;uVS v4.0.10 [http://dsrt.dyndns.org]
;Target OS: NTv6.1
v400c
OFFSGNSAVE
;------------------------autoscript---------------------------

delall %SystemDrive%\PROGRAMDATA\CATALOG UPDATE\CATALOGUPDATE.EXE
zoo %SystemDrive%\PROGRAMDATA\APPDATA\LOCAL\MICROSOFT\WINDOWS\TEMPLATES\SYNCTEMPLATE\SYNC_F.EXE
addsgn 1AE6709A5583FF8FF42B5194782A5605DAAFDC14CDFAD3B4490F0970065D3568371C032216DED16D3B0BC0BB4A259B0D8C5430F911FEB8DBDCFC54A404F14657 8 Win32/BitCoinMiner 7

chklst
delvir

deldirex %SystemDrive%\USERS\001\APPDATA\LOCALLOW\UNITY\WEBPLAYER\LOADER

delref %SystemDrive%\USERS\001\APPDATA\ROAMING\METFM.EXE
delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DCCFIFBOJENKENPKMNBNNDEADPFDIFFOF%26INSTALLSOURCE%3DONDEMAND%26UC
delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DOELPKEPJLGMEHAJEHFEICFBJDIOBDKFJ%26INSTALLSOURCE%3DONDEMAND%26UC
delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DOJLCEBDKBPJDPILIGKDBBKDKFJMCHBFD%26INSTALLSOURCE%3DONDEMAND%26UC
delref %SystemDrive%\USERS\001\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\OJLCEBDKBPJDPILIGKDBBKDKFJMCHBFD\12.0.12_1\ПОИСК MAIL.RU
delref HTTP://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DDHDGFFKKEBHMKFJOJEJMPBLDMPOBFKFO%26INSTALLSOURCE%3DONDEMAND%26UC
apply

regt 28
regt 29
deltmp
delref %SystemDrive%\USERS\001\APPDATA\LOCAL\{F8CB26D9-6304-4B62-8DD3-906E9A336DFD}
delref %SystemDrive%\USERS\001\APPDATA\LOCAL\{59132DE9-12E4-4B14-BFF5-B93B6E8FD0A2}
delref %SystemRoot%\TEMP\GUR2DA4.EXE
delref %SystemDrive%\USERS\001\APPDATA\LOCAL\TEMP\TMP5E8D.TMP
delref %SystemDrive%\PROGRAM FILES (X86)\IOBIT\ADVANCED SYSTEMCARE 8\MONITOR.EXE
delref %SystemDrive%\PROGRAM FILES (X86)\IOBIT\ADVANCED SYSTEMCARE 8\ASC.EXE
delref %SystemDrive%\USERS\001\APPDATA\ROAMING\.MONO\ISSCH\ISSCH.EXE
delref %SystemDrive%\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\OFFICE15\OLICENSEHEARTBEAT.EXE
delref {23E5D772-327A-42F5-BDEE-C65C6796BB2A}\[CLSID]
delref {177AFECE-9599-46CF-90D7-68EC9EEB27B4}\[CLSID]
delref {CEF51277-5358-477B-858C-4E14F0C80BF7}\[CLSID]
delref {59116E30-02BD-4B84-BA1E-5D77E809B1A2}\[CLSID]
delref %SystemDrive%\PROGRAM FILES (X86)\IOBIT\IOBIT UNINSTALLER\IOBITUNINSTALER.EXE
delref 10\[CLSID]
delref {166B1BCA-3F9C-11CF-8075-444553540000}\[CLSID]
delref {233C1507-6A77-46A4-9443-F871F945D258}\[CLSID]
delref {7AEFE841-DCA1-4A95-80CB-BE935D020500}\[CLSID]
delref {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA}\[CLSID]
delref {EBA7A1E6-E69D-4BA5-B291-95782A004604}\[CLSID]
delref %SystemRoot%\SYSWOW64\WIN32K.SYS
delref %SystemDrive%\PROGRAM FILES (X86)\BATTLELOG WEB PLUGINS\2.5.0\NPBATTLELOG.DLL
delref {1FBA04EE-3024-11D2-8F1F-0000F87ABD16}\[CLSID]
delref {05B38830-F4E9-4329-978B-1DD28605D202}\[CLSID]
delref {056D528D-CE28-4194-9BA3-BA2E9197FF8C}\[CLSID]
delref {0596C850-7BDD-4C9D-AFDF-873BE6890637}\[CLSID]
delref {E6FB5E20-DE35-11CF-9C87-00AA005127ED}\[CLSID]
delref {09A47860-11B0-4DA5-AFA5-26D86198A780}\[CLSID]
delref {B19ED566-D419-470B-B111-3C89040BC027}\[CLSID]
delref {0229E5E7-09E9-45CF-9228-0228EC7D5F17}\[CLSID]
delref {2803063F-4B8D-4DC6-8874-D1802487FE2D}\[CLSID]
delref {1A184982-D79E-44C7-BDE4-686552E67B44}\[CLSID]
delref {307A6C42-0000-0010-8000-00AA00389B71}\[CLSID]
delref %Sys32%\MSSPELLCHECKINGFACILITY.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\BATTLELOG WEB PLUGINS\2.5.0\NPBATTLELOGX64.DLL
delref %Sys32%\BLANK.HTM
delref %SystemDrive%\PROGRAM FILES (X86)\IOBIT\ADVANCED SYSTEMCARE 8\ASCSERVICE.EXE
delref %SystemDrive%\USERS\001\APPDATA\LOCAL\TEMP\CPUZ138\CPUZ138_X64.SYS
delref %Sys32%\DRIVERS\DGDERDRV.SYS
delref %Sys32%\DRIVERS\EAGLEX64.SYS
delref %Sys32%\DRIVERS\QLTAGVR.SYS
delref %SystemDrive%\PROGRAM FILES (X86)\GARENA PLUS\ROOM\SAFEDRV.SYS
delref %Sys32%\DRIVERS\HWINTERFACE.SYS
delref %SystemDrive%\PROGRAMDATA\MICROSOFT\MICROSOFT ANTIMALWARE\DEFINITION UPDATES\{193B9551-1D36-4174-8AB2-ABD7CA7697A6}\MPKSL931D2BAA.SYS
delref %Sys32%\DRIVERS\VBOXNETFLT.SYS
delref %Sys32%\PSXSS.EXE
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.26.9\PSMACHINE_64.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.28.1\PSMACHINE_64.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.32.7\PSMACHINE_64.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.27.5\PSMACHINE_64.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.28.15\PSMACHINE_64.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.29.1\PSMACHINE_64.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.33.3\PSMACHINE_64.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.23.9\PSMACHINE_64.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.24.7\PSMACHINE_64.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.28.13\PSMACHINE_64.DLL
delref %Sys32%\SHAREMEDIACPL.CPL
delref %SystemDrive%\PROGRAM FILES\ADOBE\ADOBE PHOTOSHOP CC 2015\PHOTOSHOP.EXE\AUTOMATION
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.29.5\PSMACHINE_64.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.31.5\PSMACHINE_64.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.30.3\PSMACHINE_64.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.26.9\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.28.1\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.21.115\PSMACHINE.DLL
delref %SystemRoot%\SYSWOW64\PLASRV.EXE
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.32.7\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.27.5\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.28.15\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.29.1\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.33.3\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.23.9\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.24.7\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.28.13\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.29.5\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.31.5\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.30.3\PSMACHINE.DLL
delref E:\AUTORUN.EXE
delref {10DB41A2-8A81-4788-B635-ABA6749A7D87}\[CLSID]
delref {00000000-0000-0000-0000-000000000000}\[CLSID]
delref {0000036B-C524-4050-81A0-243669A86B9F}\[CLSID]
delref {086C8477-4F71-4550-87FB-AF0AE8DF3E98}\[CLSID]
delref {219C3416-8CB2-491A-A3C7-D9FCDDC9D600}\[CLSID]
delref {5A8FF410-F3CE-4844-B31B-F18D911239E8}\[CLSID]
delref {7AEFE841-DCA1-4A95-80CB-BE935D020300}\[CLSID]
delref {7AEFE841-DCA1-4A95-80CB-BE935D020302}\[CLSID]
delref {8DAE90AD-4583-4977-9DD4-4360F7A45C74}\[CLSID]
delref %SystemDrive%\IEXPLORE.BAT
delref %SystemDrive%\PROGRAM FILES (X86)\STEAM\STEAMAPPS\COMMON\ZENIMAX ONLINE\UNINSTALL\UNINSTALL THE ELDER SCROLLS ONLINE.EXE
delref %SystemDrive%\PROGRAM FILES (X86)\COUNTER-STRIKE\HL.EXE
delref %SystemDrive%\PROGRAM FILES (X86)\MOVAVI VIDEO CONVERTER 15\CONVERTER.EXE
delref %SystemDrive%\PROGRAM FILES (X86)\MOVAVI VIDEO CONVERTER 15\MOVAVI КОНВЕРТЕР ВИДЕО 15.URL
delref %SystemDrive%\PROGRAM FILES (X86)\MOVAVI VIDEO CONVERTER 15\UNINST.EXE
delref %SystemDrive%\PROGRAM FILES (X86)\COOP-LAND\ASTRONEER\ASTRO.EXE
delref %SystemDrive%\PROGRAM FILES (X86)\COOP-LAND\ASTRONEER\ПОСЕТИТЬ COOP-LAND.RU.URL
delref %SystemDrive%\PROGRAM FILES (X86)\COOP-LAND\ASTRONEER\SITE.URL
delref %SystemDrive%\PROGRAM FILES (X86)\COOP-LAND\ASTRONEER\UNINS000.EXE
delref %SystemDrive%\PROGRAM FILES (X86)\KONAMI\SILENT HILL 4 - THE ROOM\SH4W1.EXE
delref %SystemRoot%\INSTALLER\{6EEF61AB-CC0B-4917-A3F2-97902CD11073}\ARPPRODUCTICON.EXE
delref %SystemRoot%\INSTALLER\{0B67C0D3-AE80-40A0-8727-32D22230A693}\SCRECODESTARTMENU_563A75F05683422E8C558ED3B6DA617D.EXE
delref %SystemRoot%\INSTALLER\{38BC5B60-4E70-470A-AE76-E06C15700C68}\NERORESCUEAGENT.EX_2882597C6E684EBDA23F3CF2CA0CBC30.EXE
delref %SystemDrive%\PROGRAMDATA\DOWNLOADS\UOFLAUNCHER.EXE
;-------------------------------------------------------------

deldirex %SystemDrive%\PROGRAMDATA\APPDATA\LOCAL\MICROSOFT\WINDOWS\TEMPLATES\SYNCTEMPLATE
restart