выполняем скрипт в uVS:
- скопировать содержимое кода в буфер обмена;
- стартуем uVS(start.exe), далее выбираем: текущий пользователь, меню - скрипты - выполнить скрипт из буфера обмена;
- закрываем все браузеры перед выполнением скрипта;
при деинсталляции программ - соглашаемся на деинсталляцию_удаление подтверждаем "да"
Код |
---|
;uVS v4.0.10 [http://dsrt.dyndns.org] ;Target OS: NTv6.1 v400c OFFSGNSAVE ;------------------------autoscript--------------------------- zoo %SystemDrive%\USERS\АННА\APPDATA\ROAMING\SYSTEM\SVCHOST.EXE addsgn BA6F9BB2BD392A720B9C2D754C2144FBDA75303AC171DB300C9BCDF4D9A66104AA6FDB1BB735BD087EC1D2DE115EC816EDDFE8721D57FC080D88B14A020622E3 8 Tool.InstSrv.3 [DrWeb] 7 chklst delvir deldirex %SystemDrive%\USERS\АННА\APPDATA\LOCALLOW\UNITY\WEBPLAYER\LOADER delref %SystemDrive%\USERS\АННА\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\PHKDCINMMLJBLPNKOHLIPAIODLONPINF\11.0.3_1\ПОИСК MAIL.RU delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DINDJGIEBMAKHMNAPLNLNANODKFIEJFJD%26INSTALLSOURCE%3DONDEMAND%26UC delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DODIJCGAFKHPOBJLNFDGIACPDENPMBGME%26INSTALLSOURCE%3DONDEMAND%26UC delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DPHKDCINMMLJBLPNKOHLIPAIODLONPINF%26INSTALLSOURCE%3DONDEMAND%26UC delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DPMPOAAHLECCAIBBHFJFIMIGEPMFMMBBK%26INSTALLSOURCE%3DONDEMAND%26UC delref %SystemDrive%\USERS\АННА\PHOTOSHOP2014\ADBEAPE.DLL apply regt 28 regt 29 deltmp delref %SystemRoot%\SOFTWAREDISTRIBUTION\DOWNLOAD\0F72864EF8C84C1ED4FB0EC9CCEAB7E6\7F04209359A70696EC3EF1BB9FFF418F9141677A-1 delref %SystemRoot%\SOFTWAREDISTRIBUTION\DOWNLOAD\658E150D9BCFB3ACB5C5A52BE3EFE778\6A1952C7F7FB6AE67B516AE9FB6DDF2EA0518AFD-1 delref %SystemRoot%\SOFTWAREDISTRIBUTION\DOWNLOAD\319D4D91727B725C7B2164CA94F47DB9\F4C87E1B350DFD662DDA8247DF6E4762D976D498-1 delref %SystemRoot%\SOFTWAREDISTRIBUTION\DOWNLOAD\70BF659B42DFEE7640ED0C15607040D0\1DC5025794DB468BD2F08027A007885940EC7275-1 delref %SystemRoot%\SOFTWAREDISTRIBUTION\DOWNLOAD\35935F37C81F2BA4A915B91ED6FF9B38\2073C77290243316F0386B7FE94C4EAF36F83855-1 delref %SystemRoot%\SOFTWAREDISTRIBUTION\DOWNLOAD\53FBAD0B01DA1C6CBA2A0693D45F49C4\CE616353A6C5FF47DB0359B5CB8C21BC22533DCD-1 delref %SystemRoot%\SOFTWAREDISTRIBUTION\DOWNLOAD\0E87732A5D1E915706ABD395A770E86B\CC4C5E1BC78516EB6F369F975120C12245599501-1 delref %SystemRoot%\SOFTWAREDISTRIBUTION\DOWNLOAD\882FC632CA6C80728F83B1D538524B81\C6D7E083F9100BAA942F576375B50BF3A7ECD36E-1 delref %SystemRoot%\SOFTWAREDISTRIBUTION\DOWNLOAD\EDDECD23B6C981630F1E36FEB0C7A319\A36CFDC3F2A82CAD59459B6E6992409DDC697AB1-1 delref %SystemDrive%\PROGRAM FILES (X86)\COMMON FILES\ADOBE\ARM\1.0\ADOBEARM.EXE delref %SystemDrive%\PROGRAM FILES\COMMON FILES\AV\AVAST! ANTIVIRUS\BACKUP.EXE delref %SystemDrive%\PROGRAM FILES\COMMON FILES\AV\AVAST! ANTIVIRUS\UPGRADE.EXE delref %SystemDrive%\PROGRAM FILES\AVAST SOFTWARE\AVAST\AVASTEMUPDATE.EXE delref {23E5D772-327A-42F5-BDEE-C65C6796BB2A}\[CLSID] delref {177AFECE-9599-46CF-90D7-68EC9EEB27B4}\[CLSID] delref {CEF51277-5358-477B-858C-4E14F0C80BF7}\[CLSID] delref {59116E30-02BD-4B84-BA1E-5D77E809B1A2}\[CLSID] delref %SystemDrive%\PROGRAM FILES\AVAST SOFTWARE\AVAST\AVASTUI.EXE delref %SystemRoot%\SYSWOW64\PEERDISTSVC.DLL delref %SystemRoot%\SYSWOW64\DRIVERS\NDIS.SYS delref %SystemRoot%\SYSWOW64\RDPCORETS.DLL delref %SystemRoot%\SYSWOW64\UMPO.DLL delref %SystemRoot%\SYSWOW64\IPHLPSVC.DLL delref %SystemRoot%\SYSWOW64\CSCSVC.DLL delref %SystemRoot%\SYSWOW64\DRIVERS\RDVGKMD.SYS delref %SystemRoot%\SYSWOW64\PNRPSVC.DLL delref %SystemRoot%\SYSWOW64\DRIVERS\PACER.SYS delref %SystemRoot%\SYSWOW64\LSM.EXE delref {F0CCC1CB-42D6-4357-B667-64E8563C2620}\[CLSID] delref {166B1BCA-3F9C-11CF-8075-444553540000}\[CLSID] delref {233C1507-6A77-46A4-9443-F871F945D258}\[CLSID] delref {4063BE15-3B08-470D-A0D5-B37161CFFD69}\[CLSID] delref {88D969C0-F192-11D4-A65F-0040963251E5}\[CLSID] delref {88D969C1-F192-11D4-A65F-0040963251E5}\[CLSID] delref {88D969C2-F192-11D4-A65F-0040963251E5}\[CLSID] delref {88D969C3-F192-11D4-A65F-0040963251E5}\[CLSID] delref {88D969C4-F192-11D4-A65F-0040963251E5}\[CLSID] delref {88D969C5-F192-11D4-A65F-0040963251E5}\[CLSID] delref {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA}\[CLSID] delref {D27CDB6E-AE6D-11CF-96B8-444553540000}\[CLSID] delref %SystemRoot%\SYSWOW64\WIN32K.SYS delref %SystemDrive%\PROGRAM FILES\AVAST SOFTWARE\AVAST\SAFEPRICE\FF delref %SystemDrive%\PROGRAM FILES\AVAST SOFTWARE\AVAST\WEBREP\FF delref {1FBA04EE-3024-11D2-8F1F-0000F87ABD16}\[CLSID] delref %SystemRoot%\SYSWOW64\BLANK.HTM delref {E6FB5E20-DE35-11CF-9C87-00AA005127ED}\[CLSID] delref {472083B0-C522-11CF-8763-00608CC02F24}\[CLSID] delref {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4}\[CLSID] delref %Sys32%\DRIVERS\RDVGKMD.SYS delref %Sys32%\MSSPELLCHECKINGFACILITY.DLL delref %Sys32%\DRIVERS\TSUSBHUB.SYS delref %Sys32%\BLANK.HTM delref HELPSVC\[SERVICE] delref SACSVR\[SERVICE] delref TBS\[SERVICE] delref VMMS\[SERVICE] delref MESSENGER\[SERVICE] delref RDSESSMGR\[SERVICE] delref %SystemDrive%\USERS\0D04~1\APPDATA\LOCAL\TEMP\ESIHDRV.SYS delref %Sys32%\DRIVERS\SYNTH3DVSC.SYS delref %Sys32%\PSXSS.EXE delref %SystemDrive%\PROGRAM FILES (X86)\KASPERSKY LAB\KASPERSKY INTERNET SECURITY 17.0.0\FFEXT\LIGHT_PLUGIN_FIREFOX\ADDON.XPI delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.32.7\PSMACHINE_64.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.33.5\PSMACHINE_64.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.33.3\PSMACHINE_64.DLL delref %Sys32%\SHAREMEDIACPL.CPL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.31.5\PSMACHINE_64.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.32.7\PSMACHINE.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.33.5\PSMACHINE.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.33.3\PSMACHINE.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.31.5\PSMACHINE.DLL delref H:\AUTORUN.EXE delref {093F479D-712E-46CD-9E06-62E734A05F68}\[CLSID] delref {2670000A-7350-4F3C-8081-5663EE0C6C49}\[CLSID] delref {2E38825B-8815-42CF-9126-C58BC28D4591}\[CLSID] delref {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA}\[CLSID] delref {A996E48C-D3DC-4244-89F7-AFA33EC60679}\[CLSID] delref %SystemDrive%\PROGRAM FILES (X86)\MICROSOFT OFFICE\OFFICE16\DCF\DATABASECOMPARE.EXE delref %SystemDrive%\PROGRAM FILES (X86)\MICROSOFT OFFICE\OFFICE16\DCF\SPREADSHEETCOMPARE.EXE delref %SystemDrive%\PROGRAM FILES (X86)\SAMSUNG\SAMSUNG UNIVERSAL SCAN DRIVER\USDAGENT.EXE delref %SystemDrive%\PROGRAM FILES (X86)\SAMSUNG\SAMSUNG UNIVERSAL SCAN DRIVER\RUNHELP.EXE delref %SystemDrive%\PROGRAM FILES\SKETCHUP\SKETCHUP 2017\LAYOUT\LAYOUT.EXE delref %SystemDrive%\PROGRAM FILES\SKETCHUP\SKETCHUP 2017\SKETCHUP.EXE ;------------------------------------------------------------- restart |
перезагрузка, пишем о старых и новых проблемах.
------------
+
добавьте новый лог ESETsysinspector