;uVS v4.0.11 [http://dsrt.dyndns.org]
;Target OS: NTv6.1
v400c
OFFSGNSAVE
;------------------------autoscript---------------------------

delref %SystemDrive%\USERS\WINDOWS\APPDATA\ROAMING\WINDOWS.EXE
delref %SystemDrive%\PROGRA~1\ZONA\ZONA.EXE
delref %SystemDrive%\USERS\WINDOWS\APPDATA\LOCAL\YC\APPLICATION\YC.EXE
apply

deltmp
delref %SystemDrive%\USERS\WINDOWS\APPDATA\LOCAL\RIGHTCHOSE\REGCHECK.VBS
delref %SystemDrive%\PROGRAM FILES\DRIVERPACK NOTIFIER\DRIVERPACKNOTIFIER.EXE
delref %Sys32%\PSXSS.EXE
delref %SystemDrive%\PROGRAM FILES\INTERNET EXPLORER\НОВАЯ ПАПКА\WORLD OF TANKS\WARGAMINGGAMEUPDATER.EXE
delref %SystemDrive%\USERS\WINDOWS\APPDATA\LOCAL\YANDEX\BROWSERMANAGER\MBLAUNCHER.EXE
delref %Sys32%\BLANK.HTM
delref %SystemDrive%\USERS\WINDOWS\APPDATA\LOCAL\MAIL.RU\GAMECENTER\GAMECENTER.EXE
;-------------------------------------------------------------

restart
 

   
Task: {0E86B223-3BC5-4349-BB4A-89FF8AF4D7B8} - \Microsoft\Windows\Media Center\ObjectStoreRecoveryTask -> No File <==== ATTENTION
Task: {11169B71-341A-4E96-B5AE-0EFDEAA946F2} - \AVAST Software\Avast settings backup -> No File <==== ATTENTION
Task: {1855160E-DE0A-4583-8CAD-AA5B93DC9D48} - \Game_Booster_AutoUpdate -> No File <==== ATTENTION
Task: {1DCD3D53-AC41-4E6B-8852-571C942047C1} - \iToolsDaemon -> No File <==== ATTENTION
Task: {1FB9700B-D36D-4192-B48E-69E7FC6ECEF1} - \{7E7D0F47-7D05-797D-0411-797E0C7A110B} -> No File <==== ATTENTION
Task: {22725075-2472-432A-A556-7B3696155349} - \YiCLeEuyNayo -> No File <==== ATTENTION
Task: {2607A5C1-F05E-446C-94DD-AD43E51F157C} - \{CA2D8276-603B-4053-AD4C-A997402FDC9D} -> No File <==== ATTENTION
Task: {271CCD87-F714-4A3E-85A2-C55941E564B8} - \GameNet -> No File <==== ATTENTION
Task: {325926B2-8D0A-46B2-B7B3-4B8E64547797} - \{805C024B-BFF3-40FB-B931-EE1B9012B420} -> No File <==== ATTENTION
Task: {330A36A2-DB79-4CA1-AA32-584913D9EBDB} - \{D36135CB-D2F4-49A9-B7AB-06D8A7012952} -> No File <==== ATTENTION
Task: {34753C20-C145-46D5-923E-7CC42CDF2712} - \{259BFE87-81F7-471A-9B12-290519A2BD6E} -> No File <==== ATTENTION
Task: {50D80B5A-A356-4F12-95DF-8AF0283386DE} - System32\Tasks\E3E2FAF8-01A6-9F3E-5835-B13FC8DF2D83 => C:\Windows\system32\regsvr32.exe /n /s /i:"/661cd618a9ef9b6c /q" "C:\Users\windows\AppData\Local\DB92FA~1\{9C2A9~1." <==== ATTENTION
Task: {6DC85488-FA78-43DE-B0EA-F73C53ECEA31} - \{0DD43A20-7A97-48C9-86BB-32BB09678926} -> No File <==== ATTENTION
Task: {735D6C33-3377-429B-98B4-F6DD6E159644} - \niPYo -> No File <==== ATTENTION
Task: {78E1C240-1200-4F14-928A-B2B5364D3303} - \Scheduled Update-S-1-8-22 -> No File <==== ATTENTION
Task: {8D4394F2-D666-4BF3-AC6B-F99047469CE1} - \exOVtDTL -> No File <==== ATTENTION
Task: {A2CFB6F3-B3AE-4971-8E29-C415BE22D2E5} - \Microsoft\Windows\Maintenance\WinSAT -> No File <==== ATTENTION
Task: {A44423A3-EDD5-4540-AC92-7D890C7AAE40} - \xOolXYC -> No File <==== ATTENTION
Task: {BA8B06C6-9DDD-4CEF-8F5B-15471B511DFB} - \{A78030A9-641A-41D2-AA9D-AFE6120B2ABC} -> No File <==== ATTENTION
Task: {C65A394D-76DC-4318-A69A-8FDEF26493B8} - \{0C8352AE-0FF9-31D5-82D1-2E1CD18B1D6A} -> No File <==== ATTENTION
Task: {C7D20483-186D-4E48-BB12-CED2FD51B348} - \{27B74BFC-901C-FC57-A87C-58271AC2C803} -> No File <==== ATTENTION
Task: {D2388846-792F-42CC-99AE-8884E4611AC4} - \Microsoft\Windows\Media Center\PvrScheduleTask -> No File <==== ATTENTION
Task: {E13A88AC-1DB2-4D64-A079-DAB9BFC02BDE} - \PCSdEJSI -> No File <==== ATTENTION
Task: {E4420E4A-B83B-4CC2-9568-410746AE9245} - \{5CF26E43-2E76-4BC1-92B0-12E156DCBE36} -> No File <==== ATTENTION
Task: {E525093C-8008-499F-9F46-E0F1883AC1FC} - \Microsoft\Windows\Media Center\MediaCenterRecoveryTask -> No File <==== ATTENTION
Task: {F0D992F9-0C81-4A05-8F7B-6D34576E5BA5} - \Microsoft\Windows\Media Center\SqlLiteRecoveryTask -> No File <==== ATTENTION
Task: {FBBA88FB-243F-4617-B0B1-386AA74509DF} - \geckofz -> No File <==== ATTENTION
HKLM\...\Run: [a66f3aba09d4d2fa5b311458ca443faa] => "C:\Users\windows\AppData\Roaming\windows.exe" ..
HKLM\...\Run: [4ac3c974fdeb47ca048a77277c46e792] => "C:\Users\windows\AppData\Roaming\Windows.exe" ..
HKU\S-1-5-21-3639101864-850435329-857067824-1000\...\Run: [Zona] => C:\PROGRA~1\Zona\Zona.exe /MINIMIZED
HKU\S-1-5-21-3639101864-850435329-857067824-1000\...\Run: [ycAutoLaunch_AB9C2E10634F4F665D2EACA4F8AFEEBD] => "C:\Users\windows\AppData\Local\yc\Application\yc.exe" /prefetch:5 <==== ATTENTION
HKU\S-1-5-21-3639101864-850435329-857067824-1000\...\Run: [MailRuUpdater] => C:\Users\windows\AppData\Local\Mail.Ru\MailRuUpdater.exe <==== ATTENTION
HKU\S-1-5-21-3639101864-850435329-857067824-1000\...\Run: [amigo] => C:\Users\windows\AppData\Local\Amigo\Application\amigo.exe --no-startup-window <==== ATTENTION
ShortcutTarget: regCheck.lnk -> C:\Users\windows\AppData\Local\rightchose\regCheck.vbs (No File)
FF Extension: (Global Stat) - C:\Users\windows\AppData\Roaming\Mozilla\Firefox\Profiles\1jh6vh42.default\Extensions\{98538934-3027-1265-953f-95936ac8736f}.xpi [2017-06-28] [Legacy] [not signed]
CHR StartupUrls: Default -> "hxxp://granena.ru/?utm_content=31b5cebd524a9af6c7a772dca81815e9&utm_source=startpm&utm_term=9AEF35BD5AE6EE4E3345C4D692B9D25F&utm_d=20170328"

EmptyTemp:
Reboot: