CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
CHR dev: Chrome dev build detected! <======= ATTENTION
BHO: UniDeaLsa -> {055f6683-fb13-4007-a21e-c2fbcfb2bfdc} ->  No File
BHO: UniDeals -> {418eb00e-64d1-432c-8811-5c57257b495d} ->  No File
BHO: UniDealssa -> {48be9c81-a658-4824-9fd2-955c2e610247} ->  No File
BHO: UniDealisii -> {6302a321-13f5-4a0f-9daf-6880b55ef160} ->  No File
BHO: youtubeadblocker -> {9c24a415-c3ec-4596-ab7a-438b1fe5e5e6} ->  No File
CHR StartupUrls: Default -> "hxxp://4pda.ru/", "hxxp://www.mystartsearch.com/?type=hp&ts=1425195274&from=wpc&uid=ST500LT012-1DG142_S3P3XFLZXXXXS3P3XFLZ"
CHR Extension: (YouTube) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-01-26]
CHR Extension: (Pushbullet) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\chlffgpmiacpedhhbkiomidkjlcfhogd [2015-01-26]
CHR Extension: (Tampermonkey) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2015-01-26]
CHR Extension: (YaVoice) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifcpbicednmacedefboponipkjlafeih [2015-01-26]
CHR Extension: (Ed2kHelper) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\kmeeplonmihpchdbfccgmjhcnpecbppk [2015-03-01]
Reboot:

;uVS v3.85.7 [http://dsrt.dyndns.org]
;Target OS: NTv6.3
v385c
delall %SystemDrive%\PROGRAMDATA\{28BADB19-067C-4DAE-28BA-ADB190676C64}\ROOT_GPAD.ZIP.EXE
delall %SystemDrive%\USERS\USER\APPDATA\LOCAL\TEMP\7D50\TEMP\ROOT_GPAD.ZIP.EXE
delref HTTP://WEBSEARCH.SWELLSEARCH.INFO/?PID=20495&R=2015/03/01&HID=14063232913953438624&LG=EN&CC=RU&UNQVL=84
delref HTTP://WWW.MYSTARTSEARCH.COM/?TYPE=HP&TS=1425195274&FROM=WPC&UID=ST500LT012-1DG142_S3P3XFLZXXXXS3P3XFLZ
delref HTTP://WWW.MYSTARTSEARCH.COM/WEB/?TYPE=DS&TS=1425195274&FROM=WPC&UID=ST500LT012-1DG142_S3P3XFLZXXXXS3P3XFLZ&Q={SEARCHTERMS}
delall %SystemDrive%\USERS\USER\APPDATA\ROAMING\MICROSOFT\WINDOWS\START MENU\PROGRAMS\STARTUP\ROOT_GPAD.ZIP.LNK
zoo C:\PROGRA~2\coolsoft\coolsoft.dll
zoo C:\Program Files (x86)\youtubeadblocker\jmYv4UAdpfPlCY.exe
exec "%LOCALAPPDATA%\Pokki\Uninstall.exe"
exec32 "C:\WINDOWS\system32\RUNDLL32.EXE" "C:\PROGRA~2\coolsoft\coolsoft.dll",_uninstall /un
exec32 "C:\Program Files (x86)\youtubeadblocker\jmYv4UAdpfPlCY.exe" /s /n /i:"ExecuteCommands;UninstallCommands" ""
deltmp
delnfr
restart