HKU\S-1-5-21-1230419283-1752856071-717729032-1004\...\Run: [] => [X]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
FF Extension: WebAlta - C:\Users\Arsenal\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\Extensions\{4933189D-C7F7-4C6E-834B-A29F087BFD23}.xpi [2012-04-07]
FF Extension: No Name - C:\Users\Arsenal\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\WebSiteRecommendation@weliketheweb.com [not found]
FF Extension: No Name - C:\игры\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [not found]
CHR Extension: (AdBlock) - C:\Users\Arsenal\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-07-10]
CHR Extension: (Agario Extended – Enhance Agar.io Gameplay) - C:\Users\Arsenal\AppData\Local\Google\Chrome\User Data\Default\Extensions\mflicjopopjcpojfoefhbpdncmjbcbin [2015-05-14]
CHR HKLM\...\Chrome\Extension: [cifhijkiiikloafabeloklapclpjgpom] - C:\Users\Arsenal\AppData\Roaming\VkVideo\chrome.crx [2012-09-30]
CHR HKLM\...\Chrome\Extension: [ieoabncnkhccjdhifebpehpgmkaldecc] - C:\Program Files\Common Files\Metabar\crx\mbr-chrome-newtab.crx [Not Found]
CHR HKLM\...\Chrome\Extension: [mppkepohdefoiogcfndhebdficcdnklj] - C:\Program Files\Common Files\Metabar\crx\mbr-chrome.crx [Not Found]
CHR HKLM\...\Chrome\Extension: [pldbienodkpgkccocelidinmciedjdok] - https://clients2.google.com/service/update2/crx
EmptyTemp:
Reboot:

;uVS v3.85.25 [http://dsrt.dyndns.org]
;Target OS: NTv6.1
v385c
OFFSGNSAVE

hide %SystemDrive%\USERS\ARSENAL\DESKTOP\ВСЕ  ВСЕ РАЗНЫЕ ПРОГРАММЫ!НЕ УДОЛЯТЬ!\WATCH DOGS\SETUP.EXE
;------------------------autoscript---------------------------

chklst
delvir

setdns Подключение по локальной сети\4\{C1DA434F-B915-4E8E-BC48-CBC81475A646}\8.8.8.8,8.8.4.4
delref %SystemDrive%\PROGRAM FILES\ADTRUSTMEDIA\PRIVDOG\2.1.0.23\TRUSTEDADS.DLL

delref %SystemRoot%\WIN.VBS

delref %SystemDrive%\USERS\ARSENAL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\AAAAAIABCOPKPLHGAEDHBLOEEJHHANKF\111.12_0\SEARCH APP BY ASK V2

delref %SystemDrive%\USERS\ARSENAL\APPDATA\LOCAL\YANDEX\UPDATER\PRAETORIAN.EXE

delref %SystemDrive%\PROGRAM FILES\ADTRUSTMEDIA\PRIVDOG\2.1.0.23\TRUSTEDADSSVC.EXE

delref %SystemDrive%\PROGRAM FILES\ADTRUSTMEDIA\PRIVDOG\2.1.0.23\MAGPIE.DLL

delref %SystemDrive%\PROGRAM FILES\ADTRUSTMEDIA\PRIVDOG\2.1.0.23\SCRIPTSERVICE.DLL

delref HTTP://WEBALTA.RU/SEARCH

del %SystemDrive%\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.URL

deldirex %SystemDrive%\USERS\ARSENAL\APPDATA\LOCAL\MEDIAGET2

regt 27
regt 28
regt 29
; desktopy
exec C:\Program Files\desktopy\uninstall.exe
; desktopy.ru
exec C:\Users\Arsenal\AppData\Roaming\desktopy.ru\uninstall.exe
; OpenAL
exec C:\Program Files\OpenAL\oalinst.exe" /U
; Webalta Toolbar
exec C:\Users\Arsenal\AppData\Local\Webalta Toolbar\uninstall.exe
deltmp
delnfr
;-------------------------------------------------------------

restart