;uVS v3.86.7 [http://dsrt.dyndns.org]
;Target OS: NTv6.1
v385c
;------------------------autoscript---------------------------

chklst
delvir

deldirex %SystemDrive%\PROGRAM FILES (X86)\IOBIT\SURFING PROTECTION\BROWERPROTECT

delref HTTP://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DCNCGOHEPIHCEKKLOKHBHIBLHFCMIPBDH%26INSTALLSOURCE%3DONDEMAND%26UC
delref HTTP://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DGEHNGEIFMELPHPLLNCOBKMIMPHFKCKNE%26INSTALLSOURCE%3DONDEMAND%26UC
delref HTTP://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DMDELDJOLAMFBCGNNDJMJJIINNHBNBNLA%26INSTALLSOURCE%3DONDEMAND%26UC
delref HTTP://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DPCHFCKKCCLDKBCLGDEPKAONAMKIGNANH%26INSTALLSOURCE%3DONDEMAND%26UC
delref HTTP://OVGORSKIY.RU
delall %SystemDrive%\USERS\CARAME~1\APPDATA\LOCAL\TEMP\CPUZ137\CPUZ137_X64.SYS

delall %SystemDrive%\USERS\CARAMELWOLFY\APPDATA\LOCAL\TEMP\CPUZ138\CPUZ138_X64.SYS

delref HTTP://WWW.YANDEX.RU/?WIN=170&CLID=1985535-207
delref HTTP://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DDHDGFFKKEBHMKFJOJEJMPBLDMPOBFKFO%26INSTALLSOURCE%3DONDEMAND%26UC
deldirex %SystemDrive%\PROGRAM FILES (X86)\IOBIT\SURFING PROTECTION

delref %SystemDrive%\USERS\CARAMELWOLFY\DOWNLOADS\MEDIAGET.EXE
del %SystemDrive%\USERS\CARAMELWOLFY\DOWNLOADS\MEDIAGET.EXE

delref HTTP://WWW.MAIL.RU/MRA?LANG=RU
delref HTTP://IGROED.RU/ID-40430
delref HTTP://WWW.EMUSIC.COM/?FREF=150681
delref HTTP://JAVA.COM/HELP
regt 28
regt 29
;-------------------------------------------------------------

delref %SystemDrive%\USERS\CARAMELWOLFY\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\FBGBIOELJFPHJCBJANEBLOAKGCBCNFLE\2015.8.1.21518_0\JOYREACTOR - СМЕШНЫЕ КАРТИНКИ И ДРУГИ...
delref %SystemDrive%\USERS\CARAMELWOLFY\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\KIGFDICGJNPJKHBNNGDFGJFFFMDAONFG\2_0\HATSUNE MIKU
delref HTTPS://WRAP.NEVOSOFT.RU/REDIRECT.PHP?ACT=MAIN_PRG
exec32 "C:\Program Files (x86)\IObit\Surfing Protection\unins000.exe"
exec "C:\Program Files\McAfee Security Scan\uninstall.exe"
exec32 "D:\IObit Uninstaller\unins000.exe"
deltmp
delnfr
regt 30
restart

CreateRestorePoint:
SearchScopes: HKU\S-1-5-21-1939801925-4067969808-1555935854-1000 -> {FFEBBF0A-C22C-4172-89FF-45215A135AC7} URL = hxxp://go.mail.ru/search?q={searchTerms}&utf8in=1&fr=ietb
CHR Extension: (Browsec) - C:\Users\CaramelWolfy\AppData\Local\Google\Chrome\User Data\Default\Extensions\omghfjlpggmjjaagoclmmobgdodcjboh [2015-10-21]
CHR HKLM\...\Chrome\Extension: [blbkdnmdcafmfhinpmnlhhddbepgkeaa] - hxxps://chrome.google.com/webstore/detail/blbkdnmdcafmfhinpmnlhhddbepgkeaa
Task: {3B1F67C9-6E72-4070-BADF-9520106512D6} - \Uninstaller_SkipUac_Administrator -> No File <==== ATTENTION
Task: {406C8391-A159-4C98-9D30-131A4A23B425} - \{4A6F3569-7338-44A8-86A3-AC25E76D9932} -> No File <==== ATTENTION
Task: {4D6C955A-7DD8-4002-BF69-943D630DEA10} - \Opera scheduled Autoupdate 1429375704 -> No File <==== ATTENTION
Task: {78450037-FEF1-4E5A-B588-8BB75AE1AFC5} - \{A2B64830-9031-4B9A-B21E-70AF160F7A1D} -> No File <==== ATTENTION
Task: {C5852996-D36C-4AB3-B2E6-7EFF3D0B98E5} - \SpyHunter4Startup -> No File <==== ATTENTION
Reg: reg delete "HKU\S-1-5-21-1939801925-4067969808-1555935854-1000\Software\Microsoft\Windows\CurrentVersion\Uninstall\MRA" /f
EmptyTemp:
Reboot: