;uVS v4.0b10 [http://dsrt.dyndns.org]
;Target OS: NTv6.3
v400c
OFFSGNSAVE
;------------------------autoscript---------------------------

deldirex %SystemDrive%\USERS\НЕ СУЙ ПАЛЬЦЫ\APPDATA\LOCAL\POKKI\ENGINE

delref HTTP://WWW.ISTARTSURF.COM/?TYPE=HP&TS=1443146395&Z=21E223B3F0C97DB3C281DA1G7ZCCAEFOZZJCKTMLMA&FROM=FACE&UID=WDCXWD10JPCX-24UE4T0_WD-WX41A24P8029P8029
delref HTTP://WWW.MYSTARTSEARCH.COM/?TYPE=HP&TS=1443149378&Z=2F917A3BAFA9E13D56BF100G3Z0ZBC4G2Z0TBG8T9E&FROM=CMI&UID=WDCXWD10JPCX-24UE4T0_WD-WX41A24P8029P8029
apply

deltmp
delref %SystemDrive%\PROGRAM FILES\LUOM-G10\LUOM.EXE
delref %SystemDrive%\PROGRAM FILES\LENOVO\CUSTOMER FEEDBACK PROGRAM\LENOVO.TVT.CUSTOMERFEEDBACK.AGENT.EXE
delref A9A33436-678B-4C9C-A211-7CC38785E79D\[CLSID]
delref 752073A1-23F2-4396-85F0-8FDB879ED0ED\[CLSID]
delref %SystemDrive%\USERS\НЕ СУЙ ПАЛЬЦЫ\DOWNLOADS\ДРОВА\MTK USB DRIVER_V1.0948.0\INSTALLDRIVER.EXE
delref %SystemDrive%\USERS\НЕ СУЙ ПАЛЬЦЫ\DOWNLOADS\ДРОВА\GN_MTK_USBDRIVER(FACTORY)_V1.1.0\AUTORUN_INSTALL.EXE
delref %SystemRoot%\SYSWOW64\COMPMGMTLAUNCHER.EXE
delref {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B}\[CLSID]
delref {166B1BCA-3F9C-11CF-8075-444553540000}\[CLSID]
delref {19916E01-B44E-4E31-94A4-4696DF46157B}\[CLSID]
delref {233C1507-6A77-46A4-9443-F871F945D258}\[CLSID]
delref {4063BE15-3B08-470D-A0D5-B37161CFFD69}\[CLSID]
delref {444785F1-DE89-4295-863A-D46C3A781394}\[CLSID]
delref {88D969C0-F192-11D4-A65F-0040963251E5}\[CLSID]
delref {88D969C1-F192-11D4-A65F-0040963251E5}\[CLSID]
delref {88D969C2-F192-11D4-A65F-0040963251E5}\[CLSID]
delref {88D969C3-F192-11D4-A65F-0040963251E5}\[CLSID]
delref {88D969C4-F192-11D4-A65F-0040963251E5}\[CLSID]
delref {88D969C5-F192-11D4-A65F-0040963251E5}\[CLSID]
delref {8AD9C840-044E-11D1-B3E9-00805F499D93}\[CLSID]
delref {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA}\[CLSID]
delref %SystemRoot%\SYSWOW64\BLANK.HTM
delref {0F8604A5-4ECE-4DE1-BA7D-CF10F8AA4F48}\[CLSID]
delref {E6FB5E20-DE35-11CF-9C87-00AA005127ED}\[CLSID]
delref %SystemDrive%\USERS\НЕ СУЙ ПАЛЬЦЫ\APPDATA\LOCAL\POKKI\ENGINE\LAUNCHER.DLL
delref %Sys32%\BLANK.HTM
delref FTSHELLCONTEXT EXTENSION\[CLSID]
delref APPMGMT\[SERVICE]
delref HELPSVC\[SERVICE]
delref SACSVR\[SERVICE]
delref TBS\[SERVICE]
delref VMMS\[SERVICE]
delref MESSENGER\[SERVICE]
delref RDSESSMGR\[SERVICE]
delref %SystemDrive%\PROGRA~1\MCAFEE\VIRUSS~1\MCCTXMNU.DLL
delref %SystemDrive%\PROGRA~1\COMMON~1\MCAFEE\HACKER~1\HWAPI.DLL
delref %SystemDrive%\PROGRAM FILES\ADOBE\ADOBE PHOTOSHOP CC 2017\PHOTOSHOP.EXE\AUTOMATION
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.32.7\PSMACHINE_64.DLL
delref %SystemDrive%\PROGRA~1\MCAFEE\VIRUSS~1\MVSVER.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\KASPERSKY LAB\KASPERSKY INTERNET SECURITY 16.0.1\X64\MCOUAS.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.30.3\PSMACHINE_64.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\KASPERSKY LAB\KASPERSKY INTERNET SECURITY 17.0.0\X64\MCOUAS.DLL
delref %SystemDrive%\PROGRA~1\MCAFEE\VIRUSS~1\MVSAP.DLL
delref %SystemDrive%\PROGRA~1\MCAFEE\VIRUSS~1\MCOASSHM.DLL
delref %SystemDrive%\PROGRA~1\MCAFEE\VIRUSS~1\MCVSPS.DLL
delref %Sys32%\IGFXCFG.EXE
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.31.5\PSMACHINE_64.DLL
delref %SystemDrive%\PROGRA~1\MCAFEE\VIRUSS~1\MCVSOCFG.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.29.5\PSMACHINE_64.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\ATI TECHNOLOGIES\ATI.ACE\CORE-IMPLEMENTATION\64\WBOCX.OCX
delref %SystemDrive%\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\DAO\DAO360.DLL
delref %SystemRoot%\SYSWOW64\TAPILUA.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\COMMON FILES\MCAFEE\PLATFORM\PLATFORMSERVICEFWPS.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.32.7\PSMACHINE.DLL
delref %SystemRoot%\SYSWOW64\AEPROAM.DLL
delref %SystemRoot%\SYSWOW64\RSTRUI.EXE
delref %SystemRoot%\SYSWOW64\LISTSVC.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.30.3\PSMACHINE.DLL
delref %SystemRoot%\SYSWOW64\WBEM\NLMCIM.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\ADOBE\ACROBAT READER DC\ACRORD32INFO.EXE
delref %SystemRoot%\SYSWOW64\WPCCPL.DLL
delref %SystemDrive%\PROGRAM FILES\COMMON FILES\MCAFEE\PLATFORM\MCSVCHOST\MCSVHVER.DLL
delref %SystemRoot%\SYSWOW64\GPSVC.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.31.5\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.29.5\PSMACHINE.DLL
delref %SystemRoot%\SYSWOW64\IDLISTEN.DLL
delref %SystemDrive%\PROGRAM FILES\COMMON FILES\SYSTEM\OLE DB\MSDAORA.DLL
delref %SystemDrive%\USERS\НЕ СУЙ ПАЛЬЦЫ\MUSIC\ТЕСТ\WARGAMINGGAMEUPDATER.EXE
delref %SystemDrive%\GAMES\WORLD_OF_WARPLANES\WARGAMINGGAMEUPDATER.EXE
delref %SystemDrive%\USERS\НЕ СУЙ ПАЛЬЦЫ\MUSIC\ТЕСТ ТАНКОВ\WARGAMINGGAMEUPDATER.EXE
delref %SystemDrive%\USERS\НЕ СУЙ ПАЛЬЦЫ\APPDATA\LOCAL\POKKI\ENGINE\HOSTAPPSERVICE.EXE
delref %SystemDrive%\PROGRAMDATA\MUSIC\CLICKEM64\CLICKEM64.EXE
delref %SystemDrive%\PROGRAMDATA\MUSIC\CLICKEM64\UNINS000.EXE
delref %SystemDrive%\PROGRAM FILES (X86)\ALIEN BREED 3 DESCENT\BINARIES\ALIENBREED3DESCENT.EXE
delref %SystemDrive%\PROGRAM FILES (X86)\ALIEN BREED 3 DESCENT\INSTALL_RUS\UNINS000.EXE
delref D:\GAMES\HARD RESET REDUX\LAUNCHER.EXE
delref %SystemDrive%\PROGRAM FILES (X86)\RESIDENT EVIL 0 HD REMASTER\UNINS000.EXE
;-------------------------------------------------------------

restart

GroupPolicy: Restriction <======= ATTENTION
GroupPolicy\User: Restriction <======= ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
BHO-x32: Поиск@Mail.Ru -> {8E8F97CD-60B5-456F-A201-73065652D099} -> C:\Users\не суй пальцы\AppData\Local\Mail.Ru\Sputnik\IESearchPlugin.dll => No File
CHR StartupUrls: Default -> "hxxp://www.istartsurf.com/?type=hp&ts=1443146395&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=face&uid=WDCXWD10JPCX-24UE4T0_WD-WX41A24P8029P8029","hxxp://www.mystartsearch.com/?type=hp&ts=1443149378&z=2f917a3bafa9e13d56bf100g3z0zbc4g2z0tbg8t9e&from=cmi&uid=WDCXWD10JPCX-24UE4T0_WD-WX41A24P8029P8029","hxxp://mail.ru/cnt/10445?gp=820031","hxxp://www.google.com/","hxxp://mail.ru/cnt/10445?gp=821688","hxxps://www.google.ru/","hxxp://mail.ru/cnt/10445?gp=811009","hxxp://mail.ru/cnt/10445?gp=820325","hxxp://mail.ru/cnt/10445?gp=821268"
CHR Extension: (LetyShops) - C:\Users\не суй пальцы\AppData\Local\Google\Chrome\User Data\Default\Extensions\lphicbbhfmllgmomkkhjfkpbdlncafbn [2017-03-30]
CHR Extension: (ResearchBar +) - C:\Users\не суй пальцы\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbnhjaeolclgbofikfkagcgocgkbmkkh [2017-01-21]
CHR HKU\S-1-5-21-1834765915-3298584632-1566005029-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [ccfifbojenkenpkmnbnndeadpfdiffof] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-1834765915-3298584632-1566005029-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [oelpkepjlgmehajehfeicfbjdiobdkfj] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-1834765915-3298584632-1566005029-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [ojlcebdkbpjdpiligkdbbkdkfjmchbfd] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [ccfifbojenkenpkmnbnndeadpfdiffof] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [oelpkepjlgmehajehfeicfbjdiobdkfj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [ojlcebdkbpjdpiligkdbbkdkfjmchbfd] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [pbnhjaeolclgbofikfkagcgocgkbmkkh] - hxxps://clients2.google.com/service/update2/crx

EmptyTemp:
Reboot: