FF Extension: No Name - C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\vb@yandex.ru.xpi [not found]
CHR Extension: (Chrome Media Router) - C:\Users\hp\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-08-05]
EmptyTemp:
Reboot:

;uVS v3.87.4 [http://dsrt.dyndns.org]
;Target OS: NTv6.2
OFFSGNSAVE
;------------------------autoscript---------------------------

chklst
delvir

deldirex %SystemDrive%\PROGRAM FILES (X86)\ASKPARTNERNETWORK\TOOLBAR

deldirex %SystemDrive%\PROGRAMDATA\ASKPARTNERNETWORK\TOOLBAR\SHARED\CRX

delref HTTP://WWW.SWEET-PAGE.COM/WEB/?TYPE=DS&TS=1402095056&FROM=COR&UID=WDCXWD5000LPVT-60G33T0_WD-WX81A92N5902N5902&Q={SEARCHTERMS}
delref HTTP://WWW.SWEET-PAGE.COM/?TYPE=HP&TS=1402095056&FROM=COR&UID=WDCXWD5000LPVT-60G33T0_WD-WX81A92N5902N5902
delref HTTP://WWW.YANDEX.RU/?WIN=130&CLID=2052536
delref HTTP://WWW.YANDEX.RU/?WIN=114&CLID=1992445
delref %SystemDrive%\USERS\HP\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\AAAAADGEPJKDFFHJBKFJGNNFFNFCFFBG\111.14_0\SEARCH APP BY ASK
delref HTTP://WWW.SEARCH.ASK.COM/?TPID=BCPA3-SP&O=APN11416&PF=V7&TRGB=CR&P2=%5EBBO%5EYYYYYY%5EBO%5ERU&GCT=HP&APN_PTNRS=%5EBBO&APN_DTID=%5EYYYYYY%5EBO%5ERU&APN_DBR=CR_42.0.2311.90&APN_UID=005A0A90-4FC7-4E92-8DAA-DBC9CBB5E41B&ITBV=12.27.0.992&DOI=2015-04-22&PSV=&PT=TB
deldirex %SystemDrive%\PROGRAM FILES (X86)\VKMUSIC 4

;-------------------------------------------------------------

delall %SystemDrive%\PROGRAM FILES (X86)\MOZILLA FIREFOX\BROWSER\SEARCHPLUGINS\SWEET-PAGE.XML
deldir %SystemDrive%\PROGRAMDATA\ASKPARTNERNETWORK\TOOLBAR\SHARED\CRX
delref %SystemDrive%\USERS\HP\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\AAAAAEHDAGICIBBOCMGDHIFMEOHEDJGK\124.17_0\OOVOO SEARCH APP POWERED BY ASK
delref %SystemDrive%\USERS\HP\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\PKEDCJKDEFGPDELPBCMBMEOMCJBEEMFM\5116.418.1.13_0\CHROME MEDIA ROUTER
uidel  MsiExec.exe /X{4F564F32-2D53-5000-76A7-A758B70C2801}
deltmp
delnfr
restart

;uVS v3.75 script [http://dsrt.dyndns.org]
;Target OS: NTv6.1

zoo %SystemDrive%\USERS\НИКИТА\APPDATA\ROAMING\MICROSOFT\WINDOWS\START MENU\PROGRAMS\STARTUP\HJAFSYB4EOS.EXE
bl 8225DB41C859685A52C2F13C44679429 185856
delall %SystemDrive%\USERS\НИКИТА\APPDATA\ROAMING\MICROSOFT\WINDOWS\START MENU\PROGRAMS\STARTUP\HJAFSYB4EOS.EXE
delref HTTP://START.TICNO.COM
exec "C:\PROGRAM FILES\MAIL.RU\GUARD\GUARDMAILRU.EXE" /UNINSTALL
exec C:\PROGRAM FILES\MAIL.RU\SPUTNIK\MAILRUSPUTNIK.EXE UNINSTALL
regt 3
regt 18
deltmp
delnfr
restart