Task: {0866646C-CAB4-40E4-ABC5-8B8793780580} - \Windows Media Sharing -> No File <==== ATTENTION
Task: {DA41DE71-8431-42FB-9DB0-EB64A961DEAD} - \Microsoft\Windows\Maintenance\WinSAT -> No File <==== ATTENTION
Task: {F95B76EB-A809-42EC-8D39-ADAE928CF4D0} - \{205DCCC2-10C0-48E7-97A1-38E3F8F3B9FD} -> No File <==== ATTENTION
AlternateDataStreams: C:\ProgramData\TEMP:2CB9631F [134]
AlternateDataStreams: C:\ProgramData\TEMP:6E6A4F42 [334]
AlternateDataStreams: C:\ProgramData\TEMP:7687A3E3 [338]
AlternateDataStreams: C:\Users\Все пользователи\TEMP:2CB9631F [134]
AlternateDataStreams: C:\Users\Все пользователи\TEMP:6E6A4F42 [334]
AlternateDataStreams: C:\Users\Все пользователи\TEMP:7687A3E3 [338]
GroupPolicy: Restriction - Chrome <==== ATTENTION
GroupPolicy-x32: Restriction - Chrome <==== ATTENTION
GroupPolicy\User: Restriction - Chrome <==== ATTENTION
GroupPolicy-x32\User: Restriction - Chrome <==== ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
CHR HKU\S-1-5-21-2112097562-2123677152-1404486659-1000\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
BHO: Визуальные закладки -> {D5FEC983-01DB-414a-9456-AF95AC9ED7B5} -> No File
BHO-x32: Визуальные закладки -> {D5FEC983-01DB-414a-9456-AF95AC9ED7B5} -> No File
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
CHR Extension: (Anti-obscene) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\hccgoakgkgjfgalcpfhlb [2018-03-12]

EmptyTemp:
Reboot:

;uVS v4.0.9 [http://dsrt.dyndns.org]
;Target OS: NTv6.1
v400c
OFFSGNSAVE
deltmp
restart
;---------command-block---------
delref HTTP://WWW.BIGFISHGAMES.COM/USHER/INDEX.PHP?SITEID=1&LANGID=1
delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DEIODDFAEPDOEIFBHJPHFEFGIPCJCDIEO%26INSTALLSOURCE%3DONDEMAND%26UC
delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DIFLPPBJNPNEIIGCBDFJPNKEBIDMKJMOI%26INSTALLSOURCE%3DONDEMAND%26UC
delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DPPOILMFKBPCKODOIFDLKMKEPCAJFJMHL%26INSTALLSOURCE%3DONDEMAND%26UC
delref %SystemDrive%\USERS\USER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\NPDPAABPKCAHCCGOAKGKGJFGALCPFHLB\0.1_1\ANTI-OBSCENE
delref A9A33436-678B-4C9C-A211-7CC38785E79D\[CLSID]
delref %SystemDrive%\USERS\USER\APPDATA\ROAMING\MICRON\POCCO.EXE
delref %SystemDrive%\USERS\USER\DESKTOP\KILLCOPY\KILLCOPY.EXE
delref %SystemRoot%\SYSWOW64\PEERDISTSVC.DLL
delref %SystemRoot%\SYSWOW64\DRIVERS\NDIS.SYS
delref %SystemRoot%\SYSWOW64\UMPO.DLL
delref %SystemRoot%\SYSWOW64\IPHLPSVC.DLL
delref %SystemRoot%\SYSWOW64\CSCSVC.DLL
delref %SystemRoot%\SYSWOW64\DRIVERS\RDVGKMD.SYS
delref %SystemRoot%\SYSWOW64\PNRPSVC.DLL
delref %SystemRoot%\SYSWOW64\DRIVERS\PACER.SYS
delref %SystemRoot%\SYSWOW64\LSM.EXE
delref {166B1BCA-3F9C-11CF-8075-444553540000}\[CLSID]
delref {233C1507-6A77-46A4-9443-F871F945D258}\[CLSID]
delref {444785F1-DE89-4295-863A-D46C3A781394}\[CLSID]
delref {CA8A9780-280D-11CF-A24D-444553540000}\[CLSID]
delref {CAFEEFAC-DEC7-0000-0000-ABCDEFFEDCBA}\[CLSID]
delref {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA}\[CLSID]
delref %SystemRoot%\SYSWOW64\WIN32K.SYS
delref {E0DD6CAB-2D10-11D2-8F1A-0000F87ABD16}\[CLSID]
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\CHROME\APPLICATION\58.0.3029.81\INSTALLER\CHRMSTP.EXE
delref %SystemRoot%\SYSWOW64\BLANK.HTM
delref {E6FB5E20-DE35-11CF-9C87-00AA005127ED}\[CLSID]
delref {7C9E7B90-88EC-4852-AC7A-C938268A5D04}\[CLSID]
delref %Sys32%\DRIVERS\RDVGKMD.SYS
delref %Sys32%\MSSPELLCHECKINGFACILITY.DLL
delref %Sys32%\BLANK.HTM
delref HELPSVC\[SERVICE]
delref SACSVR\[SERVICE]
delref TBS\[SERVICE]
delref VMMS\[SERVICE]
delref MESSENGER\[SERVICE]
delref RDSESSMGR\[SERVICE]
delref %SystemRoot%\XHUNTER1.SYS
delref %Sys32%\PSXSS.EXE
delref %SystemDrive%\USERS\USER\APPDATA\LOCAL\MAIL.RU\GAMECENTER\NPDETECTOR.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\JAVA\JRE1.8.0_121\BIN\JP2IEXP.DLL
delref %SystemDrive%\USERS\UPDATUSUSER\APPDATA\LOCAL\MAIL.RU\GAMECENTER\NPDETECTOR.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\JAVA\JRE1.8.0_25\BIN\JP2IEXP.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\JAVA\JRE1.8.0_111\BIN\JP2IEXP.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.26.9\PSMACHINE_64.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\BLUESTACKS\BSTKSVC.EXE
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.28.1\PSMACHINE_64.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.33.3\PSMACHINE_64.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.28.15\PSMACHINE_64.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.32.7\PSMACHINE_64.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\BLUESTACKS\BSTKC.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.27.5\PSMACHINE_64.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.30.3\PSMACHINE_64.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.33.5\PSMACHINE_64.DLL
delref %SystemDrive%\PROGRAM FILES\ADOBE\ADOBE PREMIERE PRO CC 2014\WMENCODINGHELPER.EXE
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.25.11\PSMACHINE_64.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.25.5\PSMACHINE_64.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.28.13\PSMACHINE_64.DLL
delref %Sys32%\SHAREMEDIACPL.CPL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.31.5\PSMACHINE_64.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.29.5\PSMACHINE_64.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.24.15\PSMACHINE_64.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.26.9\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.28.1\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.33.3\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.28.15\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.32.7\PSMACHINE.DLL
delref %SystemDrive%\USERS\USER\APPDATA\ROAMING\ICQM\MRAINPLACEVIEWER.DLL
delref %SystemDrive%\USERS\USER\APPDATA\ROAMING\ICQM\ICQ\DLL\MRATAG.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.27.5\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.30.3\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.33.5\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.25.11\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.25.5\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.28.13\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.31.5\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.29.5\PSMACHINE.DLL
delref %SystemDrive%\PROGRA~2\QIP201~1\QIP.EXE
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.24.15\PSMACHINE.DLL
delref F:\RUN.EXE
delref H:\RUN.EXE
delref G:\_AUTORUN\AUTORUN.EXE
delref F:\AUTORUN.EXE
delref %SystemDrive%\PROGRAM FILES (X86)\BLUESTACKS\HD-AGENT.EXE
delref %Sys32%\KILLCOPY.EXE
delref %SystemDrive%\USERS\USER\APPDATA\LOCAL\MAIL.RU\GAMECENTER\GAMECENTER@MAIL.RU.EXE
delref %SystemDrive%\USERS\USER\DESKTOP\TOR BROWSER\BROWSER\FIREFOX.EXE
delref %SystemDrive%\USERS\USER\DESKTOP\ADWCLEANER_5.201.EXE
delref %SystemDrive%\PROGRAM FILES (X86)\PSI\PSI.EXE
delref %SystemDrive%\PROGRAM FILES (X86)\BUKA\NUCLEAR TITBIT 2\TITBIT2_FULLSCREEN.EXE
delref D:\R.G. CATALYST\HEROES V GOLD\HAMMERS OF FATE\BINA1\H5_GAME.EXE
delref D:\R.G. CATALYST\HEROES V GOLD\HAMMERS OF FATE\BIN\H5_GAME.EXE
delref D:\R.G. CATALYST\HEROES V GOLD\TRIBES OF THE EAST\BIN\H5_GAME.EXE
delref D:\R.G. CATALYST\HEROES V GOLD\UNINSTALL\UNINS000.EXE
apply

  

Task: {2D15596D-517C-4E25-B1FD-00F6611200FC} - \Microsoft\Windows\Media Center\SqlLiteRecoveryTask -> No File <==== ATTENTION
Task: {8F8E9984-471B-4429-B441-AD8B0F4FF453} - System32\Tasks\Games\UpdateCheck_S-1-5-21-2127654166-157576993-975243792-1000
Task: {B7D55806-6981-45C4-B4D0-03930BCE8514} - \Microsoft\Windows\Media Center\PvrScheduleTask -> No File <==== ATTENTION
Task: {B967E2D9-D6D3-47F4-B833-19472C99B99E} - \Microsoft\Office\Office 15 Subscription Heartbeat -> No File <==== ATTENTION
Task: {CEAAB241-AC28-4C87-B607-8200AEB9FCCF} - \Microsoft\Windows\Media Center\MediaCenterRecoveryTask -> No File <==== ATTENTION
Task: {EF7D2D63-59A4-4AE7-AC79-03F54D6D39F5} - \Microsoft\Windows\Media Center\ObjectStoreRecoveryTask -> No File <==== ATTENTION
FirewallRules: [{951F3FD2-CFE0-4B3B-B810-09E360CE2D44}] => C:\Users\Anna\Downloads\support-YWRtaW5AY29ycG9yYXRlLnBsYW4gMTIzNDU2IDEyMzQ1NiBzdXBwb3J0Lm1hcmNvLmJ5.exe
FirewallRules: [{99881835-C2CD-4BE0-ABBD-19E14C96BF48}] => C:\Users\Anna\Downloads\support-YWRtaW5AY29ycG9yYXRlLnBsYW4gMTIzNDU2IDEyMzQ1NiBzdXBwb3J0Lm1hcmNvLmJ5.exe
GroupPolicy: Restriction <======= ATTENTION
GroupPolicy\User: Restriction <======= ATTENTION
Handler: WSAMVCUchrome - {086BD280-4613-43B5 -  No File
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
EmptyTemp:
Reboot: 

;uVS v3.87.7 [http://dsrt.dyndns.org]
;Target OS: NTv6.1
OFFSGNSAVE
;------------------------autoscript---------------------------

exec32 "C:\ProgramData\Package Cache\{6e406e68-ec1c-4f1f-b067-7acf0938cc2a}\CezurityAntivirusSetup.exe"  /uninstall

delall %SystemDrive%\USERS\ANNA\APPDATA\LOCAL\TEMP\CHROME_BITS_4828_5011\236_ALL_STHSET.CRX

deldirex %SystemDrive%\USERS\ANNA\APPDATA\LOCALLOW\UNITY\WEBPLAYER\LOADER

delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DEFAIDNBMNNNIBPCAJPCGLCLEFINDMKAJ%26INSTALLSOURCE%3DONDEMAND%26UC

delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DLIFBCIBLLHKDHOAFPJFNLHFPFGNPLDFL%26INSTALLSOURCE%3DONDEMAND%26UC

delref HTTP://WWW.BING.COM/SEARCH?Q={SEARCHTERMS}&FORM=IE8SRC
delref HTTP://OVGORSKIY.RU
delref %Sys32%\DRIVERS\CONTENTDEFENDERDRV.SYS
del %Sys32%\DRIVERS\CONTENTDEFENDERDRV.SYS

delall %SystemDrive%\USERS\ANNA\APPDATA\LOCAL\TEMP\HYDD5CD.TMP.1443972969\HTA\3RDPARTY\OCCOMSDK.DLL

delref HTTP://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DDHDGFFKKEBHMKFJOJEJMPBLDMPOBFKFO%26INSTALLSOURCE%3DONDEMAND%26UC
delref HTTP://WWW.BING.COM/SEARCH?Q={SEARCHTERMS}&SRC=IE-SEARCHBOX&FORM=IESR02
delref HTTP://GO.MAIL.RU/DISTIB/EP/?Q={SEARCHTERMS}&PRODUCT_ID={A95D8961-D14C-4279-8AD6-E862A7479FC4}&GP=BLACKBEAR3
delref HTTP://WWW.MSN.COM/RU-RU/?PC=UE12&OCID=UE12DHP
delref HTTP://UTRUNOK.RU/?UTM_SOURCE=DESKTOP03&UTM_CONTENT=1513299D00F05A809D04BFCE9AB4989A&UTM_TERM=63B83A43586EF014A4B81483124C838E
;-------------------------------------------------------------

delall %SystemDrive%\PROGRAMDATA\AIMERSOFT\VIDEO CONVERTER ULTIMATE\AMVCU@AIMERSOFT.COM\
delall %SystemDrive%\PROGRAMDATA\AIMERSOFT\VIDEO CONVERTER ULTIMATE\WSBROWSERAPPMGR.DLL
delref %SystemDrive%\PROGRAM FILES\CEZURITY\ANTIVIRUS\CEZURITY_ANTIVIRUS.EXE
del %SystemDrive%\PROGRAM FILES\CEZURITY\ANTIVIRUS\CEZURITY_ANTIVIRUS.EXE
delref %SystemDrive%\PROGRAM FILES\CEZURITY\ANTIVIRUS\CZAVSVC.EXE
del %SystemDrive%\PROGRAM FILES\CEZURITY\ANTIVIRUS\CZAVSVC.EXE
delref %Sys32%\DRIVERS\CZ_ANTVR.SYS
del %Sys32%\DRIVERS\CZ_ANTVR.SYS
delref %Sys32%\DRIVERS\CZ_DDALL.SYS
del %Sys32%\DRIVERS\CZ_DDALL.SYS
delall %SystemDrive%\USERS\ANNA\DOWNLOADS\CEZURITY_SCANNER.EXE
deldir %SystemDrive%\PROGRAM FILES\CEZURITY\ANTIVIRUS
deltmp
delnfr
restart