ESET и 360 TOTAL SECURITY удалите лишний антивирус.
2) Скопировать текст КОДА - в буфер обмена.
uVS: start.exe, текущий пользователь, меню, скрипты - выполнить скрипт из буфера обмена.
ПЕРЕД ВЫПОЛНЕНИЕМ СКРИПТА, ЗАКРЫТЬ БРАУЗЕРЫ!
ВНИМАНИЕ : По окончанию выполнения скрипта компьютер выполнит перезагрузку !
На вопросы программы отвечаем: Да !
Код |
---|
;uVS v3.87.1 [http://dsrt.dyndns.org] ;Target OS: NTv5.1 v385c OFFSGNSAVE ;------------------------autoscript--------------------------- chklst delvir delref HTTPS://CLIENTS2.GOOGLE.COM/CR/REPORT deldirex %SystemDrive%\PROGRAM FILES\DEALPLY deldirex %SystemDrive%\DOCUMENTS AND SETTINGS\ADMIN\LOCAL SETTINGS\APPLICATION DATA\UNITY\WEBPLAYER\LOADER deldirex %SystemDrive%\DOCUMENTS AND SETTINGS\BADYGANY\LOCAL SETTINGS\APPLICATION DATA\UNITY\WEBPLAYER\LOADER delref HTTP://WWW.MAIL.RU/CNT/9516 delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DCEGDOMHOCAEOEDBDPFOLMGJKJAIJFOMO%26INSTALLSOURCE%3DONDEMAND%26UC delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DEIODDFAEPDOEIFBHJPHFEFGIPCJCDIEO%26INSTALLSOURCE%3DONDEMAND%26UC delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DIFLPPBJNPNEIIGCBDFJPNKEBIDMKJMOI%26INSTALLSOURCE%3DONDEMAND%26UC delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DJEDELKHANEFMCNPAPPFHACHBPNLHOMAI%26INSTALLSOURCE%3DONDEMAND%26UC delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DJGGBJBMNFMIPGCANIDAMJFPECHDEEKOI%26INSTALLSOURCE%3DONDEMAND%26UC delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DLANABBPAHPJNALJEBNPGKJEMCBKEPIAK%26INSTALLSOURCE%3DONDEMAND%26UC delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DPPOILMFKBPCKODOIFDLKMKEPCAJFJMHL%26INSTALLSOURCE%3DONDEMAND%26UC delref HTTP://WWW.GOOGLE.RU delall %SystemDrive%\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\MTA SAN ANDREAS ALL\1.3\TEMP\FAIRPLAYKD.SYS delref HTTP://GO.MAIL.RU/SEARCH?FR=FFTB&Q= delref HTTP://WWW.YANDEX.RU/?WIN=67&CLID=143106 delref HTTP://WWW.YANDEX.RU/?WIN=51&CLID=1989706 delref HTTP://MAIL.RU/CNT/7993/ delref HTTP://WWW.MAIL.RU/CNT/8746 delref %SystemDrive%\DOCUMENTS AND SETTINGS\ADMIN\LOCAL SETTINGS\APPLICATION DATA\YANDEX\UPDATER\PRAETORIAN.EXE del %SystemDrive%\DOCUMENTS AND SETTINGS\ADMIN\LOCAL SETTINGS\APPLICATION DATA\YANDEX\UPDATER\PRAETORIAN.EXE delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DFCFENMBOOJPJINHPGGGODEFCCIPIKBPD%26INSTALLSOURCE%3DONDEMAND%26UC delref HTTP://COSMOSEARCH.RU/?RI=1&RSID=A2FF44D219F2C4A255D659CC88B7A161&Q={SEARCHTERMS} delref %SystemDrive%\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\{E88FD2E0-2DF1-44D9-9FDF-E4F65B762C55}\SETUP_DT.EXE del %SystemDrive%\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\{E88FD2E0-2DF1-44D9-9FDF-E4F65B762C55}\SETUP_DT.EXE delref HTTP:\\WWW.MAIL.RU\CNT\8136 delref HTTP:\\R.MAIL.RU\CLN10362\ODNOKLASSNIKI.RU regt 27 ;------------------------------------------------------------- regt 1 regt 22 delref %SystemDrive%\DOCUMENTS AND SETTINGS\BADYGANY\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\ELMBCMLMDJFEMOLGAPOECFHCMCJGDMBH\0.0.0.8_0\LCOUPON delall %SystemDrive%\PROGRAM FILES\DEALPLY\DEALPLY.CRX delref %SystemDrive%\DOCUMENTS AND SETTINGS\BADYGANY\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\DJHGIAHOMJKABJDODLEMHNHBNBFCOMAM\2.11.36_0\ДОПОЛНИТЕЛЬНЫЕ НАСТРОЙКИ ВКОНТАКТЕ delref %SystemDrive%\DOCUMENTS AND SETTINGS\BADYGANY\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\EPANFJKFAHIMKGOMNIGADPKOBAEFEKCD\5.5.1932_0\BLUR delref %SystemDrive%\DOCUMENTS AND SETTINGS\BADYGANY\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\FCFENMBOOJPJINHPGGGODEFCCIPIKBPD\0.0.0.8_0\MSN HOMEPAGE & BING SEARCH ENGINE delref %SystemDrive%\DOCUMENTS AND SETTINGS\BADYGANY\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\FKBMJPOFPCPMMOKGMKEHCPBOFJOMBFOE\0.0.1.3_0\COPROFIT exec C:\Program Files\360\Total Security\Uninstall.exe uidel C:\DOCUME~1\NETWOR~1\APPLIC~1\DealPly\UpdateProc\UpdateTask.exe /Uninstall uidel cmd.exe /c(sc stop SPS >nul)&(%WinDir%\system32\SearchProtectService.exe /uninstall /silent)&(@attrib -H -R -S %WinDir%\system32\GroupPolicy\Machine\Registry.pol >nul)&(@move/y %WinDir%\system32\GroupPolicy\Machine\Registry.pol %WinDir%\system32\GroupPolicy\Machine\Registry.pol.old)&(@move/y %WinDir%\system32\GroupPolicy\Machine\Registry.pol.bak %WinDir%\system32\GroupPolicy\Machine\Registry.pol)&(@move/y %WinDir%\system32\GroupPolicy\Machine\R %WinDir%\system32\GroupPolicy\Machine\backup)&(@attrib -H -R -S %WinDir%\system32\GroupPolicy\User\Registry.pol >nul)&(@move/y %WinDir%\system32\GroupPolicy\User\Registry.pol %WinDir%\system32\GroupPolicy\User\Registry.pol.old)&(@move/y %WinDir%\system32\GroupPolicy\User\Registry.pol.bak %WinDir%\system32\GroupPolicy\User\Registry.pol)&(@move/y %WinDir%\system32\GroupPolicy\User\R %WinDir%\system32\GroupPolicy\User\backup)&(@move/y %WinDir%\system32\GroupPolicy\gpt.ini %WinDir%\system32\GroupPolicy\gpt.ini.old)&(@move/y %WinDir%\system32\GroupPolicy\gpt.ini.bak %WinDir%\system32\GroupPolicy\gpt.ini)&(@move/y %WinDir%\SysWOW64\GroupPolicy\gpt.ini %WinDir%\SysWOW64\GroupPolicy\gpt.ini.old)&(@move/y %WinDir%\SysWOW64\GroupPolicy\gpt.ini.bak %WinDir%\SysWOW64\GroupPolicy\gpt.ini)&(start/b gpupdate.exe /Force >L) & (@schtasks /delete /tn "RestoreSearch" /f >nul) & reg.exe DELETE HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2AEF02C3-5159-4C81-A688-8D954F0DEE56}_NewSearch /f & start "" "http://firstsputnik.ru/?ri=1&uid=a2ff44d219f2c4a255d659cc88b7a161&q=&uninstall=1" exec "C:\Program Files\McAfee Security Scan\uninstall.exe" deltmp delnfr restart |
3) Напишите, что с проблемой
+
Добавьте новый образ автозапуска в uVS