Скрытый майнер

[Станислав Пушкаревский 0]

Сделал

AdwCleanerC0.txt

[regist 617]

• Пожалуйста, запустите adwcleaner.exe
• Нажмите File (Файл) Uninstall (Деинсталлировать).
• Подтвердите удаление нажав кнопку: Да.

 

затем свежий лог uVS если проблема ещё актуальна.

[Станислав Пушкаревский 0]

Теперь вместо 20%, в простое показывает 12% загрузки ОЗУ, и не меняется, меньше 12 не опускается, хотя по диспетчеру задач, там явно меньше 1 гб. оперативной памяти используется

DEF-ПК_2018-02-28_20-33-13.7z

[regist 617]

C:\APNHC1UXCV.EXE

это вам знакомо?

 

1. Закройте все программы, временно выгрузите антивирус, файрволл и прочее защитное ПО.
   
2. Откройте папку с распакованной утилитой uVS и запустите файл start.exe. В открывшимся окне выберите пункт "Запустить под текущим пользователем".
   
3. Выделите и правой кнопкой мыши скопируйте следующий скрипт в буфер обмена:
    

   ;uVS v4.0.10 [http://dsrt.dyndns.org]
   ;Target OS: NTv6.1
   v400c
   BREG
   zoo %SystemDrive%\APNHC1UXCV.EXE
   ;---------command-block---------
   delref %SystemDrive%\GAMES\ARTMONEY\ARTMONEY_RUS800.URL
   delref %SystemDrive%\GAMES\ARTMONEY\REGISTER_RUS.URL
   delref %SystemDrive%\PROGRAMDATA\APPDATA\ROAMING\FAR CRY 4\UNINSTALL\UNINS000.EXE
   delref %SystemDrive%\PROGRAMDATA\APPDATA\ROAMING\NEED FOR SPEED - CARBON\UNINSTALL\UNINS000.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\COOP-LAND\FORTS\SITE.URL
   delref %SystemDrive%\PROGRAM FILES (X86)\COOP-LAND\FORTS\ПОСЕТИТЬ COOP-LAND.RU.URL
   delref %SystemDrive%\PROGRAM FILES (X86)\COOP-LAND\FROM THE DEPTHS\SITE.URL
   delref %SystemDrive%\PROGRAM FILES (X86)\COOP-LAND\FROM THE DEPTHS\ПОСЕТИТЬ COOP-LAND.RU.URL
   delref %SystemDrive%\PROGRAM FILES (X86)\COOP-LAND\PROJECT ZOMBOID\SITE.URL
   delref %SystemDrive%\PROGRAM FILES (X86)\COOP-LAND\PROJECT ZOMBOID\ПОСЕТИТЬ COOP-LAND.RU.URL
   delref %SystemDrive%\PROGRAM FILES (X86)\COOP-LAND\TRICKY TOWERS\SITE.URL
   delref %SystemDrive%\PROGRAM FILES (X86)\COOP-LAND\TRICKY TOWERS\ПОСЕТИТЬ COOP-LAND.RU.URL
   delref D:\S.T.A.L.K.E.R. - ТЕНЬ ЧЕРНОБЫЛЯ\DOCS\GAMESITE.URL
   delref D:\S.T.A.L.K.E.R. - ТЕНЬ ЧЕРНОБЫЛЯ\DOCS\PUBLISHER.URL
   delref D:\S.T.A.L.K.E.R. - ТЕНЬ ЧЕРНОБЫЛЯ\DOCS\REGISTER.URL
   delref %SystemDrive%\PROGRAMDATA\APPDATA\ROAMING\BUS SIMULATOR 16_UNINSTALL\UNINS000.EXE
   delref %SystemDrive%\PROGRAMDATA\APPDATA\ROAMING\COSSACKS 3_UNINSTALL\UNINS000.EXE
   delref %SystemDrive%\PROGRAMDATA\APPDATA\ROAMING\L.A.NOIRE\UNINSTALL\UNINS000.EXE
   delref %SystemDrive%\PROGRAMDATA\APPDATA\ROAMING\METRO LAST LIGHT\UNINSTALL\UNINS000.EXE
   delref %SystemDrive%\PROGRAMDATA\APPDATA\ROAMING\PLAYKEY\UNINS000.EXE
   delref %SystemDrive%\PROGRAM FILES\AUTOHOTKEY\AUTOHOTKEY WEBSITE.URL
   delref %SystemDrive%\PROGRAM FILES (X86)\COMMFORT\COMMFORT.URL
   delref %SystemDrive%\PROGRAM FILES (X86)\EASY MACRO RECORDER\HOMEPAGE.URL
   delref %SystemDrive%\PROGRAM FILES (X86)\PDF PASSWORD REMOVER V5.0\WINDECRYPT.URL
   delref %SystemDrive%\GAMES\ARTMONEY\AM745.EXE
   delref %SystemDrive%\GAMES\ARTMONEY\AM800.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\COOP-LAND\FORTS\FORTS.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\COOP-LAND\FORTS\UNINS000.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\COOP-LAND\FROM THE DEPTHS\FROM_THE_DEPTHS.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\COOP-LAND\PROJECT ZOMBOID\PROJECTZOMBOID32.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\COOP-LAND\PROJECT ZOMBOID\PROJECTZOMBOID64.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\COOP-LAND\FROM THE DEPTHS\UNINS000.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\COOP-LAND\PROJECT ZOMBOID\UNINS000.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\COOP-LAND\TRICKY TOWERS\TRICKYTOWERS.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\COOP-LAND\TRICKY TOWERS\UNINS000.EXE
   delref %SystemDrive%\GAMES\BUS SIMULATOR 16\LAUNCHER.EXE
   delref %SystemDrive%\GOG GAMES\FACTORIO\UNINS000.EXE
   delref %SystemDrive%\GOG GAMES\FACTORIO\LAUNCH FACTORIO.EXE
   delref %SystemDrive%\GOG GAMES\PRISON ARCHITECT\PRISON ARCHITECT.EXE
   delref %SystemDrive%\GOG GAMES\PRISON ARCHITECT\UNINS000.EXE
   delref %SystemDrive%\GOG GAMES\TERRARIA\TERRARIA.EXE
   delref %SystemDrive%\GOG GAMES\TERRARIA\TERRARIASERVER.EXE
   delref %SystemDrive%\GOG GAMES\TERRARIA\UNINS000.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\AOMEI PARTITION ASSISTANT STANDARD EDITION 6.5\PARTASSIST.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\AOMEI PARTITION ASSISTANT STANDARD EDITION 6.5\UNINS000.EXE
   delref %SystemDrive%\FRAPS\FRAPS.EXE
   delref %SystemDrive%\FRAPS\UNINSTALL.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\AUTOIT3\AU3INFO.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\AUTOIT3\AU3INFO_X64.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\AUTOIT3\AUTOIT3.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\AUTOIT3\AUTOIT3_X64.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\AUTOIT3\AUT2EXE\AUT2EXE.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\AUTOIT3\AUT2EXE\AUT2EXE_X64.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\AUTOIT3\SCITE\SCITE.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\GSAUTOCLICKER3\GSAUTOCLICKER.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\GSAUTOCLICKER3\UNINS000.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\STEAM\STEAMAPPS\COMMON\GRAND THEFT AUTO V\WWW.GAMEMODDING.NET\UNINSTALL 158584-ASI-LOADER-GTAV.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\STEAM\STEAMAPPS\COMMON\GRAND THEFT AUTO V\WWW.GAMEMODDING.NET\UNINSTALL 160094-SCRIPT-HOOK-V-.NET-V1.0.944.2-GTAV.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\STEAM\STEAMAPPS\COMMON\GRAND THEFT AUTO V\WWW.GAMEMODDING.NET\UNINSTALL(ALBANY ALPHA)191866-MERCEDES-BENZ-CLA-45-AMG-SHOOTING-BRAKE-1.7-GTAV.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\STEAM\STEAMAPPS\COMMON\GRAND THEFT AUTO V\WWW.GAMEMODDING.NET\UNINSTALL(BENEFACTOR SCHAFTER (V12 ARMORED))191872-MERCEDES-BENZ-S63-W222-LWB-2.2-GTAV.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\STEAM\STEAMAPPS\COMMON\GRAND THEFT AUTO V\WWW.GAMEMODDING.NET\UNINSTALL(BRAVADO BANSHEE)191958-DODGE-VIPER-SRT-10-CABRIO-2.0-GTAV.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\STEAM\STEAMAPPS\COMMON\GRAND THEFT AUTO V\WWW.GAMEMODDING.NET\UNINSTALL(OBEY TAILGATER)184960-AUDI-A6-GTAV.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\STEAM\STEAMAPPS\COMMON\GRAND THEFT AUTO V\WWW.GAMEMODDING.NET\UNINSTALL(OBEY TAILGATER)191936-AUDI-S5-STOCK-FINAL-GTAV.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\STEAM\STEAMAPPS\COMMON\GRAND THEFT AUTO V\WWW.GAMEMODDING.NET\UNINSTALL(PEGASSI VACCA)191990-LAMBORGHINI-HURACAN-LP580-2-GTAV.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\STEAM\STEAMAPPS\COMMON\GRAND THEFT AUTO V\WWW.GAMEMODDING.NET\UNINSTALL(PROGEN T20)191770-2017-MCLAREN-570GT-2.0-GTAV.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\STEAM\STEAMAPPS\COMMON\GRAND THEFT AUTO V\WWW.GAMEMODDING.NET\UNINSTALL(VULCAR WARRENER)191873-MERCEDES-BENZ-S500-W222-2.2-GTAV.EXE
   delref %SystemDrive%\PROGRAM FILES\AUTOHOTKEY\AU3_SPY.EXE
   delref %SystemDrive%\PROGRAM FILES\AUTOHOTKEY\AUTOHOTKEY.EXE
   delref %SystemDrive%\PROGRAM FILES\AUTOHOTKEY\COMPILER\AHK2EXE.EXE
   delref G:\COUNTER STRIKE SOURCE\RUN_CSS.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\EA GAMES\NEED FOR SPEED UNDERGROUND 2\EAUNINSTALL.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\EA GAMES\NEED FOR SPEED UNDERGROUND 2\SPEED2.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\GOOGLEUPDATE.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.33.5\NPGOOGLEUPDATE3.DLL
   delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.33.5\PSMACHINE.DLL
   delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.33.5\PSMACHINE_64.DLL
   delref %SystemDrive%\PROGRAM FILES (X86)\GARENA PLUS\GARENAMESSENGER.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\GARENA\GARENA\2.0.1711.1719\GXXSVC.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\GARENA\GARENA\GARENA.EXE
   del %SystemDrive%\PROGRAMDATA\MICROSOFT\WINDOWS\START MENU\PROGRAMS\GARENA\GARENA+\GARENA+.LNK
   del %SystemDrive%\PROGRAMDATA\MICROSOFT\WINDOWS\START MENU\PROGRAMS\GARENA\GARENA+.LNK
   del %SystemDrive%\PROGRAMDATA\MICROSOFT\WINDOWS\START MENU\PROGRAMS\GARENA\GARENA\GARENA.LNK
   delref %SystemDrive%\PROGRAM FILES (X86)\GARENA\GARENA\2.0.1711.1719\UNINST.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\GARENA PLUS\BBTALK\PLUGINS\NPPLUGIN\NPGARENATALKPLUGIN.DLL
   delref %SystemDrive%\PROGRAM FILES (X86)\GARENA PLUS\ROOM\SAFEDRV.SYS
   delref %SystemDrive%\PROGRAM FILES (X86)\GTA SAN ANDREAS MULTIPLAYER\SAMP.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\GTA SAN ANDREAS MULTIPLAYER\WWW.GAMEMODDING.NET\UNINSTALL 106712-ASI-LOADER-GTASA.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\GTA SAN ANDREAS MULTIPLAYER\WWW.GAMEMODDING.NET\UNINSTALL 14576-ENBSERIES-V0.075-V3-GTASA.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\GTA SAN ANDREAS MULTIPLAYER\WWW.GAMEMODDING.NET\UNINSTALL 159365-ANTICRASHER-FOR-SAMP-0.3.7-GTASA.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\GTA SAN ANDREAS MULTIPLAYER\WWW.GAMEMODDING.NET\UNINSTALL 159878-SAMPFUNCS-5.2.1-FOR-SAMP-0.3.7-GTASA.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\GTA SAN ANDREAS MULTIPLAYER\WWW.GAMEMODDING.NET\UNINSTALL(BUFFALO)189064-MERCEDES-BENZ-W140-BRABUS-GTASA.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\GTA SAN ANDREAS MULTIPLAYER\WWW.GAMEMODDING.NET\UNINSTALL(CHEETAH)188317-FERRARI-458-ITALIA-F142-2010-GTASA.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\GTA SAN ANDREAS MULTIPLAYER\WWW.GAMEMODDING.NET\UNINSTALL(ELEGANT)168491-ROLLS-ROYCE-GHOST-GTASA.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\GTA SAN ANDREAS MULTIPLAYER\WWW.GAMEMODDING.NET\UNINSTALL(HUNTLEY)179212-HUNTLEY-HD-GTASA.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\GTA SAN ANDREAS MULTIPLAYER\WWW.GAMEMODDING.NET\UNINSTALL(PREMIER)13406-BMW-M5-E60-GTASA.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\GTA SAN ANDREAS MULTIPLAYER\WWW.GAMEMODDING.NET\UNINSTALL(SUNRISE)161933-RANGE-ROVER-VOGUE-LUMMA-STRATECH-GTASA.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\COMMON FILES\PORTRAIT DISPLAYS\DRIVERS\PDISRVC.EXE
   delref D:\GAMES\TRANSPORT FEVER\TRANSPORTFEVER.EXE
   delref D:\GAMES\TRANSPORT FEVER\UNINS000.EXE
   delref %SystemDrive%\PROGRA~2\COMMON~1\PORTRA~1\SHARED\PDIACT~1.OCX
   delref %SystemDrive%\PROGRAM FILES (X86)\PORTRAIT DISPLAYS\PIVOT PRO PLUGIN\WPCPL.DLL
   delref %SystemDrive%\PROGRAM FILES (X86)\COMMON FILES\PORTRAIT DISPLAYS\SHARED\SHELLMENU64.DLL
   delref %SystemDrive%\PROGRAM FILES (X86)\COMMON FILES\PORTRAIT DISPLAYS\SHARED\HTMLENGINE.DLL
   delref %SystemDrive%\PROGRAM FILES (X86)\COMMON FILES\PORTRAIT DISPLAYS\DRIVERS\SDKCOMSERVER.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\COMMON FILES\PORTRAIT DISPLAYS\SHARED\DTSRVC.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\COMMON FILES\PORTRAIT DISPLAYS\SHARED\PDISLIDER.OCX
   delref %SystemDrive%\PROGRAM FILES (X86)\COMMON FILES\PORTRAIT DISPLAYS\SHARED\PRESETSCOM.DLL
   delref %SystemDrive%\PROGRAM FILES (X86)\COMMON FILES\PORTRAIT DISPLAYS\SHARED\PRESETSCOM64.DLL
   delref %SystemDrive%\PROGRAM FILES (X86)\HIDE ALL IP\HIDEALLIP.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\HIDE ALL IP\UNINS000.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\HIDE.ME VPN\HIDE.ME.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\HIDEGUARD VPN\HGVPNC.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\HIDEGUARD VPN\UNINS000.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\MEGAFON\MEGAFON INTERNET\MEGAFONINTERNET.EXE
   delref %SystemDrive%\PROGRAM FILES\SONY\VEGAS PRO 12.0\VEGAS120.EXE
   delref %SystemDrive%\PROGRAMDATA\MTA SAN ANDREAS ALL\COMMON\TEMP\FAIRPLAYKD.SYS
   delref %SystemDrive%\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RUNTIME\10\50\INTEL32\CTOR.DLL
   delref %SystemDrive%\PROGRAM FILES (X86)\HMA! PRO VPN\BIN\HMA! PRO VPN.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\HMA! PRO VPN\UNINSTALL.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\DESKPINS\UNINST.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\DESKPINS\DESKPINS.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\DIRLOCK\DIRLOCK.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\EASY MACRO RECORDER\UNINS000.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\CHROME\APPLICATION\CHROME.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\CHROME\APPLICATION\61.0.3163.100\INSTALLER\CHRMSTP.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\HXD\HXD.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\INSTALLSHIELD INSTALLATION INFORMATION\{AB363F8A-FE88-4188-9D4F-B9014989A7E7}\SETUP.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\INSTALLSHIELD INSTALLATION INFORMATION\{D417C96A-FCC7-4590-A1BB-FAF73F5BC98E}\SETUP.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\JAVA\JRE1.8.0_121\BIN\PLUGIN2\NPJP2.DLL
   delref %SystemDrive%\PROGRAM FILES (X86)\LIBREOFFICE 5\PROGRAM\SCALC.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\LIBREOFFICE 5\PROGRAM\SDRAW.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\LIBREOFFICE 5\PROGRAM\SWRITER.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\LIBREOFFICE 5\PROGRAM\SBASE.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\LIBREOFFICE 5\PROGRAM\SIMPRESS.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\LIBREOFFICE 5\PROGRAM\SMATH.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\LIBREOFFICE 5\PROGRAM\SOFFICE.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\PDF PASSWORD REMOVER V5.0\WINDECRYPT.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\PDF PASSWORD REMOVER V5.0\PDFDECRYPT.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\PLAN\PLAN_OPENVPN.EXE
   delref %SystemDrive%\PROGRAM FILES (X86)\SPEECH2GO VOICE PACKAGE\\X64\VE_SAPI_X64.DLL
   apply
   
   czoo
   restart

4. В uVS выберите пункт меню "Скрипт" => "Выполнить скрипт находящийся в буфере обмена..."
   
5. Нажмите на кнопку "Выполнить" и дождитесь окончания работы программы. Прошу учесть, что компьютер может быть перезагружен.
   
6. После выполнения скрипта зайдите в папку, где распакована утилита uVS найдите архив, имя которого соответствует дате и времени запуска скрипта с префиксом ZOO_ (например: ZOO_2013-06-30_22-04-27.7z)
   
   Если архив отсутствует, то
   заархивруйте папку ZOO
   с паролем
   virus
   .

   
   

7. Полученный архив отправьте на почту , укажите  в письме ссылку на тему, в которой просили прислать файлы.

 

Сделайте свежий образ автозапуска.

 

[Станислав Пушкаревский 0]

C:\APNHC1UXCV.EXE

это вам знакомо?

Да, это только сегодня поставил

Это возможно не трогать?

DEF-ПК_2018-02-28_22-32-06.7z

[regist 617]

 

 

Да, это только сегодня поставил Это возможно не трогать?

Значит вы сами себе установили вирус. Хотите, что вирус не удаляли и вашу систему не лечили?

[Станислав Пушкаревский 0]

 

Значит вы сами себе установили вирус. Хотите, что вирус не удаляли и вашу систему не лечили?

 

Удалил это

[regist 617]

Выполните скрипт uVS

;uVS v4.0.10 [http://dsrt.dyndns.org]
;Target OS: NTv6.1
v400c
BREG
regt 37
;---------command-block---------
delref %SystemDrive%\GAMES\RAFT V1.05\V1.05_RAFT_WIN32.EXE
delref %SystemDrive%\PROGRAM FILES\SELKA\UNINS000.EXE
delref %SystemDrive%\PROGRAM FILES (X86)\ZTEMF626\БИЛАЙН ИНТЕРНЕТ ДОМА\UIMAIN.EXE
delref %SystemDrive%\PROGRAM FILES (X86)\THE ENIGMA PROTECTOR\UNINS000.EXE
delref %SystemDrive%\PROGRAM FILES\SE7EN\NO MANS SKY\UNINS000.EXE
delref D:\S.T.A.L.K.E.R. - ТЕНЬ ЧЕРНОБЫЛЯ\UNINS000.EXE
delref %SystemDrive%\PROGRAM FILES (X86)\PDF PASSWORD REMOVER V5.0\UNINS000.EXE
delref D:\DEMOLISH AND BUILD COMPANY 2017\UNINS000.EXE
delref %SystemDrive%\PROGRAM FILES (X86)\COMMFORT\UNINS000.EXE
delref D:\CITY CAR DRIVING\UNINS000.EXE
delref D:\ASSAULT SQUAD 2\UNINS000.EXE
delref %SystemDrive%\PROGRAM FILES (X86)\CONTRA 007\UNINSTALL.EXE
delref %SystemDrive%\PROGRAM FILES (X86)\ANVIDE LABS\ANVIDE LOCK FOLDER\UNINSTALL.EXE
delref %SystemDrive%\PROGRAM FILES (X86)\4X4 EVO2\UNWISE.EXE
delref %SystemDrive%\PROGRAM FILES (X86)\WIRESHARK\WIRESHARK.EXE
delref D:\INSTALL MEGAFON INTERNET.EXE
delref %SystemDrive%\PROGRAM FILES (X86)\CONTRA 007\INSTALL.EXE
delref %SystemDrive%\PROGRAM FILES (X86)\CONTRA 007\GENERALS ZEROHOUR\GENERALS.EXE
delref %SystemDrive%\PROGRAM FILES (X86)\ABYSSMEDIA\WAVE EDITOR\EDITOR.EXE
delref %SystemDrive%\PROGRAM FILES (X86)\THE ENIGMA PROTECTOR\ENIGMA32G.EXE
delref %SystemDrive%\PROGRAM FILES (X86)\BLUESTACKS\BLUESTACKS.EXE
delref {88D969C3-F192-11D4-A65F-0040963251E5}\[CLSID]
delref {AE424E85-F6DF-4910-A6A9-438797986431}\[CLSID]
delref {60813F68-E9F7-4B3C-80B4-A76A66211660}\[CLSID]
delref D:\S.T.A.L.K.E.R. - ТЕНЬ ЧЕРНОБЫЛЯ\BIN\XR_3DA.EXE
delref %SystemDrive%\PROGRAM FILES (X86)\ZENVPN OPENVPN BUNDLE\BIN\ZENVPN.EXE
delref %SystemDrive%\USERS\DEF\APPDATA\LOCAL\MAIL.RU\GAMECENTER\NPDETECTOR.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\ADOBE\ACROBAT READER DC\READER\AIR\NPPDF32.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\4GAME\3.6.1.217\NPPLUGIN4GAME.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\ANVIDE LABS\ANVIDE LOCK FOLDER\ALF.EXE
delref %SystemDrive%\PROGRAM FILES (X86)\BLUESTACKS\BSTKDRV.SYS
delref %SystemDrive%\PROGRAM FILES (X86)\ZTEMF626\БИЛАЙН ИНТЕРНЕТ ДОМА\BEELINE HOME INTERNET.EXE
delref %SystemDrive%\PROGRAM FILES\BEHOLDER\BEHOLDER.EXE
delref %SystemDrive%\PROGRAM FILES\SE7EN\NO MANS SKY\BINARIES\RUN_NMS.EXE
delref %SystemDrive%\PROGRAM FILES (X86)\SPEECH2GO VOICE PACKAGE\IVONAVOICESERVICE_X86.EXE
delref %SystemDrive%\PROGRAM FILES (X86)\SPEECH2GO VOICE PACKAGE\\X64\VE_TOOLS.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\SPEECH2GO VOICE PACKAGE\\X86\VE_SAPI_X86.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\SPEECH2GO VOICE PACKAGE\\X86\VE_TOOLS.DLL
delref %SystemDrive%\PROGRAM FILES\OPERA\LAUNCHER.EXE
delref %SystemDrive%\PROGRAM FILES\PLAN\PLAN_OPENVPN.EXE
delref %SystemDrive%\PROGRAM FILES\SELKA\SELKA.EXE
delref %SystemDrive%\USERS\DEF\APPDATA\LOCAL\SKYPEPLUGIN\7.32.6.278\NPGATEWAYNPAPI.DLL
delref {5A8FF410-F3CE-4844-B31B-F18D911239E8}\[CLSID]
delref {88D969C2-F192-11D4-A65F-0040963251E5}\[CLSID]
delref {88D969C5-F192-11D4-A65F-0040963251E5}\[CLSID]
delref {CBF9CD8C-2714-4F36-B76A-43E6C7547BC2}\[CLSID]
delref D:\DEMOLISH AND BUILD COMPANY 2017\DEMOLISH.EXE
delref %SystemDrive%\USERS\DEF\APPDATA\ROAMING\PLAYKEY\NPPLAYKEYPLUGINAPP_X86_64.DLL
delref %SystemDrive%\USERS\DEF\APPDATA\ROAMING\PLAYKEY\NPPLAYKEYPLUGINAPP_I386.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\MEGAFON\MEGAFON INTERNET\MEGAFONINTERNETSERVICE.EXE
delref %SystemDrive%\PROGRAM FILES (X86)\BENQ\DISPLAY PILOT\DTHTML.EXE
delref %SystemDrive%\PROGRAM FILES (X86)\4X4 EVO2\4X42.EXE
delref %SystemDrive%\PROGRAM FILES (X86)\COMMON FILES\ADOBE\ARM\1.0\ADOBEARM.EXE
delref %SystemDrive%\PROGRAM FILES (X86)\EASY MACRO RECORDER\MACRO RECORDER.EXE
delref %SystemDrive%\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\PLUGINS\NPFOXITREADERPLUGIN.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\COMMFORT\COMMFORT.EXE
delref %SystemDrive%\PROGRAM FILES (X86)\BLUESTACKS\HD-HYPERVISOR-AMD64.SYS
delref %SystemDrive%\PROGRAM FILES (X86)\TECHNITIUM\TMACV6.0\INSTALLER.EXE
delref %SystemDrive%\PROGRAM FILES (X86)\TECHNITIUM\TMACV6.0\TMAC.EXE
delref %SystemDrive%\USERS\DEF\APPDATA\LOCAL\SKYPEPLUGIN\7.32.6.278\NPGATEWAYNPAPI-X64.DLL
apply

restart

улучшения есть?