( MCAFEE SECURITY SCAN ; MCAFEE - SITEADVISOR )
2) Скопируйте текст КОДа - в буфер обмена.
uVS: start.exe, текущий пользователь, меню, скрипты - выполнить скрипт из буфера обмена.
ПЕРЕД ВЫПОЛНЕНИЕМ СКРИПТА, ЗАКРЫТЬ БРАУЗЕРЫ!
ВНИМАНИЕ : По окончанию выполнения скрипта компьютер выполнит перезагрузку !
Код |
---|
;uVS v4.0.14 [http://dsrt.dyndns.org] ;Target OS: NTv10.0 v400c OFFSGNSAVE ;------------------------autoscript--------------------------- deldirex %SystemDrive%\PROGRAM FILES (X86)\ONESYSTEMCARE deldirex %SystemDrive%\USERS\SONY\APPDATA\LOCALLOW\UNITY\WEBPLAYER\LOADER deldirex %SystemDrive%\USERS\SONY\APPDATA\LOCAL\UMMYVIDEODOWNLOADER delref %SystemDrive%\USERS\SONY\APPDATA\LOCAL\MAIL.RU\MAILRUUPDATER.EXE del %SystemDrive%\USERS\SONY\APPDATA\LOCAL\MAIL.RU\MAILRUUPDATER.EXE delref HTTP://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DCNCGOHEPIHCEKKLOKHBHIBLHFCMIPBDH%26INSTALLSOURCE%3DONDEMAND%26UC delref HTTP://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DFHEOGGKFDFCHFPHCEEIFDBEPAOOICAHO%26INSTALLSOURCE%3DONDEMAND%26UC delref HTTP://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DGEHNGEIFMELPHPLLNCOBKMIMPHFKCKNE%26INSTALLSOURCE%3DONDEMAND%26UC delref HTTP://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DLGDNILODCPLJOMELBBNPGDOGDBMCLBNI%26INSTALLSOURCE%3DONDEMAND%26UC delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DNLADLJMABBOANHIHFKJACNNKGJHNOKHJ%26INSTALLSOURCE%3DONDEMAND%26UC delref HTTP://WWW.YANDEX.COM/?WIN=301&CLID=2069804 delref HTTP://WWW.BING.COM/SEARCH?Q={SEARCHTERMS}&SRC=IE-SEARCHBOX&FORM=IESR02 delref HTTP://WWW.BING.COM/SEARCH?Q={SEARCHTERMS}&FORM=MSERBM&PC=MSERT1 delref HTTP://GO.MAIL.RU/DISTIB/EP/?Q={SEARCHTERMS}&FR=NTG&PRODUCT_ID=%7B22F74B21-B6B2-46E3-BAC7-0BCCD3CD9DFD%7D&GP=811610 delref %SystemDrive%\USERS\SONY\\APPDATA\LOCAL\MEDIAGET2\MEDIAGET.EXE apply ;------------------------------------------------------------- deltmp restart ;---------command-block--------- delref %SystemDrive%\PROGRAM FILES\CCLEANER\CCLEANER.EXE delref {E984D939-0E00-4DD9-AC3A-7ACA04745521}\[CLSID] delref %SystemRoot%\SYSWOW64\MAPSTOASTTASK.DLL delref %SystemRoot%\SYSWOW64\MAPSUPDATETASK.DLL delref %SystemRoot%\EHOME\EHPRIVJOB.EXE delref %SystemRoot%\EHOME\MCUPDATE delref {23E5D772-327A-42F5-BDEE-C65C6796BB2A}\[CLSID] delref %SystemRoot%\EHOME\MCUPDATE.EXE delref {177AFECE-9599-46CF-90D7-68EC9EEB27B4}\[CLSID] delref {7FA3A1C3-3C87-40DE-AC16-B6E2815A4CC8}\[CLSID] delref {CEF51277-5358-477B-858C-4E14F0C80BF7}\[CLSID] delref %SystemRoot%\EHOME\EHREC delref {59116E30-02BD-4B84-BA1E-5D77E809B1A2}\[CLSID] delref {06DA0625-9701-43DA-BFD7-FBEEA2180A1E}\[CLSID] delref {EA9155A3-8A39-40B4-8963-D3C761B18371}\[CLSID] delref %Sys32%\NOTIFIER.EXE delref %SystemRoot%\SYSWOW64\WPCUMI.DLL delref %SystemRoot%\SYSWOW64\WPCMIG.DLL delref {E51DFD48-AA36-4B45-BB52-E831F02E8316}\[CLSID] delref {FF87090D-4A9A-4F47-879B-29A80C355D61}\[CLSID] delref {45F26E9E-6199-477F-85DA-AF1EDFE067B1}\[CLSID] delref {7CCA6768-8373-4D28-8876-83E8B4E3A969}\[CLSID] delref %SystemDrive%\USERS\SONY\APPDATA\ROAMING\MY-TOP-APPS\MY-TOP-APPS.EXE delref %SystemDrive%\PROGRAM FILES (X86)\ONESYSTEMCARE\ONESYSTEMCARE.EXE delref %SystemDrive%\PROGRAM FILES (X86)\ONESYSTEMCARE\CLEANUPCONSOLE.EXE delref %SystemDrive%\PROGRAM FILES\OPERA\LAUNCHER.EXE delref %SystemDrive%\PROGRAM FILES\CEZURITY\ANTIVIRUS\CEZURITY_ANTIVIRUS.EXE delref %SystemRoot%\SYSWOW64\PEERDISTSVC.DLL delref %SystemRoot%\SYSWOW64\DRIVERS\TCPIP.SYS delref %SystemRoot%\SYSWOW64\APPVETWCLIENTRES.DLL delref %SystemRoot%\SYSWOW64\DRIVERS\MRXSMB.SYS delref %SystemRoot%\SYSWOW64\DRIVERS\VMBKMCLR.SYS delref %SystemRoot%\SYSWOW64\W32TIME.DLL delref %SystemRoot%\SYSWOW64\DRIVERS\NDIS.SYS delref %SystemRoot%\SYSWOW64\DRIVERS\USBXHCI.SYS delref %SystemRoot%\SYSWOW64\DRIVERS\SRV2.SYS delref %SystemRoot%\SYSWOW64\RDPCORETS.DLL delref %SystemRoot%\SYSWOW64\DRIVERS\DXGMMS2.SYS delref %SystemRoot%\SYSWOW64\DRIVERS\HTTP.SYS delref %SystemRoot%\SYSWOW64\DRIVERS\WINNAT.SYS delref %SystemRoot%\SYSWOW64\UMPOEXT.DLL delref %SystemRoot%\SYSWOW64\DRIVERS\VMBUSR.SYS delref %SystemRoot%\SYSWOW64\DRIVERS\DMVSC.SYS delref %SystemRoot%\SYSWOW64\IPHLPSVC.DLL delref %SystemRoot%\SYSWOW64\CSCSVC.DLL delref %SystemRoot%\SYSWOW64\DRIVERS\VMBKMCL.SYS delref %SystemRoot%\SYSWOW64\DRIVERS\REFS.SYS delref %SystemRoot%\SYSWOW64\DRIVERS\SPACEPORT.SYS delref %SystemRoot%\SYSWOW64\DRIVERS\FVEVOL.SYS delref %SystemRoot%\SYSWOW64\DRIVERS\AFD.SYS delref %SystemRoot%\SYSWOW64\PNRPSVC.DLL delref %SystemRoot%\SYSWOW64\DRIVERS\PACER.SYS delref %SystemRoot%\SYSWOW64\HVHOSTSVC.DLL delref %SystemRoot%\SYSWOW64\LSM.DLL delref %SystemRoot%\SYSWOW64\DRIVERS\SYNTH3DVSC.SYS delref %SystemDrive%\USERS\SONY\APPDATA\LOCAL\MAIL.RU\SPUTNIK\IE_ADDON_DLL.DLL delref {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B}\[CLSID] delref {0D012ABD-CEED-11D2-9C76-00105AA73033}\[CLSID] delref {166B1BCA-3F9C-11CF-8075-444553540000}\[CLSID] delref {233C1507-6A77-46A4-9443-F871F945D258}\[CLSID] delref {4063BE15-3B08-470D-A0D5-B37161CFFD69}\[CLSID] delref {56A58823-AE99-11D5-B90B-0050DACD1F75}\[CLSID] delref {88D969C0-F192-11D4-A65F-0040963251E5}\[CLSID] delref {88D969C1-F192-11D4-A65F-0040963251E5}\[CLSID] delref {88D969C2-F192-11D4-A65F-0040963251E5}\[CLSID] delref {88D969C3-F192-11D4-A65F-0040963251E5}\[CLSID] delref {88D969C4-F192-11D4-A65F-0040963251E5}\[CLSID] delref {88D969C5-F192-11D4-A65F-0040963251E5}\[CLSID] delref %SystemDrive%\PROGRAM FILES (X86)\PLAYKEY\NPPLAYKEYPLUGINAPP_X86_64.DLL delref %SystemDrive%\PROGRAM FILES (X86)\PLAYKEY\NPPLAYKEYPLUGINAPP_I386.DLL delref {CA8A9780-280D-11CF-A24D-444553540000}\[CLSID] delref {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA}\[CLSID] delref {E01D1C6A-4F40-11D3-8958-00105A272DCF}\[CLSID] delref %SystemDrive%\PROGRAM FILES (X86)\COMMON FILES\ADOBE\OOBE\PDAPP\CCM\UTILITIES\NPADOBEAAMDETECT64.DLL delref {1FBA04EE-3024-11D2-8F1F-0000F87ABD16}\[CLSID] delref {32CFFBE7-8BB7-4BC3-83D8-8197671920D6}\[CLSID] delref %SystemRoot%\SYSWOW64\BLANK.HTM delref {0F8604A5-4ECE-4DE1-BA7D-CF10F8AA4F48}\[CLSID] delref {E6FB5E20-DE35-11CF-9C87-00AA005127ED}\[CLSID] delref {6B9228DA-9C15-419E-856C-19E768A13BDC}\[CLSID] delref %SystemDrive%\PROGRAM FILES\DROID4XEXT\GAMESOUND.DLL delref %SystemDrive%\PROGRAM FILES\DROID4XEXT\WRITERECORD.DLL delref %SystemDrive%\PROGRAM FILES\DROID4XEXT\WNDRECORD.DLL delref %SystemDrive%\PROGRAM FILES\WINDOWS SIDEBAR\SIDEBAR.EXE delref %Sys32%\DRIVERS\VMBUSR.SYS delref {503739D0-4C5E-4CFD-B3BA-D881334F0DF2}\[CLSID] delref {A910D941-9DA9-4656-8933-AA1EAE01F76E}\[CLSID] delref %Sys32%\ALTTAB.DLL delref %Sys32%\DRIVERS\VNVDIMM.SYS delref %Sys32%\QAGENTRT.DLL delref %Sys32%\LOCATIONNOTIFICATIONS.EXE delref %SystemDrive%\PROGRAM FILES\WINDOWS MEDIA PLAYER\WMPDMCCORE.DLL delref %Sys32%\HVSICONTAINERSERVICE.DLL delref %Sys32%\MCXDRIV.DLL delref %Sys32%\HOTSTARTUSERAGENT.DLL delref %Sys32%\DRIVERS\RDPWD.SYS delref %SystemDrive%\PROGRAM FILES\INTERNET EXPLORER\IEDVTOOL.DLL delref %Sys32%\P2PHOST.EXE delref %Sys32%\NAPIPSEC.DLL delref %Sys32%\DRIVERS\INVDIMM.SYS delref %Sys32%\OCSETUP.EXE delref %Sys32%\MSSHA.DLL delref %Sys32%\DRIVERS\NVDIMMN.SYS delref %Sys32%\APILOGEN.DLL delref %Sys32%\IPBUSENUM.DLL delref %Sys32%\OOBE\MSOOBEUI.DLL delref %Sys32%\MCTADMIN.EXE delref %Sys32%\DHCPQEC.DLL delref %Sys32%\DRIVERS\UMDF\USBCCIDDRIVER.DLL delref %Sys32%\WWANADVUI.DLL delref %Sys32%\DSHOWRDPFILTER.DLL delref %Sys32%\BLANK.HTM delref {472083B0-C522-11CF-8763-00608CC02F24}\[CLSID] delref %Sys32%\DRIVERS\HDAUDADDSERVICE.SYS delref HELPSVC\[SERVICE] delref SACSVR\[SERVICE] delref TBS\[SERVICE] delref %Sys32%\DRIVERS\USBAUDIO.SYS delref VMMS\[SERVICE] delref MESSENGER\[SERVICE] delref RDSESSMGR\[SERVICE] delref %SystemDrive%\PROGRAM FILES\DAEMON TOOLS LITE\DISCSOFTBUSSERVICE.EXE delref %Sys32%\PSXSS.EXE delref %SystemDrive%\PROGRAM FILES (X86)\BLENDER FOUNDATION\BLENDER\BLENDTHUMB64.DLL delref %SystemDrive%\PROGRAM FILES (X86)\MAXTHON5\BIN\MAXTHON.EXE delref %SystemDrive%\USERS\SONY\APPDATA\LOCAL\YANDEX\UPDATER\YUPDATE-EXECUTOR.EXE delref %SystemDrive%\USERS\SONY\APPDATA\LOCAL\YANDEX\UPDATER2\U2-CTRL.EXE delref %SystemDrive%\USERS\SONY\DESKTOP\МАРИКА ДЕНЬ РОЖДЕНИЕ\X64\PHOTOSHOP.EXE delref %SystemDrive%\PROGRAM FILES\ADOBE\ADOBE PHOTOSHOP CC 2017\PHOTOSHOP.EXE delref %SystemDrive%\PROGRAM FILES\MOZILLA FIREFOX\ACCESSIBLEMARSHAL.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.32.7\PSMACHINE_64.DLL delref %SystemDrive%\PROGRAM FILES (X86)\PRERQIWARDDACERTAIN\GRITISE.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.33.5\PSMACHINE_64.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.33.7\PSMACHINE_64.DLL delref %Sys32%\TETHERINGSETTINGHANDLER.DLL delref %Sys32%\QUICKACTIONSPS.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.31.5\PSMACHINE_64.DLL delref %Sys32%\CHTADVANCEDDS.DLL delref %SystemDrive%\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\DAO\DAO360.DLL delref %SystemRoot%\SYSWOW64\TTLSEXT.DLL delref %SystemRoot%\SYSWOW64\SPEECH_ONECORE\COMMON\SPEECHRUNTIME.EXE delref %SystemRoot%\SYSWOW64\TAPILUA.DLL delref %SystemRoot%\SYSWOW64\WBEM\KEYBOARDFILTERWMI.DLL delref %SystemDrive%\USERS\SONY\DESKTOP\МАРИКА ДЕНЬ РОЖДЕНИЕ\PHOTOSHOP.EXE delref %SystemDrive%\PROGRAM FILES (X86)\MCAFEE\SITEAD~1\SASUBMGR.DLL delref %SystemRoot%\SYSWOW64\LOCATIONFRAMEWORK.DLL delref %SystemRoot%\SYSWOW64\MAPSBTSVCPROXY.DLL delref %SystemRoot%\SYSWOW64\PERCEPTIONSIMULATIONEXTENSIONS.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.32.7\PSMACHINE.DLL delref %SystemDrive%\PROGRAM FILES (X86)\MCAFEE\SITEAD~1\SAOEMMGR.EXE delref %SystemRoot%\SYSWOW64\EAPPCFGUI.DLL delref %SystemRoot%\SYSWOW64\MAPSCSP.DLL delref %SystemRoot%\SYSWOW64\LISTSVC.DLL delref %SystemDrive%\PROGRAM FILES (X86)\JAVA\JRE1.8.0_131\BIN\WSDETECT.DLL delref %SystemRoot%\SYSWOW64\AUTHHOSTPROXY.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.33.5\PSMACHINE.DLL delref %SystemRoot%\SYSWOW64\WBEM\NLMCIM.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.33.7\PSMACHINE.DLL delref %SystemRoot%\SYSWOW64\RMSROAMINGSECURITY.DLL delref %SystemRoot%\SYSWOW64\SYSTEMSETTINGSBROKER.EXE delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.21.169\PSMACHINE.DLL delref %SystemRoot%\SYSWOW64\SPEECH_ONECORE\COMMON\SAPI_EXTENSIONS.DLL delref %SystemRoot%\SYSWOW64\SMARTSCREEN.EXE delref %SystemRoot%\SYSWOW64\GPSVC.DLL delref %SystemDrive%\PROGRAM FILES (X86)\YEUASKIE\BTIOODORXC.EXE delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.31.5\PSMACHINE.DLL delref %SystemRoot%\SYSWOW64\IDLISTEN.DLL delref %SystemRoot%\SYSWOW64\WIFICONFIGSP.DLL delref %SystemDrive%\PROGRAM FILES\COMMON FILES\SYSTEM\OLE DB\MSDAORA.DLL delref %SystemRoot%\SYSWOW64\INETSRV\IISRSTAS.EXE delref F:\SETUP.EXE delref {5A8FF410-F3CE-4844-B31B-F18D911239E8}\[CLSID] delref %SystemDrive%\PROGRAMDATA\{T7YZOV9D-OCED-9RDB-JJ2CU48GCLOV}\OX19IP3PN2.EXE delref %SystemDrive%\PROGRAMDATA\93F8D562-C26C-4CD2-B33F-096DA5934C09\ONESYSTEMCARE.EXE delref %SystemDrive%\USERS\SONY\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\CHROMEDEFAULTDATA\EXTENSIONS\NLADLJMABBOANHIHFKJACNNKGJHNOKHJ\1.3.8.14_0\ADAWARE SECURE SEARCH delall %SystemDrive%\USERS\SONY\DOWNLOADS\AUTOCLICKER.EXE apply |
+
Далее (даже если проблема решена) выполните лог программой Malwarebytes
Выберите вариант сканирования: Быстрое или Полное сканирование.
Отчет предоставить для анализа ( в своей теме на форуме ).
Отчёт нужно предоставить в .txt ( блокнот )