;uVS v3.83.1 [http://dsrt.dyndns.org]
;Target OS: NTv6.1
v383c
OFFSGNSAVE
zoo %SystemDrive%\USERS\ПОЛЬЗОВАТЕЛЬ\APPDATA\LOCAL\SWVUPDATER\UPDATER.EXE
addsgn 9252775A106AC1CC0B84544E334BDFFACE9A6C66196A8FE80FC583345791709756104849BDBB6158F0F26927471649FA7C049D75DEC433C2D1667F3E0707F900 14 sohanad_vir

zoo %SystemDrive%\USERS\ПОЛЬЗОВАТЕЛЬ\APPDATA\ROAMING\DEALPLY\UPDATEPROC\UPDATETASK.EXE
addsgn A7679B23526A4C7261D4C4B12DBDEB549D06E8B78912614E7A3CF67C05BEE25A6217A7A80E311469C3539560B99389F5F980E9725532B2B2D288296A2BEED44D 18 Adware.Shopper.331 [DrWeb]

zoo %SystemDrive%\PROGRAM FILES\DEALPLY\DEALPLYIE.DLL
addsgn A7679B1928664D070E3CA68264C8ED70357589FA768F179082C3C5BCD3127D11E11BC33D323D25562A906CC47E1649C9BD9F6307595F4659214E916FF807327C 64 Adware.Shopper.328 [DrWeb]

zoo %SystemDrive%\PROGRAM FILES\MOBOGENIE\DAEMONPROCESS.EXE
addsgn 1AB3729A5583FF8FF42B627DA804DEC9E90A05B6FAEF9F81A5B0C3B3F514A2ACE09C1364FED57C56F86247AC86259B39B188BE2166253B680963AFEFBA1265F8 8 demon_process

zoo %Sys32%\NETHTSRV.EXE
addsgn 1A1C0A9A5583D98CF42B254E3143FE86C9AA77B381AC48128D9A7B04549471C15EF730F2B71065C26E8CDB1603EA177FBDABE48455D2C42BEA32502F879F23FE 8 netfilter

zoo %Sys32%\NETUPDSRV.EXE
addsgn 1AAAE79A5583D98CF42B254E3143FE86C9AA77B381AC48128D9A7B84B49771C15EF730F2B71065C26E8CDB1603EA177FBDABE48455D2C42BEA32502F879F23FE 8 NetworkUpdate.mbam

zoo %SystemDrive%\USERS\ПОЛЬЗОВАТЕЛЬ\APPDATA\ROAMING\NEWNEXT.ME\NENGINE.DLL
addsgn 79132211B9E9317E0AA1AB59A52C1205DAFFF47DC4EA942D892B2942AF292811E11BC3DCC10016A57D0BF193CB50B67FBBABFC9ABACEB02CEA77B22FC706CA34 64 Trojan.Siggen6.685 [DrWeb]

zoo %SystemDrive%\USERS\ПОЛЬЗОВАТЕЛЬ\APPDATA\ROAMING\DESKTOPY.RU\DESKTOPY.EXE
addsgn 1A40C19A5583C58CF42B254E3143FE86C99A5DA6A5B01F4B404A8040DB83691F10CC95000586E356A0C590148C5F71E209D7A8499EAF46AFE4882FEDECC76A48 8 Trojan.Triosir.3 [DrWeb]

zoo %SystemDrive%\PROGRAM FILES\MOBOGENIE\UPDATEMOBOGENIE.EXE
delall %SystemDrive%\PROGRAM FILES\MOBOGENIE\MOBOGENIE.URL
delall %SystemDrive%\USERS\ПОЛЬЗОВАТЕЛЬ\DOCUMENTS\APPLICATION DATA\EXPLORER.EXE
delall %SystemDrive%\USERS\ПОЛЬЗОВАТЕЛЬ\APPDATA\ROAMING\MICROSOFT\WINDOWS\START MENU\PROGRAMS\STARTUP\ZAXAR GAMES BROWSER.LNK
;------------------------autoscript---------------------------

sreg

chklst
delvir

delref FILES\DEALPLY\DEALPLYUPDATE.EXE
delref 1HTTP=127.0.0.1:8080
delref %Sys32%\DRIVERS\NETHFDRV.SYS
del %Sys32%\DRIVERS\NETHFDRV.SYS

delref HTTP=127.0.0.1:8080
delref HTTP://WEBALTA.RU/SEARCH
; DealPly (remove only)
exec C:\Program Files\DealPly\uninst.exe
; desktopy
exec C:\Program Files\desktopy\uninstall.exe
; desktopy.ru
exec C:\Users\Пользователь\AppData\Roaming\desktopy.ru\uninstall.exe
; OffersWizard Network System Driver
exec C:\Program Files\Common Files\Config\uninstinethnfd.exe
; McAfee Security Scan Plus
exec C:\Program Files\McAfee Security Scan\uninstall.exe
; Media Player
exec C:\Program Files\MediaPlayerV1\MediaPlayerV1alpha6611\uninstall.exe
; Media Viewer
exec C:\Program Files\MediaViewerV1\MediaViewerV1alpha1701\uninstall.exe
; Media View
exec C:\Program Files\MediaViewV1\MediaViewV1alpha4033\uninstall.exe
; Mobogenie
exec C:\Program Files\Mobogenie\uninst.exe
; Trust Media Viewer
exec C:\Program Files\TrustMediaViewerV1\TrustMediaViewerV1alpha4473\uninstall.exe
; Video Player
exec C:\Program Files\VideoPlayerV3\VideoPlayerV3beta2578\uninstall.exe
; Bonjour
exec MsiExec.exe /X{79155F2B-9895-49D7-8612-D92580E0DE5B} /quiet

deldirex %SystemDrive%\PROGRAM FILES\MOBOGENIE
deldirex %SystemDrive%\PROGRAM FILES\DEALPLY

deltmp
delnfr

czoo

areg

;-------------------------------------------------------------