1% ECHO HKU\.Default\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
SET "STRTMP=HKU_SW_PoliciesExplorerRun"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKU\.Default\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run" 2^>Nul^|%EXEGREP% -Fivxf DB\EXCEPT\EX_REG_AUTORUN_NAME.DB 2^>Nul^|%EXEGREP% -vxf DB\EXCEPT\EX_REG_AUTORUN_NAME_PATTERN+C.DB 2^>Nul') DO (
	TITLE 검사중 "Policies Run (HKU) : %%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_AUTORUN.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_NAME.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKU\.Default\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\%%A" 2^>Nul^|%EXEGREP% -Fivf DB\EXCEPT\EX_REG_AUTORUN.DB 2^>Nul') DO (
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				>VARIABLE\%VTEXT3% ECHO %%B
				FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_FILE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				>VARIABLE\%VTEXT3% ECHO %%B
				FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_FILE_CASE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				IF EXIST DB_ACTIVE\ACT_FILE_AUTORUN_%UNIQ%.DB (
					>VARIABLE\%VTEXT3% ECHO "%%~dpnxB"
					FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_FILE_AUTORUN_%UNIQ%.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
				)
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				IF EXIST DB_ACTIVE\ACT_DIRECTORY_AUTORUN_%UNIQ%.DB (
					>VARIABLE\%VTEXT3% ECHO "%%~dpB"
					FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_DIRECTORY_AUTORUN_%UNIQ%.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
				)
			) ELSE (
				ENDLOCAL
			)
		)
	) ELSE (
		ENDLOCAL
	)
)
REM :HKU\[%SID%]\Software\Microsoft\Windows\CurrentVersion\Run
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
%EXESETACL% -on "HKU\%SID%\Software\Microsoft\Windows\CurrentVersion\Run" -ot reg -actn setowner -ownr "n:Administrators" -rec yes -silent >Nul 2>Nul
%EXESETACL% -on "HKU\%SID%\Software\Microsoft\Windows\CurrentVersion\Run" -ot reg -actn setprot -op "dacl:np;sacl:np" -actn clear -clr "dacl,sacl" -actn setowner -ownr "n:SYSTEM" -rec yes -silent >Nul 2>Nul
>VARIABLE\%VTEXT1% ECHO HKU\%SID%\Software\Microsoft\Windows\CurrentVersion\Run
SET "STRTMP=HKU_%SID%_SW_Run"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKU\%SID%\Software\Microsoft\Windows\CurrentVersion\Run" 2^>Nul^|%EXEGREP% -Fivxf DB\EXCEPT\EX_REG_AUTORUN_NAME.DB 2^>Nul') DO (
	TITLE 검사중 "Run (HKU SID) : %%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_AUTORUN.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_NAME.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKU\%SID%\Software\Microsoft\Windows\CurrentVersion\Run\%%A" 2^>Nul^|%EXEGREP% -Fivf DB\EXCEPT\EX_REG_AUTORUN.DB 2^>Nul') DO (
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				>VARIABLE\%VTEXT3% ECHO %%B
				FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_FILE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				>VARIABLE\%VTEXT3% ECHO %%B
				FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_FILE_CASE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				IF EXIST DB_ACTIVE\ACT_FILE_AUTORUN_%UNIQ%.DB (
					>VARIABLE\%VTEXT3% ECHO "%%~dpnxB"
					FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_FILE_AUTORUN_%UNIQ%.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
				)
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				IF EXIST DB_ACTIVE\ACT_DIRECTORY_AUTORUN_%UNIQ%.DB (
					>VARIABLE\%VTEXT3% ECHO "%%~dpB"
					FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_DIRECTORY_AUTORUN_%UNIQ%.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
				)
			) ELSE (
				ENDLOCAL
			)
		)
	) ELSE (
		ENDLOCAL
	)
)
REM :HKU\[%SID%]\Software\Microsoft\Windows\CurrentVersion\RunOnce
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
%EXESETACL% -on "HKU\%SID%\Software\Microsoft\Windows\CurrentVersion\RunOnce" -ot reg -actn setowner -ownr "n:Administrators" -rec yes -silent >Nul 2>Nul
%EXESETACL% -on "HKU\%SID%\Software\Microsoft\Windows\CurrentVersion\RunOnce" -ot reg -actn setprot -op "dacl:np;sacl:np" -actn clear -clr "dacl,sacl" -actn setowner -ownr "n:SYSTEM" -rec yes -silent >Nul 2>Nul
>VARIABLE\%VTEXT1% ECHO HKU\%SID%\Software\Microsoft\Windows\CurrentVersion\RunOnce
SET "STRTMP=HKU_%SID%_SW_RunOnce"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKU\%SID%\Software\Microsoft\Windows\CurrentVersion\RunOnce" 2^>Nul^|%EXEGREP% -Fivxf DB\EXCEPT\EX_REG_AUTORUN_NAME.DB 2^>Nul') DO (
	TITLE 검사중 "RunOnce (HKU SID) : %%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_AUTORUN.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_NAME.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKU\%SID%\Software\Microsoft\Windows\CurrentVersion\RunOnce\%%A" 2^>Nul^|%EXEGREP% -Fivf DB\EXCEPT\EX_REG_AUTORUN.DB 2^>Nul') DO (
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				>VARIABLE\%VTEXT3% ECHO %%B
				FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_FILE_RUNONCE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
		)
	) ELSE (
		ENDLOCAL
	)
)
REM :HKU\[%SID%]\Software\Microsoft\Windows\CurrentVersion\RunServices
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
%EXESETACL% -on "HKU\%SID%\Software\Microsoft\Windows\CurrentVersion\RunServices" -ot reg -actn setowner -ownr "n:Administrators" -rec yes -silent >Nul 2>Nul
%EXESETACL% -on "HKU\%SID%\Software\Microsoft\Windows\CurrentVersion\RunServices" -ot reg -actn setprot -op "dacl:np;sacl:np" -actn clear -clr "dacl,sacl" -actn setowner -ownr "n:SYSTEM" -rec yes -silent >Nul 2>Nul
>VARIABLE\%VTEXT1% ECHO HKU\%SID%\Software\Microsoft\Windows\CurrentVersion\RunServices
SET "STRTMP=HKU_%SID%_SW_RunServices"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKU\%SID%\Software\Microsoft\Windows\CurrentVersion\RunServices" 2^>Nul^|%EXEGREP% -Fivxf DB\EXCEPT\EX_REG_AUTORUN_NAME.DB 2^>Nul') DO (
	TITLE 검사중 "RunServices (HKU SID) : %%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_AUTORUN.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_NAME.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKU\%SID%\Software\Microsoft\Windows\CurrentVersion\RunServices\%%A" 2^>Nul^|%EXEGREP% -Fivf DB\EXCEPT\EX_REG_AUTORUN.DB 2^>Nul') DO (
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				>VARIABLE\%VTEXT3% ECHO %%B
				FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_FILE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				>VARIABLE\%VTEXT3% ECHO %%B
				FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_FILE_CASE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				IF EXIST DB_ACTIVE\ACT_FILE_AUTORUN_%UNIQ%.DB (
					>VARIABLE\%VTEXT3% ECHO "%%~dpnxB"
					FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_FILE_AUTORUN_%UNIQ%.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
				)
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				IF EXIST DB_ACTIVE\ACT_DIRECTORY_AUTORUN_%UNIQ%.DB (
					>VARIABLE\%VTEXT3% ECHO "%%~dpB"
					FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_DIRECTORY_AUTORUN_%UNIQ%.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
				)
			) ELSE (
				ENDLOCAL
			)
		)
	) ELSE (
		ENDLOCAL
	)
)
REM :HKU\[%SID%]\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
%EXESETACL% -on "HKU\%SID%\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce" -ot reg -actn setowner -ownr "n:Administrators" -rec yes -silent >Nul 2>Nul
%EXESETACL% -on "HKU\%SID%\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce" -ot reg -actn setprot -op "dacl:np;sacl:np" -actn clear -clr "dacl,sacl" -actn setowner -ownr "n:SYSTEM" -rec yes -silent >Nul 2>Nul
>VARIABLE\%VTEXT1% ECHO HKU\%SID%\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce
SET "STRTMP=HKU_%SID%_SW_RunServicesOnce"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKU\%SID%\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce" 2^>Nul^|%EXEGREP% -Fivxf DB\EXCEPT\EX_REG_AUTORUN_NAME.DB 2^>Nul') DO (
	TITLE 검사중 "RunServicesOnce (HKU SID) : %%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_AUTORUN.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_NAME.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKU\%SID%\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce\%%A" 2^>Nul^|%EXEGREP% -Fivf DB\EXCEPT\EX_REG_AUTORUN.DB 2^>Nul') DO (
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				>VARIABLE\%VTEXT3% ECHO %%B
				FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_FILE_RUNONCE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
		)
	) ELSE (
		ENDLOCAL
	)
)
REM :HKU\[%SID%]\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
%EXESETACL% -on "HKU\%SID%\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run" -ot reg -actn setowner -ownr "n:Administrators" -rec yes -silent >Nul 2>Nul
%EXESETACL% -on "HKU\%SID%\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run" -ot reg -actn setprot -op "dacl:np;sacl:np" -actn clear -clr "dacl,sacl" -actn setowner -ownr "n:SYSTEM" -rec yes -silent >Nul 2>Nul
>VARIABLE\%VTEXT1% ECHO HKU\%SID%\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
SET "STRTMP=HKU_%SID%_SW_PoliciesExplorerRun"
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -l -q list "\HKU\%SID%\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run" 2^>Nul^|%EXEGREP% -Fivxf DB\EXCEPT\EX_REG_AUTORUN_NAME.DB 2^>Nul') DO (
	TITLE 검사중 "Policies Run (HKU SID) : %%A" 2>Nul
	>VARIABLE\%VTEXT2% ECHO %%A
	>VARIABLE\%VCHECK% ECHO 0
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -Fixf DB_EXEC\THREAT\REGISTRY\DEL_AUTORUN.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE NULL BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_NAME.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
	) ELSE (
		ENDLOCAL
	)
	SETLOCAL ENABLEDELAYEDEXPANSION
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		ENDLOCAL
		FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKU\%SID%\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\%%A" 2^>Nul^|%EXEGREP% -Fivf DB\EXCEPT\EX_REG_AUTORUN.DB 2^>Nul') DO (
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				>VARIABLE\%VTEXT3% ECHO %%B
				FOR /F %%X IN ('%EXEGREP% -ixf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_FILE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				>VARIABLE\%VTEXT3% ECHO %%B
				FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\REGISTRY\PATTERN_AUTORUN_FILE_CASE.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				IF EXIST DB_ACTIVE\ACT_FILE_AUTORUN_%UNIQ%.DB (
					>VARIABLE\%VTEXT3% ECHO "%%~dpnxB"
					FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_FILE_AUTORUN_%UNIQ%.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
				)
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				IF EXIST DB_ACTIVE\ACT_DIRECTORY_AUTORUN_%UNIQ%.DB (
					>VARIABLE\%VTEXT3% ECHO "%%~dpB"
					FOR /F %%X IN ('%EXEGREP% -Fixf DB_ACTIVE\ACT_DIRECTORY_AUTORUN_%UNIQ%.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_REG_VALUE ACTIVESCAN BACKUP NULL "%STRTMP%"
				)
			) ELSE (
				ENDLOCAL
			)
		)
	) ELSE (
		ENDLOCAL
	)
)
REM :Result
CALL :PROCESS_RESULT NULL CHKINFECT
REM :Reset Value
CALL :RESET_VALUE

TITLE %MZTITLE% 2>Nul & PING.EXE -n 2 0 >Nul 2>Nul & ECHO. & >>"%QLog%" ECHO.

REM * Delete Malicious Windows Management Instrumentation Item
ECHO ◇ 악성 운영체제 관리 도구 항목 제거중 . . . & >>"%QLog%" ECHO    ■ 악성 운영체제 관리 도구 항목 제거 :
TITLE ^(캐싱중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('POWERSHELL.EXE -C "Get-WMIObject -Namespace root\default -Class ActiveScriptEventConsumer|SELECT Name -ExpandProperty Name" 2^>Nul') DO (
	FOR /F "DELIMS=" %%B IN ("%%A") DO (
		TITLE 검사중 "WMI (Default ActiveScriptEventConsumer) : %%B" 2>Nul
		>VARIABLE\%VTEXT3% ECHO %%B
		>VARIABLE\%VCHECK% ECHO 0
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			// 
			FOR /F %%X IN ('%EXEGREP% -Fxf DB_EXEC\THREAT\SERVICE\DEL_WMI+C.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_WMI AS1
		) ELSE (
			ENDLOCAL
		)
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\SERVICE\PATTERN_WMI.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_WMI AS1
		) ELSE (
			ENDLOCAL
		)
	)
)
FOR /F "DELIMS=" %%A IN ('POWERSHELL.EXE -C "Get-WMIObject -Namespace root\Subscription -Class ActiveScriptEventConsumer|SELECT Name -ExpandProperty Name" 2^>Nul') DO (
	FOR /F "DELIMS=" %%B IN ("%%A") DO (
		TITLE 검사중 "WMI (Subscription ActiveScriptEventConsumer) : %%B" 2>Nul
		>VARIABLE\%VTEXT3% ECHO %%B
		>VARIABLE\%VCHECK% ECHO 0
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -Fxf DB_EXEC\THREAT\SERVICE\DEL_WMI+C.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_WMI AS2
		) ELSE (
			ENDLOCAL
		)
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\SERVICE\PATTERN_WMI.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_WMI AS2
		) ELSE (
			ENDLOCAL
		)
	)
)
FOR /F "DELIMS=" %%A IN ('POWERSHELL.EXE -C "Get-WMIObject -Namespace root\default -Class CommandLineEventConsumer|SELECT Name -ExpandProperty Name" 2^>Nul') DO (
	FOR /F "DELIMS=" %%B IN ("%%A") DO (
		TITLE 검사중 "WMI (Ddefault CommandLineEventConsumer) : %%B" 2>Nul
		>VARIABLE\%VTEXT3% ECHO %%B
		>VARIABLE\%VCHECK% ECHO 0
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -Fxf DB_EXEC\THREAT\SERVICE\DEL_WMI+C.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_WMI CL1
		) ELSE (
			ENDLOCAL
		)
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\SERVICE\PATTERN_WMI.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_WMI CL1
		) ELSE (
			ENDLOCAL
		)
	)
)
FOR /F "DELIMS=" %%A IN ('POWERSHELL.EXE -C "Get-WMIObject -Namespace root\Subscription -Class CommandLineEventConsumer|SELECT Name -ExpandProperty Name" 2^>Nul') DO (
	FOR /F "DELIMS=" %%B IN ("%%A") DO (
		TITLE 검사중 "WMI (Subscription CommandLineEventConsumer) : %%B" 2>Nul
		>VARIABLE\%VTEXT3% ECHO %%B
		>VARIABLE\%VCHECK% ECHO 0
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -Fxf DB_EXEC\THREAT\SERVICE\DEL_WMI+C.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_WMI CL2
		) ELSE (
			ENDLOCAL
		)
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\SERVICE\PATTERN_WMI.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_WMI CL2
		) ELSE (
			ENDLOCAL
		)
	)
)
FOR /F "DELIMS=" %%A IN ('POWERSHELL.EXE -C "Get-WMIObject -Namespace root\default -Class __EventFilter|SELECT Name -ExpandProperty Name" 2^>Nul') DO (
	FOR /F "DELIMS=" %%B IN ("%%A") DO (
		TITLE 검사중 "WMI (Default __EventFilter) : %%B" 2>Nul
		>VARIABLE\%VTEXT3% ECHO %%B
		>VARIABLE\%VCHECK% ECHO 0
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -Fxf DB_EXEC\THREAT\SERVICE\DEL_WMI+C.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_WMI EV1
		) ELSE (
			ENDLOCAL
		)
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\SERVICE\PATTERN_WMI.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_WMI EV1
		) ELSE (
			ENDLOCAL
		)
	)
)
FOR /F "DELIMS=" %%A IN ('POWERSHELL.EXE -C "Get-WMIObject -Namespace root\cimv2 -Class __EventFilter|SELECT Name -ExpandProperty Name" 2^>Nul') DO (
	FOR /F "DELIMS=" %%B IN ("%%A") DO (
		TITLE 검사중 "WMI (CIMV2 __EventFilter) : %%B" 2>Nul
		>VARIABLE\%VTEXT3% ECHO %%B
		>VARIABLE\%VCHECK% ECHO 0
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -Fxf DB_EXEC\THREAT\SERVICE\DEL_WMI+C.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_WMI EV2
		) ELSE (
			ENDLOCAL
		)
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\SERVICE\PATTERN_WMI.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_WMI EV2
		) ELSE (
			ENDLOCAL
		)
	)
)
FOR /F "DELIMS=" %%A IN ('POWERSHELL.EXE -C "Get-WMIObject -Namespace root\Subscription -Class __EventFilter|SELECT Name -ExpandProperty Name" 2^>Nul') DO (
	FOR /F "DELIMS=" %%B IN ("%%A") DO (
		TITLE 검사중 "WMI (Subscription __EventFilter) : %%B" 2>Nul
		>VARIABLE\%VTEXT3% ECHO %%B
		>VARIABLE\%VCHECK% ECHO 0
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -Fxf DB_EXEC\THREAT\SERVICE\DEL_WMI+C.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_WMI EV3
		) ELSE (
			ENDLOCAL
		)
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\SERVICE\PATTERN_WMI.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_WMI EV3
		) ELSE (
			ENDLOCAL
		)
	)
)
FOR /F "DELIMS=" %%A IN ('POWERSHELL.EXE -C "Get-WMIObject -Namespace root\default -Class __IntervalTimerInstruction|SELECT TimerID -ExpandProperty TimerID" 2^>Nul') DO (
	FOR /F "DELIMS=" %%B IN ("%%A") DO (
		TITLE 검사중 "WMI (Default __IntervalTimerInstruction) : %%B" 2>Nul
		>VARIABLE\%VTEXT3% ECHO %%B
		>VARIABLE\%VCHECK% ECHO 0
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -Fxf DB_EXEC\THREAT\SERVICE\DEL_WMI+C.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_WMI IT1
		) ELSE (
			ENDLOCAL
		)
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\SERVICE\PATTERN_WMI.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_WMI IT1
		) ELSE (
			ENDLOCAL
		)
	)
)
FOR /F "DELIMS=" %%A IN ('POWERSHELL.EXE -C "Get-WMIObject -Namespace root\cimv2 -Class __IntervalTimerInstruction|SELECT TimerID -ExpandProperty TimerID" 2^>Nul') DO (
	FOR /F "DELIMS=" %%B IN ("%%A") DO (
		TITLE 검사중 "WMI (CIMV2 __IntervalTimerInstruction) : %%B" 2>Nul
		>VARIABLE\%VTEXT3% ECHO %%B
		>VARIABLE\%VCHECK% ECHO 0
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -Fxf DB_EXEC\THREAT\SERVICE\DEL_WMI+C.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_WMI IT2
		) ELSE (
			ENDLOCAL
		)
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\SERVICE\PATTERN_WMI.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_WMI IT2
		) ELSE (
			ENDLOCAL
		)
	)
)
FOR /F "DELIMS=" %%A IN ('POWERSHELL.EXE -C "Get-WMIObject -Namespace root\Subscription -Class __IntervalTimerInstruction|SELECT TimerID -ExpandProperty TimerID" 2^>Nul') DO (
	FOR /F "DELIMS=" %%B IN ("%%A") DO (
		TITLE 검사중 "WMI (Subscription __IntervalTimerInstruction) : %%B" 2>Nul
		>VARIABLE\%VTEXT3% ECHO %%B
		>VARIABLE\%VCHECK% ECHO 0
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -Fxf DB_EXEC\THREAT\SERVICE\DEL_WMI+C.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_WMI IT3
		) ELSE (
			ENDLOCAL
		)
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\SERVICE\PATTERN_WMI.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_WMI IT3
		) ELSE (
			ENDLOCAL
		)
	)
)
FOR /F "DELIMS=" %%A IN ('POWERSHELL.EXE -C "Get-WMIObject -Namespace root\default -Class __TimerInstruction|SELECT TimerID -ExpandProperty TimerID" 2^>Nul') DO (
	FOR /F "DELIMS=" %%B IN ("%%A") DO (
		TITLE 검사중 "WMI (Default __TimerInstruction) : %%B" 2>Nul
		>VARIABLE\%VTEXT3% ECHO %%B
		>VARIABLE\%VCHECK% ECHO 0
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -Fxf DB_EXEC\THREAT\SERVICE\DEL_WMI+C.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_WMI TI1
		) ELSE (
			ENDLOCAL
		)
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\SERVICE\PATTERN_WMI.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_WMI TI1
		) ELSE (
			ENDLOCAL
		)
	)
)
FOR /F "DELIMS=" %%A IN ('POWERSHELL.EXE -C "Get-WMIObject -Namespace root\cimv2 -Class __TimerInstruction|SELECT TimerID -ExpandProperty TimerID" 2^>Nul') DO (
	FOR /F "DELIMS=" %%B IN ("%%A") DO (
		TITLE 검사중 "WMI (CIMV2 __TimerInstruction) : %%B" 2>Nul
		>VARIABLE\%VTEXT3% ECHO %%B
		>VARIABLE\%VCHECK% ECHO 0
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -Fxf DB_EXEC\THREAT\SERVICE\DEL_WMI+C.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_WMI TI2
		) ELSE (
			ENDLOCAL
		)
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\SERVICE\PATTERN_WMI.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_WMI TI2
		) ELSE (
			ENDLOCAL
		)
	)
)
FOR /F "DELIMS=" %%A IN ('POWERSHELL.EXE -C "Get-WMIObject -Namespace root\Subscription -Class __TimerInstruction|SELECT TimerID -ExpandProperty TimerID" 2^>Nul') DO (
	FOR /F "DELIMS=" %%B IN ("%%A") DO (
		TITLE 검사중 "WMI (Subscription __TimerInstruction) : %%B" 2>Nul
		>VARIABLE\%VTEXT3% ECHO %%B
		>VARIABLE\%VCHECK% ECHO 0
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -Fxf DB_EXEC\THREAT\SERVICE\DEL_WMI+C.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_WMI TI3
		) ELSE (
			ENDLOCAL
		)
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\SERVICE\PATTERN_WMI.DB VARIABLE\%VTEXT3% 2^>Nul') DO CALL :DELETE_WMI TI3
		) ELSE (
			ENDLOCAL
		)
	)
)
REM :Result
CALL :PROCESS_RESULT NULL CHKINFECT
REM :Reset Value
CALL :RESET_VALUE

TITLE %MZTITLE% 2>Nul & PING.EXE -n 2 0 >Nul 2>Nul & ECHO. & >>"%QLog%" ECHO.

REM * Repository Salvage Windows Management Instrumentation
ECHO ◇ 운영체제 관리 도구 리포지토리 확인중 . . . & >>"%QLog%" ECHO    ■ 운영체제 관리 도구 리포지토리 확인 :
TITLE ^(확인중^) 잠시만 기다려주세요 . . . 2>Nul
WINMGMT.EXE /VERIFYREPOSITORY >Nul 2>Nul
IF %ERRORLEVEL% NEQ 0 (
	WINMGMT.EXE /SALVAGEREPOSITORY >Nul 2>Nul
	ECHO    리포지토리가 일관적이지 않아 다시 작성합니다. & >>"%QLog%" ECHO    리포지토리가 일관적이지 않아 다시 작성
) ELSE (
	ECHO    문제점이 발견되지 않았습니다. & >>"%QLog%" ECHO    문제점이 발견되지 않음
)

TITLE %MZTITLE% 2>Nul & PING.EXE -n 2 0 >Nul 2>Nul & ECHO. & >>"%QLog%" ECHO.

REM * Repair Service
<VARIABLE\%VXXXX% SET /P XXXX=
IF %XXXX% EQU 1 (
	ECHO ◇ 악성코드에 의해 비활성화된 서비스 확인중 . . .
	FOR /F "TOKENS=1,2 DELIMS=|" %%A IN ('TYPE DB_EXEC\CHECK\CHK_REPAIREDSERVICES+NC.DB 2^>Nul') DO (
		TITLE 확인중 "%%A" 2>Nul
		FOR /F "DELIMS=" %%X IN ('SC.EXE QC "%%A" 2^>Nul^|%EXEGREP% -x "[[:space:]]\+START_TYPE[[:space:]]\+:[[:space:]]\+4[[:space:]]\+DISABLED" 2^>Nul') DO (
			SC.EXE CONFIG "%%A" START= %%B >Nul 2>Nul
		)
	)
	ECHO    완료되었습니다.
	PING.EXE -n 2 0 >Nul 2>Nul
	ECHO.
)

REM * Reset Network DNS Address <#2>
ECHO ◇ 네트워크 DNS 주소 상태 확인중 - 2차 . . . & >>"%QLog%" ECHO    ■ 네트워크 DNS 주소 상태 확인 - 2차 :
TITLE ^(확인중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\NameServer" 2^>Nul') DO (
	IF NOT "%%A" == "" (
		>VARIABLE\%VTEXT2% ECHO %%A
		>VARIABLE\%VCHECK% ECHO 0
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -Fxf DB_EXEC\THREAT\NETWORK\DEL_DNS_ADDRESS.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :RESET_DNS NULL NULL
		) ELSE (
			ENDLOCAL
		)
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\NETWORK\PATTERN_DNS_ADDRESS.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :RESET_DNS NULL NULL
		) ELSE (
			ENDLOCAL
		)
	)
)
TITLE ^(확인중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\DhcpNameServer" 2^>Nul') DO (
	IF NOT "%%A" == "" (
		>VARIABLE\%VTEXT2% ECHO %%A
		>VARIABLE\%VCHECK% ECHO 0
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -Fxf DB_EXEC\THREAT\NETWORK\DEL_DNS_ADDRESS.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :RESET_DNS NULL DHCP
		) ELSE (
			ENDLOCAL
		)
		SETLOCAL ENABLEDELAYEDEXPANSION
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			ENDLOCAL
			FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\NETWORK\PATTERN_DNS_ADDRESS.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :RESET_DNS NULL DHCP
		) ELSE (
			ENDLOCAL
		)
	)
)
TITLE ^(확인중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces" 2^>Nul') DO (
	>VARIABLE\%VTEXT1% ECHO %%A
	FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\%%A\NameServer" 2^>Nul') DO (
		IF NOT "%%B" == "" (
			>VARIABLE\%VTEXT2% ECHO %%B
			>VARIABLE\%VCHECK% ECHO 0
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				FOR /F %%X IN ('%EXEGREP% -Fxf DB_EXEC\THREAT\NETWORK\DEL_DNS_ADDRESS.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :RESET_DNS DEVS NULL
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\NETWORK\PATTERN_DNS_ADDRESS.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :RESET_DNS DEVS NULL
			) ELSE (
				ENDLOCAL
			)
		)
	)
)
TITLE ^(확인중^) 잠시만 기다려주세요 . . . 2>Nul
FOR /F "DELIMS=" %%A IN ('TOOLS\REGTOOL\REGTOOL.EXE -K / -w -k -q list "\HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces" 2^>Nul') DO (
	>VARIABLE\%VTEXT1% ECHO %%A
	FOR /F "DELIMS=" %%B IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\%%A\DhcpNameServer" 2^>Nul') DO (
		IF NOT "%%B" == "" (
			>VARIABLE\%VTEXT2% ECHO %%B
			>VARIABLE\%VCHECK% ECHO 0
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				FOR /F %%X IN ('%EXEGREP% -Fxf DB_EXEC\THREAT\NETWORK\DEL_DNS_ADDRESS.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :RESET_DNS DEVS DHCP
			) ELSE (
				ENDLOCAL
			)
			SETLOCAL ENABLEDELAYEDEXPANSION
			<VARIABLE\!VCHECK! SET /P CHCK=
			IF !CHCK! EQU 0 (
				ENDLOCAL
				FOR /F %%X IN ('%EXEGREP% -xf DB_EXEC\ACTIVESCAN\NETWORK\PATTERN_DNS_ADDRESS.DB VARIABLE\%VTEXT2% 2^>Nul') DO CALL :RESET_DNS DEVS DHCP
			) ELSE (
				ENDLOCAL
			)
		)
	)
)
SETLOCAL ENABLEDELAYEDEXPANSION
<VARIABLE\!VSEARCH! SET /P SRCH=
IF !SRCH! EQU 0 (
	ENDLOCAL
	ECHO    문제점이 발견되지 않았습니다. & >>"%QLog%" ECHO    문제점이 발견되지 않음
) ELSE (
	ENDLOCAL
	>VARIABLE\%VXXYY% ECHO 1
	ECHO. & >>"%QLog%" ECHO.
	ECHO ⓘ 상태 초기화 후 네트워크 연결이 불가할 경우, ^<3. 문제 해결^> 문서 ^<문제 07^> 항목 참고 & >>"%QLog%" ECHO    ⓘ 상태 초기화 후 네트워크 연결이 불가할 경우, ^<3. 문제 해결^> 문서 ^<문제 07^> 항목 참고
)
REM :Reset Value
CALL :RESET_VALUE

TITLE %MZTITLE% 2>Nul & PING.EXE -n 2 0 >Nul 2>Nul & ECHO. & >>"%QLog%" ECHO.

REM * Delete - Temporary & Cache Files #2
IF NOT "%CACHEPROTECT%" == "1" (
	ECHO ◇ 임시 파일/폴더 정리중 - 2차 . . .
	TITLE ^(정리중^) 잠시만 기다려주세요 ^(시간이 다소 소요될 수 있음^) . . . 2>Nul

	DEL /F /Q /S /A "%SYSTEMROOT%\Temp" >Nul 2>Nul
	DEL /F /Q /S /A "%SYSTEMROOT%\System32\Temp" >Nul 2>Nul
	DEL /F /Q /S /A "%SYSTEMROOT%\SysWOW64\Temp" >Nul 2>Nul
	DEL /F /Q /S /A "%SYSTEMROOT%\SystemTemp" >Nul 2>Nul
	DEL /F /Q /S /A "%APPDATA%\Temp" >Nul 2>Nul
	DEL /F /Q /S /A "%LOCALAPPDATA%\Microsoft\Windows\INetCache\Content.IE5\*" >Nul 2>Nul
	DEL /F /Q /S /A "%LOCALAPPDATA%\Microsoft\Windows\INetCache\IE\*" >Nul 2>Nul
	DEL /F /Q /S /A "%LOCALAPPDATA%\Microsoft\Windows\INetCache\Low\Content.IE5\*" >Nul 2>Nul
	DEL /F /Q /S /A "%LOCALAPPDATA%\Microsoft\Windows\INetCache\Low\IE\*" >Nul 2>Nul
	DEL /F /Q /S /A "%TEMP%" >Nul 2>Nul
	DEL /F /Q /A "%APPDATA%\*.TMP" >Nul 2>Nul
	DEL /F /Q /A "%LOCALAPPDATA%\*.TMP" >Nul 2>Nul
	DEL /F /Q /A "%LOCALAPPDATA%\Microsoft\Windows\INetCache\*" >Nul 2>Nul
	DEL /F /Q /A "%LOCALAPPDATA%\Microsoft\Windows\INetCache\Low\*" >Nul 2>Nul
	DEL /F /Q /A "%LOCALLOWAPPDATA%\*.TMP" >Nul 2>Nul

	FOR /F "DELIMS=" %%A IN ('TYPE DB_EXEC\CHECK\CHK_PROCESSKILL_BROWSER+NC.DB 2^>Nul') DO (
		TOOLS\TASKS\TASKKILL.EXE /F /IM "%%A" >Nul 2>Nul
	)
	FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%LOCALAPPDATA%\Chromium\User Data\" 2^>Nul^|%EXEGREP% -Fixf DB_EXEC\CHECK\CHK_BROWSER_CHROMEPROFILE+NC.DB 2^>Nul') DO (
		DEL /F /Q /A "%LOCALAPPDATA%\Chromium\User Data\%%A\Cache\*" >Nul 2>Nul
		DEL /F /Q /A "%LOCALAPPDATA%\Chromium\User Data\%%A\Code Cache\*" >Nul 2>Nul
	)
	FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%LOCALAPPDATA%\Google\Chrome\User Data\" 2^>Nul^|%EXEGREP% -Fixf DB_EXEC\CHECK\CHK_BROWSER_CHROMEPROFILE+NC.DB 2^>Nul') DO (
		DEL /F /Q /A "%LOCALAPPDATA%\Google\Chrome\User Data\%%A\Cache\*" >Nul 2>Nul
		DEL /F /Q /A "%LOCALAPPDATA%\Google\Chrome\User Data\%%A\Code Cache\*" >Nul 2>Nul
	)
	FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%LOCALAPPDATA%\Microsoft\Edge\User Data\" 2^>Nul^|%EXEGREP% -Fixf DB_EXEC\CHECK\CHK_BROWSER_CHROMEPROFILE+NC.DB 2^>Nul') DO (
		DEL /F /Q /A "%LOCALAPPDATA%\Microsoft\Edge\User Data\%%A\Cache\*" >Nul 2>Nul
		DEL /F /Q /A "%LOCALAPPDATA%\Microsoft\Edge\User Data\%%A\Code Cache\*" >Nul 2>Nul
	)
	FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%LOCALAPPDATA%\Naver\Naver Whale\User Data\" 2^>Nul^|%EXEGREP% -Fixf DB_EXEC\CHECK\CHK_BROWSER_CHROMEPROFILE+NC.DB 2^>Nul') DO (
		DEL /F /Q /A "%LOCALAPPDATA%\Naver\Naver Whale\User Data\%%A\Cache\*" >Nul 2>Nul
		DEL /F /Q /A "%LOCALAPPDATA%\Naver\Naver Whale\User Data\%%A\Code Cache\*" >Nul 2>Nul
	)
	FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%LOCALAPPDATA%\Vivaldi\User Data\" 2^>Nul^|%EXEGREP% -Fixf DB_EXEC\CHECK\CHK_BROWSER_CHROMEPROFILE+NC.DB 2^>Nul') DO (
		DEL /F /Q /A "%LOCALAPPDATA%\Vivaldi\User Data\%%A\Cache\*" >Nul 2>Nul
		DEL /F /Q /A "%LOCALAPPDATA%\Vivaldi\User Data\%%A\Code Cache\*" >Nul 2>Nul
	)
	FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%LOCALAPPDATA%\Mozilla\Firefox\Profiles\" 2^>Nul') DO (
		DEL /F /Q /A "%LOCALAPPDATA%\Mozilla\Firefox\Profiles\%%A\Cache\Entries\*" >Nul 2>Nul
		DEL /F /Q /A "%LOCALAPPDATA%\Mozilla\Firefox\Profiles\%%A\Cache2\Entries\*" >Nul 2>Nul
	)
	FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%LOCALAPPDATA%\Microsoft\Windows\INetCache\Content.IE5\" 2^>Nul') DO (
		RMDIR /S /Q "%LOCALAPPDATA%\Microsoft\Windows\INetCache\Content.IE5\%%A" >Nul 2>Nul
	)
	FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%LOCALAPPDATA%\Microsoft\Windows\INetCache\IE\" 2^>Nul') DO (
		RMDIR /S /Q "%LOCALAPPDATA%\Microsoft\Windows\INetCache\IE\%%A" >Nul 2>Nul
	)
	FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%LOCALAPPDATA%\Microsoft\Windows\INetCache\Low\Content.IE5\" 2^>Nul') DO (
		RMDIR /S /Q "%LOCALAPPDATA%\Microsoft\Windows\INetCache\Low\Content.IE5\%%A" >Nul 2>Nul
	)
	FOR /F "DELIMS=" %%A IN ('DIR /B /AD "%LOCALAPPDATA%\Microsoft\Windows\INetCache\Low\IE\" 2^>Nul') DO (
		RMDIR /S /Q "%LOCALAPPDATA%\Microsoft\Windows\INetCache\Low\IE\%%A" >Nul 2>Nul
	)

	IF EXIST "%SYSTEMROOT%\System32\InetCpl.cpl" (
		RUNDLL32.EXE InetCpl.cpl,ClearMyTracksByProcess 4 >Nul 2>Nul
	)

	ECHO    완료되었습니다.

	TITLE %MZTITLE% 2>Nul & PING.EXE -n 2 0 >Nul 2>Nul & ECHO.
)

REM * Reset - Restart DNS Client Service
SETLOCAL ENABLEDELAYEDEXPANSION
SC.EXE STOP DNSCACHE >Nul 2>Nul
IF !ERRORLEVEL! NEQ 1062 (
	IF !ERRORLEVEL! EQU 0 (
		SC.EXE START DNSCACHE >Nul 2>Nul
	)
)
ENDLOCAL

IPCONFIG.EXE /FLUSHDNS >Nul 2>Nul

<VARIABLE\%VXXXX% SET /P XXXX=
<VARIABLE\%VXXYY% SET /P XXYY=
IF %XXXX% EQU 0 (
	IF %XXYY% EQU 0 (
		COLOR 2F
	) ELSE (
		COLOR 6F
	)
)

REM * Reset - Count Value (All)
CALL :RESET_VALUE ALL

%EXESETACL% -on "%QFolders%" -ot file -actn rstchldrn -rst "dacl,sacl" -silent >Nul 2>Nul

RMDIR "%QRoot%\Files\%RPTDATE%" /Q >Nul 2>Nul
RMDIR "%QRoot%\Folders\%RPTDATE%" /Q >Nul 2>Nul
RMDIR "%QRoot%\Registrys\%RPTDATE%" /Q >Nul 2>Nul

REM * Check - Service Start
FOR /F "DELIMS=" %%A IN ('TYPE DB_EXEC\CHECK\CHK_SERVICE_START+C.DB 2^>Nul') DO (
	SC.EXE START "%%A" >Nul 2>Nul
)

REM * Finished
ECHO =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
ECHO.
ECHO ◇ 검사 완료 . . .

PING.EXE -n 2 0 >Nul 2>Nul

>>"%QLog%" ECHO -- 정보 --
>>"%QLog%" ECHO.
>>"%QLog%" ECHO    Web : https://malzero.xyz
>>"%QLog%" ECHO    Virus Zero - Security Community : https://cafe.naver.com/malzero
>>"%QLog%" ECHO    Batch Script : ViOLeT ^(archguru^)
>>"%QLog%" ECHO.
>>"%QLog%" ECHO    경고 ^! 타 사이트/카페/블로그/토렌트 등에서 배포/개작 및 상업적 이용 절대 금지 ^! ^(발견시 신고 요망^)
>>"%QLog%" ECHO.
>>"%QLog%" ECHO -- E --

GOTO END

:FAILED
ECHO ⓘ 오류: 실행 권한 없음 ^(관리자 권한으로 실행 필수^)
ECHO.
ECHO → 해결: 실행 파일 선택 후 마우스 오른쪽 버튼을 클릭하여 "관리자 권한으로 실행" 항목 클릭
GOTO END

:NOFILE
ECHO ⓘ 오류: 필수 파일이 존재하지 않거나 압축된 상태로 실행
ECHO.
ECHO → 원인: "%STRTMP%"
ECHO.
ECHO → 해결: 동봉되어 있는 ^<3. 문제 해결^> 문서 ^<문제 02^> 항목 참고
GOTO END

:NOSYSF
ECHO ⓘ 오류: 시스템 파일이 존재하지 않음
ECHO.
ECHO → 원인: "%STRTMP%"
GOTO END

:FAILEDOS
ECHO ⓘ 오류: 지원하지 않는 운영체제
ECHO.
ECHO → 현재 지원 중인 운영체제
ECHO.
ECHO    Microsoft Windows 10, 11
ECHO    Microsoft Windows Server 2016, 2019, 2022
GOTO END

:NOVAR
ECHO ⓘ 오류: 필수 환경 변수가 존재하지 않거나 올바르지 않음
ECHO.
ECHO → 해결: 환경 변수 설정 점검
ECHO.
ECHO    램 디스크 캐싱을 루트 폴더로 지정했을 경우에도 발생 가능
GOTO END

:MALWARE
ECHO ⓘ 오류: 악성코드에 의한 실행 방해
ECHO.
ECHO → 해결: 동봉되어 있는 ^<3. 문제 해결^> 문서 ^<문제 09^> 항목 참고
GOTO END

:REGBLOCK
ECHO ⓘ 오류: 레지스트리 편집 권한 없음
ECHO.
ECHO → 해결: 동봉되어 있는 ^<3. 문제 해결^> 문서 ^<문제 02^> 항목 참고
GOTO END

:NOCOUNT
ECHO ⓘ 오류: 데이터베이스 파일 구성이 일치하지 않음 ^(또는 실행 파일 변조^)
ECHO.
ECHO → 해결: 기존에 압축 해제한 도구 파일 및 폴더 전체 삭제 후 새로 압축 해제 및 실행
ECHO          문제가 지속될 경우 ^<3. 문제 해결^> 문서 ^<문제 02^> 항목 참고
GOTO END

:NOTEMP
ECHO ⓘ 오류: 임시 폴더 내부에서 실행
ECHO.
ECHO → 해결: 임시 폴더를 제외한 다른 폴더에서 압축 해제 후 실행
GOTO END

:NOSTATUS
ECHO ⓘ 오류: 명령 프롬프트 환경에 오류가 있음
ECHO.
ECHO → 해결: 관련 오류 제거
GOTO END

:DELETE_SERVICE
SETLOCAL ENABLEDELAYEDEXPANSION
>VARIABLE\!VCHECK! ECHO 1
SET TXT1=
<VARIABLE\!VTEXT1! SET /P TXT1=
SET "TXT1=!TXT1:"=\"!"
IF NOT DEFINED TXT1 (
	ENDLOCAL
	GOTO :EOF
)
SET TXT2=
<VARIABLE\!VTEXT2! SET /P TXT2=
SET "TXT2TXT=!TXT2!"
SET "TXT2=!TXT2:"=\"!"
IF NOT DEFINED TXT2 (
	ENDLOCAL
	GOTO :EOF
)
IF "%~1" == "" (
	ENDLOCAL
	GOTO :EOF
)
IF "%~2" == "" (
	ENDLOCAL
	GOTO :EOF
)
IF "%~3" == "" (
	ENDLOCAL
	GOTO :EOF
)
IF /I "%~1" == "ACTIVESCAN" (
	SET ACTIVESCAN=1
) ELSE (
	SET ACTIVESCAN=0
)
IF /I "%~2" == "BACKUP" (
	IF /I NOT "%~3" == "NULL" (
		IF NOT EXIST "!QRegistries!\Services%~3_!TIME::=.!_!RANDOM!.reg" (
			REG.EXE EXPORT "!TXT1!\!TXT2!" "!QRegistries!\%~3_!TIME::=.!_!RANDOM!.reg" /y >Nul 2>Nul
		)
	)
)
!EXESETACL! -on "!TXT2!" -ot srv -actn ace -ace "n:Everyone;p:full" -ace "n:Administrators;p:full" -silent >Nul 2>Nul
!EXESETACL! -on "!TXT2!" -ot srv -actn trustee -trst "n1:Everyone;ta:remtrst;w:dacl" -silent >Nul 2>Nul
SC.EXE CONFIG "!TXT2!" START= DISABLED >Nul 2>Nul
SC.EXE STOP "!TXT2!" >Nul 2>Nul
IF !ERRORLEVEL! NEQ 1060 (
	IF !ERRORLEVEL! NEQ 0 (
		IF !ERRORLEVEL! NEQ 1062 (
			>VARIABLE\!VCHECK! ECHO 2
		)
	)
)
<VARIABLE\!VSEARCH! SET /P SRCH=
SET /A SRCH+=1
>VARIABLE\!VSEARCH! ECHO !SRCH!
SC.EXE DELETE "!TXT2!" >Nul 2>Nul
IF !ERRORLEVEL! EQU 0 (
	REG.EXE DELETE "HKLM\System\CurrentControlSet\Services\!TXT2!" /f >Nul 2>Nul
	<VARIABLE\!VCHECK! SET /P CHCK=
	<VARIABLE\!VSUCCESS! SET /P SUCC=
	SET /A SUCC+=1
	>VARIABLE\!VSUCCESS! ECHO !SUCC!
	IF !CHCK! LEQ 1 (
		IF !ACTIVESCAN! EQU 1 (
			>>"!QLog!" ECHO    "!TXT2TXT!" ^(격리/제거 성공 ^[Active Scan^]^)
		) ELSE (
			>>"!QLog!" ECHO    "!TXT2TXT!" ^(격리/제거 성공^)
		)
	) ELSE (
		<VARIABLE\!VREBOOT! SET /P RECK=
		SET /A RECK+=1
		>VARIABLE\!VREBOOT! ECHO !RECK!
		IF !ACTIVESCAN! EQU 1 (
			>>"!QLog!" ECHO    "!TXT2TXT!" ^(격리/제거 성공 - 재부팅 후 제거됨 ^[Active Scan^]^)
		) ELSE (
			>>"!QLog!" ECHO    "!TXT2TXT!" ^(격리/제거 성공 - 재부팅 후 제거됨^)
		)
	)
) ELSE (
	REG.EXE DELETE "HKLM\System\CurrentControlSet\Services\!TXT2!" /f >Nul 2>Nul
	IF !ERRORLEVEL! EQU 0 (
		<VARIABLE\!VSUCCESS! SET /P SUCC=
		SET /A SUCC+=1
		>VARIABLE\!VSUCCESS! ECHO !SUCC!
		IF !ACTIVESCAN! EQU 1 (
			>>"!QLog!" ECHO    "!TXT2TXT!" ^(격리/제거 성공 ^[Active Scan^]^)
		) ELSE (
			>>"!QLog!" ECHO    "!TXT2TXT!" ^(격리/제거 성공^)
		)
	) ELSE (
		<VARIABLE\!VFAIL! SET /P FAIL=
		SET /A FAIL+=1
		>VARIABLE\!VFAIL! ECHO !FAIL!
		IF !ACTIVESCAN! EQU 1 (
			>>"!QLog!" ECHO    "!TXT2TXT!" ^(제거 실패 ^[Active Scan^]^)
		) ELSE (
			>>"!QLog!" ECHO    "!TXT2TXT!" ^(제거 실패^)
		)
	)
)
ENDLOCAL
GOTO :EOF

:DELETE_BITS
SETLOCAL ENABLEDELAYEDEXPANSION
>VARIABLE\!VCHECK! ECHO 1
IF "%~1" == "" (
	ENDLOCAL
	GOTO :EOF
)
IF "%~2" == "" (
	ENDLOCAL
	GOTO :EOF
)
IF /I "%1" == "ACTIVESCAN" (
	SET ACTIVESCAN=1
) ELSE (
	SET ACTIVESCAN=0
)
<VARIABLE\!VSEARCH! SET /P SRCH=
SET /A SRCH+=1
>VARIABLE\!VSEARCH! ECHO !SRCH!
>>"!QFiles!\%~2.bitsadmin" BITSADMIN.EXE /INFO "%~2" /VERBOSE
BITSADMIN.EXE /CANCEL "%~2" >Nul 2>Nul
IF !ERRORLEVEL! EQU 0 (
	<VARIABLE\!VSUCCESS! SET /P SUCC=
	SET /A SUCC+=1
	>VARIABLE\!VSUCCESS! ECHO !SUCC!
	IF !ACTIVESCAN! EQU 1 (
		>>"!QLog!" ECHO    "%~2" ^(격리/제거 성공 ^[Active Scan^]^)
	) ELSE (
		>>"!QLog!" ECHO    "%~2" ^(격리/제거 성공^)
	)
) ELSE (
	<VARIABLE\!VFAIL! SET /P FAIL=
	SET /A FAIL+=1
	>VARIABLE\!VFAIL! ECHO !FAIL!
	IF !ACTIVESCAN! EQU 1 (
		>>"!QLog!" ECHO    "%~2" ^(제거 실패 ^[Active Scan^]^)
	) ELSE (
		>>"!QLog!" ECHO    "%~2" ^(제거 실패^)
	)
)
ENDLOCAL
GOTO :EOF

:DELETE_FILE
SETLOCAL ENABLEDELAYEDEXPANSION
SET TXT1=
<VARIABLE\!VTEXT1! SET /P TXT1=
IF NOT DEFINED TXT1 (
	ENDLOCAL
	GOTO :EOF
)
SET TXT2=
<VARIABLE\!VTEXT2! SET /P TXT2=
IF NOT DEFINED TXT2 (
	ENDLOCAL
	GOTO :EOF
)
IF /I "%1" == "ACTIVESCAN" (
	SET ACTIVESCAN=1
) ELSE (
	SET ACTIVESCAN=0
)
<VARIABLE\!VSEARCH! SET /P SRCH=
SET /A SRCH+=1
>VARIABLE\!VSEARCH! ECHO !SRCH!
POWERSHELL.EXE -C "(Get-WmiObject Win32_Process -Filter \"ExecutablePath LIKE '!TXT1:\=\\!!TXT2:\=\\!'\").Terminate()" >Nul 2>Nul
!EXESETACL! -on "!TXT1!!TXT2!" -ot file -actn setowner -ownr "n:Administrators" -rec obj -silent >Nul 2>Nul
!EXESETACL! -on "!TXT1!!TXT2!" -ot file -actn clear -clr "dacl,sacl" -actn setprot -op "dacl:np;sacl:np" -rec obj -silent >Nul 2>Nul
!EXESETACL! -on "!TXT1!!TXT2!" -ot file -actn ace -ace "n:Everyone;p:full" -ace "n:Administrators;p:full" -rec obj -silent >Nul 2>Nul
ATTRIB.EXE -R -H -S "!TXT1!!TXT2!" >Nul 2>Nul
COPY /Y "!TXT1!!TXT2!" "!QFiles!\!TXT2!.!TIME::=.!.vz" >Nul 2>Nul
IF !ERRORLEVEL! EQU 0 DEL /F /Q /A "!TXT1!!TXT2!" >Nul 2>Nul
IF NOT EXIST "!TXT1!!TXT2!" (
	<VARIABLE\!VSUCCESS! SET /P SUCC=
	SET /A SUCC+=1
	>VARIABLE\!VSUCCESS! ECHO !SUCC!
	IF !ACTIVESCAN! EQU 1 (
		>>"!QLog!" ECHO    "!TXT1!!TXT2!" ^(격리/제거 성공 ^[Active Scan^]^)
	) ELSE (
		>>"!QLog!" ECHO    "!TXT1!!TXT2!" ^(격리/제거 성공^)
	)
) ELSE (
	REN "!TXT1!!TXT2!" "!TXT2!.infected" >Nul 2>Nul
	IF NOT EXIST "!TXT1!!TXT2!" (
		<VARIABLE\!VSUCCESS! SET /P SUCC=
		SET /A SUCC+=1
		>VARIABLE\!VSUCCESS! ECHO !SUCC!
		<VARIABLE\!VREBOOT! SET /P RECK=
		SET /A RECK+=1
		>VARIABLE\!VREBOOT! ECHO !RECK!
		IF !ACTIVESCAN! EQU 1 (
			>>"!QLog!" ECHO    "!TXT1!!TXT2!" ^(임시 제거 - 재부팅 후 재검사 필요 ^[Active Scan^]^)
		) ELSE (
			>>"!QLog!" ECHO    "!TXT1!!TXT2!" ^(임시 제거 - 재부팅 후 재검사 필요^)
		)
	) ELSE (
		<VARIABLE\!VFAIL! SET /P FAIL=
		SET /A FAIL+=1
		>VARIABLE\!VFAIL! ECHO !FAIL!
		IF !ACTIVESCAN! EQU 1 (
			>>"!QLog!" ECHO    "!TXT1!!TXT2!" ^(제거 실패 ^[Active Scan^]^)
		) ELSE (
			>>"!QLog!" ECHO    "!TXT1!!TXT2!" ^(제거 실패^)
		)
	)
)
>>DB_ACTIVE\ACT_FILE_AUTORUN_!UNIQ!.DB ECHO "!TXT1!!TXT2!"
ENDLOCAL
GOTO :EOF

:DELETE_DIRECTORY
SETLOCAL ENABLEDELAYEDEXPANSION
SET TXT1=
<VARIABLE\!VTEXT1! SET /P TXT1=
IF NOT DEFINED TXT1 (
	ENDLOCAL
	GOTO :EOF
)
SET TXT2=
<VARIABLE\!VTEXT2! SET /P TXT2=
IF NOT DEFINED TXT2 (
	ENDLOCAL
	GOTO :EOF
)
IF /I "%1" == "ACTIVESCAN" (
	SET ACTIVESCAN=1
) ELSE (
	SET ACTIVESCAN=0
)
<VARIABLE\!VSEARCH! SET /P SRCH=
SET /A SRCH+=1
>VARIABLE\!VSEARCH! ECHO !SRCH!
POWERSHELL.EXE -C "(Get-WmiObject Win32_Process -Filter \"ExecutablePath LIKE '!TXT1:\=\\!!TXT2:\=\\!%'\").Terminate()" >Nul 2>Nul
!EXESETACL! -on "!TXT1!!TXT2!" -ot file -actn setowner -ownr "n:Administrators" -rec cont_obj -silent >Nul 2>Nul
!EXESETACL! -on "!TXT1!!TXT2!" -ot file -actn clear -clr "dacl,sacl" -actn setprot -op "dacl:np;sacl:np" -rec cont_obj -silent >Nul 2>Nul
!EXESETACL! -on "!TXT1!!TXT2!" -ot file -actn ace -ace "n:Everyone;p:full" -ace "n:Administrators;p:full" -rec cont_obj -silent >Nul 2>Nul
ATTRIB.EXE -R -H -S "!TXT1!!TXT2!" >Nul 2>Nul
ATTRIB.EXE -R -H -S "!TXT1!!TXT2!\*" /S /D >Nul 2>Nul
XCOPY.EXE "!TXT1!!TXT2!" "!QFolders!\!TXT2!.!TIME::=.!" /S /E /C /I /Q /H /R /Y >Nul 2>Nul
IF !ERRORLEVEL! EQU 0 RMDIR "!TXT1!!TXT2!" /S /Q >Nul 2>Nul
IF NOT EXIST "!TXT1!!TXT2!\" (
	<VARIABLE\!VSUCCESS! SET /P SUCC=
	SET /A SUCC+=1
	>VARIABLE\!VSUCCESS! ECHO !SUCC!
	IF !ACTIVESCAN! EQU 1 (
		>>"!QLog!" ECHO    "!TXT1!!TXT2!" ^(격리/제거 성공 ^[Active Scan^]^)
	) ELSE (
		>>"!QLog!" ECHO    "!TXT1!!TXT2!" ^(격리/제거 성공^)
	)
) ELSE (
	<VARIABLE\!VFAIL! SET /P FAIL=
	SET /A FAIL+=1
	>VARIABLE\!VFAIL! ECHO !FAIL!
	IF !ACTIVESCAN! EQU 1 (
		>>"!QLog!" ECHO    "!TXT1!!TXT2!" ^(제거 실패 ^[Active Scan^]^)
	) ELSE (
		>>"!QLog!" ECHO    "!TXT1!!TXT2!" ^(제거 실패^)
	)
)
>>DB_ACTIVE\ACT_DIRECTORY_AUTORUN_!UNIQ!.DB ECHO "!TXT1!!TXT2!\"
ENDLOCAL
GOTO :EOF

:DELETE_REG_KEY
SETLOCAL ENABLEDELAYEDEXPANSION
>VARIABLE\!VCHECK! ECHO 1
SET TXT1=
<VARIABLE\!VTEXT1! SET /P TXT1=
IF "%~4" == "1" (
	SET "TXT1TXT=!TXT1:~0,-1!"
	SET "TXT1=!TXT1:"=\"!"
	SET "TXT1=!TXT1:~0,-1!"
) ELSE (
	SET "TXT1TXT=!TXT1!"
	SET "TXT1=!TXT1:"=\"!"
)
IF NOT DEFINED TXT1 (
	ENDLOCAL
	GOTO :EOF
)
SET TXT2=
<VARIABLE\!VTEXT2! SET /P TXT2=
SET "TXT2TXT=!TXT2!"
SET "TXT2=!TXT2:"=\"!"
IF NOT DEFINED TXT2 (
	ENDLOCAL
	GOTO :EOF
)
IF "%~1" == "" (
	ENDLOCAL
	GOTO :EOF
)
IF "%~2" == "" (
	ENDLOCAL
	GOTO :EOF
)
IF "%~3" == "" (
	ENDLOCAL
	GOTO :EOF
)
IF /I "%~1" == "ACTIVESCAN" (
	SET ACTIVESCAN=1
) ELSE (
	SET ACTIVESCAN=0
)
IF /I "%~2" == "BACKUP" (
	IF /I NOT "%~3" == "NULL" (
		IF NOT EXIST "!QRegistries!\%~3_!TIME::=.!_!RANDOM!.reg" (
			REG.EXE EXPORT "!TXT1!\!TXT2!" "!QRegistries!\%~3_!TIME::=.!_!RANDOM!.reg" /y >Nul 2>Nul
		)
	)
)
<VARIABLE\!VSEARCH! SET /P SRCH=
SET /A SRCH+=1
>VARIABLE\!VSEARCH! ECHO !SRCH!
REG.EXE DELETE "!TXT1!\!TXT2!" /f >Nul 2>Nul
IF !ERRORLEVEL! EQU 0 (
	<VARIABLE\!VSUCCESS! SET /P SUCC=
	SET /A SUCC+=1
	>VARIABLE\!VSUCCESS! ECHO !SUCC!
	IF !ACTIVESCAN! EQU 1 (
		>>"!QLog!" ECHO    "!TXT1TXT!\!TXT2TXT!" ^(격리/제거 성공 ^[Active Scan^]^)
	) ELSE (
		>>"!QLog!" ECHO    "!TXT1TXT!\!TXT2TXT!" ^(격리/제거 성공^)
	)
) ELSE (
	!EXESETACL! -on "!TXT1!\!TXT2!" -ot reg -actn setowner -ownr "n:Administrators" -rec yes -silent >Nul 2>Nul
	!EXESETACL! -on "!TXT1!\!TXT2!" -ot reg -actn clear -clr "dacl,sacl" -actn setprot -op "dacl:np;sacl:np" -rec yes -silent >Nul 2>Nul
	!EXESETACL! -on "!TXT1!\!TXT2!" -ot reg -actn ace -ace "n:Everyone;p:full" -ace "n:Administrators;p:full" -rec yes -silent >Nul 2>Nul
	REG.EXE DELETE "!TXT1!\!TXT2!" /f >Nul 2>Nul
	IF !ERRORLEVEL! EQU 0 (
		<VARIABLE\!VSUCCESS! SET /P SUCC=
		SET /A SUCC+=1
		>VARIABLE\!VSUCCESS! ECHO !SUCC!
		IF !ACTIVESCAN! EQU 1 (
			>>"!QLog!" ECHO    "!TXT1TXT!\!TXT2TXT!" ^(격리/제거 성공 ^[Active Scan^]^)
		) ELSE (
			>>"!QLog!" ECHO    "!TXT1TXT!\!TXT2TXT!" ^(격리/제거 성공^)
		)
	) ELSE (
		<VARIABLE\!VFAIL! SET /P FAIL=
		SET /A FAIL+=1
		>VARIABLE\!VFAIL! ECHO !FAIL!
		IF !ACTIVESCAN! EQU 1 (
			>>"!QLog!" ECHO    "!TXT1TXT!\!TXT2TXT!" ^(제거 실패 ^[Active Scan^]^)
		) ELSE (
			>>"!QLog!" ECHO    "!TXT1TXT!\!TXT2TXT!" ^(제거 실패^)
		)
	)
)
ENDLOCAL
GOTO :EOF

:DELETE_REG_VALUE
SETLOCAL ENABLEDELAYEDEXPANSION
>VARIABLE\!VCHECK! ECHO 1
SET TXT1=
<VARIABLE\!VTEXT1! SET /P TXT1=
SET "TXT1TXT=!TXT1!"
SET "TXT1=!TXT1:"=\"!"
IF NOT DEFINED TXT1 (
	ENDLOCAL
	GOTO :EOF
)
SET TXT2=
<VARIABLE\!VTEXT2! SET /P TXT2=
SET "TXT2TXT=!TXT2!"
SET "TXT2=!TXT2:"=\"!"
IF NOT DEFINED TXT2 (
	ENDLOCAL
	GOTO :EOF
)
IF "%~1" == "" (
	ENDLOCAL
	GOTO :EOF
)
IF "%~2" == "" (
	ENDLOCAL
	GOTO :EOF
)
IF "%~3" == "" (
	ENDLOCAL
	GOTO :EOF
)
IF "%~4" == "" (
	ENDLOCAL
	GOTO :EOF
)
IF /I "%~1" == "ACTIVESCAN" (
	SET ACTIVESCAN=1
) ELSE (
	SET ACTIVESCAN=0
)
IF /I "%~2" == "BACKUP" (
	IF /I NOT "%~4" == "NULL" (
		IF /I "%~3" == "RANDOM" (
			IF NOT EXIST "!QRegistries!\%~4_!TIME::=.!_!RANDOM!.reg" (
				REG.EXE EXPORT "!TXT1!" "!QRegistries!\%~4_!TIME::=.!_!RANDOM!.reg" /y >Nul 2>Nul
			)
		) ELSE (
			IF NOT EXIST "!QRegistries!\%~4.reg" (
				REG.EXE EXPORT "!TXT1!" "!QRegistries!\%~4.reg" /y >Nul 2>Nul
			)
		)
	)
)
<VARIABLE\!VSEARCH! SET /P SRCH=
SET /A SRCH+=1
>VARIABLE\!VSEARCH! ECHO !SRCH!
REG.EXE DELETE "!TXT1!" /v "!TXT2!" /f >Nul 2>Nul
IF !ERRORLEVEL! EQU 0 (
	<VARIABLE\!VSUCCESS! SET /P SUCC=
	SET /A SUCC+=1
	>VARIABLE\!VSUCCESS! ECHO !SUCC!
	IF !ACTIVESCAN! EQU 1 (
		>>"!QLog!" ECHO    "!TXT1TXT! : !TXT2TXT!" ^(격리/제거 성공 ^[Active Scan^]^)
	) ELSE (
		>>"!QLog!" ECHO    "!TXT1TXT! : !TXT2TXT!" ^(격리/제거 성공^)
	)
) ELSE (
	>VARIABLE\!VDENY! ECHO.
	FOR /F "DELIMS=" %%V IN ('!EXESETACL! -on "!TXT1!" -ot reg -actn list -lst f:tab 2^>Nul^|!EXEGREP! [[:space:]]\{3\}deny[[:space:]]\{3\} 2^>Nul') DO (
		SET "DENY=%%V"
		SET "DENY=!DENY:   =¶!"
		>>VARIABLE\!VDENY! ECHO !DENY!
	)
	FOR /F "TOKENS=1,2 DELIMS=¶" %%V IN (VARIABLE\!VDENY!) DO (
		!EXESETACL! -on "!TXT1!" -ot reg -actn trustee -trst "n1:%%V;ta:remtrst;w:dacl" -silent >Nul 2>Nul
	)
	REG.EXE DELETE "!TXT1!" /v "!TXT2!" /f >Nul 2>Nul
	IF !ERRORLEVEL! EQU 0 (
		<VARIABLE\!VSUCCESS! SET /P SUCC=
		SET /A SUCC+=1
		>VARIABLE\!VSUCCESS! ECHO !SUCC!
		IF !ACTIVESCAN! EQU 1 (
			>>"!QLog!" ECHO    "!TXT1TXT! : !TXT2TXT!" ^(격리/제거 성공 ^[Active Scan^]^)
		) ELSE (
			>>"!QLog!" ECHO    "!TXT1TXT! : !TXT2TXT!" ^(격리/제거 성공^)
		)
	) ELSE (
		<VARIABLE\!VFAIL! SET /P FAIL=
		SET /A FAIL+=1
		>VARIABLE\!VFAIL! ECHO !FAIL!
		IF !ACTIVESCAN! EQU 1 (
			>>"!QLog!" ECHO    "!TXT1TXT! : !TXT2TXT!" ^(제거 실패 ^[Active Scan^]^)
		) ELSE (
			>>"!QLog!" ECHO    "!TXT1TXT! : !TXT2TXT!" ^(제거 실패^)
		)
	)
)
ENDLOCAL
GOTO :EOF

:DELETE_WMI
SETLOCAL ENABLEDELAYEDEXPANSION
>VARIABLE\!VCHECK! ECHO 1
SET TXT1=
<VARIABLE\!VTEXT3! SET /P TXT1=
SET "TXT1TXT=!TXT1!"
SET "TXT1=!TXT1:"=\"!"
IF NOT DEFINED TXT1 (
	ENDLOCAL
	GOTO :EOF
)
IF "%~1" == "" (
	ENDLOCAL
	GOTO :EOF
)
<VARIABLE\!VSEARCH! SET /P SRCH=
SET /A SRCH+=1
>VARIABLE\!VSEARCH! ECHO !SRCH!
IF "%~1" == "AS1" (
	POWERSHELL.EXE -C "Get-WMIObject -Namespace root\default -Class ActiveScriptEventConsumer -Filter \"Name = '!TXT1!'\"|Remove-WMIObject" >Nul 2>Nul
)
IF "%~1" == "AS2" (
	POWERSHELL.EXE -C "Get-WMIObject -Namespace root\Subscription -Class ActiveScriptEventConsumer -Filter \"Name = '!TXT1!'\"|Remove-WMIObject" >Nul 2>Nul
)
IF "%~1" == "CL1" (
	POWERSHELL.EXE -C "Get-WMIObject -Namespace root\default -Class CommandLineEventConsumer -Filter \"Name = '!TXT1!'\"|Remove-WMIObject" >Nul 2>Nul
)
IF "%~1" == "CL2" (
	POWERSHELL.EXE -C "Get-WMIObject -Namespace root\Subscription -Class CommandLineEventConsumer -Filter \"Name = '!TXT1!'\"|Remove-WMIObject" >Nul 2>Nul
)
IF "%~1" == "EV1" (
	POWERSHELL.EXE -C "Get-WMIObject -Namespace root\default -Class __EventFilter -Filter \"Name = '!TXT1!'\"|Remove-WMIObject" >Nul 2>Nul
)
IF "%~1" == "EV2" (
	POWERSHELL.EXE -C "Get-WMIObject -Namespace root\cimv2 -Class __EventFilter -Filter \"Name = '!TXT1!'\"|Remove-WMIObject" >Nul 2>Nul
)
IF "%~1" == "EV3" (
	POWERSHELL.EXE -C "Get-WMIObject -Namespace root\Subscription -Class __EventFilter -Filter \"Name = '!TXT1!'\"|Remove-WMIObject" >Nul 2>Nul
)
IF "%~1" == "IT1" (
	POWERSHELL.EXE -C "Get-WMIObject -Namespace root\default -Class __IntervalTimerInstruction -Filter \"TimerID = '!TXT1!'\"|Remove-WMIObject" >Nul 2>Nul
)
IF "%~1" == "IT2" (
	POWERSHELL.EXE -C "Get-WMIObject -Namespace root\cimv2 -Class __IntervalTimerInstruction -Filter \"TimerID = '!TXT1!'\"|Remove-WMIObject" >Nul 2>Nul
)
IF "%~1" == "IT3" (
	POWERSHELL.EXE -C "Get-WMIObject -Namespace root\Subscription -Class __IntervalTimerInstruction -Filter \"TimerID = '!TXT1!'\"|Remove-WMIObject" >Nul 2>Nul
)
IF "%~1" == "TI1" (
	POWERSHELL.EXE -C "Get-WMIObject -Namespace root\default -Class __TimerInstruction -Filter \"TimerID = '!TXT1!'\"|Remove-WMIObject" >Nul 2>Nul
)
IF "%~1" == "TI2" (
	POWERSHELL.EXE -C "Get-WMIObject -Namespace root\cimv2 -Class __TimerInstruction -Filter \"TimerID = '!TXT1!'\"|Remove-WMIObject" >Nul 2>Nul
)
IF "%~1" == "TI3" (
	POWERSHELL.EXE -C "Get-WMIObject -Namespace root\Subscription -Class __TimerInstruction -Filter \"TimerID = '!TXT1!'\"|Remove-WMIObject" >Nul 2>Nul
)
IF !ERRORLEVEL! EQU 0 (
	<VARIABLE\!VSUCCESS! SET /P SUCC=
	SET /A SUCC+=1
	>VARIABLE\!VSUCCESS! ECHO !SUCC!
	>>"!QLog!" ECHO    "!TXT1TXT!" ^(제거 성공^)
) ELSE (
	<VARIABLE\!VFAIL! SET /P FAIL=
	SET /A FAIL+=1
	>VARIABLE\!VFAIL! ECHO !FAIL!
	>>"!QLog!" ECHO    "!TXT1TXT!" ^(제거 실패^)
)
ENDLOCAL
GOTO :EOF

:RESET_DNS
SETLOCAL ENABLEDELAYEDEXPANSION
>VARIABLE\!VSEARCH! ECHO 1
>VARIABLE\!VCHECK! ECHO 1
SET TXT1=
<VARIABLE\!VTEXT1! SET /P TXT1=
SET "TXT1TXT=!TXT1!"
SET "TXT1=!TXT1:"=\"!"
IF NOT DEFINED TXT1 (
	ENDLOCAL
	GOTO :EOF
)
SET TXT2=
<VARIABLE\!VTEXT2! SET /P TXT2=
IF NOT DEFINED TXT2 (
	ENDLOCAL
	GOTO :EOF
)
IF "%~1" == "" (
	ENDLOCAL
	GOTO :EOF
)
IF "%~2" == "" (
	ENDLOCAL
	GOTO :EOF
)
IF /I "%~1" == "NULL" (
	IF /I "%~2" == "NULL" (
		REG.EXE ADD "HKLM\System\CurrentControlSet\Services\Tcpip\Parameters" /v "NameServer" /d "" /f >Nul 2>Nul
		IF !ERRORLEVEL! EQU 0 (
			IPCONFIG.EXE /RENEW >Nul 2>Nul
			IPCONFIG.EXE /REGISTERDNS >Nul 2>Nul
			IPCONFIG.EXE /FLUSHDNS >Nul 2>Nul
		)
		ECHO    비정상 값이 확인되어 초기화 진행 ^[ DNS 주소: !TXT2! ^] & >>"!QLog!" ECHO    비정상 값이 확인되어 초기화 진행 ^[ DNS 주소: !TXT2!, 장치: TCP-IP 공통 ^]
	)
	IF /I "%~1" == "DHCP" (
		REG.EXE ADD "HKLM\System\CurrentControlSet\Services\Tcpip\Parameters" /v "DhcpNameServer" /d "" /f >Nul 2>Nul
		IF !ERRORLEVEL! EQU 0 (
			IPCONFIG.EXE /RENEW >Nul 2>Nul
			IPCONFIG.EXE /REGISTERDNS >Nul 2>Nul
			IPCONFIG.EXE /FLUSHDNS >Nul 2>Nul
		)
		ECHO    비정상 값이 확인되어 초기화 진행 ^[ DHCP 주소: !TXT2! ^] & >>"!QLog!" ECHO    비정상 값이 확인되어 초기화 진행 ^[ DHCP 주소: !TXT2!, 장치: TCP-IP 공통 ^]
	)
)
IF /I "%~1" == "DEVS" (
	IF /I "%~2" == "NULL" (
		REG.EXE ADD "HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\!TXT1!" /v "NameServer" /d "" /f >Nul 2>Nul
		IF !ERRORLEVEL! EQU 0 (
			IPCONFIG.EXE /RENEW >Nul 2>Nul
			IPCONFIG.EXE /REGISTERDNS >Nul 2>Nul
			IPCONFIG.EXE /FLUSHDNS >Nul 2>Nul
		)
		ECHO    비정상 값이 확인되어 초기화 진행 ^[ DNS 주소: !TXT2! ^] & >>"!QLog!" ECHO    비정상 값이 확인되어 초기화 진행 ^[ DNS 주소: !TXT2!, 장치: !TXT1TXT! ^]
	)
	IF /I "%~2" == "DHCP" (
		REG.EXE ADD "HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\!TXT1!" /v "DhcpNameServer" /d "" /f >Nul 2>Nul
		IF !ERRORLEVEL! EQU 0 (
			IPCONFIG.EXE /RENEW >Nul 2>Nul
			IPCONFIG.EXE /REGISTERDNS >Nul 2>Nul
			IPCONFIG.EXE /FLUSHDNS >Nul 2>Nul
		)
		ECHO    비정상 값이 확인되어 초기화 진행 ^[ DHCP 주소: !TXT2! ^] & >>"!QLog!" ECHO    비정상 값이 확인되어 초기화 진행 ^[ DHCP 주소: !TXT2!, 장치: !TXT1TXT! ^]
	)
)
ENDLOCAL
GOTO :EOF

:RESET_SHORTCUT
SETLOCAL ENABLEDELAYEDEXPANSION
SET TXT1=
<VARIABLE\!VTEXT1! SET /P TXT1=
IF NOT DEFINED TXT1 (
	ENDLOCAL
	GOTO :EOF
)
SET TXT2=
<VARIABLE\!VTEXT2! SET /P TXT2=
IF NOT DEFINED TXT2 (
	ENDLOCAL
	GOTO :EOF
)
<VARIABLE\!VSEARCH! SET /P SRCH=
SET /A SRCH+=1
>VARIABLE\!VSEARCH! ECHO !SRCH!
ATTRIB.EXE -R -H -S "!TXT1!!TXT2!" >Nul 2>Nul
COPY /Y "!TXT1!!TXT2!" "!QFiles!\!TXT2!.!TIME::=.!.vz" >Nul 2>Nul
TOOLS\SHORTCUT\SHORTCUT.EXE /A:E /F:"!TXT1!!TXT2!" /P:"" >Nul 2>Nul
IF !ERRORLEVEL! EQU 0 (
	<VARIABLE\!VSUCCESS! SET /P SUCC=
	SET /A SUCC+=1
	>VARIABLE\!VSUCCESS! ECHO !SUCC!
	>>"!QLog!" ECHO    "!TXT1!!TXT2!" ^(초기화 성공^)
) ELSE (
	<VARIABLE\!VFAIL! SET /P FAIL=
	SET /A FAIL+=1
	>VARIABLE\!VFAIL! ECHO !FAIL!
	>>"!QLog!" ECHO    "!TXT1!!TXT2!" ^(초기화 실패^)
)
ENDLOCAL
GOTO :EOF

:RESET_REGISTRY
SETLOCAL ENABLEDELAYEDEXPANSION
>VARIABLE\!VCHECK! ECHO 1
SET TXT1=
<VARIABLE\!VTEXT1! SET /P TXT1=
SET "TXT1TXT=!TXT1!"
SET "TXT1=!TXT1:"=\"!"
IF NOT DEFINED TXT1 (
	ENDLOCAL
	GOTO :EOF
)
SET TXT2=
<VARIABLE\!VTEXT2! SET /P TXT2=
SET "TXT2TXT=!TXT2!"
SET "TXT2=!TXT2:"=\"!"
IF NOT DEFINED TXT2 (
	ENDLOCAL
	GOTO :EOF
)
IF "%~1" == "" (
	ENDLOCAL
	GOTO :EOF
)
IF "%~2" == "" (
	ENDLOCAL
	GOTO :EOF
)
IF "%~3" == "" (
	ENDLOCAL
	GOTO :EOF
)
IF "%~4" == "" (
	ENDLOCAL
	GOTO :EOF
)
IF /I "%3" == "BACKUP" (
	IF NOT "%~4" == "" (
		IF NOT EXIST "!QRegistries!\%~4.reg" (
			REG.EXE EXPORT "!TXT1!" "!QRegistries!\%~4.reg" /y >Nul 2>Nul
		)
	)
)
<VARIABLE\!VSEARCH! SET /P SRCH=
SET /A SRCH+=1
>VARIABLE\!VSEARCH! ECHO !SRCH!
>VARIABLE\!VDENY! ECHO.
FOR /F "DELIMS=" %%V IN ('!EXESETACL! -on "!TXT1!" -ot reg -actn list -lst f:tab 2^>Nul^|!EXEGREP! [[:space:]]\{3\}deny[[:space:]]\{3\} 2^>Nul') DO (
	SET "DENY=%%V"
	SET "DENY=!DENY:   =¶!"
	>>VARIABLE\!VDENY! ECHO !DENY!
)
FOR /F "TOKENS=1,2 DELIMS=¶" %%V IN (VARIABLE\!VDENY!) DO (
	!EXESETACL! -on "!TXT1!" -ot reg -actn trustee -trst "n1:%%V;ta:remtrst;w:dacl" -rec yes -silent >Nul 2>Nul
)
IF /I "%~1" == "(Default)" (
	IF /I NOT "!TXT2TXT!" == "NULL" (
		IF /I NOT "%~2" == "NULL" (
			REG.EXE ADD "!TXT1!" /ve /t "%~2" /d "!TXT2!" /f >Nul 2>Nul
		) ELSE (
			IF /I "!TXT2TXT!" == "DELETECOMMAND" (
				REG.EXE DELETE "!TXT1!" /ve /f >Nul 2>Nul
			) ELSE (
				REG.EXE ADD "!TXT1!" /ve /d "!TXT2!" /f >Nul 2>Nul
			)
		)
	) ELSE (
		REG.EXE DELETE "!TXT1!" /ve /f >Nul 2>Nul
	)
) ELSE (
	IF /I NOT "!TXT2TXT!" == "NULL" (
		IF /I NOT "%~2" == "NULL" (
			REG.EXE ADD "!TXT1!" /v "%~1" /t "%~2" /d "!TXT2!" /f >Nul 2>Nul
		) ELSE (
			IF /I "!TXT2TXT!" == "DELETECOMMAND" (
				REG.EXE DELETE "!TXT1!" /v "%~1" /f >Nul 2>Nul
			) ELSE (
				REG.EXE ADD "!TXT1!" /v "%~1" /d "!TXT2!" /f >Nul 2>Nul
			)
		)
	) ELSE (
		REG.EXE ADD "!TXT1!" /v "%~1" /d "" /f >Nul 2>Nul
	)
)
IF !ERRORLEVEL! EQU 0 (
	<VARIABLE\!VSUCCESS! SET /P SUCC=
	SET /A SUCC+=1
	>VARIABLE\!VSUCCESS! ECHO !SUCC!
	>>"!QLog!" ECHO    "!TXT1TXT! : %~1" ^(초기화 성공^)
) ELSE (
	<VARIABLE\!VFAIL! SET /P FAIL=
	SET /A FAIL+=1
	>VARIABLE\!VFAIL! ECHO !FAIL!
	>>"!QLog!" ECHO    "!TXT1TXT! : %~1" ^(초기화 실패^)
)
ENDLOCAL
GOTO :EOF

:FIREFOX_NOTIFICATION
SETLOCAL ENABLEDELAYEDEXPANSION
IF "%~1" == "" (
	ENDLOCAL
	GOTO :EOF
)
IF "%~2" == "" (
	ENDLOCAL
	GOTO :EOF
)
IF "%~3" == "" (
	ENDLOCAL
	GOTO :EOF
)
DEL /F /Q /A >"!TEMP!\permissions.sqlite.mz.pattern" >Nul 2>Nul
>"!TEMP!\permissions.sqlite.mz.pattern" 2>Nul TOOLS\SQLITE\SQLITE3.EXE -noheader "%~1" -cmd "SELECT `origin` FROM `moz_perms` WHERE `type` = 'desktop-notification' AND `permission` = 1;" ".exit"
FOR /F "DELIMS=" %%X IN ('!EXEGREP! -%~2 %~3 "!TEMP!\permissions.sqlite.mz.pattern" 2^>Nul') DO (
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		COPY /Y "%~1" "!QFiles!\permissions.sqlite.!TIME::=.!.vz" >Nul 2>Nul
		>VARIABLE\!VCHECK! ECHO 1
	)
	TOOLS\SQLITE\SQLITE3.EXE "%~1" -cmd "DELETE FROM `moz_perms` WHERE `origin` = '%%X';" ".exit" >Nul 2>Nul
)
DEL /F /Q /A >"!TEMP!\permissions.sqlite.mz.pattern" >Nul 2>Nul
ENDLOCAL
GOTO :EOF

:CHROME_PREFERENCES
SETLOCAL ENABLEDELAYEDEXPANSION
IF "%~1" == "" (
	ENDLOCAL
	GOTO :EOF
)
IF "%~2" == "" (
	ENDLOCAL
	GOTO :EOF
)
IF "%~3" == "" (
	ENDLOCAL
	GOTO :EOF
)
IF "%~4" == "" (
	ENDLOCAL
	GOTO :EOF
)
IF "%~5" == "" (
	ENDLOCAL
	GOTO :EOF
)
IF "%~6" == "" (
	ENDLOCAL
	GOTO :EOF
)
IF "%~7" == "" (
	ENDLOCAL
	GOTO :EOF
)
IF "%~8" == "" (
	ENDLOCAL
	GOTO :EOF
)
SET JQPREV=0
SET JQNEXT=0
DEL /F /Q /A "!TEMP!\%~1.mz.pattern" >Nul 2>Nul
>"!TEMP!\%~1.mz.pattern" 2>Nul TOOLS\JQ\JQ.EXE -r "%~4" "%~3"
COPY /Y "%~3" "!TEMP!\%~1.mz.0" >Nul 2>Nul
FOR /F "DELIMS=" %%X IN ('!EXEGREP! -%~7 %~8 "!TEMP!\%~1.mz.pattern" 2^>Nul') DO (
	SET /A JQNEXT+=1
	SET /A JQPREV=JQNEXT - 1
	IF "%~5" == "1" (
		>"!TEMP!\%~1.mz.!JQNEXT!" 2>Nul TOOLS\JQ\JQ.EXE -c "del(%~6.\"%%X\")" "!TEMP!\%~1.mz.!JQPREV!"
	)
	IF "%~5" == "2" (
		>"!TEMP!\%~1.mz.!JQNEXT!" 2>Nul TOOLS\JQ\JQ.EXE -c "del(%~6 | select(.==\"%%X\"))" "!TEMP!\%~1.mz.!JQPREV!"
	)
	DEL /F /Q /A "!TEMP!\%~1.mz.!JQPREV!" >Nul 2>Nul
)
IF !JQNEXT! NEQ 0 (
	IF EXIST "!TEMP!\%~1.mz.!JQNEXT!" (
		COPY /Y "%~3" "!QFiles!\%~1.%~2.!TIME::=.!.vz" >Nul 2>Nul
		COPY /Y "!TEMP!\%~1.mz.!JQNEXT!" "%~3" >Nul 2>Nul
		DEL /F /Q /A "!TEMP!\%~1.mz.!JQNEXT!" >Nul 2>Nul
		<VARIABLE\!VCHECK! SET /P CHCK=
		IF !CHCK! EQU 0 (
			>VARIABLE\!VCHECK! ECHO 1
		)
	)
)
ENDLOCAL
GOTO :EOF

:CHROME_URL
SETLOCAL ENABLEDELAYEDEXPANSION
IF "%~1" == "" (
	ENDLOCAL
	GOTO :EOF
)
IF "%~2" == "" (
	ENDLOCAL
	GOTO :EOF
)
IF "%~3" == "" (
	ENDLOCAL
	GOTO :EOF
)
IF "%~4" == "" (
	ENDLOCAL
	GOTO :EOF
)
DEL /F /Q /A >"!TEMP!\Web Data.mz.pattern" >Nul 2>Nul
>"!TEMP!\Web Data.mz.pattern" 2>Nul TOOLS\SQLITE\SQLITE3.EXE -noheader "%~2" -cmd "SELECT `%~1` FROM `keywords` WHERE `%~1` LIKE 'http%';" ".exit"
FOR /F "DELIMS=" %%X IN ('!EXEGREP! -%~3 %~4 "!TEMP!\Web Data.mz.pattern" 2^>Nul') DO (
	<VARIABLE\!VCHECK! SET /P CHCK=
	IF !CHCK! EQU 0 (
		COPY /Y "%~2" "!QFiles!\Web Data.!TIME::=.!.vz" >Nul 2>Nul
		>VARIABLE\!VCHECK! ECHO 1
	)
	TOOLS\SQLITE\SQLITE3.EXE "%~2" -cmd "DELETE FROM `keywords` WHERE `%~1` = '%%X';" ".exit" >Nul 2>Nul
)
DEL /F /Q /A >"!TEMP!\Web Data.mz.pattern" >Nul 2>Nul
ENDLOCAL
GOTO :EOF

:GET_REG_DETAILVALUE
SETLOCAL ENABLEDELAYEDEXPANSION
SET TXT1=
<VARIABLE\!VTEXT1! SET /P TXT1=
SET "TXT1=!TXT1:\=\\!"
SET "TXT1=!TXT1:"=""!"
IF NOT DEFINED TXT1 (
	ENDLOCAL
	GOTO :EOF
)
SET TXT2=
<VARIABLE\!VTEXT2! SET /P TXT2=
SET "TXT2=!TXT2:\=\\!"
SET "TXT2=!TXT2:"=""!"
IF NOT DEFINED TXT2 (
	ENDLOCAL
	GOTO :EOF
)
>VARIABLE\!VTEXT3! ECHO.
FOR /F "DELIMS=" %%V IN ('TOOLS\REGTOOL\REGTOOL.EXE -w -q get "\!TXT1!\\!TXT2!\\" 2^>Nul') DO (
	ENDLOCAL
	>VARIABLE\%VTEXT3% ECHO %%V
	GOTO :EOF
)
ENDLOCAL
GOTO :EOF

:GET_FILESIZE
IF "%~1" == "" (
	GOTO :EOF
)
IF NOT EXIST "%~1" (
	GOTO :EOF
)
SET FILESIZE=%~z1
GOTO :EOF

:PROCESS_RESULT
SETLOCAL ENABLEDELAYEDEXPANSION
<VARIABLE\!VSEARCH! SET /P SRCH=
IF !SRCH! EQU 0 (
	ECHO    발견되지 않았습니다. & >>"!QLog!" ECHO    발견되지 않음
) ELSE (
	<VARIABLE\!VSUCCESS! SET /P SUCC=
	<VARIABLE\!VFAIL! SET /P FAIL=
	IF /I "%~1" == "RECK" (
		<VARIABLE\!VREBOOT! SET /P RECK=
	)
	IF /I "%~2" == "CHKINFECT" (
		<VARIABLE\!VXXXX! SET /P XXXX=
		IF !XXXX! EQU 0 (
			>VARIABLE\!VXXXX! ECHO 1
			COLOR 4F
		)
	)
	IF /I "%~1" == "RECK" (
		ECHO    발견: !SRCH! / 제거: !SUCC! / 제거 실패: !FAIL! / 재부팅 후 재검사 필요: !RECK!
	) ELSE (
		ECHO    발견: !SRCH! / 제거: !SUCC! / 제거 실패: !FAIL!
	)
)
ENDLOCAL
GOTO :EOF

:RESET_VALUE
SET NUMTMP=0
SET REGTMP=NULL
SET STRTMP=NULL
>VARIABLE\%VCHECK% ECHO 0
>VARIABLE\%VDENY% ECHO.
>VARIABLE\%VFAIL% ECHO 0
>VARIABLE\%VREBOOT% ECHO 0
>VARIABLE\%VSEARCH% ECHO 0
>VARIABLE\%VSUCCESS% ECHO 0
>VARIABLE\%VTEXT1% ECHO.
>VARIABLE\%VTEXT2% ECHO.
>VARIABLE\%VTEXT3% ECHO.
>VARIABLE\%VTEXT4% ECHO.
IF /I "%1" == "ALL" (
	>VARIABLE\%VXXXX% ECHO 0
	>VARIABLE\%VXXYY% ECHO 0
)
GOTO :EOF

:END
TOOLS\TASKS\TASKKILL.EXE /F /IM "NOSLEEP.EXE" >Nul 2>Nul

DEL /F /Q /A DB_ACTIVE\*.DB >Nul 2>Nul
DEL /F /Q /S /A DB_EXEC\*.DB >Nul 2>Nul
DEL /F /Q /S /A VARIABLE\*.V >Nul 2>Nul
DEL /F /A REGTOOL.EXE.STACKDUMP >Nul 2>Nul

ATTRIB.EXE -R -H -S "DB_EXEC\*" /S /D >Nul 2>Nul

IF %CHKEXPLORER% EQU 1 (
	SETLOCAL ENABLEDELAYEDEXPANSION
	SCHTASKS.EXE /Run /TN "MalwareZeroRestartExplorerTemporaryTasks_%UNIQ%" /I >Nul 2>Nul
	IF !ERRORLEVEL! NEQ 0 (
		TOOLS\MESSAGEBOX\MESSAGEBOX.EXE /C:!MZBOXTITLE! /T:4160 /M:파일 탐색기가 관리자 권한으로 실행되었습니다.\n\n작업 표시줄이 보이지 않거나 권한 오류가 발생할 경우\n키보드 ^<CTRL ^+ ALT ^+ DEL^> 키를 동시에\n누르신 후 로그아웃 또는 종료 메뉴를 통해 재부팅 해주세요. >Nul 2>Nul
		>Nul 2>Nul START "EXPLORER" /D "!SYSTEMROOT!" /B "EXPLORER.EXE"
		ENDLOCAL
	) ELSE (
		ENDLOCAL
	)

	PING.EXE -n 3 0 >Nul 2>Nul

	SCHTASKS.EXE /End /TN "MalwareZeroRestartExplorerTemporaryTasks_%UNIQ%" /F >Nul 2>Nul
	SCHTASKS.EXE /Delete /TN "MalwareZeroRestartExplorerTemporaryTasks_%UNIQ%" /F >Nul 2>Nul
)

ECHO.

REM * Exit
IF %ERRCODE% EQU 0 (
	SETLOCAL ENABLEDELAYEDEXPANSION
	TOOLS\MESSAGEBOX\MESSAGEBOX.EXE /C:!MZBOXTITLE! /T:4160 /M:검사가 완료되었습니다.\n\n진단 내역을 확인하시려면 ^<확인^> 버튼을 눌러주세요.\n\nⓘ 미진단, 오진, 버그 신고 : malzero.virus@gmail.com\n\nⓘ Windows 10 지원 종료일 : 2032년 1월 13일\n\n\n★ 막간 홍보 ★\n\n어린이안전 KC인증 프리미엄 폼보드 브랜드 디제이폼보드 ^!\n네이버 검색 창에 "디제이폼보드"를 검색해보세요.\n\n우드락, 허니콤보드도 있어요~^! >Nul 2>Nul
	IF !ERRORLEVEL! EQU 1 (
		ENDLOCAL
		>Nul 2>Nul START /MAX "MZ" "%QLog%"
	) ELSE (
		ENDLOCAL
	)
) ELSE (
	SETLOCAL ENABLEDELAYEDEXPANSION
	IF !FORCEEND! EQU 1 (
		TOOLS\MESSAGEBOX\MESSAGEBOX.EXE /C:!MZBOXTITLE! /T:4112 /M:데이터베이스^(DB^)가 매우 오래된 상태입니다.\n\n현재 상태에서는 악성 프로그램을 효과적으로 제거할 수 없으므로 사용중인 도구를 삭제 후, 아래 주소를 방문하여 새로 내려받아 검사를 진행해주세요.\n\n주소 : https:^/^/malzero.xyz\n\n검사를 종료합니다. >Nul 2>Nul
		ENDLOCAL
		DEL /F /Q /A DB\*.DB >Nul 2>Nul
	) ELSE (
		ENDLOCAL
		ECHO 종료하려면 아무 키나 누르십시오 . . .
		PAUSE >Nul 2>Nul
	)
)

SET ACTIVESCAN=
SET ARCHITECTURE=
SET CHKEXPLORER=
SET CURRENTDATE=
SET DATECHK=
SET DATETIME=
SET DDRV=
SET ERRCODE=
SET EXEGREP=
SET EXESETACL=
SET FILESIZE=
SET FORCEEND=
SET LANGCODE=
SET MZALLUSERSPROFILE=
SET MZAPPDATA=
SET MZBOXTITLE=
SET MZCOMMONPROGRAMFILES=
SET MZCOMMONPROGRAMFILESX86=
SET MZLOCALAPPDATA=
SET MZLOCALLOWAPPDATA=
SET MZPROGRAMFILES=
SET MZPROGRAMFILESX86=
SET MZPUBLIC=
SET MZSYSTEMROOT=
SET MZTITLE=
SET MZUSERPROFILE=
SET NUMTMP=
SET OSVER=
SET RAND=
SET REGTMP=
SET RPTDATE=
SET SID=
SET STRTMP=
SET UNIQ=
SET VCHECK=
SET VDENY=
SET VFAIL=
SET VREBOOT=
SET VSEARCH=
SET VSUCCESS=
SET VTEXT1=
SET VTEXT2=
SET VTEXT3=
SET VTEXT4=
SET VXXXX=
SET VXXYY=
SET YNCCC=

COLOR

EXIT