;uVS v3.87.8 [http://dsrt.dyndns.org]
;Target OS: NTv6.1
v388c
OFFSGNSAVE
zoo %SystemDrive%\PROGRAM FILES (X86)\CINEMAPLUS-4.5VV23.05\024A6571-2A4E-4467-B299-604F4B85D0BF-10.EXE
addsgn 1ABF719B5583338CF42B627DA804DEC9E94630A1DF716B5C95488998445D0D682F9C02DCEF565B72D5F68CA4BE19CB927EDFE87DEFFF08257877A55CC0F5869A 8 Trojan.Crossrider1.32880 [DrWeb]

zoo %SystemDrive%\PROGRAM FILES (X86)\CINEMAPLUS-4.5VV26.05\3C75964A-FF38-46DC-8850-9A763C181521-10.EXE
zoo %SystemDrive%\PROGRAM FILES (X86)\ANYPROTECTEX\ANYPROTECT.EXE
addsgn 1A74EF9A5583C58CF42B95BC14B97A0550880F3560E586788548043F30D2718B238FA6343E93DD412B430FDE4293898F7867481736DA73A7D2222FC3447B2A73 8 anyprotect

zoo %SystemDrive%\PROGRAM FILES (X86)\CROSSBROWSE\CROSSBROWSE\APPLICATION\UTILITY.EXE
addsgn 1AA4669B5583338CF42B627DA804DEC9E946ABA0028E3B680E8FE1A8DBAA5540A8D648863D93A6B75D88BF67499421F97DDFE7C870FE7E702D76D72834A2CB64 8 Toolbar.CrossRider

zoo %SystemDrive%\PROGRAM FILES (X86)\ANYPROTECTEX\UNINSTALL.EXE
addsgn 7300F79B556A1F275DE775E6ED94361DE2CED8E6B96B5F78B63503F874C251B33627B3173E3D9CC92B807B8AF26609FA2E20FD0E279AB04625D43C08BD06CA7A 64 AdWare.Win32.Vopak

zoo %SystemDrive%\PROGRAM FILES (X86)\CROSSBROWSE\CROSSBROWSE\APPLICATION\CROSSBROWSE.EXE
addsgn 1AB7C59A5583338CF42BFB3A8843570DBC7D81FAD439D3B4490F0970DB925544A85BE747359D16050F8CF196CD526DFE8A3E2A62558947CDA6AF2F6BE30ED517 8 unwanted

hide %SystemDrive%\PROGRAM FILES (X86)\REIBOOT\UNINST.EXE
del %SystemDrive%\FIREFOX.BAT
;------------------------autoscript---------------------------

chklst
delvir

deldirex %SystemDrive%\PROGRAM FILES\REIMAGE\REIMAGE PROTECTOR

deldirex %SystemDrive%\PROGRAM FILES (X86)\CINEMAPLUS-4.5VV23.05

deldirex %SystemDrive%\PROGRAM FILES (X86)\CINEMAPLUS-4.5VV26.05

deldirex %SystemDrive%\PROGRAM FILES (X86)\CINEMAPLUS-3.2CV13.04

deldirex %SystemDrive%\PROGRAM FILES (X86)\CIPLUS-4.5VV11.07

delref %SystemDrive%\USERS\������\APPDATA\ROAMING\BFKGWOB.EXE
del %SystemDrive%\USERS\������\APPDATA\ROAMING\BFKGWOB.EXE

delref %SystemDrive%\USERS\������\APPDATA\ROAMING\DNNDJJ6SURJEWSQVSY8.EXE
del %SystemDrive%\USERS\������\APPDATA\ROAMING\DNNDJJ6SURJEWSQVSY8.EXE

delref %SystemDrive%\USERS\������\APPDATA\ROAMING\FVQPBD.EXE
del %SystemDrive%\USERS\������\APPDATA\ROAMING\FVQPBD.EXE

delref %SystemDrive%\PROGRAM FILES (X86)\UNIBLUE\PC-MECHANIC\PC-MECHANIC.EXE
del %SystemDrive%\PROGRAM FILES (X86)\UNIBLUE\PC-MECHANIC\PC-MECHANIC.EXE

delref %SystemDrive%\USERS\������\APPDATA\ROAMING\VJWQTKHXJMLGT71VT1O.EXE
del %SystemDrive%\USERS\������\APPDATA\ROAMING\VJWQTKHXJMLGT71VT1O.EXE

delref %SystemDrive%\USERS\������\APPDATA\ROAMING\WO2ZPSITEVTSZVRZBURYGC7NN.EXE
del %SystemDrive%\USERS\������\APPDATA\ROAMING\WO2ZPSITEVTSZVRZBURYGC7NN.EXE

deldirex %SystemDrive%\PROGRAM FILES\REIMAGE\REIMAGE REPAIR

deldirex %SystemDrive%\PROGRAM FILES (X86)\MOZILLA FIREFOX\BROWSER\SEARCHPLUGINS

delref %SystemDrive%\USERS\МАРИНА\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\LALFIODOHDGAEJJCCFGFMMNGGGPPLMHP\8.12.4_0\СТАРТОВАЯ — ЯНДЕКС
delref %SystemDrive%\USERS\МАРИНА\DOWNLOADS\PP3.0_25PP_00016_SETUP.EXE
del %SystemDrive%\USERS\МАРИНА\DOWNLOADS\PP3.0_25PP_00016_SETUP.EXE

delref %SystemDrive%\USERS\МАРИНА\DOWNLOADS\REIMAGEREPAIR.EXE
del %SystemDrive%\USERS\МАРИНА\DOWNLOADS\REIMAGEREPAIR.EXE

del %SystemDrive%\USERS\МАРИНА\APPDATA\LOCAL\YANDEX\BROWSER.BAT

delref %SystemDrive%\PROGRAM FILES (X86)\PP苹果助手3.0\IHELPER3.EXE
del %SystemDrive%\PROGRAM FILES (X86)\PP苹果助手3.0\IHELPER3.EXE

delref %SystemDrive%\PROGRAM FILES (X86)\PP助手5.0\PPHELPER5.EXE
del %SystemDrive%\PROGRAM FILES (X86)\PP助手5.0\PPHELPER5.EXE

delref %SystemDrive%\PROGRAM FILES (X86)\PP助手5.0\ADEVICEHELPERMON.EXE
del %SystemDrive%\PROGRAM FILES (X86)\PP助手5.0\ADEVICEHELPERMON.EXE

delref G:\PPGHOST\DOWNLOADS\PPHELPER\IHELPER.EXE
del G:\PPGHOST\DOWNLOADS\PPHELPER\IHELPER.EXE

delref %Sys32%\DRIVERS\BD0001.SYS
del %Sys32%\DRIVERS\BD0001.SYS

delref %SystemRoot%\SYSWOW64\DRIVERS\BD0002.SYS
del %SystemRoot%\SYSWOW64\DRIVERS\BD0002.SYS

delref %Sys32%\DRIVERS\BDMWRENCH_X64.SYS
del %Sys32%\DRIVERS\BDMWRENCH_X64.SYS

delref %SystemDrive%\PROGRAM FILES (X86)\PP苹果助手3.0\IHELPERMSGPUSHSVR.EXE
del %SystemDrive%\PROGRAM FILES (X86)\PP苹果助手3.0\IHELPERMSGPUSHSVR.EXE

delref %SystemDrive%\$RECYCLE.BIN\S-1-5-21-2599490116-3751299209-2338342138-1000\$I23JUBL.EXE
del %SystemDrive%\$RECYCLE.BIN\S-1-5-21-2599490116-3751299209-2338342138-1000\$I23JUBL.EXE

regt 27
regt 28
regt 29
deltmp
delnfr
;-------------------------------------------------------------

restart