;uVS v3.85.5 [http://dsrt.dyndns.org]
;Target OS: NTv6.1
v385c
delall %SystemDrive%\USERS\USER\APPDATA\LOCAL\YANDEX\BROWSER.BAT
delall %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\CHROME.BAT
delall %SystemDrive%\USERS\DEFAULT\APPDATA\LOCAL\MICROSOFT\WINDOWS\DEFAULT SETTINGS PROTECTOR\DSP.EXE
delall %SystemDrive%\USERS\USER\APPDATA\ROAMING\ETRANSLATOR\ETRANSLATOR.EXE
delall %SystemDrive%\USERS\USER\APPDATA\ROAMING\BROWSERS\EXE.AREPO.BAT
delall %SystemDrive%\USERS\USER\APPDATA\ROAMING\BROWSERS\EXE.EMORHC.BAT
delall %SystemDrive%\USERS\USER\APPDATA\ROAMING\BROWSERS\EXE.EROLPXEI.BAT
delall %SystemDrive%\USERS\USER\APPDATA\ROAMING\BROWSERS\EXE.RESWORB.BAT
delall %SystemDrive%\PROGRAMDATA\FIREWALL INTEGRITY CHECKER\FIREWALLINTEGRITYCHECKER.EXE
delall %SystemDrive%\PROGRAMDATA\DISK ANALYSIS\DISKANALYSIS.EXE
delall %SystemDrive%\PROGRAMDATA\MICROSOFT\WINDOWS\START MENU\PROGRAMS\GOOGLE CHROME\GООGLЕ СHRОMЕ.LNK
delall %SystemDrive%\USERS\USER\APPDATA\ROAMING\MICROSOFT\INTERNET EXPLORER\QUICK LAUNCH\GООGLЕ СHRОMЕ.LNK
delall %SystemDrive%\PROGRAMDATA\HOST32MANAGER\HOST32MANAGER.EXE
delref HTTP://SEARCH-WAN.RU
delall %SystemDrive%\USERS\DEFAULT\APPDATA\ROAMING\MICROSOFT\WINDOWS\LOADMNGE32\LOADMNGE32.EXE
delall %SystemDrive%\USERS\DEFAULT\APPDATA\ROAMING\MICROSOFT\WINDOWS\MICROSOAP FILE MANAGER\MICROSOAPFILEMANAGER.EXE
delall %SystemDrive%\USERS\DEFAULT\APPDATA\LOCAL\MICROSOFT\WINDOWS\OFFICECOMPILER\OFFICECOMPILER.EXE
delall %SystemDrive%\PROGRAMDATA\WINDOWSMANGERPROTECT\PROTECTWINDOWSMANAGER.EXE
delref HTTP:\\SEARCH-WAN.RU
delall %SystemDrive%\USERS\DEFAULT\APPDATA\LOCAL\MICROSOFT\SUPER FITCH X86\SUPERFITCH_X86.EXE
delall %SystemDrive%\PROGRAMDATA\SYSCONFIG\SYSCONFIG.EXE
delall %SystemDrive%\USERS\USER\APPDATA\ROAMING\MICROSOFT\INTERNET EXPLORER\QUICK LAUNCH\USER PINNED\TASKBAR\YАNDЕХ.LNK
delall %SystemDrive%\USERS\USER\APPDATA\ROAMING\MICROSOFT\WINDOWS\START MENU\PROGRAMS\YANDEX\YАNDЕХ.LNK
delall %SystemDrive%\PROGRAMDATA\MICROSOFT\WINDOWS\START MENU\PROGRAMS\ARTMONEY SE\РЕГИСТРАЦИЯ АRTМОNЕY ЧЕРЕЗ ИНТЕРНЕТ.LNK
delref HTTP://ISEARCH.OMIGA-PLUS.COM/?TYPE=HP&TS=1421944716&FROM=OBW&UID=WDCXWD10EARX-00N0YB0_WD-WCC0S102302023020
delref HTTP://ISEARCH.OMIGA-PLUS.COM/WEB/?TYPE=DS&TS=1421944716&FROM=OBW&UID=WDCXWD10EARX-00N0YB0_WD-WCC0S102302023020&Q={SEARCHTERMS}
delref HTTP://SIMSIMOTKROYSIA.RU/
delref HTTPS://WWW.WOLFRAMALPHA.COM/?TRACKID=SP-005
delref HTTPS://WWW.WOLFRAMALPHA.COM/INPUT/?I={SEARCHTERMS}&TRACKID=SP-005
exec32 "C:\Users\User\AppData\Roaming\eTranslator\eTranslator.exe" /uninstall
deltmp
delnfr
restart