[B]Доброго времени суток![/B]
В папке с программой [B]UVS[/B] будет файл [B]script.cmd[/B]
Запустить файл, запустится окно программы для ввода скрипта,
скопировать [B]скрипт[/B] написанный ниже и [B]вставить[/B] в окно программы.
[B]ПЕРЕД ВЫПОЛНЕНИЕМ СКРИПТА, ЗАКРЫТЬ ВСЕ БРАУЗЕРЫ![/B]
[CODE];uVS v3.85.3 [http://dsrt.dyndns.org]
;Target OS: NTv6.1
v385c
delref HTTP://HIGHFIVESEARCH.RU
delall %SystemDrive%\FIREFOX.BAT
delall %SystemDrive%\HISTORY.BAT
delall %SystemDrive%\HOMEPAGE.BAT
delall %SystemDrive%\LAUNCHER.BAT
delall %SystemDrive%\LICENSE.BAT
delall %SystemDrive%\SLLAUNCHER.BAT
delall %SystemDrive%\PROGRAM FILES (X86)\INDEX.BAT
zoo %SystemDrive%\PROGRAM FILES (X86)\BAIDU\BINDEX.EXE
delall %SystemDrive%\PROGRAM FILES (X86)\BAIDU\BINDEX.EXE
delall %SystemDrive%\PROGRA~2\SEARCHPROTECT\SEARCHPROTECT\BIN\SPVC3
2LOADER.DLL
zoo %SystemDrive%\USERS\1\APPDATA\LOCAL\CHROME.BAT
delall %SystemDrive%\USERS\1\APPDATA\LOCAL\CHROME.BAT
delall %SystemDrive%\USERS\1\APPDATA\LOCAL\YANDEX.BAT
delall %SystemDrive%\USERS\1\APPDATA\LOCAL\GOOGLE\CHROME.BAT
delall %SystemDrive%\USERS\1\APPDATA\LOCAL\SCREENY\SCREENY.EXE
delall %SystemDrive%\USERS\1\APPDATA\LOCAL\SCREENY\UNINSTALL.EXE
delall %SystemDrive%\USERS\1\APPDATA\LOCAL\SWVUPDATER\UPDATER.EXE
delall %SystemDrive%\USERS\1\APPDATA\LOCAL\TEMP\THM8C18.TMP
zoo %SystemDrive%\USERS\1\APPDATA\LOCAL\WIN_UPDATE\WIN_UPDATE.EXE
delall %SystemDrive%\USERS\1\APPDATA\LOCAL\WIN_UPDATE\WIN_UPDATE.EXE
zoo %SystemDrive%\USERS\1\APPDATA\LOCAL\YANDEX\BROWSER.BAT
delall %SystemDrive%\USERS\1\APPDATA\LOCAL\YANDEX\BROWSER.BAT
zoo %SystemDrive%\USERS\1\APPDATA\ROAMING\DORRIBLE\RIBBLE\D.EXE
delall %SystemDrive%\USERS\1\APPDATA\ROAMING\DORRIBLE\RIBBLE\D.EXE
delall %SystemDrive%\USERS\1\APPDATA\ROAMING\DSITE\UPDATE~1\UPDATE~
1.EXE
delall %SystemDrive%\USERS\1\APPDATA\ROAMING\MICROSOFT\INTERNET EXPLORER\QUICK LAUNCH\YANDEX.LNK
delall %SystemDrive%\USERS\1\APPDATA\ROAMING\MICROSOFT\INTERNET EXPLORER\QUICK LAUNCH\USER PINNED\TASKBAR\YANDEX (2).LNK
delall %SystemDrive%\USERS\1\APPDATA\ROAMING\MICROSOFT\INTERNET EXPLORER\QUICK LAUNCH\USER PINNED\TASKBAR\YANDEX.LNK
delall %SystemDrive%\USERS\1\APPDATA\ROAMING\MICROSOFT\WINDOWS\STAR
T MENU\PROGRAMS\QTRAX PLAYER.LNK
delall %SystemDrive%\USERS\1\APPDATA\ROAMING\MICROSOFT\WINDOWS\STAR
T MENU\PROGRAMS\YANDEX\YANDEX.LNK
zoo %SystemDrive%\USERS\1\APPDATA\ROAMING\STEAM\REVERSED\STEAM.EXE
delall %SystemDrive%\USERS\1\APPDATA\ROAMING\STEAM\REVERSED\STEAM.EXE
delall %SystemDrive%\USERS\1\DESKTOP\QTRAX PLAYER.LNK
delall %SystemDrive%\USERS\1\DESKTOP\YANDEX.LNK
delall %Sys32%\CONFIG\SYSTEM~1\APPDATA\ROAMING\BAIDU\BAIDUSYNC.EXE
delref HTTP:\\HIGHFIVESEARCH.RU
delref HTTP://WWW.HAO123.COM/?TN=74015059_1_HAO_PG
delref HTTP://WWW.MYSTARTSEARCH.COM/WEB/?TYPE=DS&TS=1418117110&FROM=STEP&UID=WDCXWD5000AACS-00G8B1_WD-WCAUK004625146251&Q={SEARCHTERMS}
delref HTTP://WWW.SWEET-PAGE.COM/?TYPE=HP&TS=1398538721&FROM=COR&UID=WDCXWD5000AACS-00G8B1_WD-WCAUK004625146251
delref HTTP://YAMDEX.NET/?SEARCHID=1&L10N=RU&FROMSEARCH=1&IMSID=DCE66BEBDBB258E5A61785
825ABA8E6C&TEXT={SEARCHTERMS}
delall %SystemDrive%\PROGRAM FILES (X86)\AVIRA\ANTIVIR DESKTOP\AVGNT.EXE
zoo %SystemDrive%\USERS\1\APPDATA\LOCAL\TEMP\DF9AAD7EE630F388A8\
LINES.BAT
delall %SystemDrive%\USERS\1\APPDATA\LOCAL\TEMP\DF9AAD7EE630F388A8\
LINES.BAT
delref HTTP:\\WWW.VASH-BIZNES.NET
exec32 "C:\Program Files (x86)\baidu\unins000.exe"
exec32 C:\Program Files (x86)\BetterSurf\BetterSurfPlus\uninstall.exe
exec32 C:\Program Files (x86)\DealPly\uninst.exe
exec32 C:\Program Files (x86)\desktopy\uninstall.exe
exec32 C:\Users\1\AppData\Roaming\desktopy.ru\uninstall.exe
exec32 "C:\Program Files (x86)\Hamster Soft\Hamster Free Archiver\unins000.exe"
exec32 "C:\Program Files (x86)\Hamster Soft\Hamster Lite Archiver\unins000.exe"
exec32 "C:\Program Files (x86)\HomeTab\unins000.exe"
exec32 MsiExec.exe /I{12644DC5-2271-442B-816F-8CFFD3DDDF32}
exec32 C:\Program Files (x86)\Kino-Filmov.Net\UninstallerUI.exe
exec32 C:\Program Files (x86)\madLen.uCoz.coM\UninstallerUI.exe
exec32 C:\Program Files (x86)\MiPony\uninst.exe
exec C:\Users\1\AppData\Roaming\Mipony Download Manager Packages\uninstaller.exe /Uninstall /NM="Mipony Download Manager Packages" /AN="" /MBN="Mipony Download Manager Packages"
exec32 C:\Program Files (x86)\Mobogenie\uninst.exe
exec C:\Program Files (x86)\MyPC Backup\uninst.exe
exec32 MsiExec.exe /X{FD659E00-D14E-41F6-B09B-8B8A590562FB}
exec32 C:\Users\1\AppData\Roaming\mystartsearch\UninstallManager.exe -ptid=step
exec32 "C:\Program Files (x86)\OpenAL\OpenAL.exe" /U
exec32 "C:\Program Files (x86)\Optimizer Pro\unins000.exe" /VERYSILENT
exec C:\Program Files (x86)\Microsoft Silverlight\5.0.61118.0\Silverlight.Configuration.exe -uninstallApp 2901941997.portal.qtrax.com
exec32 MsiExec.exe /X{A3E9BA4F-2C4C-41F7-B7E0-6F47137688A2}
exec32 C:\Users\1\AppData\Local\Screeny\uninstall.exe
exec32 "C:\PROGRA~2\SearchProtect\Main\bin\uninstall.exe" /S
exec "C:\Users\1\AppData\Local\Skymonk2\uninstall.exe"
exec32 C:\Users\1\AppData\Local\SwvUpdater\Updater.exe /uninstall
exec C:\Users\1\AppData\Local\Unity\WebPlayer\Uninstall.exe /CurrentUser
exec32 MsiExec.exe /I{D492942E-9368-48D9-BB8B-68E8E4CE2D43}
exec C:\Users\1\AppData\Roaming\DSite\UpdateProc\UpdateTask.exe /Uninstall
exec C:\Users\1\AppData\Roaming\DIGITA~1\UpdateProc\UpdateTask.exe /Uninstall
exec "C:\Program Files (x86)\GoForFilesUpdater\Uninstall.exe"
exec C:\Users\1\AppData\Roaming\Dealply\UpdateProc\UpdateTask.exe /Uninstall
exec32 "C:\Users\1\AppData\Roaming\VOPackage\uninstall.exe"
exec32 C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha771\uninstall.exe
exec "C:\Users\1\AppData\Local\WinnerDM\uninstall.exe"
exec32 C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe -uninstall
exec32 "C:\Program Files (x86)\WinZip Registry Optimizer\unins000.exe" /silent
exec C:\Program Files (x86)\WiseEnhance\WiseEnhanceuninstall.exe
exec "C:\Users\1\AppData\Local\Yandex\YandexBrowser\Application\37.0.2062.12521\Installer\setup.exe" --uninstall
exec "C:\Users\1\AppData\Local\Amigo\Application\32.0.1709.113\Installer\setup.exe" --uninstall
exec "C:\Users\1\AppData\Local\Xpom\Application\28.0.1500.75\Installer\setup.exe" --uninstall
exec32 C:\Program Files (x86)\Mail.Ru\Sputnik\spt_tmp_n.exe uninstall
exec32 MsiExec.exe /X{B9C3392F-76A5-4130-B60B-4D9C0B03E6C8}
exec32 C:\Users\1\AppData\Local\Baidu\Baidu\1.3.1.157\uninst.exe
exec32 C:\Program Files (x86)\Baidu\BaiduAn\3.0.0.3971\uninst.exe
exec32 "C:\PROGRA~2\baidu\{A3236~1\ASBarBroker.exe" -runasAdmin -SVCUninstall -addressbar.dll
exec32 "C:\Program Files (x86)\Baidu\Toolbar\BarBroker.exe" -runasAdmin -SVCUninstall
exec32 C:\Program Files (x86)\Baidu\BaiduSd\1.8.0.1255\uninst.exe
exec32 C:\Program Files (x86)\Common Files\Thunder Network\Kankan\Uninstall.exe
regt 1
regt 2
regt 3
regt 12
regt 18
regt 27
regt 28
regt 29
deltmp
delnfr
restart[/CODE]
И жмем кнопку [B]Выполнить.[/B]
На запросы программы по удалению жмите [B]ДА[/B]
ПК перезагрузится.
В папке с программой [B]UVS[/B] будет папка [B]zoo[/B], ее поместить в архив, установить пароль [B]virus[/B] и прислать сюда [B]
[email protected][/B]
[B]Далее(даже если проблема решена)[/B] выполнить лог программой [B]MBAM[/B]
http://forum.esetnod32.ru/forum9/topic10688/
Выбрать [B]быстрое сканирование[/B]. Отчет предоставить для анализа
