;uVS v4.0.12 [http://dsrt.dyndns.org]
;Target OS: NTv6.1
v400c
delall %SystemDrive%\USERS\ELLA\APPDATA\ROAMING\CURL\CURL.EXE
deldir %SystemDrive%\USERS\ELLA\APPDATA\ROAMING\CURL
zoo %SystemDrive%\USERS\ELLA\APPDATA\LOCAL\COMD\SEMI.VBS
regt 14
regt 27
delref %SystemDrive%\PROGRAMDATA\SUBAIR\GOODSTRING.DLL
delall %SystemDrive%\USERS\ELLA\APPDATA\ROAMING\AC18D0B2E8A24E10BE83452B6CA89F29\HANDLEREXECUTION.EXE
delall %SystemDrive%\USERS\ELLA\APPDATA\LOCAL\TEMP\B78BFBE3A96C4B84A2B3A67845589832\HANDLEREXECUTION.EXE
delall %SystemDrive%\USERS\ELLA\APPDATA\LOCAL\6B0BD6907D574A20A5D7A734362D4023\HANDLEREXECUTION.EXE
delall %SystemDrive%\USERS\ELLA\APPDATA\LOCAL\TEMP\781D3D5DA5D34A29B75F4CD0825C038E\HANDLEREXECUTION.EXE
delall %SystemDrive%\USERS\ELLA\APPDATA\ROAMING\CFF83D6CE77C44179EFDA681A0728C32\HANDLEREXECUTION.EXE
delall %SystemDrive%\USERS\ELLA\APPDATA\LOCAL\WUPDATE\WUPDATE.EXE
delall %SystemDrive%\USERS\ELLA\APPDATA\LOCAL\TEMP\XMRIG.EXE
delref %SystemDrive%\USERS\ELLA\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SYSTEMTABLE\1.2_0
delref HTTP:\\WWW.MAIL.RU\CNT\20775012?GP=855000
delref %SystemDrive%\USERS\ELLA\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\NOFODCNDKOPONHCJOCNCHOBDIDMFOEGF\1.3.0_0\CURRENCY CONVERTOR
delref %SystemDrive%\USERS\ELLA\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\KANPAPJGHHCAOFJALDGGGNJEKDDOGFKL\1.7.0_0\CURRENCYEXCHANGER
delref F.EXE
delref HTTP://CLASSELECTRIC.RU/EBV11HO83E3X5BG00T58JZ5LEDPB2CPO
delref HTTPS://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?P=MKO_AWFZXIPYRAHDGKBEQO0LOCWIXRZS2RCB6IY1PL4TSFZOVNC8R233WHOVYTHIAQW7ZN5T7CI0FR715TNKC5WTNTXQRNXAO0KE-TXK3NVOU9_TI8OJEI-SGBOGE4AOKT1NNZR6CM2KEIX8WRCRMMYRJJGYEAHCUFDSR1NQ_-MOWSO8DQ9BEPIERJO4HO
delref HTTPS://%66%65%65%64.%68%65%6C%70%65%72%62%61%72.%63%6F%6D/?P=MKO_AWFZXIPYRAHDGKBEQO0LOCWIXRZS2RCB6IY1PL4TSFZOVNC8R233WHOVYTHIAQW7ZN5T7CI0FR715TNKC5WTNTXQRNXAO0KE-TXK3NVOU9_TI8OJDVQS95C9DTD32XYBBOFIVPPOHCJ8SZ72TQUBX6_-ZURKLUOXDFI4BBDKSP6THP7JTG2KKNB820AUNEQ9N
delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DAJFLEPEGNONONCFMOIKDNEPHFLELDNBH%26INSTALLSOURCE%3DONDEMAND%26UC
delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DBGCIFLJFAPBHGIEHKJLCKFJMGEOJIJCB%26INSTALLSOURCE%3DONDEMAND%26UC
delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DHCADGIJMEDBFGCIEGJOMFPJCDCHLHNIF%26INSTALLSOURCE%3DONDEMAND%26UC
delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DINDJGIEBMAKHMNAPLNLNANODKFIEJFJD%26INSTALLSOURCE%3DONDEMAND%26UC
delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DJEDPDDONJEOGELDHKKBPDACHLLHDFKNK%26INSTALLSOURCE%3DONDEMAND%26UC
delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DLBJJFIIHGFEGNIOLCKPHPNFAOKDKBMDM%26INSTALLSOURCE%3DONDEMAND%26UC
delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DOJLCEBDKBPJDPILIGKDBBKDKFJMCHBFD%26INSTALLSOURCE%3DONDEMAND%26UC
delref LOAD.PYC
delref %SystemDrive%\USERS\ELLA\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\EABPNABHHFFHBFJIBHHDDGAKDBNCCPIJ\1.3.0_0\ONETABBER
delref PM.PS1
delref %SystemDrive%\USERS\ELLA\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\INDJGIEBMAKHMNAPLNLNANODKFIEJFJD\0.3.3_0\RUTUBE
delall %SystemDrive%\USERS\ELLA\APPDATA\LOCAL\COMD\SEMI.VBS
delref %SystemDrive%\USERS\ELLA\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\BCDEFBLGNBFPKKDEOEOGMNNABEDCPOFH\0.4_0\VIDTRUST DOWNLOAD MANAGER FOR CHROME
delref %SystemDrive%\USERS\ELLA\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\LBJJFIIHGFEGNIOLCKPHPNFAOKDKBMDM\7.0.25_0\ДОМАШНЯЯ СТРАНИЦА MAIL.RU
delref %SystemDrive%\USERS\ELLA\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\HCADGIJMEDBFGCIEGJOMFPJCDCHLHNIF\12.0.28_0\ДОМАШНЯЯ СТРАНИЦА MAIL.RU
delref %SystemDrive%\USERS\ELLA\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\OJLCEBDKBPJDPILIGKDBBKDKFJMCHBFD\12.0.12_0\ПОИСК MAIL.RU
delref %SystemDrive%\USERS\ELLA\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\BGCIFLJFAPBHGIEHKJLCKFJMGEOJIJCB\7.0.25_0\ПОИСК MAIL.RU
delref %SystemDrive%\USERS\ELLA\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\AJFLEPEGNONONCFMOIKDNEPHFLELDNBH\12.0.39_0\ПОИСК MAIL.RU
delref %SystemDrive%\USERS\ELLA\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\JEDPDDONJEOGELDHKKBPDACHLLHDFKNK\2.13.22_0\ПУЛЬТ
delall %SystemDrive%\PROGRAM FILES\SYSTEMAREV\REVSERVICESX\APP.EXE
delall %SystemRoot%\WINDOWSMANAGER.EXE
delall %SystemRoot%\WINMAIN64.EXE
delall %Sys32%\MCICDA64.DLL
delall %SystemRoot%\SRV_EXT.EXE
delall %SystemDrive%\PROGRAM FILES\SYSTEMAREV\REVSERVICESX\SYSTEMUPDATE64X.EXE
delall %SystemDrive%\PROGRAM FILES (X86)\MASKIT\MASKIT.EXE
delall %SystemDrive%\PROGRAM FILES (X86)\THZXUJVJU\VA2H1A3.DLL
deltmp
delnfr
restart