;uVS v3.87 [http://dsrt.dyndns.org]
;Target OS: NTv6.1
v385c
OFFSGNSAVE
;------------------------autoscript---------------------------

chklst
delvir

delall %SystemDrive%\PROGRAM FILES (X86)\B116E980-1453062006-81E0-20C0-F46D040BED6F\KNSC4794.TMP

delref %SystemDrive%\PROGRAM FILES (X86)\MAIL.RU\MAILRUUPDATER\MAILRUUPDATER.EXE
del %SystemDrive%\PROGRAM FILES (X86)\MAIL.RU\MAILRUUPDATER\MAILRUUPDATER.EXE

delall %SystemDrive%\USERS\ДИАНКА\APPDATA\LOCAL\TEMP\NSH7597.TMP

delall %SystemDrive%\USERS\ДИАНКА\APPDATA\LOCAL\TEMP\NSMA320.TMP

delref %SystemDrive%\PROGRAM FILES (X86)\RCP\REGCLEANPRO.EXE
del %SystemDrive%\PROGRAM FILES (X86)\RCP\REGCLEANPRO.EXE

delref HTTP://GUANJIA.QQ.COM/COMM-HTDOCS/QUICKACCESS/
delref %SystemDrive%\USERS\ДИАНКА\APPDATA\LOCAL\MAIL.RU\SPUTNIK\IESEARCHPLUGIN.DLL
del %SystemDrive%\USERS\ДИАНКА\APPDATA\LOCAL\MAIL.RU\SPUTNIK\IESEARCHPLUGIN.DLL

delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DBHBLDCGBJBLIPEGBECLMCNNDDNOPNHJM%26INSTALLSOURCE%3DONDEMAND%26UC

delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DDLJDACFOJGIKOGLDJFFNKDCIELNKLKCE%26INSTALLSOURCE%3DONDEMAND%26UC

deldirex %SystemDrive%\PROGRAM FILES (X86)\GMSD_RE_005010212

delref HTTP://GO.MAIL.RU/DISTIB/EP/?PRODUCT_ID=%7B68CD5F10-4CBC-4F27-88F9-96EB4C0882B9%7D&GP=789119
deldirex %SystemDrive%\PROGRAM FILES (X86)\COMMON FILES\TENCENT\QQDOWNLOAD\130

delref HTTP://MAIL.RU/CNT/10445?GP=820473
delall %SystemDrive%\USERS\ДИАНКА\APPDATA\LOCAL\TEMP\PPTASSIST\~15EFC9D\AU_.EXE

delall %SystemDrive%\USERS\ДИАНКА\APPDATA\LOCAL\TEMP\PPTASSIST\~15F326C\AU_.EXE

delall %SystemDrive%\USERS\ДИАНКА\APPDATA\LOCAL\TEMP\MAILRUUPDATER.EXE

delref %SystemDrive%\USERS\ДИАНКА\APPDATA\LOCAL\MAIL.RU\MAILRUUPDATER.EXE
del %SystemDrive%\USERS\ДИАНКА\APPDATA\LOCAL\MAIL.RU\MAILRUUPDATER.EXE

deldirex %SystemDrive%\USERS\ДИАНКА\APPDATA\ROAMING\ASPACKAGE

deldirex %SystemDrive%\USERS\ДИАНКА\APPDATA\ROAMING\MICROSOFT\WINDOWS\START MENU\PROGRAMS\ASPACKAGE

delref HTTP:\\WWW.MAIL.RU\CNT\8136
delref %SystemDrive%\PROGRAM FILES (X86)\RCP\UNINS000.EXE
del %SystemDrive%\PROGRAM FILES (X86)\RCP\UNINS000.EXE

regt 28
regt 29
; GamesDesktop 092.005010211
exec  C:\Program Files (x86)\gmsd_re_005010211\gmsd_re_005010211 - uninstall.exe
; GamesDesktop 092.005010212
exec  C:\Program Files (x86)\gmsd_re_005010212\gmsd_re_005010212 - uninstall.exe
;-------------------------------------------------------------

exec32 "C:\Program Files (x86)\RCP\unins000.exe" /silent
delref CHROME://QUICK_START/CONTENT/INDEX.HTML
delall %SystemDrive%\USERS\À”À¨À°À½ÀªÀ°\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\PS5DV1Z4.DEFAULT\SEARCHPLUGINS\MYSITES123.XML
delall %SystemDrive%\USERS\ДИАНКА\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\PS5DV1Z4.DEFAULT\EXTENSIONS\DESKCUTV2@GMAIL.COM\INSTALL.RDF
delall %SystemDrive%\USERS\À”À¨À°À½ÀªÀ°\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\PS5DV1Z4.DEFAULT\SEARCHPLUGINS\MAILRU.XML
delref HTTPS://CHROME.GOOGLE.COM/WEBSTORE/DETAIL/EAHEBAMIOPDHEFNDNMAPPCIHFAJIGKKA
delall %SystemDrive%\USERS\ДИАНКА\APPDATA\ROAMING\MICROSOFT\WINDOWS\START MENU\PROGRAMS\ASPACKAGE\CONFIGURE.LNK
delall %SystemDrive%\USERS\ДИАНКА\APPDATA\LOCAL\HOSTINSTALLER\976794950_MONSTER.EXE
delall %SystemDrive%\USERS\ДИАНКА\APPDATA\ROAMING\ASPACKAGE\ASPACKAGE.EXE
deltmp
delnfr
sreg

delref %Sys32%\DRIVERS\TFSFLTX64.SYS
delref %Sys32%\DRIVERS\TSSKX64.SYS
areg

  

Task: {279FA12B-7EB4-494A-9478-C89ABB99AB79} - \Microsoft\Windows\Media Center\ObjectStoreRecoveryTask -> No File <==== ATTENTION
Task: {4B4DF829-D080-4C90-A56D-60FEF8524751} - \Microsoft\Windows\Media Center\MediaCenterRecoveryTask -> No File <==== ATTENTION
Task: {4BCC3F61-999C-4AD7-8404-2AB9A82E3EFB} - \{9E7C8496-EA97-47DD-82BB-67ACBE0879DC} -> No File <==== ATTENTION
Task: {8EEB105E-1D37-476C-93B4-1A9D43CB43E0} - \Microsoft\Windows\Media Center\PvrScheduleTask -> No File <==== ATTENTION
Task: {A0D17480-35B3-45B3-9334-52EC3D173F2F} - \Microsoft\Windows\Media Center\SqlLiteRecoveryTask -> No File <==== ATTENTION
Task: {F515E22E-B818-4F1D-A387-E143EA7929B9} - \{319CB40F-2E7D-47D1-B925-FE8E85AFD0E1} -> No File <==== ATTENTION
SearchScopes: HKU\S-1-5-21-2879223949-3039753429-152904433-1000 -> DefaultScope {FFEBBF0A-C22C-4172-89FF-45215A135AC7} URL = hxxp://go.mail.ru/distib/ep/?q={SearchTerms}&product_id=%7BC160776E-F11A-4616-906D-73DF2FED4380%7D&gp=820483
SearchScopes: HKU\S-1-5-21-2879223949-3039753429-152904433-1000 -> {FFEBBF0A-C22C-4172-89FF-45215A135AC7} URL = hxxp://go.mail.ru/distib/ep/?q={SearchTerms}&product_id=%7BC160776E-F11A-4616-906D-73DF2FED4380%7D&gp=820483
FF DefaultSearchEngine: @Mail.Ru
FF Homepage: hxxps://mail.ru/cnt/11956636?fr=ffhp&gp=789119
FF Extension: No Name - C:\Users\Дианка\AppData\Roaming\Mozilla\Firefox\Profiles\ps5dv1z4.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7} [not found]
FF Extension: Домашняя страница Mail.Ru - C:\Users\Дианка\AppData\Roaming\Mozilla\Firefox\Profiles\ps5dv1z4.default\Extensions\homepage@mail.ru [2016-01-18]
FF Extension: Поиск@Mail.Ru - C:\Users\Дианка\AppData\Roaming\Mozilla\Firefox\Profiles\ps5dv1z4.default\Extensions\search@mail.ru [2016-01-17]
CHR HKLM\...\Chrome\Extension: [eahebamiopdhefndnmappcihfajigkka] - hxxps://chrome.google.com/webstore/detail/eahebamiopdhefndnmappcihfajigkka
CHR HKLM-x32\...\Chrome\Extension: [eahebamiopdhefndnmappcihfajigkka] - hxxps://chrome.google.com/webstore/detail/eahebamiopdhefndnmappcihfajigkka
OPR Extension: (SuperMegaBest - find best prices) - C:\Users\Дианка\AppData\Roaming\Opera Software\Opera Stable\Extensions\cbbpicnbcjaeeenbmilcnaojfgnmlhhb [2016-01-18]
EmptyTemp:
Reboot: