;uVS v3.86.9 [http://dsrt.dyndns.org]
;Target OS: NTv6.1
v385c
;------------------------autoscript---------------------------

chklst
delvir

deldirex %SystemDrive%\USERS\USER\APPDATA\LOCALLOW\UNITY\WEBPLAYER\LOADER

delref HTTP://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DGBJEIEKAHKLBGBFCCOHIPINHGAADIJAD%26INSTALLSOURCE%3DONDEMAND%26UC
delref HTTP://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DGEIDJEEFDDHGEFEPLHDLEGOLDLGIODON%26INSTALLSOURCE%3DONDEMAND%26UC
delref HTTP://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DJDFONANKHFNHIHDCPAAGPABBAOCLNJFP%26INSTALLSOURCE%3DONDEMAND%26UC
delref HTTP://GO.MAIL.RU/SEARCH?FR=NTG&Q=
delall %SystemDrive%\USERS\USER\APPDATA\LOCAL\TEMP\HYDA296.TMP.1448951180\HTA\3RDPARTY\OCCOMSDK.DLL

delref HTTP://MAIL.RU/CNT/10445?GP=789119
delref %SystemDrive%\$RECYCLE.BIN\S-1-5-21-215915743-2513295486-898761531-1000\$ISGTZTE.EXE
del %SystemDrive%\$RECYCLE.BIN\S-1-5-21-215915743-2513295486-898761531-1000\$ISGTZTE.EXE

delref %SystemDrive%\USERS\USER\APPDATA\LOCAL\MAIL.RU\SPUTNIK\IESEARCHPLUGIN.DLL
del %SystemDrive%\USERS\USER\APPDATA\LOCAL\MAIL.RU\SPUTNIK\IESEARCHPLUGIN.DLL

delref %SystemDrive%\USERS\USER\DOWNLOADS\SAVEFROMNETHELPER-WEB-4E797A2783-[308].EXE
del %SystemDrive%\USERS\USER\DOWNLOADS\SAVEFROMNETHELPER-WEB-4E797A2783-[308].EXE

;-------------------------------------------------------------

delref HTTPS://MAIL.RU/CNT/11956636?FR=FFHP&GP=800000
delall %SystemDrive%\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\EIJUDQHM.DEFAULT\EXTENSIONS\HELPER-SIG@SAVEFROM.NET.XPI
deltmp
delnfr
exec "C:\Program Files\McAfee Security Scan\uninstall.exe"
restart

  

Task: {344E0BA2-B3AE-4B3C-AAFE-6FA5E8AF098F} - \Microsoft\Windows\Media Center\SqlLiteRecoveryTask -> No File <==== ATTENTION
Task: {67A58FEA-2CA3-4574-AEBF-CA2578032D16} - \Microsoft\Windows\Media Center\ObjectStoreRecoveryTask -> No File <==== ATTENTION
Task: {9866A8AF-2E20-4D94-9177-C1CD427B9812} - \Microsoft\Windows\Media Center\MediaCenterRecoveryTask -> No File <==== ATTENTION
Task: {F639249D-9B9A-4EC1-95D0-629F31CAB043} - \Microsoft\Windows\Media Center\PvrScheduleTask -> No File <==== ATTENTION
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^McAfee Security Scan Plus.lnk => C:\Windows\pss\McAfee Security Scan Plus.lnk.CommonStartup
FF Extension: YouTube™ Flash® Player - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\eijudqhm.default\Extensions\jid1-HAV2inXAnQPIeA@jetpack.xpi [2016-01-04]
OPR StartupUrls: "hxxp:\/\/mail.ru\/cnt\/10445"
OPR Extension: (SaveFrom.net helper) - C:\Users\user\AppData\Roaming\Opera Software\Opera Stable\Extensions\npdpplbicnmpoigidfdjadamgfkilaak [2016-01-05]
EmptyTemp:
Reboot: