Сам файл сидит в C:\ProgramData\AppData\Local\Microsoft\Windows\Tem plates\SyncTemplate
Пробовал удалять, результата нет. Через некоторое время он появляется снова.
Поставщик ИТ-решений PRO32 сообщает вам, что после 17 лет сотрудничества мы более не являемся эксклюзивным дистрибьютором программных продуктов словацкого разработчика ESET в России, Республике Беларусь, Казахстане, Азербайджане, Узбекистане, Кыргызстане, Таджикистане, Туркменистане, Молдове, Грузии и Армении.
Купить и продлить лицензии ESET на нашем сайте больше нельзя.
Предлагаем вам попробовать новый антивирус от компании PRO32.
Продукты PRO32 — это технологичные решения, надежная защита от киберугроз и максимальная производительность устройств на Windows / Android.
Для действующих клиентов ESET мы предлагаем промокод на скидку в размере 15% — ESET15. Скопируйте его и после добавления товара в корзину, не забудьте его применить в корзине.
Код |
---|
;uVS v4.0.10 [http://dsrt.dyndns.org] ;Target OS: NTv6.1 v400c OFFSGNSAVE ;------------------------autoscript--------------------------- delall %SystemDrive%\PROGRAMDATA\CATALOG UPDATE\CATALOGUPDATE.EXE zoo %SystemDrive%\PROGRAMDATA\APPDATA\LOCAL\MICROSOFT\WINDOWS\TEMPLATES\SYNCTEMPLATE\SYNC_F.EXE addsgn 1AE6709A5583FF8FF42B5194782A5605DAAFDC14CDFAD3B4490F0970065D3568371C032216DED16D3B0BC0BB4A259B0D8C5430F911FEB8DBDCFC54A404F14657 8 Win32/BitCoinMiner 7 chklst delvir deldirex %SystemDrive%\USERS\001\APPDATA\LOCALLOW\UNITY\WEBPLAYER\LOADER delref %SystemDrive%\USERS\001\APPDATA\ROAMING\METFM.EXE delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DCCFIFBOJENKENPKMNBNNDEADPFDIFFOF%26INSTALLSOURCE%3DONDEMAND%26UC delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DOELPKEPJLGMEHAJEHFEICFBJDIOBDKFJ%26INSTALLSOURCE%3DONDEMAND%26UC delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DOJLCEBDKBPJDPILIGKDBBKDKFJMCHBFD%26INSTALLSOURCE%3DONDEMAND%26UC delref %SystemDrive%\USERS\001\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\OJLCEBDKBPJDPILIGKDBBKDKFJMCHBFD\12.0.12_1\ПОИСК MAIL.RU delref HTTP://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DDHDGFFKKEBHMKFJOJEJMPBLDMPOBFKFO%26INSTALLSOURCE%3DONDEMAND%26UC apply regt 28 regt 29 deltmp delref %SystemDrive%\USERS\001\APPDATA\LOCAL\{F8CB26D9-6304-4B62-8DD3-906E9A336DFD} delref %SystemDrive%\USERS\001\APPDATA\LOCAL\{59132DE9-12E4-4B14-BFF5-B93B6E8FD0A2} delref %SystemRoot%\TEMP\GUR2DA4.EXE delref %SystemDrive%\USERS\001\APPDATA\LOCAL\TEMP\TMP5E8D.TMP delref %SystemDrive%\PROGRAM FILES (X86)\IOBIT\ADVANCED SYSTEMCARE 8\MONITOR.EXE delref %SystemDrive%\PROGRAM FILES (X86)\IOBIT\ADVANCED SYSTEMCARE 8\ASC.EXE delref %SystemDrive%\USERS\001\APPDATA\ROAMING\.MONO\ISSCH\ISSCH.EXE delref %SystemDrive%\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\OFFICE15\OLICENSEHEARTBEAT.EXE delref {23E5D772-327A-42F5-BDEE-C65C6796BB2A}\[CLSID] delref {177AFECE-9599-46CF-90D7-68EC9EEB27B4}\[CLSID] delref {CEF51277-5358-477B-858C-4E14F0C80BF7}\[CLSID] delref {59116E30-02BD-4B84-BA1E-5D77E809B1A2}\[CLSID] delref %SystemDrive%\PROGRAM FILES (X86)\IOBIT\IOBIT UNINSTALLER\IOBITUNINSTALER.EXE delref 10\[CLSID] delref {166B1BCA-3F9C-11CF-8075-444553540000}\[CLSID] delref {233C1507-6A77-46A4-9443-F871F945D258}\[CLSID] delref {7AEFE841-DCA1-4A95-80CB-BE935D020500}\[CLSID] delref {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA}\[CLSID] delref {EBA7A1E6-E69D-4BA5-B291-95782A004604}\[CLSID] delref %SystemRoot%\SYSWOW64\WIN32K.SYS delref %SystemDrive%\PROGRAM FILES (X86)\BATTLELOG WEB PLUGINS\2.5.0\NPBATTLELOG.DLL delref {1FBA04EE-3024-11D2-8F1F-0000F87ABD16}\[CLSID] delref {05B38830-F4E9-4329-978B-1DD28605D202}\[CLSID] delref {056D528D-CE28-4194-9BA3-BA2E9197FF8C}\[CLSID] delref {0596C850-7BDD-4C9D-AFDF-873BE6890637}\[CLSID] delref {E6FB5E20-DE35-11CF-9C87-00AA005127ED}\[CLSID] delref {09A47860-11B0-4DA5-AFA5-26D86198A780}\[CLSID] delref {B19ED566-D419-470B-B111-3C89040BC027}\[CLSID] delref {0229E5E7-09E9-45CF-9228-0228EC7D5F17}\[CLSID] delref {2803063F-4B8D-4DC6-8874-D1802487FE2D}\[CLSID] delref {1A184982-D79E-44C7-BDE4-686552E67B44}\[CLSID] delref {307A6C42-0000-0010-8000-00AA00389B71}\[CLSID] delref %Sys32%\MSSPELLCHECKINGFACILITY.DLL delref %SystemDrive%\PROGRAM FILES (X86)\BATTLELOG WEB PLUGINS\2.5.0\NPBATTLELOGX64.DLL delref %Sys32%\BLANK.HTM delref %SystemDrive%\PROGRAM FILES (X86)\IOBIT\ADVANCED SYSTEMCARE 8\ASCSERVICE.EXE delref %SystemDrive%\USERS\001\APPDATA\LOCAL\TEMP\CPUZ138\CPUZ138_X64.SYS delref %Sys32%\DRIVERS\DGDERDRV.SYS delref %Sys32%\DRIVERS\EAGLEX64.SYS delref %Sys32%\DRIVERS\QLTAGVR.SYS delref %SystemDrive%\PROGRAM FILES (X86)\GARENA PLUS\ROOM\SAFEDRV.SYS delref %Sys32%\DRIVERS\HWINTERFACE.SYS delref %SystemDrive%\PROGRAMDATA\MICROSOFT\MICROSOFT ANTIMALWARE\DEFINITION UPDATES\{193B9551-1D36-4174-8AB2-ABD7CA7697A6}\MPKSL931D2BAA.SYS delref %Sys32%\DRIVERS\VBOXNETFLT.SYS delref %Sys32%\PSXSS.EXE delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.26.9\PSMACHINE_64.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.28.1\PSMACHINE_64.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.32.7\PSMACHINE_64.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.27.5\PSMACHINE_64.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.28.15\PSMACHINE_64.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.29.1\PSMACHINE_64.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.33.3\PSMACHINE_64.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.23.9\PSMACHINE_64.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.24.7\PSMACHINE_64.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.28.13\PSMACHINE_64.DLL delref %Sys32%\SHAREMEDIACPL.CPL delref %SystemDrive%\PROGRAM FILES\ADOBE\ADOBE PHOTOSHOP CC 2015\PHOTOSHOP.EXE\AUTOMATION delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.29.5\PSMACHINE_64.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.31.5\PSMACHINE_64.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.30.3\PSMACHINE_64.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.26.9\PSMACHINE.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.28.1\PSMACHINE.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.21.115\PSMACHINE.DLL delref %SystemRoot%\SYSWOW64\PLASRV.EXE delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.32.7\PSMACHINE.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.27.5\PSMACHINE.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.28.15\PSMACHINE.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.29.1\PSMACHINE.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.33.3\PSMACHINE.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.23.9\PSMACHINE.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.24.7\PSMACHINE.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.28.13\PSMACHINE.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.29.5\PSMACHINE.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.31.5\PSMACHINE.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.30.3\PSMACHINE.DLL delref E:\AUTORUN.EXE delref {10DB41A2-8A81-4788-B635-ABA6749A7D87}\[CLSID] delref {00000000-0000-0000-0000-000000000000}\[CLSID] delref {0000036B-C524-4050-81A0-243669A86B9F}\[CLSID] delref {086C8477-4F71-4550-87FB-AF0AE8DF3E98}\[CLSID] delref {219C3416-8CB2-491A-A3C7-D9FCDDC9D600}\[CLSID] delref {5A8FF410-F3CE-4844-B31B-F18D911239E8}\[CLSID] delref {7AEFE841-DCA1-4A95-80CB-BE935D020300}\[CLSID] delref {7AEFE841-DCA1-4A95-80CB-BE935D020302}\[CLSID] delref {8DAE90AD-4583-4977-9DD4-4360F7A45C74}\[CLSID] delref %SystemDrive%\IEXPLORE.BAT delref %SystemDrive%\PROGRAM FILES (X86)\STEAM\STEAMAPPS\COMMON\ZENIMAX ONLINE\UNINSTALL\UNINSTALL THE ELDER SCROLLS ONLINE.EXE delref %SystemDrive%\PROGRAM FILES (X86)\COUNTER-STRIKE\HL.EXE delref %SystemDrive%\PROGRAM FILES (X86)\MOVAVI VIDEO CONVERTER 15\CONVERTER.EXE delref %SystemDrive%\PROGRAM FILES (X86)\MOVAVI VIDEO CONVERTER 15\MOVAVI КОНВЕРТЕР ВИДЕО 15.URL delref %SystemDrive%\PROGRAM FILES (X86)\MOVAVI VIDEO CONVERTER 15\UNINST.EXE delref %SystemDrive%\PROGRAM FILES (X86)\COOP-LAND\ASTRONEER\ASTRO.EXE delref %SystemDrive%\PROGRAM FILES (X86)\COOP-LAND\ASTRONEER\ПОСЕТИТЬ COOP-LAND.RU.URL delref %SystemDrive%\PROGRAM FILES (X86)\COOP-LAND\ASTRONEER\SITE.URL delref %SystemDrive%\PROGRAM FILES (X86)\COOP-LAND\ASTRONEER\UNINS000.EXE delref %SystemDrive%\PROGRAM FILES (X86)\KONAMI\SILENT HILL 4 - THE ROOM\SH4W1.EXE delref %SystemRoot%\INSTALLER\{6EEF61AB-CC0B-4917-A3F2-97902CD11073}\ARPPRODUCTICON.EXE delref %SystemRoot%\INSTALLER\{0B67C0D3-AE80-40A0-8727-32D22230A693}\SCRECODESTARTMENU_563A75F05683422E8C558ED3B6DA617D.EXE delref %SystemRoot%\INSTALLER\{38BC5B60-4E70-470A-AE76-E06C15700C68}\NERORESCUEAGENT.EX_2882597C6E684EBDA23F3CF2CA0CBC30.EXE delref %SystemDrive%\PROGRAMDATA\DOWNLOADS\UOFLAUNCHER.EXE ;------------------------------------------------------------- deldirex %SystemDrive%\PROGRAMDATA\APPDATA\LOCAL\MICROSOFT\WINDOWS\TEMPLATES\SYNCTEMPLATE restart |