;uVS v3.86.5 [http://dsrt.dyndns.org]
;Target OS: NTv6.1
v385c
;------------------------autoscript---------------------------

chklst
delvir

delall %SystemDrive%\PROGRAM FILES (X86)\E1982BCC-1443610271-11E1-BF58-183947129BE0\KNSDAE07.TMP

delall %SystemDrive%\PROGRAM FILES (X86)\E1982BCC-1443610271-11E1-BF58-183947129BE0\HNSCE96A.TMP

delref HTTP://WWW.CLIXSENSE.COM/EN/VIEW_ADS
delref %SystemDrive%\PROGRAMDATA\1WDSMANPRO1\WDSMANPRO.EXE
del %SystemDrive%\PROGRAMDATA\1WDSMANPRO1\WDSMANPRO.EXE

deldirex %SystemDrive%\PROGRAM FILES (X86)\SFK

deldirex %SystemDrive%\PROGRAM FILES (X86)\CROSSBROWSE\CROSSBROWSE\APPLICATION

deldirex %SystemDrive%\PROGRAM FILES (X86)\CIPLUS-4.5VV01.10

deldirex %SystemDrive%\PROGRAM FILES (X86)\GLOBALUPDATE\UPDATE

deldirex %SystemDrive%\PROGRAM FILES (X86)\ANYPROTECTEX

delref HTTP://UI.SKYPE.COM/UI/0/4.2.0.169/RU/GO/HELP.FAQ.INSTALLER?LASTERROR=1603
delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DJEDELKHANEFMCNPAPPFHACHBPNLHOMAI%26INSTALLSOURCE%3DONDEMAND%26UC

delref HTTP://HOME.BAISVIK.COM?SOURCEID=IE&TYPE=HOME&PARTNER=DEFAULT
delref HTTP://HOME.BAISVIK.COM/RESULTS?Q={SEARCHTERMS}&SOURCEID=IE&TYPE=OMNI&PARTNER=DEFAULT
delall %SystemDrive%\USERS\OLEG\APPDATA\LOCAL\TEMP\__SAMSUNG_UPDATE\SBIOSIO64.SYS

delref HTTP://WWW.YANDEX.RU/?CLID=47639
delref HTTP://GO.MAIL.RU/SEARCH?FR=NTG&Q=
delref %SystemDrive%\USERS\OLEG\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\17B2IJIN.DEFAULT\EXTENSIONS\HELPER@SAVEFROM.NET.XPI
del %SystemDrive%\USERS\OLEG\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\17B2IJIN.DEFAULT\EXTENSIONS\HELPER@SAVEFROM.NET.XPI

deldirex %SystemDrive%\PROGRAM FILES (X86)\CROSSBROWSE\CROSSBROWSE\APPLICATION\39.6.2171.95

delref D:\03.ПРОГИ\ADVANCED DRIVER UPDATER\ADVANCED DRIVER UPDATER 2.1.1086.15901\ADUSETUP_NEW.EXE
del D:\03.ПРОГИ\ADVANCED DRIVER UPDATER\ADVANCED DRIVER UPDATER 2.1.1086.15901\ADUSETUP_NEW.EXE

delref %SystemDrive%\USERS\OLEG\DOWNLOADS\STRONGHOLDANTIMALWARE.EXE
del %SystemDrive%\USERS\OLEG\DOWNLOADS\STRONGHOLDANTIMALWARE.EXE

delref %SystemDrive%\PROGRAM FILES (X86)\REGCLEAN PRO\UNINS000.EXE
del %SystemDrive%\PROGRAM FILES (X86)\REGCLEAN PRO\UNINS000.EXE

delall %SystemDrive%\USERS\OLEG\APPDATA\LOCAL\TEMP\BEEDGIHAFF.EXE

delref HTTP://WWW.ADON-DEMAND.DE/RED/2302
delref %SystemDrive%\PROGRAM FILES (X86)\ASP\UNINS001.EXE
del %SystemDrive%\PROGRAM FILES (X86)\ASP\UNINS001.EXE

delref HTTP://WWW.BUKA.RU/
delref HTTP://WWW.MAIL.RU/MRA?LANG=RU
delref HTTP://WWW.RELEVANTKNOWLEDGE.COM/DEFAULT.ASPX?FUNC=REDIRECT&PAGE_ID=1001
delref HTTP://WWW.TRENDMICRO.COM/US/BUSINESS/STRATEGIC-ALLIANCES/GRID/INDEX.HTML
delref HTTP://WWW.RELEVANTKNOWLEDGE.COM/DEFAULT.ASPX?FUNC=REDIRECT&PAGE_ID=1035
delref HTTP://WWW.RELEVANTKNOWLEDGE.COM/DEFAULT.ASPX?FUNC=REDIRECT&PAGE_ID=1041
delref HTTP://WWW.WEBMONEY.RU/VIDEOS.SHTML
delall %SystemDrive%\USERS\OLEG\APPDATA\LOCAL\TEMP\FHY2O2VN.SYS

regt 27
;-------------------------------------------------------------

delall %SystemDrive%\PROGRAM FILES (X86)\MOZILLA FIREFOX\BROWSER\EXTENSIONS\{972CE4C6-7E08-4474-A285-3208198CE6FD}\INSTALL.RDF
delall %SystemDrive%\USERS\OLEG\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\17B2IJIN.DEFAULT\EXTENSIONS\DXYYH4339170@JXVPYKS65865478.COM\INSTALL.RDF
deldir %SystemDrive%\PROGRAM FILES (X86)\CIPLUS-4.5VV01.10
deldir %SystemDrive%\PROGRAM FILES (X86)\ANYPROTECTEX
deldir %SystemDrive%\PROGRAM FILES (X86)\ADVANCED DRIVER UPDATER
deldir %SystemDrive%\PROGRAM FILES (X86)\CROSSBROWSE\CROSSBROWSE\APPLICATION
delall %SystemDrive%\PROGRAM FILES (X86)\DLL-FILES.COM FIXER\DLLFIXER.EXE
delall %SystemDrive%\PROGRAM FILES (X86)\REGCLEAN PRO\REGCLEANPRO.EXE
bl AB6818A7FF17230A6E5119F6CDD1F85B 1246720
delall %SystemDrive%\USERS\OLEG\APPDATA\ROAMING\A5EAIS0B5Y2Z.EXE
delref %SystemDrive%\PROGRAM FILES (X86)\STRONGHOLD ANTIMALWARE\ANTMLWRMNTR64.DLL
del %SystemDrive%\PROGRAM FILES (X86)\STRONGHOLD ANTIMALWARE\ANTMLWRMNTR64.DLL
exec32 "C:\Program Files (x86)\ASP\unins001.exe"
exec C:\Users\Oleg\AppData\Local\Mail.Ru\MailRuUpdater.exe uninstall
exec "C:\Program Files\SUPERAntiSpyware\Uninstall.exe"
deltmp
delnfr
restart