netsvcs %SYSTEMDRIVE%\*.exe /md5start consrv.dll explorer.exe winlogon.exe Userinit.exe svchost.exe cdrom.sys /md5stop HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager\SubSystems /s HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\NetBT /s HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\NetBIOS /s hklm\software\clients\startmenuinternet|command /rs hklm\software\clients\startmenuinternet|command /64 /rs C:\Windows\assembly\tmp\U\*.* /s %Temp%\smtmp\1\*.* %Temp%\smtmp\2\*.* %Temp%\smtmp\3\*.* %Temp%\smtmp\4\*.* CREATERESTOREPOINT