;uVS v4.11.3 [http://dsrt.dyndns.org:8888]
;Target OS: NTv6.1
v400c
uidel  "C:\Program Files (x86)\NetShield Kit\unins000.exe"
regt 27
setdns Подключение по локальной сети\4\{EE1B3009-A6B6-4E9D-B66E-A1826C717AE6}\8.8.8.8,8.8.4.4
setdns Сетевое подключение Bluetooth\4\{841E8A20-14DC-40D0-B508-57EA2214E3E4}\8.8.8.8,8.8.4.4
setdns Hamachi\4\{AC493FEC-8B1E-45A9-9B69-9F6BF3A09AD7}\8.8.8.8,8.8.4.4
dnsreset
delref 0HTTP://127.0.0.3/WPAD.DAT
delref HTTP://127.0.0.3/WPAD.DAT
delall %SystemDrive%\USERS\HOME\APPDATA\LOCAL\MAIL.RU\SPUTNIK\IE_ADDON_DLL.DLL
delall %SystemDrive%\PROGRAM FILES (X86)\NETSHIELD KIT\NETSHIELDSVC.EXE
delref HTTPS://FIND-IT.PRO/?UTM_SOURCE=DISTR_M
delall %SystemDrive%\USERS\HOME\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\8LYKHWHK.DEFAULT\EXTENSIONS\WRC@AVAST.COM.XPI
delref HTTP://WWW.SEARCH.ASK.COM/?TPID=ORJ-SPE&O=APN11412&PF=V7&TRGB=CR&P2=%5EBBK%5EOSJ000%5EYY%5ERU&GCT=HP&APN_PTNRS=BBK&APN_DTID=%5EOSJ000%5EYY%5ERU&APN_DBR=CR_36.0.1985.125&APN_UID=7D7164D9-1355-4503-BE29-B1C0C14536F7&ITBV=12.15.1.20&DOI=2014-07-21&PSV=&PT=TB
delall %SystemDrive%\PROGRAMDATA\EUMLXNLYGOFCIQVB\AZGMQXA.WSF
delall %SystemDrive%\PROGRAM FILES (X86)\MICROLEAVES\ONLINE APPLICATION\ONLINE APPLICATION UPDATER.EXE
deldir %SystemDrive%\PROGRAM FILES (X86)\NETSHIELD KIT
deldir %SystemDrive%\USERS\HOME\APPDATA\LOCAL\MAIL.RU\SPUTNIK
deldir %SystemDrive%\PROGRAMDATA\EUMLXNLYGOFCIQVB
deldir %SystemDrive%\PROGRAM FILES (X86)\MICROLEAVES
deltmp
delref %SystemDrive%\PROGRAM FILES (X86)\MOZILLA FIREFOX\BROWSER\FEATURES\SCREENSHOTS@MOZILLA.ORG.XPI
delref %SystemDrive%\PROGRAM FILES (X86)\MOZILLA FIREFOX\BROWSER\FEATURES\WEBCOMPAT-REPORTER@MOZILLA.ORG.XPI
delref %SystemDrive%\PROGRAM FILES (X86)\MOZILLA FIREFOX\BROWSER\FEATURES\WEBCOMPAT@MOZILLA.ORG.XPI
delref %SystemDrive%\PROGRAM FILES (X86)\MOZILLA FIREFOX\BROWSER\FEATURES\FORMAUTOFILL@MOZILLA.ORG.XPI
delref %SystemDrive%\PROGRAM FILES (X86)\MOZILLA FIREFOX\BROWSER\FEATURES\DOH-ROLLOUT@MOZILLA.ORG.XPI
apply
restart

AutoConfigURL: [S-1-5-21-3951672146-1656268426-1578221725-1000] => hxxp://127.0.0.3/wpad.dat

Start::
CreateRestorePoint:
HKLM-x32\...\Run: [Genshin Impact_Launcher] => [X]
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
Task: {346B2CD4-BA6A-48A3-993E-917C1603B43E} - \DownloadStudio Standalone Updater -> No File <==== ATTENTION
Task: {42A6AC4A-08BD-456D-9CE8-A40521DA9FDC} - \{A47D8F04-18A6-4E82-A6A8-85943C9FFEA6} -> No File <==== ATTENTION
Task: {5546B605-6D50-45F0-BCC8-2753B165997B} - \{F87BB7C7-2BD8-4825-BEBA-78DAFB6F02B4} -> No File <==== ATTENTION
Task: {6A94E366-E7FB-4557-AC18-50ACF5AFDC47} - \{F3EBE953-3ECC-4B68-BF21-BA78C0EBF0F5} -> No File <==== ATTENTION
Task: {6BC2433A-A68C-42D4-AB64-DF84CDE8ADDF} - \{9F1EE2F1-9332-47A5-8CD8-13534A4860A2} -> No File <==== ATTENTION
Task: {7D746029-2951-4D13-AF76-334A26BD724A} - \NetShield Kit scheduled Autoupdate -> No File <==== ATTENTION
Task: {8B5EC777-8CE4-4DCC-BE72-4B60157E1BE0} - \Microsoft\Windows\Media Center\SqlLiteRecoveryTask -> No File <==== ATTENTION
Task: {8CE12249-4E01-407F-B28D-ED9D50C4939A} - \Microsoft\Windows\Media Center\ObjectStoreRecoveryTask -> No File <==== ATTENTION
Task: {A19666AB-EB38-4578-A4C1-DC53AEAB5815} - \{A9C83B22-0D16-494D-8012-7EBD65ACE0DA} -> No File <==== ATTENTION
Task: {A4BA90DB-8015-4D6D-8D74-8AF7FDE03A7B} - \DNS Update -> No File <==== ATTENTION
Task: {AAB543CC-6E19-41F8-8E30-D78DCC3D8CF4} - \Microsoft\Windows\Media Center\MediaCenterRecoveryTask -> No File <==== ATTENTION
Task: {B0AFC430-22D1-42D6-B603-6C47F3209828} - \RCgUjhtHyZeqR2 -> No File <==== ATTENTION
Task: {FD382B23-6D1C-4DE3-8045-3ACE97F8A963} - \NetShield Kit Self Repair -> No File <==== ATTENTION
CHR StartupUrls: Guest Profile -> "hxxps://find-it.pro/?utm_source=distr_m" 
CHR DefaultSearchKeyword: Guest Profile -> cdn
CHR Extension: (Find-it.pro) - C:\Users\Home\AppData\Local\Google\Chrome\User Data\Guest Profile\Extensions\meejmcfbiapijdfaadackoblffmidlig [2020-11-18]
C:\Users\Home\AppData\Local\Google\Chrome\User Data\Guest Profile\Extensions\meejmcfbiapijdfaadackoblffmidligCHR HomePage: System Profile -> hxxps://find-it.pro/?utm_source=distr_m
CHR StartupUrls: System Profile -> "hxxps://find-it.pro/?utm_source=distr_m" 
CHR DefaultSearchKeyword: System Profile -> cdn
CHR Extension: (YoutubeDownloader) - C:\Users\Home\AppData\Local\Google\Chrome\User Data\System Profile\Extensions\ahehgijakldijphildhgnjnibjmjdieb [2020-11-18] [UpdateUrl:hxxps://clients98.google.com/service/update2/crx] <==== ATTENTION
CHR Extension: (Find-it.pro) - C:\Users\Home\AppData\Local\Google\Chrome\User Data\System Profile\Extensions\meejmcfbiapijdfaadackoblffmidlig [2020-11-18]
CHR HKU\S-1-5-21-3951672146-1656268426-1578221725-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [ldgpjdiadomhinpimgchmeembbgojnjk]
CHR HKLM-x32\...\Chrome\Extension: [aegnopegbbhjeeiganiajffnalhlkkjb]
CHR HKLM-x32\...\Chrome\Extension: [beliehdniadoecbonbhlcgbdldccfigp]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [fdjdjkkjoiomafnihnobkinnfjnnlhdg]
CHR HKLM-x32\...\Chrome\Extension: [iepoegkaoeljnbhagabakjodgpfniimo]
CHR HKLM-x32\...\Chrome\Extension: [jdfonankhfnhihdcpaagpabbaoclnjfp]
CHR HKLM-x32\...\Chrome\Extension: [mjmpfdkmpojoeemjmfiddlhkkndcdpno]
C:\Users\Home\AppData\Local\Google\Chrome\User Data\System Profile\Extensions\meejmcfbiapijdfaadackoblffmidlig
CMD: reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{95a197d6-a537-44ee-8bbb-4da9ef3cbf63}" /f /reg:32
Reg: reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{95a197d6-a537-44ee-8bbb-4da9ef3cbf63}" /f
CMD: reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{5266F634-7B7D-4537-BDDC-98DD6CFCBAA1}" /f /reg:32
Reg: reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{5266F634-7B7D-4537-BDDC-98DD6CFCBAA1}" /f
CustomCLSID: HKU\S-1-5-21-3951672146-1656268426-1578221725-1000_Classes\CLSID\{E36606FE-036A-4dd0-ABA9-A58F409803F0}\InprocServer32 -> no filepath
Reboot:
End::