;uVS v3.86.5 [http://dsrt.dyndns.org]
;Target OS: NTv6.1
v385c
del %SystemDrive%\USERS\1\APPDATA\LOCAL\BRYVQZJLESORCAV\BDQDUBZ1.BAT
delref HTTP://SEARCHE-NAUTI.RU
del %SystemDrive%\USERS\1\APPDATA\LOCAL\XIHWYS\KFCBXM2.BAT
del %SystemDrive%\PROGRAMDATA\ZWNDRNE\KYKHDRODVPSA5.BAT
del %SystemDrive%\PROGRAMDATA\MFHPXHA\LQDUJNRLIT6.BAT
deldir %SystemDrive%\PROGRAMDATA\OTNGEVL
deldir %SystemDrive%\PROGRAMDATA\MNNNWUUBDRRAMQ
delall %SystemDrive%\USERS\1\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BV460S73.DEFAULT\SEARCHPLUGINS\RUSEARCHER.XML
addsgn 79132211B9E9317E0AA1AB5979AD1205DAFFF47DC4EA942D892B2942AF292811E11BC3DCC10016A57AD30FDA4A9589F6F49A1416DEC7B02C2D772F2CA3A52273 64 

delall %SystemDrive%\USERS\1\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BV460S73.DEFAULT\EXTENSIONS\{F549E678-F596-DE2F-028A-0E858598635D}\COMPONENTS\SAFETYNUTHLPFF25.DLL
delall %SystemDrive%\USERS\1\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BV460S73.DEFAULT\EXTENSIONS\{F549E678-F596-DE2F-028A-0E858598635D}\COMPONENTS\SAFETYNUTHLPFF6.DLL
delall %SystemDrive%\USERS\1\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BV460S73.DEFAULT\EXTENSIONS\{F549E678-F596-DE2F-028A-0E858598635D}\COMPONENTS\SAFETYNUTHLPFF8.DLL
delall %SystemDrive%\USERS\1\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BV460S73.DEFAULT\EXTENSIONS\{F549E678-F596-DE2F-028A-0E858598635D}\COMPONENTS\SAFETYNUTHLPFF9.DLL
delall %SystemDrive%\USERS\1\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BV460S73.DEFAULT\SEARCHPLUGINS\ASK.XML
delall %SystemDrive%\USERS\1\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BV460S73.DEFAULT\EXTENSIONS\{F549E678-F596-DE2F-028A-0E858598635D}\INSTALL.RDF
delall %SystemDrive%\USERS\1\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BV460S73.DEFAULT\EXTENSIONS\{B9DB16A4-6EDC-47EC-A1F4-B86292ED211D}\INSTALL.RDF
delref {E6FB5E20-DE35-11CF-9C87-00AA005127ED}\[CLSID]
;------------------------autoscript---------------------------

chklst
delvir

delref HTTP://UI.SKYPE.COM/UI/0/6.11.66.102/RU/GO/HELP.FAQ.INSTALLER?LASTERROR=1601
deldirex %SystemDrive%\PROGRAM FILES\MAIL.RU\GUARD

delref HTTP://GO.MAIL.RU/SEARCH?FR=NTG&Q=
delref %SystemDrive%\USERS\1\DOCUMENTS\ДИЗАЙН\ЛИНЕЙКА\COLOR.EXE
del %SystemDrive%\USERS\1\DOCUMENTS\ДИЗАЙН\ЛИНЕЙКА\COLOR.EXE

del %SystemDrive%\USERS\1\APPDATA\ROAMING\MICROSOFT\INTERNET EXPLORER\QUICK LAUNCH\АМИГО.LNK

deldirex %SystemDrive%\USERS\1\APPDATA\LOCAL\AMIGO\APPLICATION

regt 28
regt 29
;-------------------------------------------------------------

regt 14
deltmp
delnfr
restart

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
Toolbar: HKU\S-1-5-21-2823978948-3749596146-751058867-1000 -> No Name - {91397D20-1446-11D4-8AF4-0040CA1127B6} -  No File
Toolbar: HKU\S-1-5-21-2823978948-3749596146-751058867-1000 -> No Name - {09900DE8-1DCA-443F-9243-26FF581438AF} -  No File
FF SelectedSearchEngine: RuSearcher
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npdm.dll [2010-10-01] (WestByte)
R0 29297653; C:\Windows\System32\DRIVERS\29297653.sys [135776 2014-08-15] (Kaspersky Lab ZAO)
R0 92150635; C:\Windows\System32\DRIVERS\92150635.sys [133208 2011-07-17] (Kaspersky Lab ZAO)
S3 utc1ode0; C:\Windows\system32\Drivers\utc1ode0.sys [7168 2015-10-01] () [File not signed]
R1 uzc1ode0; C:\Windows\system32\Drivers\uzc1ode0.sys [11264 2011-11-14] () [File not signed]
Task: {009627DE-E5E2-414F-AA5A-68764B6385EE} - \{D932A1A9-8277-467D-BBE5-F7F24AB64E72} -> No File <==== ATTENTION
Task: {035C0CB3-33C0-4F70-8A1C-2D3FB6E15905} - \{53A0681B-DB1B-4520-8F7C-E21466D35809} -> No File <==== ATTENTION
Task: {0D3DB64E-84F2-4400-A0B1-B70A442920FD} - \{9BD81E68-35CB-4649-94D5-ECA99596AEAC} -> No File <==== ATTENTION
Task: {2362105A-32DF-4285-A191-3E07B447048C} - \{FDDC1410-8C95-4B94-9C33-131830B07F8A} -> No File <==== ATTENTION
Task: {454768C3-36E0-4910-8F9A-16D725E78116} - \{1D715D39-DCF5-45FC-8C10-0EA48511B4D7} -> No File <==== ATTENTION
Task: {46CDF1AB-5347-4E9F-BAFC-94F3FB5918A3} - \{00E4F301-9393-4C98-9947-7AF0DCE43C9C} -> No File <==== ATTENTION
Task: {5EEF95C2-EEDB-45ED-A26B-3367261E6DC5} - \{F9E61B34-0E4D-4247-AB7C-A6C510530757} -> No File <==== ATTENTION
Task: {68FF1CEF-01DB-4376-9287-75261419F82A} - \Ad-Aware Update (Weekly) -> No File <==== ATTENTION
Task: {8209191D-D2AC-4D13-B087-1C5E4D5F782D} - \{27BA4FB2-DA4F-435B-8FDB-13A8B0DF94BB} -> No File <==== ATTENTION
Task: {848CBDA3-852A-47C9-B2A2-804708121FE1} - \{D5A7B2FF-7DB6-42DA-BA58-F7C442203442} -> No File <==== ATTENTION
Task: {8EE7176F-C6E3-44C8-87C0-F366DDA0E8D3} - \{2062AED4-9B92-4D44-8781-E58107AA20C8} -> No File <==== ATTENTION
Task: {926A0F28-E362-4592-B095-B20BAE9D14E0} - \{388DE65C-F062-4554-84C1-978041A7F12A} -> No File <==== ATTENTION
Task: {E1C8837D-50A1-44DA-A561-952801609A72} - \{2AFBEB24-AAB8-45B1-8993-C3D5939C870D} -> No File <==== ATTENTION
Task: {E96D1137-06A0-44DF-9577-DFCF6E627E04} - \{6658BD8C-FFBE-415F-93F7-6D4A3AF2C57E} -> No File <==== ATTENTION
AlternateDataStreams: C:\ProgramData\TEMP:41ADDB8A
AlternateDataStreams: C:\ProgramData\TEMP:A064CECC
AlternateDataStreams: C:\ProgramData\TEMP:C31F31E6
AlternateDataStreams: C:\Users\Все пользователи\TEMP:41ADDB8A
AlternateDataStreams: C:\Users\Все пользователи\TEMP:A064CECC
AlternateDataStreams: C:\Users\Все пользователи\TEMP:C31F31E6
EmptyTemp:
Reboot: