win32\rukometa.x - Форум технической поддержки ESET NOD32

Размещено 11.07.2016 15:52:29

выполняем скрипт в uVS:
- скопировать содержимое кода в буфер обмена;
- стартуем uVS(start.exe), далее выбираем: текущий пользователь, меню - скрипты - выполнить скрипт из буфера обмена;
- закрываем все браузеры перед выполнением скрипта;
при деинсталляции программ - соглашаемся на деинсталляцию_удаление подтверждаем "да"

Код
;uVS v3.87.4 [http://dsrt.dyndns.org] ;Target OS: NTv6.1 OFFSGNSAVE delref HTTP://CHATOZOV.RU/?UTM_CONTENT=706DAF58C4C295E14015A61BF477685C&UTM_SOURCE=STARTPM&UTM_TERM=D39327F63AA106343563DBDDE89A9F4F&UTM_D=20160525 ;------------------------autoscript--------------------------- chklst delvir delref HTTP://CHATOZOV.RU/?UTM_SOURCE=UOUA03N&UTM_CONTENT=1F1A7D4E6784534601121B44B7BE8052&UTM_TERM=D39327F63AA106343563DBDDE89A9F4F&UTM_D=20160525 delref {D5FEC983-01DB-414A-9456-AF95AC9ED7B5}\[CLSID] delref {E7E8ED77-2FBA-4EC6-BC07-65DE4DE6709F}\[CLSID] delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DBGCIFLJFAPBHGIEHKJLCKFJMGEOJIJCB%26INSTALLSOURCE%3DONDEMAND%26UC delref HTTP://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DBHJCGOMKANPKPBLOKEBECKNHAHGKCMOO%26INSTALLSOURCE%3DONDEMAND%26UC delref HTTP://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DNECFMKPLPMINFJAGBLFABGGOMDPAAKAN%26INSTALLSOURCE%3DONDEMAND%26UC delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DOELPKEPJLGMEHAJEHFEICFBJDIOBDKFJ%26INSTALLSOURCE%3DONDEMAND%26UC delref HTTP://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DPJFKGJLNOCFAKOHEOAPICNKNOGLIPAPD%26INSTALLSOURCE%3DONDEMAND%26UC delref %SystemDrive%\USERS\ПОЛЬЗОВАТЕЛ\APPDATA\ROAMING\ADOBE FLASH PLAYER\ADOBE.EXE delref HTTP://WWW.SWEET-PAGE.COM/?TYPE=HP&TS=1391257789&FROM=COR&UID=395049983_1052499_C4F2117C delref HTTP://WWW.SWEET-PAGE.COM/WEB/?TYPE=DS&TS=1391257789&FROM=COR&UID=395049983_1052499_C4F2117C&Q={SEARCHTERMS} deldirex %SystemDrive%\USERS\ПОЛЬЗОВАТЕЛ\APPDATA\LOCALLOW\UNITY\WEBPLAYER\LOADER deldirex %SystemDrive%\USERS\ГЕОРГИЙ\APPDATA\LOCALLOW\UNITY\WEBPLAYER\LOADER delref HTTP://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DDHDGFFKKEBHMKFJOJEJMPBLDMPOBFKFO%26INSTALLSOURCE%3DONDEMAND%26UC delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DLBJJFIIHGFEGNIOLCKPHPNFAOKDKBMDM%26INSTALLSOURCE%3DONDEMAND%26UC delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DLMJEGMLICAMNIMMFHCMPKCLMIGMMCBEH%26INSTALLSOURCE%3DONDEMAND%26UC delref %SystemDrive%\USERS\ПОЛЬЗОВАТЕЛ\APPDATA\ROAMING\GLISTER\NVM.DLL delref HTTP://YAMDEX.NET/?SEARCHID=1&L10N=RU&FROMSEARCH=1&IMSID=18CAEC4C9E7BDEBAB864BFE137901122&TEXT={SEARCHTERMS} regt 28 regt 29 ; Java(TM) 6 Update 26 (64-bit) exec MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F86416026FF} /quiet ; Kinoroom Browser exec C:\Program Files (x86)\Kinoroom Browser\Uninstall.exe ; OpenAL exec C:\Program Files (x86)\OpenAL\oalinst.exe" /U ; GPU Monitor exec C:\Program Files (x86)\VLC Player GPU+\uninstall.exe" "/U:C:\Program Files (x86)\VLC Player GPU+\Uninstall\uninstall.xml exec MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216026FF} /quiet exec MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160020} /quiet deltmp delnfr ;------------------------------------------------------------- restart

Код


;uVS v3.87.4 [http://dsrt.dyndns.org]
;Target OS: NTv6.1
OFFSGNSAVE
delref HTTP://CHATOZOV.RU/?UTM_CONTENT=706DAF58C4C295E14015A61BF477685C&UTM_SOURCE=STARTPM&UTM_TERM=D39327F63AA106343563DBDDE89A9F4F&UTM_D=20160525
;------------------------autoscript---------------------------

chklst
delvir

delref HTTP://CHATOZOV.RU/?UTM_SOURCE=UOUA03N&UTM_CONTENT=1F1A7D4E6784534601121B44B7BE8052&UTM_TERM=D39327F63AA106343563DBDDE89A9F4F&UTM_D=20160525

delref {D5FEC983-01DB-414A-9456-AF95AC9ED7B5}\[CLSID]

delref {E7E8ED77-2FBA-4EC6-BC07-65DE4DE6709F}\[CLSID]

delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DBGCIFLJFAPBHGIEHKJLCKFJMGEOJIJCB%26INSTALLSOURCE%3DONDEMAND%26UC

delref HTTP://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DBHJCGOMKANPKPBLOKEBECKNHAHGKCMOO%26INSTALLSOURCE%3DONDEMAND%26UC

delref HTTP://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DNECFMKPLPMINFJAGBLFABGGOMDPAAKAN%26INSTALLSOURCE%3DONDEMAND%26UC

delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DOELPKEPJLGMEHAJEHFEICFBJDIOBDKFJ%26INSTALLSOURCE%3DONDEMAND%26UC

delref HTTP://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DPJFKGJLNOCFAKOHEOAPICNKNOGLIPAPD%26INSTALLSOURCE%3DONDEMAND%26UC

delref %SystemDrive%\USERS\ПОЛЬЗОВАТЕЛ\APPDATA\ROAMING\ADOBE FLASH PLAYER\ADOBE.EXE

delref HTTP://WWW.SWEET-PAGE.COM/?TYPE=HP&TS=1391257789&FROM=COR&UID=395049983_1052499_C4F2117C

delref HTTP://WWW.SWEET-PAGE.COM/WEB/?TYPE=DS&TS=1391257789&FROM=COR&UID=395049983_1052499_C4F2117C&Q={SEARCHTERMS}

deldirex %SystemDrive%\USERS\ПОЛЬЗОВАТЕЛ\APPDATA\LOCALLOW\UNITY\WEBPLAYER\LOADER

deldirex %SystemDrive%\USERS\ГЕОРГИЙ\APPDATA\LOCALLOW\UNITY\WEBPLAYER\LOADER

delref HTTP://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DDHDGFFKKEBHMKFJOJEJMPBLDMPOBFKFO%26INSTALLSOURCE%3DONDEMAND%26UC

delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DLBJJFIIHGFEGNIOLCKPHPNFAOKDKBMDM%26INSTALLSOURCE%3DONDEMAND%26UC

delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DLMJEGMLICAMNIMMFHCMPKCLMIGMMCBEH%26INSTALLSOURCE%3DONDEMAND%26UC

delref %SystemDrive%\USERS\ПОЛЬЗОВАТЕЛ\APPDATA\ROAMING\GLISTER\NVM.DLL

delref HTTP://YAMDEX.NET/?SEARCHID=1&L10N=RU&FROMSEARCH=1&IMSID=18CAEC4C9E7BDEBAB864BFE137901122&TEXT={SEARCHTERMS}

regt 28
regt 29
; Java(TM) 6 Update 26 (64-bit)
exec MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F86416026FF} /quiet
; Kinoroom Browser
exec  C:\Program Files (x86)\Kinoroom Browser\Uninstall.exe
; OpenAL
exec  C:\Program Files (x86)\OpenAL\oalinst.exe" /U
; GPU Monitor
exec  C:\Program Files (x86)\VLC Player GPU+\uninstall.exe" "/U:C:\Program Files (x86)\VLC Player GPU+\Uninstall\uninstall.xml
exec  MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216026FF} /quiet
exec  MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160020} /quiet
deltmp
delnfr
;-------------------------------------------------------------

restart

перезагрузка, пишем о старых и новых проблемах.
+
вопрос: зачем у вас установлено два антивируса: ESET и CEZURITY
могут конфликтовать между собой.
------------
далее,
сделайте дополнительно быструю проверку системы в малваребайт
http://forum.esetnod32.ru/forum9/topic10688/

[ Как создать образ автозапуска? ]