;uVS v3.87 [http://dsrt.dyndns.org]
;Target OS: NTv10.0
v385c
OFFSGNSAVE
;------------------------autoscript---------------------------

chklst
delvir

delref HTTP://GANGNAMGAME.ORG/
delall %SystemDrive%\USERS\SERGEY\APPDATA\LOCAL\TEMP\_MEI67842\_SOCKET.PYD

delall %SystemDrive%\USERS\SERGEY\APPDATA\LOCAL\TEMP\_MEI67842\WXBASE30U_NET_VC90.DLL

delall %SystemDrive%\USERS\SERGEY\APPDATA\LOCAL\TEMP\_MEI67842\_HASHLIB.PYD

delall %SystemDrive%\USERS\SERGEY\APPDATA\LOCAL\TEMP\_MEI67842\HASHOBJS_EXT.PYD

delall %SystemDrive%\USERS\SERGEY\APPDATA\LOCAL\TEMP\_MEI67842\THUMBNAILS_EXT.PYD

delall %SystemDrive%\USERS\SERGEY\APPDATA\LOCAL\TEMP\_MEI67842\USB_EXT.PYD

delall %SystemDrive%\USERS\SERGEY\APPDATA\LOCAL\TEMP\_MEI67842\PYEXPAT.PYD

delall %SystemDrive%\USERS\SERGEY\APPDATA\LOCAL\TEMP\_MEI67842\_SSL.PYD

delall %SystemDrive%\USERS\SERGEY\APPDATA\LOCAL\TEMP\_MEI67842\WX._CORE_.PYD

delall %SystemDrive%\USERS\SERGEY\APPDATA\LOCAL\TEMP\_MEI67842\WXBASE30U_VC90.DLL

delall %SystemDrive%\USERS\SERGEY\APPDATA\LOCAL\TEMP\_MEI67842\WXMSW30U_ADV_VC90.DLL

delall %SystemDrive%\USERS\SERGEY\APPDATA\LOCAL\TEMP\_MEI67842\WXMSW30U_CORE_VC90.DLL

delall %SystemDrive%\USERS\SERGEY\APPDATA\LOCAL\TEMP\_MEI67842\WX._GDI_.PYD

delall %SystemDrive%\USERS\SERGEY\APPDATA\LOCAL\TEMP\_MEI67842\WX._WINDOWS_.PYD

delall %SystemDrive%\USERS\SERGEY\APPDATA\LOCAL\TEMP\_MEI67842\WXMSW30U_HTML_VC90.DLL

delall %SystemDrive%\USERS\SERGEY\APPDATA\LOCAL\TEMP\_MEI67842\WX._CONTROLS_.PYD

delall %SystemDrive%\USERS\SERGEY\APPDATA\LOCAL\TEMP\_MEI67842\WX._MISC_.PYD

delall %SystemDrive%\USERS\SERGEY\APPDATA\LOCAL\TEMP\_MEI67842\PYSQLITE2._SQLITE.PYD

delall %SystemDrive%\USERS\SERGEY\APPDATA\LOCAL\TEMP\_MEI67842\COMMON.TIME34.PYD

delall %SystemDrive%\USERS\SERGEY\APPDATA\LOCAL\TEMP\_MEI67842\_PSUTIL_WINDOWS.PYD

delall %SystemDrive%\USERS\SERGEY\APPDATA\LOCAL\TEMP\_MEI67842\WX._HTML2.PYD

delall %SystemDrive%\USERS\SERGEY\APPDATA\LOCAL\TEMP\_MEI67842\WXMSW30U_WEBVIEW_VC90.DLL

delall %SystemDrive%\USERS\SERGEY\APPDATA\LOCAL\TEMP\_MEI67842\_MULTIPROCESSING.PYD

delall %SystemDrive%\USERS\SERGEY\APPDATA\LOCAL\TEMP\_MEI67842\_YAPPI.PYD

delall %SystemDrive%\USERS\SERGEY\APPDATA\LOCAL\TEMP\_MEI67842\UNICODEDATA.PYD

delall %SystemDrive%\USERS\SERGEY\APPDATA\LOCAL\TEMP\_MEI67842\WX._WIZARD.PYD

delall %SystemDrive%\USERS\SERGEY\APPDATA\LOCAL\TEMP\_MEI67842\SELECT.PYD

delall %SystemDrive%\USERS\SERGEY\APPDATA\LOCAL\TEMP\_MEI67842\WX._ANIMATE.PYD

delall %SystemDrive%\USERS\SERGEY\APPDATA\LOCAL\TEMP\_MEI67842\_ELEMENTTREE.PYD

delall %SystemDrive%\USERS\SERGEY\APPDATA\LOCAL\TEMP\_MEI67842\_CTYPES.PYD

delall %SystemDrive%\USERS\SERGEY\APPDATA\LOCAL\TEMP\_MEI67842\PYTHON27.DLL

delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DLMJEGMLICAMNIMMFHCMPKCLMIGMMCBEH%26INSTALLSOURCE%3DONDEMAND%26UC

del D:\GAMES\MAD MAX\LAUNCHER.BAT

regt 28
regt 29

;-------------------------------------------------------------

delall %SystemDrive%\USERS\SERGEY\APPDATA\LOCAL\GOOGLE\DRIVE\USER_DEFAULT\APDFLLCKAAHABAFNDBHIEAHIGKJLHALF_LIVE.CRX
deltmp
delnfr
restart

GroupPolicyScripts: Restriction <======= ATTENTION
CHR HKU\S-1-5-21-2484610347-871978369-2547945679-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\Sergey\AppData\Local\Google\Drive\user_default\apdfllckaahabafndbhieahigkjlhalf_live.crx [2016-02-02]
CHR HKU\S-1-5-21-2484610347-871978369-2547945679-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx
OPR Extension: (TinEye Reverse Image Search (Context menu)) - C:\Users\Sergey\AppData\Roaming\Opera Software\Opera Stable\Extensions\kgdmjihcfdjkcgodohgofgcdfiaekdkk [2015-12-09]
OPR Extension: (friGate CDN - доступ к сайтам) - C:\Users\Sergey\AppData\Roaming\Opera Software\Opera Stable\Extensions\lalpacfpfnobgdkbbpggecolckiffhoi [2015-12-13]
EmptyTemp:
Reboot: