Task: {0C2E7C0B-5663-4672-AE17-171699BEBAFD} - \{D32065ED-9D0F-47C6-8412-E71DBE61557B} No Task File <==== ATTENTION
Task: {2F318F05-5E4E-41F6-8CC8-172D5F7CADE5} - \{868E6F80-4C20-4C0E-93EC-941763C8E3E4} No Task File <==== ATTENTION
Task: {2F7CA6A8-BCDB-4E0F-93D5-65F0B29AB18C} - \{34AA3152-6391-4F81-BB7E-F37923CCDF64} No Task File <==== ATTENTION
Task: {33305863-AE88-4EA8-AEB1-85C30D6A9BF0} - \{F06CD596-2057-44ED-837A-891655EAEED7} No Task File <==== ATTENTION
Task: {38C010B8-ED9C-46AC-8C0C-463F5132B9AB} - \{BD3310A8-81A0-43F8-BD1A-277B67D9C97C} No Task File <==== ATTENTION
Task: {416118D1-6BBB-421F-9366-34DE258F79AF} - \{FC5B1168-4DA9-489B-85F7-FDC290DFFDA6} No Task File <==== ATTENTION
Task: {449DA26E-FA10-44B6-BA83-1BDE10E1F833} - \{A53592C0-6C1C-44D8-BBEC-D1A80AB354E9} No Task File <==== ATTENTION
Task: {7B575DA2-C37B-4925-9CDE-EF1D3583E1AB} - \{3ED576AD-5F93-4E24-BF02-806AFB5F18BD} No Task File <==== ATTENTION
Task: {89BB0D25-3AE9-4573-A49E-36F7E096C87D} - \{9271386E-0F0E-40D5-9128-7EDF48AF31EB} No Task File <==== ATTENTION
Task: {B8F3D65B-76CB-4B78-BFA3-A25E203D8108} - \{7A4A141C-6ED1-42D3-9EC5-E5906D328CF5} No Task File <==== ATTENTION
Task: {CBAC45C8-A664-466C-869A-C36DB324E00E} - \{E3665C0A-3C3E-4DAC-86E9-4A708626761D} No Task File <==== ATTENTION
Task: {CF18B87E-BD83-4DB5-A242-9D0089885F71} - \{01099F03-DA5B-4999-BCAE-992F363DD2E3} No Task File <==== ATTENTION
Task: {F88F5FA0-77DA-4251-9BCD-D21BB1980890} - \{A71901DB-FF00-41DC-85EC-69FF60E7C795} No Task File <==== ATTENTION
AlternateDataStreams: C:\ProgramData\TEMP:16CE60FB
AlternateDataStreams: C:\ProgramData\TEMP:41ADDB8A
AlternateDataStreams: C:\ProgramData\TEMP:430C6D84
AlternateDataStreams: C:\ProgramData\TEMP:A064CECC
AlternateDataStreams: C:\ProgramData\TEMP:ADF211B1
AlternateDataStreams: C:\ProgramData\TEMP:C31F31E6
AlternateDataStreams: C:\ProgramData\TEMP:DFC5A2B2
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
CHR HKU\S-1-5-21-732928416-860588168-3219211031-1001\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
FF Extension: No Name -  C:\Users\Андрей\AppData\Roaming\Mozilla\Firefox\Profiles\3mlmcdna.default\extensions\{B100D0FF-0001-8CE4-2790-AACE49B8AE35} [not found]
FF Extension: No Name -  C:\Users\Андрей\AppData\Roaming\Mozilla\Firefox\Profiles\3mlmcdna.default\extensions\wp_loader@wall-pepper.ru [not found]
FF Extension: No Name -  C:\Users\Андрей\AppData\Roaming\Mozilla\Firefox\Profiles\3mlmcdna.default\extensions\vb@yandex.ru.xpi [not found]
FF Extension: No Name -  C:\Users\Андрей\AppData\Roaming\Mozilla\Firefox\Profiles\3mlmcdna.default\extensions\{7b6de06c-7013-4a87-957e-d27d7b977d21} [not found]
FF Extension: No Name -  C:\Users\Андрей\AppData\Roaming\Mozilla\Firefox\Profiles\3mlmcdna.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7} [not found]
FF Extension: No Name -  C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [not found]
CHR HKLM\...\Chrome\Extension: [blbkdnmdcafmfhinpmnlhhddbepgkeaa] - https://chrome.google.com/webstore/detail/blbkdnmdcafmfhinpmnlhhddbepgkeaa
CHR HKLM\...\Chrome\Extension: [ofjddojcpeoofimcdnkhebklamdnblap] - D:\VkTema\vktema.crx [2011-11-28]
CHR HKLM\...\Chrome\Extension: [pgaidlfgjkmeendhknafahppllbniejm] - https://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [phlgogdggphlhmlalgnpffgbekglmopm] - C:\Users\A4F7~1\AppData\Local\Temp\crx14CD.tmp [Not Found]
EmptyTemp:
Reboot:

;uVS v3.85.21 [http://dsrt.dyndns.org]
;Target OS: NTv6.1
v385c
OFFSGNSAVE
zoo %SystemDrive%\PROGRAMDATA\SCHEDULE\TIMETASKS.EXE
addsgn 1ADE0F9A5583C58CF42B254E3143FE86C9AA77B381AC48128D9A7BC8A49771C15EF730F2B71065C26E8CDB1603EA177FBDABE48455D2C42BEA32502F879F23FE 8 shedule

zoo %SystemDrive%\PROGRAM FILES\WINDOWS ILIVID TOOLBAR\DATAMNGR\TOOLBAR\SEARCHQUDTX.DLL
addsgn 98E01F5A806A5C9A61D1AEB15708528C606E778385C9E04372B6C9856D4E7E4D331847E43E559DC0567CBF6F3213CA047FAAD9D399FDB13C16B0D02338733225 64 Win32/Toolbar.Visicom.B [ESET-NOD32]

zoo %SystemDrive%\PROGRAM FILES\BITTORRENTBAR_RU\PRXTBBITT.DLL
addsgn 79132211B9E9317E0AA1AB5953A31205DAFFF47DC4EA942D892B2942AF292811E11BC3DCC10016A57669C567B9E9C205285404210351C5247A445B16BA125763 64 Toolbar.Conduit.O [ESET-NOD32]

zoo %SystemDrive%\PROGRAM FILES\CONDUIT\COMMUNITY ALERTS\ALERT.DLL
addsgn 79132211B9E9317E0AA1AB59AE4B1205DAFFF47DC4EA942D892B2942AF292811E11BC3DCC10016A5A0C58CF9CD4345117AB9D3B821CBF06C22C0AC4942CF5782 64 Win32/Toolbar.Conduit.Y [ESET-NOD32]

zoo %SystemDrive%\USERS\АНДРЕЙ\APPDATA\LOCAL\YANDEX\UPDATER\PRAETORIAN.EXE
addsgn 1A4B469B5583358CF42B254E3143FE547601B9FA0A3A13F1C03FA1374DD6714C239CC0339D559D492B0BC197CD4B457110236311A9255077E4B5AC2F9F5FA577 8 praetotian

delall %SystemDrive%\USERS\АНДРЕЙ\APPDATA\LOCAL\KOMETA\APPLICATION\KOMETA.EXE
delall %SystemDrive%\USERS\АНДРЕЙ\APPDATA\LOCAL\KOMETA\KOMETAUP.EXE
delall %SystemDrive%\USERS\АНДРЕЙ\APPDATA\ROAMING\NEWSI_2149\S_INST.EXE
hide %SystemDrive%\PROGRAM FILES\TOTAL COMMANDER\PLUGINS\EXE\DECRYPTC.EXE
hide %SystemDrive%\PROGRAM FILES\ALAWAR\ДИВНЫЙ САД\GARDENSCAPES.EXE
;------------------------autoscript---------------------------

chklst
delvir

deldirex %SystemDrive%\PROGRAM FILES\WINDOWS ILIVID TOOLBAR\DATAMNGR

delref HTTP://ANVIDPA.RU/?UTM_SOURCE=UOUA03&UTM_CONTENT=771B99ED44376525853071176B6BD882

delref HTTP://SEARCH.CONDUIT.COM?SEARCHSOURCE=10&CTID=CT2269050

; BittorrentBar_RU Toolbar
exec C:\Program Files\BittorrentBar_RU\uninstall.exe toolbar
; DVDVideoSoftTB Toolbar
exec C:\PROGRA~1\DVDVID~2\UNWISE.EXE   /U C:\PROGRA~1\DVDVID~2\INSTALL.LOG
; MadLen.uCoz.coM Toolbar
exec C:\PROGRA~1\MADLEN~1.COM\UNWISE.EXE   /U C:\PROGRA~1\MADLEN~1.COM\INSTALL.LOG
; OpenAL
exec C:\Program Files\OpenAL\OpenAL.exe" /U
; Windows iLivid Toolbar
exec C:\Program Files\Windows iLivid Toolbar\uninstall.exe
; Time tasks
exec C:\ProgramData\Schedule\uninstall.exe
; Zaxar Games Browser
exec C:\Program Files\Zaxar\uninstall.exe
deltmp
delnfr
;-------------------------------------------------------------

restart