Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
FF Extension: (No Name) - D:\Браузер К-мелон\browser\extensions\{899DF1F8-2F43-4394-8315-37F6744E6319}.xpi [not found]
EmptyTemp:
Reboot:

 

  

Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
FF Extension: (No Name) - D:\Браузер К-мелон\browser\extensions\{899DF1F8-2F43-4394-8315-37F6744E6319}.xpi [not found]
EmptyTemp:
Reboot:

  

AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AV: AVG Antivirus (Disabled - Up to date) {4FC75CA5-1654-5411-7CFB-1893D506BCF4}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}
FW: Avast Antivirus (Enabled) {B693136B-F6EE-DD1C-A0EF-229B8B0B29C4}
AlternateDataStreams: C:\ProgramData\Reprise:jhqduwvxlctbqqijsf`usjbm`bfjhioihinfh [0]
AlternateDataStreams: C:\Users\Public\AppData:CSM [478]
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [470]
AlternateDataStreams: C:\Users\Все пользователи\Reprise:jhqduwvxlctbqqijsf`usjbm`bfjhioihinfh [0]
AlternateDataStreams: C:\Users\ПК\Application Data:00e481b5e22dbe1f649fcddd505d3eb7 [394]
AlternateDataStreams: C:\Users\ПК\AppData\Roaming:00e481b5e22dbe1f649fcddd505d3eb7 [394]
HKLM\...\StartupApproved\Run32: => "SecurityHealth"
HKU\S-1-5-21-282081067-1870339625-3958985120-1001\...\StartupApproved\Run: => "WinPatchZ1857_upd"
HKU\S-1-5-21-282081067-1870339625-3958985120-1001\...\StartupApproved\Run: => "WinPatchZ1857"
FirewallRules: [OpenSSH-Server-In-TCP] => (Allow) %SystemRoot%\system32\OpenSSH\sshd.exe No File
FirewallRules: [UDP Query User{3D1EB14A-EFB9-4CE5-935B-3D1402FCBE3F}C:\program files (x86)\java\jre1.8.0_211\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_211\bin\javaw.exe No File
FirewallRules: [TCP Query User{067DB165-2C96-474E-8F27-B52B0B92D2B3}C:\program files (x86)\java\jre1.8.0_211\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_211\bin\javaw.exe No File
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\SIHClient.exe) attempted to load \Device\HarddiskVolume5\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\SIHClient.exe) attempted to load \Device\HarddiskVolume5\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\SIHClient.exe) attempted to load \Device\HarddiskVolume5\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\SIHClient.exe) attempted to load \Device\HarddiskVolume5\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\SIHClient.exe) attempted to load \Device\HarddiskVolume5\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume5\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume5\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume5\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.
Lsa: [Authentication Packages] msv1_0 SshdPinAuthLsa
HKLM\...\Policies\Explorer: [DisallowRun] 0
HKLM\...\Policies\Explorer: [RestrictRun] 0
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-19\...\Policies\Explorer: [DisallowRun] 0
HKU\S-1-5-19\...\Policies\Explorer: [RestrictRun] 0
HKU\S-1-5-20\...\Policies\Explorer: [DisallowRun] 0
HKU\S-1-5-20\...\Policies\Explorer: [RestrictRun] 0
HKU\S-1-5-21-282081067-1870339625-3958985120-1001\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-21-282081067-1870339625-3958985120-1001\...\Policies\Explorer: [DisallowRun] 0
HKU\S-1-5-21-282081067-1870339625-3958985120-1001\...\Policies\Explorer: [RestrictRun] 0
HKU\S-1-5-18\...\Policies\Explorer: [DisallowRun] 0
HKU\S-1-5-18\...\Policies\Explorer: [RestrictRun] 0
GroupPolicy: Restriction ? <==== ATTENTION
GroupPolicy\User: Restriction ? <==== ATTENTION
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
Task: {2BB692C1-F60F-479E-ADC2-1CAF9422A2AC} - \Microsoft\Windows\Shell\FamilySafetyMonitorToastTask -> No File <==== ATTENTION
Task: {4520E8A9-AF06-4122-859B-E4B655B29B36} - \Microsoft\Windows\AppID\SmartScreenSpecific -> No File <==== ATTENTION
Task: {4D77E7DF-932E-4AC5-B820-F553CE145942} - \Microsoft\Windows\ErrorDetails\EnableErrorDetailsUpdate -> No File <==== ATTENTION
Task: {B537E300-6EE8-48C3-B550-84B5C13C357A} - System32\Tasks\USER_ESRV_SVC_QUEENCREEK => "C:\WINDOWS\System32\Wscript.exe" //B //NoLogo "C:\Program Files\Intel\SUR\QUEENCREEK\x64\task.vbs"
Task: {C9ACBFD2-20AA-4A3F-BE1A-A3D5279BB1BB} - \Microsoft\Windows\Plug and Play\Plug and Play Cleanup -> No File <==== ATTENTION
Task: {CE30065B-2753-46E1-A23D-EF472C97CD3F} - \Microsoft\Windows\ErrorDetails\ErrorDetailsUpdate -> No File <==== ATTENTION
Task: {D0D6B152-FC25-4B0F-966F-CEA2785E1B95} - \Microsoft\Windows\BrokerInfrastructure\BgTaskRegistrationMaintenanceTask -> No File <==== ATTENTION
Edge Notifications: HKU\S-1-5-21-282081067-1870339625-3958985120-1001 -> hxxps://funpay.ru
FF Plugin: @unity3d.com/UnityPlayer64,version=1.0 -> C:\Program Files\Unity\WebPlayer64\loader-x64\npUnity3D64.dll [2015-06-08] (Unity Technologies ApS -> Unity Technologies ApS)
CHR StartupUrls: Default -> "hxxp://www.yandex.ru/?win=130&clid=1985535","hxxps://www.google.com/","hxxp://ru.msn.com/?pc=UP97&ocid=UP97DHP","hxxp://mail.ru/cnt/10445?gp=anvir3","hxxp://go.mail.ru/?chverfix=1&fr=chverfix_sg","hxxps://www.google.com/","hxxp://mail.ru/cnt/10445?gp=blackbear3","hxxp://mail.ru/cnt/10445","hxxp://startface.net/","hxxps://www.google.com/","hxxp://www.yandex.ru/?win=87&clid=1872363","hxxp://mail.ru/cnt/7993/",""
CHR Extension: (0) - C:\Users\ПК\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmedhionkhpnakcndndgjdbohmhepckk [2020-03-23]
CHR Extension: (Avast Passwords) - C:\Users\ПК\AppData\Local\Google\Chrome\User Data\Default\Extensions\emhginjpijfggbofeediiojmdlmlkoik [2020-03-14]
CHR Extension: (vidIQ Vision for YouTube) - C:\Users\ПК\AppData\Local\Google\Chrome\User Data\Default\Extensions\pachckjkecffpdphbpmfolblodfkgbhl [2020-03-20]
OPR StartupUrls: "hxxps:\/\/www.yandex.ru\/?win=428&clid=1961774"
R3 esihdrv; C:\Users\ПК\AppData\Local\Temp\esihdrv.sys [191664 2020-03-23] (ESET, spol. s r.o. -> ESET) <==== ATTENTION
2020-03-23 13:30 - 2020-03-23 13:30 - 000000000 ___DC C:\Program Files\Unity
2020-03-14 13:04 - 2020-03-15 11:33 - 000000000 ____D C:\Users\ПК\AppData\Local\AVAST Software
2020-03-12 18:11 - 2020-03-14 12:46 - 000000000 ____D C:\Users\Все пользователи\Kaspersky Lab
2020-03-12 18:11 - 2020-03-14 12:46 - 000000000 ____D C:\ProgramData\Kaspersky Lab
2020-03-12 16:22 - 2020-03-12 16:49 - 000000000 ____D C:\Users\ПК\Doctor Web
2020-03-12 16:15 - 2020-03-12 17:11 - 000000000 ____D C:\Program Files (x86)\NortonInstaller
2020-03-12 16:15 - 2020-03-12 16:17 - 000000000 ____D C:\Users\Все пользователи\NortonInstaller
2020-03-12 16:15 - 2020-03-12 16:17 - 000000000 ____D C:\ProgramData\NortonInstaller
2020-03-05 18:20 - 2020-03-05 18:20 - 107773952 _____ C:\WINDOWS\system32\config\SOFTWARE.iobit
2020-03-05 18:20 - 2020-03-05 18:20 - 007102464 _____ C:\WINDOWS\system32\config\DRIVERS.iobit
2020-03-05 18:20 - 2020-03-05 18:20 - 001200128 _____ C:\WINDOWS\system32\config\DEFAULT.iobit
2020-03-05 18:20 - 2020-03-05 18:20 - 000086016 _____ C:\WINDOWS\system32\config\SAM.iobit
2020-03-05 18:20 - 2020-03-05 18:20 - 000032768 _____ C:\WINDOWS\system32\config\SECURITY.iobit
2020-03-23 18:24 - 2019-09-27 17:12 - 000000000 ____D C:\WINDOWS\system32\Tasks\AVG
2020-03-15 11:40 - 2018-12-09 20:07 - 000000000 __SHD C:\Users\Все пользователи\AVAST Software
2020-03-15 11:40 - 2018-12-09 20:07 - 000000000 __SHD C:\ProgramData\AVAST Software
2020-03-14 13:12 - 2019-06-09 15:41 - 000000000 __SHD C:\Program Files (x86)\AVAST Software
2020-03-12 16:22 - 2019-06-09 15:41 - 000000000 __SHD C:\Users\Все пользователи\Doctor Web
2020-03-12 16:22 - 2019-06-09 15:41 - 000000000 __SHD C:\ProgramData\Doctor Web
2020-03-12 15:10 - 2018-08-21 14:17 - 000000000 ___DC C:\Program Files (x86)\IObit

EmptyTemp:
Reboot:

;uVS v4.1.8 [http://dsrt.dyndns.org:8888]
;Target OS: NTv10.0
v400c
OFFSGNSAVE
regt 18
regt 35
regt 38
;------------------------autoscript---------------------------

deldirex %SystemDrive%\USERS\ПК\APPDATA\LOCALLOW\UNITY\WEBPLAYER\LOADER

delall D:\АНВИР МОЙ КУМИР\ANVIR TASK MANAGER\ANVIR.EXE
delref XTAJIT.DLL
delref WOWARMHW.DLL
delref {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}\[CLSID]
delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DNBIFDKMDOJGMPMOPDEBNJCOBEKGDONCN%26INSTALLSOURCE%3DONDEMAND%26UC
delref %SystemDrive%\USERS\ПК\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\CMEDHIONKHPNAKCNDNDGJDBOHMHEPCKK\5.0.9_0\БЛОКИРОВКА РЕКЛАМЫ ДЛЯ YOUTUBE™
delref %SystemDrive%\USERS\ПК\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\IBKNAFOBNMNDICOJAHLPPOLCAAIBNGJF\2.0.3.16_1\ПОИСК  ЯНДЕКСA
delref %SystemDrive%\USERS\ПК\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\MJMPFDKMPOJOEEMJMFIDDLHKKNDCDPNO\2.0.2.16_0\ПОИСК  ЯНДЕКСA
delref %SystemDrive%\USERS\ИВАН\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\CMEDHIONKHPNAKCNDNDGJDBOHMHEPCKK\5.0.9_0\БЛОКИРОВКА РЕКЛАМЫ ДЛЯ YOUTUBE™
delref HTTP://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DDHDGFFKKEBHMKFJOJEJMPBLDMPOBFKFO%26INSTALLSOURCE%3DONDEMAND%26UC
delref HTTP://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DMJMPFDKMPOJOEEMJMFIDDLHKKNDCDPNO%26INSTALLSOURCE%3DONDEMAND%26UC
apply

deltmp
delref %Sys32%\DRIVERSTORE\FILEREPOSITORY\NV_DISPI.INF_AMD64_F5DE485BFDA7BB25\DISPLAY.NVCONTAINER\NVDISPLAY.CONTAINER.EXE -S NVDISPLAY.CONTAINERLOCALSYSTEM -F C:\PROGRAMDATA\NVDISPLAY.CONTAINERLOCALSYSTEM.LOG -L 3 -D C:\WINDOWS\SYSTEM32\DRIVERSTORE\FILEREPOSITORY\NV_DISPI.INF_AMD64_F5DE485BFDA7BB25\DISPLAY.NVCONTAINER\PLUGINS\LOCALSYSTEM -R -P 30000 -CFG NVDISPLAY.CONTAINERLOCALSYSTEM\LOCALSYSTEM
delref %SystemDrive%\PROGRAMDATA\MICROSOFT\SPEECH_ONECORE\SR\SV10-EV100\EN-US-N\MV101\NASPMODELSMETADATA.XML
delref D:\ADVANCED SYSTEMCARE\MONITOR.EXE
delref %SystemDrive%\PROGRAM FILES\COMMON FILES\AVG\OVERSEER\OVERSEER.EXE
delref D:\PROGRAM FILES (X86)\IOBIT\DRIVER BOOSTER\7.3.0\SCHEDULER.EXE
delref D:\PROGRAM FILES (X86)\IOBIT\DRIVER BOOSTER\7.3.0\DRIVERBOOSTER.EXE
delref D:\PROGRAM FILES (X86)\IOBIT\DRIVER BOOSTER\7.3.0\AUTOUPDATE.EXE
delref {9F2B0085-9218-42A1-88B0-9F0E65851666}\[CLSID]
delref {E984D939-0E00-4DD9-AC3A-7ACA04745521}\[CLSID]
delref {FE285C8C-5360-41C1-A700-045501C740DE}\[CLSID]
delref {9CDA66BE-3271-4723-8D35-DD834C58AD92}\[CLSID]
delref %SystemRoot%\SYSWOW64\MAPSTOASTTASK.DLL
delref %SystemRoot%\SYSWOW64\MAPSUPDATETASK.DLL
delref {DEF03232-9688-11E2-BE7F-B4B52FD966FF}\[CLSID]
delref {D2CBF5F7-5702-440B-8D8F-8203034A6B82}\[CLSID]
delref %SystemRoot%\SYSWOW64\GPSVC.DLL
delref %SystemRoot%\SYSWOW64\VMWP.EXE
delref %SystemRoot%\SYSWOW64\VID.DLL
delref %SystemRoot%\SYSWOW64\PEERDISTSVC.DLL
delref %SystemRoot%\SYSWOW64\WEVTSVC.DLL
delref %SystemRoot%\SYSWOW64\DRIVERS\TCPIP.SYS
delref %SystemRoot%\SYSWOW64\APPVETWCLIENTRES.DLL
delref %SystemRoot%\SYSWOW64\DRIVERS\MRXSMB.SYS
delref %SystemRoot%\SYSWOW64\DRIVERS\VMBKMCLR.SYS
delref %SystemRoot%\SYSWOW64\W32TIME.DLL
delref %SystemRoot%\SYSWOW64\DRIVERS\STORVSP.SYS
delref %SystemRoot%\SYSWOW64\DRIVERS\NDIS.SYS
delref %SystemRoot%\SYSWOW64\DRIVERS\USBXHCI.SYS
delref %SystemRoot%\SYSWOW64\DRIVERS\SRV2.SYS
delref %SystemRoot%\SYSWOW64\VMCOMPUTE.EXE
delref %SystemRoot%\SYSWOW64\RDPCORETS.DLL
delref %SystemRoot%\SYSWOW64\DRIVERS\DXGMMS2.SYS
delref %SystemRoot%\SYSWOW64\DRIVERS\HTTP.SYS
delref %SystemRoot%\SYSWOW64\DRIVERS\WINNAT.SYS
delref %SystemRoot%\SYSWOW64\UMPOEXT.DLL
delref %SystemRoot%\SYSWOW64\DRIVERS\VMBUSR.SYS
delref %SystemRoot%\SYSWOW64\BTHSERV.DLL
delref %SystemRoot%\SYSWOW64\DRIVERS\DMVSC.SYS
delref %SystemRoot%\SYSWOW64\IPHLPSVC.DLL
delref %SystemRoot%\SYSWOW64\DRIVERS\VFPEXT.SYS
delref %SystemRoot%\SYSWOW64\CSCSVC.DLL
delref %SystemRoot%\SYSWOW64\DRIVERS\VMBKMCL.SYS
delref %SystemRoot%\SYSWOW64\DRIVERS\REFS.SYS
delref %SystemRoot%\SYSWOW64\DRIVERS\SPACEPORT.SYS
delref %SystemRoot%\SYSWOW64\DRIVERS\FVEVOL.SYS
delref %SystemRoot%\SYSWOW64\DRIVERS\AFD.SYS
delref %SystemRoot%\SYSWOW64\PNRPSVC.DLL
delref %SystemRoot%\SYSWOW64\DRIVERS\PACER.SYS
delref %SystemRoot%\SYSWOW64\HVHOSTSVC.DLL
delref %SystemRoot%\SYSWOW64\LSM.DLL
delref %SystemRoot%\SYSWOW64\DRIVERS\SYNTH3DVSC.SYS
delref {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B}\[CLSID]
delref {166B1BCA-3F9C-11CF-8075-444553540000}\[CLSID]
delref {233C1507-6A77-46A4-9443-F871F945D258}\[CLSID]
delref {4063BE15-3B08-470D-A0D5-B37161CFFD69}\[CLSID]
delref {88D969C0-F192-11D4-A65F-0040963251E5}\[CLSID]
delref {88D969C1-F192-11D4-A65F-0040963251E5}\[CLSID]
delref {88D969C2-F192-11D4-A65F-0040963251E5}\[CLSID]
delref {88D969C3-F192-11D4-A65F-0040963251E5}\[CLSID]
delref {88D969C4-F192-11D4-A65F-0040963251E5}\[CLSID]
delref {88D969C5-F192-11D4-A65F-0040963251E5}\[CLSID]
delref {CA8A9780-280D-11CF-A24D-444553540000}\[CLSID]
delref {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA}\[CLSID]
delref %SystemRoot%\SYSWOW64\IE4USHOWIE.EXE
delref %SystemRoot%\SYSWOW64\IE4UINIT.EXE
delref {1FBA04EE-3024-11D2-8F1F-0000F87ABD16}\[CLSID]
delref %SystemRoot%\SYSWOW64\BLANK.HTM
delref {0F8604A5-4ECE-4DE1-BA7D-CF10F8AA4F48}\[CLSID]
delref {E6FB5E20-DE35-11CF-9C87-00AA005127ED}\[CLSID]
delref {D1325A3D-2D13-4A37-8892-C6D343E2068C}\[CLSID]
delref {B3C418F8-922B-4FAF-915E-59BC14448CF7}\[CLSID]
delref {05A1D945-A794-44EF-B41A-2F851A117155}\[CLSID]
delref {5C94FE86-B93B-467F-BFC3-BD6C91416F9B}\[CLSID]
delref {2D8B3101-E025-480D-917C-835522C7F628}\[CLSID]
delref {A910D941-9DA9-4656-8933-AA1EAE01F76E}\[CLSID]
delref %Sys32%\BLANK.HTM
delref {472083B0-C522-11CF-8763-00608CC02F24}\[CLSID]
delref %Sys32%\DRIVERS\HDAUDADDSERVICE.SYS
delref HELPSVC\[SERVICE]
delref SACSVR\[SERVICE]
delref TBS\[SERVICE]
delref VMMS\[SERVICE]
delref BROWSER\[SERVICE]
delref MESSENGER\[SERVICE]
delref RDSESSMGR\[SERVICE]
delref D:\ADVANCED SYSTEMCARE\DRIVERS\WIN10_AMD64\ASCFILECONTROL.SYS
delref D:\ADVANCED SYSTEMCARE\DRIVERS\WIN10_AMD64\ASCFILEFILTER.SYS
delref D:\ADVANCED SYSTEMCARE\DRIVERS\WIN10_AMD64\ASCREGISTRYFILTER.SYS
delref %SystemRoot%\TEMP\CPUZ145\CPUZ145_X64.SYS
delref %Sys32%\DRIVERS\MTICTWL.SYS
delref %Sys32%\DRIVERSTORE\FILEREPOSITORY\NV_DISPI.INF_AMD64_F5DE485BFDA7BB25\DISPLAY.NVCONTAINER\NVDISPLAY.CONTAINER.EXE -S NVDISPLAY.CONTAINERLOCALSYSTEM -F %PROGRAMDATA%\NVDISPLAY.CONTAINERLOCALSYSTEM.LOG -L 3 -D C:\WINDOWS\SYSTEM32\DRIVERSTORE\FILEREPOSITORY\NV_DISPI.INF_AMD64_F5DE485BFDA7BB25\DISPLAY.NVCONTAINER\PLUGINS\LOCALSYSTEM -R -P 30000 -CFG NVDISPLAY.CONTAINERLOCALSYSTEM\LOCALSYSTEM
delref IRENUM\[SERVICE]
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.35.442\PSMACHINE_64.DLL
delref %Sys32%\TETHERINGSETTINGHANDLER.DLL
delref %Sys32%\WBEM\WEMSAL_WMIPROVIDER (1).DLL
delref %Sys32%\QUICKACTIONSPS.DLL
delref %SystemDrive%\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\DAO\DAO360.DLL
delref %SystemRoot%\SYSWOW64\SPEECH_ONECORE\COMMON\SPEECHRUNTIME.EXE
delref %SystemRoot%\SYSWOW64\TAPILUA.DLL
delref %SystemRoot%\SYSWOW64\LOCATIONFRAMEWORK.DLL
delref %SystemRoot%\SYSWOW64\MAPSBTSVCPROXY.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.35.442\PSMACHINE.DLL
delref %SystemRoot%\SYSWOW64\COMPPKGSRV.EXE
delref %SystemRoot%\SYSWOW64\EAPPCFGUI.DLL
delref %SystemRoot%\SYSWOW64\LISTSVC.DLL
delref %SystemRoot%\SYSWOW64\AUTHHOSTPROXY.DLL
delref %SystemRoot%\SYSWOW64\DRIVERSTORE\FILEREPOSITORY\NV_DISPI.INF_AMD64_F5DE485BFDA7BB25\NVENCMFTH264.DLL
delref %SystemRoot%\SYSWOW64\WPCREFRESHTASK.DLL
delref %SystemRoot%\SYSWOW64\DRIVERSTORE\FILEREPOSITORY\NV_DISPI.INF_AMD64_F5DE485BFDA7BB25\NVDECMFTMJPEG.DLL
delref %SystemRoot%\SYSWOW64\WBEM\NLMCIM.DLL
delref %SystemRoot%\SYSWOW64\RMSROAMINGSECURITY.DLL
delref %SystemRoot%\SYSWOW64\SYSTEMSETTINGSBROKER.EXE
delref %SystemRoot%\SYSWOW64\SPEECH_ONECORE\COMMON\SAPI_EXTENSIONS.DLL
delref %SystemRoot%\SYSWOW64\SMARTSCREEN.EXE
delref %SystemRoot%\SYSWOW64\IDLISTEN.DLL
delref %SystemRoot%\SYSWOW64\WIFICONFIGSP.DLL
delref %SystemDrive%\PROGRAM FILES\COMMON FILES\SYSTEM\OLE DB\MSDAORA.DLL
delref %SystemRoot%\SYSWOW64\WIREDNETWORKCSP.DLL
delref {5A8FF410-F3CE-4844-B31B-F18D911239E8}\[CLSID]
delref %SystemDrive%\USERS\ИВАН\APPDATA\LOCAL\MICROSOFT\ONEDRIVE\UPDATE\ONEDRIVESETUP.EXE
delref %SystemDrive%\USERS\ИВАН\APPDATA\LOCAL\MICROSOFT\ONEDRIVE\STANDALONEUPDATER\ONEDRIVESETUP.EXE
;-------------------------------------------------------------

restart