;uVS v4.0b6 [http://dsrt.dyndns.org]
;Target OS: NTv6.1
v400c
OFFSGNSAVE
;------------------------autoscript---------------------------

chklst
delvir

delref HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN

delref EXPLORER.EXE HTTP://KB-RIBAKI.ORG

delref {75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7}\[CLSID]

delref {8984B388-A5BB-4DF7-B274-77B879E179DB}\[CLSID]

deldirex %SystemDrive%\USERS\ДИМА\APPDATA\LOCALLOW\UNITY\WEBPLAYER\LOADER

delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DBGBGNHMFBCIFPKJOFOOJFPLMFKMAIADN%26INSTALLSOURCE%3DONDEMAND%26UC

delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DBPGANGMFFJCOFIKNIBCMFJIONICOHFGJ%26INSTALLSOURCE%3DONDEMAND%26UC

delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DEOFCBNMAJMJMPLFLAPAOJJNIHCJKIGCK%26INSTALLSOURCE%3DONDEMAND%26UC

delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DNBIFDKMDOJGMPMOPDEBNJCOBEKGDONCN%26INSTALLSOURCE%3DONDEMAND%26UC

delref HTTP://SEARCH.CONDUIT.COM/RESULTSEXT.ASPX?Q={SEARCHTERMS}&SEARCHSOURCE=4&CTID=CT3072253

delref HTTP://START.FUNMOODS.COM/RESULTS.PHP?F=4&Q={SEARCHTERMS}&A=IRON2&CHNL=IRON2&CD=2XZUTATN2Y1L1QZUYEZZYD0BTAZY0AZZ0D0C0AYBTATC0AYCTN0D0TZUTBTDTCTBTDZZTDZY&CR=195785625

delref %SystemDrive%\USERS\ДИМА\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\FDLOIJIJLKOBLMIGDOFOMMGNHECKMAKI\1.5.1_0\FUNMOODS

delref %SystemDrive%\USERS\ДИМА\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\NBIFDKMDOJGMPMOPDEBNJCOBEKGDONCN\4.0.4_0\ПОИСК MAIL.RU

delref %SystemDrive%\USERS\ДИМА\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\PHKDCINMMLJBLPNKOHLIPAIODLONPINF\11.0.3_0\ПОИСК MAIL.RU

deldirex %SystemDrive%\USERS\ДИМА\APPDATA\LOCAL\CONDUIT\COMMUNITY ALERTS

deldirex %SystemDrive%\PROGRAM FILES\CONDUIT\COMMUNITY ALERTS

deldirex %SystemDrive%\PROGRA~1\FUNMOODS\1.5.23.22\BH

deldirex %SystemDrive%\PROGRA~1\FUNMOODS\1.5.23.22

delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DODIJCGAFKHPOBJLNFDGIACPDENPMBGME%26INSTALLSOURCE%3DONDEMAND%26UC

delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DPHKDCINMMLJBLPNKOHLIPAIODLONPINF%26INSTALLSOURCE%3DONDEMAND%26UC

delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DPMPOAAHLECCAIBBHFJFIMIGEPMFMMBBK%26INSTALLSOURCE%3DONDEMAND%26UC

delref HTTP://YAMDEX.NET/?SEARCHID=1&L10N=RU&FROMSEARCH=1&IMSID=BBFC01C7631005853DD72C2291A3CCD6&TEXT={SEARCHTERMS}

delref HTTP://YAMDEX.NET/?SEARCHID=1&L10N=RU&FROMSEARCH=1&IMSID=BBFC01C7631005853DD72C2291A3CCD6&TEXT=

delref HTTP://WEBALTA.RU/SEARCH?Q={SEARCHTERMS}&FROM=IE

del %SystemDrive%\USERS\ДИМА\APPDATA\ROAMING\BROWSERS\EXE.RESWORB.BAT

del %SystemDrive%\USERS\ДИМА\APPDATA\ROAMING\BROWSERS\EXE.AREPO.BAT

del %SystemDrive%\USERS\ДИМА\APPDATA\ROAMING\BROWSERS\EXE.REHCNUALTOW.BAT

regt 28
regt 29
; OpenAL
exec C:\Program Files\OpenAL\oalinst.exe" /U
; Funmoods Web Search
exec C:\PROGRA~1\Funmoods\1.5.23.22\uninstall.exe
;-------------------------------------------------------------

deltmp
;---------command-block---------
delref {23E5D772-327A-42F5-BDEE-C65C6796BB2A}\[CLSID]
delref {177AFECE-9599-46CF-90D7-68EC9EEB27B4}\[CLSID]
delref {CEF51277-5358-477B-858C-4E14F0C80BF7}\[CLSID]
delref {59116E30-02BD-4B84-BA1E-5D77E809B1A2}\[CLSID]
delref G:\СТАРЫЕ ДАННЫЕ\ИГРЫ\BIONICLE\BIONICLE.EXE
delref %SystemDrive%\USERS\ДИМА\DESKTOP\FORGE-1.7.2-10.12.0.982-INSTALLER-WIN.EXE
delref {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B}\[CLSID]
delref {0D012ABD-CEED-11D2-9C76-00105AA73033}\[CLSID]
delref {166B1BCA-3F9C-11CF-8075-444553540000}\[CLSID]
delref {233C1507-6A77-46A4-9443-F871F945D258}\[CLSID]
delref {4063BE15-3B08-470D-A0D5-B37161CFFD69}\[CLSID]
delref {56A58823-AE99-11D5-B90B-0050DACD1F75}\[CLSID]
delref {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA}\[CLSID]
delref {D27CDB6E-AE6D-11CF-96B8-444553540000}\[CLSID]
delref {D4AAF2A6-F6D1-49A5-BA1A-B20735DF1955}\[CLSID]
delref {E01D1C6A-4F40-11D3-8958-00105A272DCF}\[CLSID]
delref %Sys32%\MSSPELLCHECKINGFACILITY.DLL
delref %SystemDrive%\PROGRAM FILES\AVAST SOFTWARE\AVAST\WEBREP\CHROME\ASWWEBREPCHROME.CRX
delref %SystemDrive%\USERS\ДИМА\APPDATA\LOCAL\CRE\PACGPKGADGMIBNHPDIDCNFAFLLNMEOMC.CRX
delref {1FBA04EE-3024-11D2-8F1F-0000F87ABD16}\[CLSID]
delref %Sys32%\BLANK.HTM
delref {E6FB5E20-DE35-11CF-9C87-00AA005127ED}\[CLSID]
delref {1F77B17B-F531-44DB-ACA4-76ABB5010A28}\[CLSID]
delref HELPSVC\[SERVICE]
delref SACSVR\[SERVICE]
delref VMMS\[SERVICE]
delref MESSENGER\[SERVICE]
delref RDSESSMGR\[SERVICE]
delref %SystemRoot%\TEMP\3CC5D37.SYS
delref %SystemRoot%\TEMP\57292D8.SYS
delref %SystemRoot%\TEMP\5065250.SYS
delref %SystemRoot%\TEMP\41F88CA.SYS
delref %SystemRoot%\TEMP\411DCD2.SYS
delref %SystemRoot%\TEMP\3DA4D2E.SYS
delref %SystemRoot%\TEMP\428E79C.SYS
delref %SystemRoot%\TEMP\43B3192.SYS
delref %SystemRoot%\TEMP\65248B8.SYS
delref %SystemRoot%\TEMP\4086D93.SYS
delref %SystemRoot%\TEMP\3E187D2.SYS
delref %SystemRoot%\TEMP\3F639E6.SYS
delref %SystemDrive%\PROGRAM FILES\AVAST SOFTWARE\AVAST\NG\VBOX\AVASTVBOXSVC.EXE
delref %Sys32%\DRIVERS\IGFX.SYS
delref %Sys32%\DRIVERS\MSIKBD2K.SYS
delref %SystemDrive%\PROGRAM FILES\NETROPA\MULTIMEDIA KEYBOARD\NHKSRV.EXE
delref %Sys32%\DRIVERS\RDVGKMD.SYS
delref %Sys32%\PSXSS.EXE
delref %SystemDrive%\USERS\ДИМА\APPDATA\LOCAL\GOOGLE\UPDATE\1.3.21.135\PSUSER.DLL
delref %SystemDrive%\USERS\ДИМА\APPDATA\LOCAL\GOOGLE\UPDATE\1.3.21.99\PSUSER.DLL
delref %SystemDrive%\USERS\ДИМА\APPDATA\LOCAL\GOOGLE\UPDATE\1.3.23.9\PSUSER.DLL
delref %SystemDrive%\USERS\ДИМА\APPDATA\LOCAL\GOOGLE\UPDATE\1.3.21.149\PSUSER.DLL
delref %SystemDrive%\USERS\ДИМА\APPDATA\LOCAL\GOOGLE\UPDATE\1.3.21.145\PSUSER.DLL
delref %SystemDrive%\USERS\ДИМА\APPDATA\LOCAL\GOOGLE\UPDATE\1.3.21.115\PSUSER.DLL
delref %SystemDrive%\USERS\ДИМА\APPDATA\LOCAL\MAIL.RU\GAMECENTER\NPDETECTOR.DLL
delref %SystemDrive%\USERS\ДИМА\APPDATA\LOCAL\GOOGLE\UPDATE\1.3.21.123\PSUSER.DLL
delref %SystemDrive%\USERS\ДИМА\APPDATA\LOCAL\GOOGLE\UPDATE\1.3.24.7\PSUSER.DLL
delref %SystemDrive%\USERS\ДИМА\APPDATA\LOCAL\GOOGLE\UPDATE\1.3.21.153\PSUSER.DLL
delref %SystemDrive%\USERS\ДИМА\APPDATA\LOCAL\GOOGLE\UPDATE\1.3.21.165\PSUSER.DLL
delref %SystemDrive%\USERS\ДИМА\APPDATA\LOCAL\GOOGLE\UPDATE\1.3.22.3\PSUSER.DLL
delref %SystemDrive%\USERS\ДИМА\APPDATA\LOCAL\GOOGLE\UPDATE\1.3.21.111\PSUSER.DLL
delref %SystemDrive%\USERS\ДИМА\APPDATA\LOCAL\GOOGLE\UPDATE\1.3.22.5\PSUSER.DLL
delref %SystemDrive%\PROGRAM FILES\GOOGLE\UPDATE\1.3.26.9\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES\AIMP2\AIMP2.EXE
delref %SystemDrive%\BVTBIN\TESTS\INSTALLPACKAGE\CBSTEST\X86\CSITEST.DLL
delref %SystemDrive%\PROGRAM FILES\GOOGLE\UPDATE\1.3.28.1\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES\GOOGLE\UPDATE\1.3.28.15\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES\GOOGLE\UPDATE\1.3.27.5\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES\CONDUIT\COMMUNITY ALERTS\ALERT.DLL
delref %SystemDrive%\PROGRA~1\COMMON~1\MCAFEE\UPDMGR\308053~1.4\MCCOREPS.DLL
delref %SystemDrive%\PROGRAM FILES\GOOGLE\UPDATE\1.3.29.1\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES\GOOGLE\UPDATE\1.3.30.3\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES\GOOGLE\UPDATE\1.3.25.11\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES\GOOGLE\UPDATE\1.3.28.13\PSMACHINE.DLL
delref %SystemDrive%\PROGRA~1\FUNMOODS\1.5.23.22\BH\ESCORT.DLL
delref %SystemDrive%\PROGRA~1\FUNMOODS\1.5.23.22\ESCORTAPP.DLL
delref %Sys32%\SHAREMEDIACPL.CPL
delref %SystemDrive%\PROGRAM FILES\GOOGLE\UPDATE\1.3.31.5\PSMACHINE.DLL
delref %SystemDrive%\USERS\ДИМА\DOWNLOADS\HARAKTERISTIKA-STUDENTA-S-MESTA-PRAKTIKI.EXE
delref %SystemDrive%\PROGRAM FILES\GOOGLE\UPDATE\1.3.29.5\PSMACHINE.DLL
delref D:\MEDIA\344C~1\WORLD_~1\WOTTWE~3.EXE
delref %SystemDrive%\PROGRA~1\FUNMOODS\1.5.23.22\ESCORTENG.DLL
delref H:\ISTUDIO.EXE
delref D:\MEDIA\ИГРЫ\BLUR(TM)\BLUR.EXE
delref D:\MEDIA\ИГРЫ\BLUR(TM)\UNINS000.EXE
delref D:\MEDIA\ИГРЫ\CONFLICT - DESERT STORM 2\GAME.EXE
delref D:\MEDIA\ИГРЫ\CONFLICT - DESERT STORM 2\UNINS000.EXE
delref D:\MEDIA\ИГРЫ\DARKEST OF DAYS\DARKESTOFDAYS.EXE
delref D:\MEDIA\ИГРЫ\DARKEST OF DAYS\UNINS000.EXE
delref D:\MEDIA\ИГРЫ\FAR CRY 2\BIN\FARCRY2.EXE
delref D:\MEDIA\ИГРЫ\FAR CRY 2\UNINS000.EXE
delref D:\MEDIA\ИГРЫ\SERIOUS SAM HD THE FIRST ENCOUNTER\BIN\START.EXE
delref D:\MEDIA\ИГРЫ\SERIOUS SAM HD THE FIRST ENCOUNTER\UNINS000.EXE
delref %SystemDrive%\PROGRAM FILES\SNIPER GHOST WARRIOR\SNIPER_X86.EXE
delref %SystemDrive%\PROGRAM FILES\SNIPER GHOST WARRIOR\UNINS000.EXE
delref D:\MEDIA\ИГРЫ\SONIC GENERATIONS\SONICGENERATIONS.EXE
delref D:\MEDIA\ИГРЫ\SONIC GENERATIONS\CONFIGURATIONTOOL.EXE
delref D:\MEDIA\ИГРЫ\SONIC GENERATIONS\UNINS000.EXE
delref D:\MEDIA\ИГРЫ\SONIC RIDERS - ZERO GRAVITY\GAME\SONIC_RIDERS.EXE
delref D:\MEDIA\ИГРЫ\SONIC RIDERS - ZERO GRAVITY\CONFIG.EXE
delref %SystemDrive%\PROGRAM FILES\TEST DRIVE UNLIMITED 2\TESTDRIVE2.EXE
delref %SystemDrive%\PROGRAM FILES\TEST DRIVE UNLIMITED 2\UNINS000.EXE
delref D:\MEDIA\ИГРЫ\TRANSFORMERS REVENGE OF THE FALLEN\TRANSFORMERS2.EXE
delref D:\MEDIA\ИГРЫ\TRANSFORMERS REVENGE OF THE FALLEN\UNINS001.EXE
delref D:\MEDIA\ИГРЫ\TRANSFORMERS WAR FOR CYBERTRON\BINARIES\TWFC.EXE
delref D:\MEDIA\ИГРЫ\TRANSFORMERS WAR FOR CYBERTRON\UNINS000.EXE
apply

restart

GroupPolicy: Restriction ? <======= ATTENTION
GroupPolicy\User: Restriction ? <======= ATTENTION
Toolbar: HKU\S-1-5-21-1321223426-811082986-3819977804-1000 -> No Name - {09900DE8-1DCA-443F-9243-26FF581438AF} -  No File
CHR HKLM\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
Task: {5866C06D-7F32-48DC-BA0F-C380F4E03135} - \ДИМА -> No File <==== ATTENTION
AlternateDataStreams: C:\ProgramData\Temp:10D14739 [490]
AlternateDataStreams: C:\Users\Все пользователи\Temp:10D14739 [490]
AlternateDataStreams: C:\Users\ДИМА\Local Settings:wa [146]
AlternateDataStreams: C:\Users\ДИМА\AppData\Local:wa [146]
AlternateDataStreams: C:\Users\ДИМА\AppData\Local\Application Data:wa [146]
EmptyTemp:
Reboot: