sync_f.exe - Форум технической поддержки ESET NOD32

Сообщений: 1

Регистрация: 03.09.2017

Размещено 03.09.2017 12:33:17

Здравствуйте! Такая проблема - в диспетчере задач периодически появляется процесс sync_f.exe, который сильно загружает систему.
Сам файл сидит в C:\ProgramData\AppData\Local\Microsoft\Windows\Tem plates\SyncTemplate
Пробовал удалять, результата нет. Через некоторое время он появляется снова.

Прикрепленные файлы

001-DNS_2017-09-03_13-17-26.7z (852.49 КБ)

Сообщений: 17962

Баллов: 14369

Регистрация: 16.03.2010

Размещено 03.09.2017 13:42:32

просьба:
где нибудь на одном форуме продолжите лечение системы:
или здесь,
или на форуме касперклуба.
https://forum.kasperskyclub.ru/index.php?showtopic=56924

по вашей проблеме:

выполняем скрипт в uVS:
- скопировать содержимое кода в буфер обмена;
- стартуем uVS(start.exe), далее выбираем: текущий пользователь, меню - скрипты - выполнить скрипт из буфера обмена;
- закрываем все браузеры перед выполнением скрипта;
при деинсталляции программ - соглашаемся на деинсталляцию_удаление подтверждаем "да"

Код
;uVS v4.0.10 [http://dsrt.dyndns.org] ;Target OS: NTv6.1 v400c OFFSGNSAVE ;------------------------autoscript--------------------------- delall %SystemDrive%\PROGRAMDATA\CATALOG UPDATE\CATALOGUPDATE.EXE zoo %SystemDrive%\PROGRAMDATA\APPDATA\LOCAL\MICROSOFT\WINDOWS\TEMPLATES\SYNCTEMPLATE\SYNC_F.EXE addsgn 1AE6709A5583FF8FF42B5194782A5605DAAFDC14CDFAD3B4490F0970065D3568371C032216DED16D3B0BC0BB4A259B0D8C5430F911FEB8DBDCFC54A404F14657 8 Win32/BitCoinMiner 7 chklst delvir deldirex %SystemDrive%\USERS\001\APPDATA\LOCALLOW\UNITY\WEBPLAYER\LOADER delref %SystemDrive%\USERS\001\APPDATA\ROAMING\METFM.EXE delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DCCFIFBOJENKENPKMNBNNDEADPFDIFFOF%26INSTALLSOURCE%3DONDEMAND%26UC delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DOELPKEPJLGMEHAJEHFEICFBJDIOBDKFJ%26INSTALLSOURCE%3DONDEMAND%26UC delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DOJLCEBDKBPJDPILIGKDBBKDKFJMCHBFD%26INSTALLSOURCE%3DONDEMAND%26UC delref %SystemDrive%\USERS\001\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\OJLCEBDKBPJDPILIGKDBBKDKFJMCHBFD\12.0.12_1\ПОИСК MAIL.RU delref HTTP://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DDHDGFFKKEBHMKFJOJEJMPBLDMPOBFKFO%26INSTALLSOURCE%3DONDEMAND%26UC apply regt 28 regt 29 deltmp delref %SystemDrive%\USERS\001\APPDATA\LOCAL\{F8CB26D9-6304-4B62-8DD3-906E9A336DFD} delref %SystemDrive%\USERS\001\APPDATA\LOCAL\{59132DE9-12E4-4B14-BFF5-B93B6E8FD0A2} delref %SystemRoot%\TEMP\GUR2DA4.EXE delref %SystemDrive%\USERS\001\APPDATA\LOCAL\TEMP\TMP5E8D.TMP delref %SystemDrive%\PROGRAM FILES (X86)\IOBIT\ADVANCED SYSTEMCARE 8\MONITOR.EXE delref %SystemDrive%\PROGRAM FILES (X86)\IOBIT\ADVANCED SYSTEMCARE 8\ASC.EXE delref %SystemDrive%\USERS\001\APPDATA\ROAMING\.MONO\ISSCH\ISSCH.EXE delref %SystemDrive%\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\OFFICE15\OLICENSEHEARTBEAT.EXE delref {23E5D772-327A-42F5-BDEE-C65C6796BB2A}\[CLSID] delref {177AFECE-9599-46CF-90D7-68EC9EEB27B4}\[CLSID] delref {CEF51277-5358-477B-858C-4E14F0C80BF7}\[CLSID] delref {59116E30-02BD-4B84-BA1E-5D77E809B1A2}\[CLSID] delref %SystemDrive%\PROGRAM FILES (X86)\IOBIT\IOBIT UNINSTALLER\IOBITUNINSTALER.EXE delref 10\[CLSID] delref {166B1BCA-3F9C-11CF-8075-444553540000}\[CLSID] delref {233C1507-6A77-46A4-9443-F871F945D258}\[CLSID] delref {7AEFE841-DCA1-4A95-80CB-BE935D020500}\[CLSID] delref {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA}\[CLSID] delref {EBA7A1E6-E69D-4BA5-B291-95782A004604}\[CLSID] delref %SystemRoot%\SYSWOW64\WIN32K.SYS delref %SystemDrive%\PROGRAM FILES (X86)\BATTLELOG WEB PLUGINS\2.5.0\NPBATTLELOG.DLL delref {1FBA04EE-3024-11D2-8F1F-0000F87ABD16}\[CLSID] delref {05B38830-F4E9-4329-978B-1DD28605D202}\[CLSID] delref {056D528D-CE28-4194-9BA3-BA2E9197FF8C}\[CLSID] delref {0596C850-7BDD-4C9D-AFDF-873BE6890637}\[CLSID] delref {E6FB5E20-DE35-11CF-9C87-00AA005127ED}\[CLSID] delref {09A47860-11B0-4DA5-AFA5-26D86198A780}\[CLSID] delref {B19ED566-D419-470B-B111-3C89040BC027}\[CLSID] delref {0229E5E7-09E9-45CF-9228-0228EC7D5F17}\[CLSID] delref {2803063F-4B8D-4DC6-8874-D1802487FE2D}\[CLSID] delref {1A184982-D79E-44C7-BDE4-686552E67B44}\[CLSID] delref {307A6C42-0000-0010-8000-00AA00389B71}\[CLSID] delref %Sys32%\MSSPELLCHECKINGFACILITY.DLL delref %SystemDrive%\PROGRAM FILES (X86)\BATTLELOG WEB PLUGINS\2.5.0\NPBATTLELOGX64.DLL delref %Sys32%\BLANK.HTM delref %SystemDrive%\PROGRAM FILES (X86)\IOBIT\ADVANCED SYSTEMCARE 8\ASCSERVICE.EXE delref %SystemDrive%\USERS\001\APPDATA\LOCAL\TEMP\CPUZ138\CPUZ138_X64.SYS delref %Sys32%\DRIVERS\DGDERDRV.SYS delref %Sys32%\DRIVERS\EAGLEX64.SYS delref %Sys32%\DRIVERS\QLTAGVR.SYS delref %SystemDrive%\PROGRAM FILES (X86)\GARENA PLUS\ROOM\SAFEDRV.SYS delref %Sys32%\DRIVERS\HWINTERFACE.SYS delref %SystemDrive%\PROGRAMDATA\MICROSOFT\MICROSOFT ANTIMALWARE\DEFINITION UPDATES\{193B9551-1D36-4174-8AB2-ABD7CA7697A6}\MPKSL931D2BAA.SYS delref %Sys32%\DRIVERS\VBOXNETFLT.SYS delref %Sys32%\PSXSS.EXE delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.26.9\PSMACHINE_64.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.28.1\PSMACHINE_64.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.32.7\PSMACHINE_64.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.27.5\PSMACHINE_64.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.28.15\PSMACHINE_64.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.29.1\PSMACHINE_64.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.33.3\PSMACHINE_64.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.23.9\PSMACHINE_64.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.24.7\PSMACHINE_64.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.28.13\PSMACHINE_64.DLL delref %Sys32%\SHAREMEDIACPL.CPL delref %SystemDrive%\PROGRAM FILES\ADOBE\ADOBE PHOTOSHOP CC 2015\PHOTOSHOP.EXE\AUTOMATION delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.29.5\PSMACHINE_64.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.31.5\PSMACHINE_64.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.30.3\PSMACHINE_64.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.26.9\PSMACHINE.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.28.1\PSMACHINE.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.21.115\PSMACHINE.DLL delref %SystemRoot%\SYSWOW64\PLASRV.EXE delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.32.7\PSMACHINE.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.27.5\PSMACHINE.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.28.15\PSMACHINE.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.29.1\PSMACHINE.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.33.3\PSMACHINE.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.23.9\PSMACHINE.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.24.7\PSMACHINE.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.28.13\PSMACHINE.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.29.5\PSMACHINE.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.31.5\PSMACHINE.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.30.3\PSMACHINE.DLL delref E:\AUTORUN.EXE delref {10DB41A2-8A81-4788-B635-ABA6749A7D87}\[CLSID] delref {00000000-0000-0000-0000-000000000000}\[CLSID] delref {0000036B-C524-4050-81A0-243669A86B9F}\[CLSID] delref {086C8477-4F71-4550-87FB-AF0AE8DF3E98}\[CLSID] delref {219C3416-8CB2-491A-A3C7-D9FCDDC9D600}\[CLSID] delref {5A8FF410-F3CE-4844-B31B-F18D911239E8}\[CLSID] delref {7AEFE841-DCA1-4A95-80CB-BE935D020300}\[CLSID] delref {7AEFE841-DCA1-4A95-80CB-BE935D020302}\[CLSID] delref {8DAE90AD-4583-4977-9DD4-4360F7A45C74}\[CLSID] delref %SystemDrive%\IEXPLORE.BAT delref %SystemDrive%\PROGRAM FILES (X86)\STEAM\STEAMAPPS\COMMON\ZENIMAX ONLINE\UNINSTALL\UNINSTALL THE ELDER SCROLLS ONLINE.EXE delref %SystemDrive%\PROGRAM FILES (X86)\COUNTER-STRIKE\HL.EXE delref %SystemDrive%\PROGRAM FILES (X86)\MOVAVI VIDEO CONVERTER 15\CONVERTER.EXE delref %SystemDrive%\PROGRAM FILES (X86)\MOVAVI VIDEO CONVERTER 15\MOVAVI КОНВЕРТЕР ВИДЕО 15.URL delref %SystemDrive%\PROGRAM FILES (X86)\MOVAVI VIDEO CONVERTER 15\UNINST.EXE delref %SystemDrive%\PROGRAM FILES (X86)\COOP-LAND\ASTRONEER\ASTRO.EXE delref %SystemDrive%\PROGRAM FILES (X86)\COOP-LAND\ASTRONEER\ПОСЕТИТЬ COOP-LAND.RU.URL delref %SystemDrive%\PROGRAM FILES (X86)\COOP-LAND\ASTRONEER\SITE.URL delref %SystemDrive%\PROGRAM FILES (X86)\COOP-LAND\ASTRONEER\UNINS000.EXE delref %SystemDrive%\PROGRAM FILES (X86)\KONAMI\SILENT HILL 4 - THE ROOM\SH4W1.EXE delref %SystemRoot%\INSTALLER\{6EEF61AB-CC0B-4917-A3F2-97902CD11073}\ARPPRODUCTICON.EXE delref %SystemRoot%\INSTALLER\{0B67C0D3-AE80-40A0-8727-32D22230A693}\SCRECODESTARTMENU_563A75F05683422E8C558ED3B6DA617D.EXE delref %SystemRoot%\INSTALLER\{38BC5B60-4E70-470A-AE76-E06C15700C68}\NERORESCUEAGENT.EX_2882597C6E684EBDA23F3CF2CA0CBC30.EXE delref %SystemDrive%\PROGRAMDATA\DOWNLOADS\UOFLAUNCHER.EXE ;------------------------------------------------------------- deldirex %SystemDrive%\PROGRAMDATA\APPDATA\LOCAL\MICROSOFT\WINDOWS\TEMPLATES\SYNCTEMPLATE restart

Код


;uVS v4.0.10 [http://dsrt.dyndns.org]
;Target OS: NTv6.1
v400c
OFFSGNSAVE
;------------------------autoscript---------------------------

delall %SystemDrive%\PROGRAMDATA\CATALOG UPDATE\CATALOGUPDATE.EXE
zoo %SystemDrive%\PROGRAMDATA\APPDATA\LOCAL\MICROSOFT\WINDOWS\TEMPLATES\SYNCTEMPLATE\SYNC_F.EXE
addsgn 1AE6709A5583FF8FF42B5194782A5605DAAFDC14CDFAD3B4490F0970065D3568371C032216DED16D3B0BC0BB4A259B0D8C5430F911FEB8DBDCFC54A404F14657 8 Win32/BitCoinMiner 7

chklst
delvir

deldirex %SystemDrive%\USERS\001\APPDATA\LOCALLOW\UNITY\WEBPLAYER\LOADER

delref %SystemDrive%\USERS\001\APPDATA\ROAMING\METFM.EXE
delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DCCFIFBOJENKENPKMNBNNDEADPFDIFFOF%26INSTALLSOURCE%3DONDEMAND%26UC
delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DOELPKEPJLGMEHAJEHFEICFBJDIOBDKFJ%26INSTALLSOURCE%3DONDEMAND%26UC
delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DOJLCEBDKBPJDPILIGKDBBKDKFJMCHBFD%26INSTALLSOURCE%3DONDEMAND%26UC
delref %SystemDrive%\USERS\001\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\OJLCEBDKBPJDPILIGKDBBKDKFJMCHBFD\12.0.12_1\ПОИСК MAIL.RU
delref HTTP://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DDHDGFFKKEBHMKFJOJEJMPBLDMPOBFKFO%26INSTALLSOURCE%3DONDEMAND%26UC
apply

regt 28
regt 29
deltmp
delref %SystemDrive%\USERS\001\APPDATA\LOCAL\{F8CB26D9-6304-4B62-8DD3-906E9A336DFD}
delref %SystemDrive%\USERS\001\APPDATA\LOCAL\{59132DE9-12E4-4B14-BFF5-B93B6E8FD0A2}
delref %SystemRoot%\TEMP\GUR2DA4.EXE
delref %SystemDrive%\USERS\001\APPDATA\LOCAL\TEMP\TMP5E8D.TMP
delref %SystemDrive%\PROGRAM FILES (X86)\IOBIT\ADVANCED SYSTEMCARE 8\MONITOR.EXE
delref %SystemDrive%\PROGRAM FILES (X86)\IOBIT\ADVANCED SYSTEMCARE 8\ASC.EXE
delref %SystemDrive%\USERS\001\APPDATA\ROAMING\.MONO\ISSCH\ISSCH.EXE
delref %SystemDrive%\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\OFFICE15\OLICENSEHEARTBEAT.EXE
delref {23E5D772-327A-42F5-BDEE-C65C6796BB2A}\[CLSID]
delref {177AFECE-9599-46CF-90D7-68EC9EEB27B4}\[CLSID]
delref {CEF51277-5358-477B-858C-4E14F0C80BF7}\[CLSID]
delref {59116E30-02BD-4B84-BA1E-5D77E809B1A2}\[CLSID]
delref %SystemDrive%\PROGRAM FILES (X86)\IOBIT\IOBIT UNINSTALLER\IOBITUNINSTALER.EXE
delref 10\[CLSID]
delref {166B1BCA-3F9C-11CF-8075-444553540000}\[CLSID]
delref {233C1507-6A77-46A4-9443-F871F945D258}\[CLSID]
delref {7AEFE841-DCA1-4A95-80CB-BE935D020500}\[CLSID]
delref {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA}\[CLSID]
delref {EBA7A1E6-E69D-4BA5-B291-95782A004604}\[CLSID]
delref %SystemRoot%\SYSWOW64\WIN32K.SYS
delref %SystemDrive%\PROGRAM FILES (X86)\BATTLELOG WEB PLUGINS\2.5.0\NPBATTLELOG.DLL
delref {1FBA04EE-3024-11D2-8F1F-0000F87ABD16}\[CLSID]
delref {05B38830-F4E9-4329-978B-1DD28605D202}\[CLSID]
delref {056D528D-CE28-4194-9BA3-BA2E9197FF8C}\[CLSID]
delref {0596C850-7BDD-4C9D-AFDF-873BE6890637}\[CLSID]
delref {E6FB5E20-DE35-11CF-9C87-00AA005127ED}\[CLSID]
delref {09A47860-11B0-4DA5-AFA5-26D86198A780}\[CLSID]
delref {B19ED566-D419-470B-B111-3C89040BC027}\[CLSID]
delref {0229E5E7-09E9-45CF-9228-0228EC7D5F17}\[CLSID]
delref {2803063F-4B8D-4DC6-8874-D1802487FE2D}\[CLSID]
delref {1A184982-D79E-44C7-BDE4-686552E67B44}\[CLSID]
delref {307A6C42-0000-0010-8000-00AA00389B71}\[CLSID]
delref %Sys32%\MSSPELLCHECKINGFACILITY.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\BATTLELOG WEB PLUGINS\2.5.0\NPBATTLELOGX64.DLL
delref %Sys32%\BLANK.HTM
delref %SystemDrive%\PROGRAM FILES (X86)\IOBIT\ADVANCED SYSTEMCARE 8\ASCSERVICE.EXE
delref %SystemDrive%\USERS\001\APPDATA\LOCAL\TEMP\CPUZ138\CPUZ138_X64.SYS
delref %Sys32%\DRIVERS\DGDERDRV.SYS
delref %Sys32%\DRIVERS\EAGLEX64.SYS
delref %Sys32%\DRIVERS\QLTAGVR.SYS
delref %SystemDrive%\PROGRAM FILES (X86)\GARENA PLUS\ROOM\SAFEDRV.SYS
delref %Sys32%\DRIVERS\HWINTERFACE.SYS
delref %SystemDrive%\PROGRAMDATA\MICROSOFT\MICROSOFT ANTIMALWARE\DEFINITION UPDATES\{193B9551-1D36-4174-8AB2-ABD7CA7697A6}\MPKSL931D2BAA.SYS
delref %Sys32%\DRIVERS\VBOXNETFLT.SYS
delref %Sys32%\PSXSS.EXE
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.26.9\PSMACHINE_64.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.28.1\PSMACHINE_64.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.32.7\PSMACHINE_64.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.27.5\PSMACHINE_64.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.28.15\PSMACHINE_64.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.29.1\PSMACHINE_64.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.33.3\PSMACHINE_64.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.23.9\PSMACHINE_64.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.24.7\PSMACHINE_64.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.28.13\PSMACHINE_64.DLL
delref %Sys32%\SHAREMEDIACPL.CPL
delref %SystemDrive%\PROGRAM FILES\ADOBE\ADOBE PHOTOSHOP CC 2015\PHOTOSHOP.EXE\AUTOMATION
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.29.5\PSMACHINE_64.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.31.5\PSMACHINE_64.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.30.3\PSMACHINE_64.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.26.9\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.28.1\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.21.115\PSMACHINE.DLL
delref %SystemRoot%\SYSWOW64\PLASRV.EXE
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.32.7\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.27.5\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.28.15\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.29.1\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.33.3\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.23.9\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.24.7\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.28.13\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.29.5\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.31.5\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.30.3\PSMACHINE.DLL
delref E:\AUTORUN.EXE
delref {10DB41A2-8A81-4788-B635-ABA6749A7D87}\[CLSID]
delref {00000000-0000-0000-0000-000000000000}\[CLSID]
delref {0000036B-C524-4050-81A0-243669A86B9F}\[CLSID]
delref {086C8477-4F71-4550-87FB-AF0AE8DF3E98}\[CLSID]
delref {219C3416-8CB2-491A-A3C7-D9FCDDC9D600}\[CLSID]
delref {5A8FF410-F3CE-4844-B31B-F18D911239E8}\[CLSID]
delref {7AEFE841-DCA1-4A95-80CB-BE935D020300}\[CLSID]
delref {7AEFE841-DCA1-4A95-80CB-BE935D020302}\[CLSID]
delref {8DAE90AD-4583-4977-9DD4-4360F7A45C74}\[CLSID]
delref %SystemDrive%\IEXPLORE.BAT
delref %SystemDrive%\PROGRAM FILES (X86)\STEAM\STEAMAPPS\COMMON\ZENIMAX ONLINE\UNINSTALL\UNINSTALL THE ELDER SCROLLS ONLINE.EXE
delref %SystemDrive%\PROGRAM FILES (X86)\COUNTER-STRIKE\HL.EXE
delref %SystemDrive%\PROGRAM FILES (X86)\MOVAVI VIDEO CONVERTER 15\CONVERTER.EXE
delref %SystemDrive%\PROGRAM FILES (X86)\MOVAVI VIDEO CONVERTER 15\MOVAVI КОНВЕРТЕР ВИДЕО 15.URL
delref %SystemDrive%\PROGRAM FILES (X86)\MOVAVI VIDEO CONVERTER 15\UNINST.EXE
delref %SystemDrive%\PROGRAM FILES (X86)\COOP-LAND\ASTRONEER\ASTRO.EXE
delref %SystemDrive%\PROGRAM FILES (X86)\COOP-LAND\ASTRONEER\ПОСЕТИТЬ COOP-LAND.RU.URL
delref %SystemDrive%\PROGRAM FILES (X86)\COOP-LAND\ASTRONEER\SITE.URL
delref %SystemDrive%\PROGRAM FILES (X86)\COOP-LAND\ASTRONEER\UNINS000.EXE
delref %SystemDrive%\PROGRAM FILES (X86)\KONAMI\SILENT HILL 4 - THE ROOM\SH4W1.EXE
delref %SystemRoot%\INSTALLER\{6EEF61AB-CC0B-4917-A3F2-97902CD11073}\ARPPRODUCTICON.EXE
delref %SystemRoot%\INSTALLER\{0B67C0D3-AE80-40A0-8727-32D22230A693}\SCRECODESTARTMENU_563A75F05683422E8C558ED3B6DA617D.EXE
delref %SystemRoot%\INSTALLER\{38BC5B60-4E70-470A-AE76-E06C15700C68}\NERORESCUEAGENT.EX_2882597C6E684EBDA23F3CF2CA0CBC30.EXE
delref %SystemDrive%\PROGRAMDATA\DOWNLOADS\UOFLAUNCHER.EXE
;-------------------------------------------------------------

deldirex %SystemDrive%\PROGRAMDATA\APPDATA\LOCAL\MICROSOFT\WINDOWS\TEMPLATES\SYNCTEMPLATE
restart

перезагрузка, пишем о старых и новых проблемах.
----------
сделайте дополнительно быструю проверку системы в малваребайт
http://forum.esetnod32.ru/forum9/topic10688/

[ Как создать образ автозапуска? ]

Сообщений: 17962

Баллов: 14369

Регистрация: 16.03.2010

Размещено 04.09.2017 12:45:27

@dead byapril,
тему закрываю, поскольку вы продолжили лечение на Касперклубе.

[ Как создать образ автозапуска? ]

[ Закрыто ] sync_f.exe