;uVS v3.85.23 [http://dsrt.dyndns.org]
;Target OS: NTv5.1
v385c
OFFSGNSAVE

sreg
delref %SystemDrive%\PROGRAM FILES\COMMON FILES\AVG SECURE SEARCH\VTOOLBARUPDATER\18.1.9\TOOLBARUPDATER.EXE
delref %SystemDrive%\PROGRAM FILES\SUPER OPTIMIZER\SUPOPTCRASH.DLL
delref %SystemDrive%\PROGRAM FILES\COMMON FILES\DOCTOR WEB\SCANNING ENGINE\DWENGINE.EXE
delref %SystemDrive%\PROGRAM FILES\DRWEB\DWNETFILTER.EXE
delref %SystemDrive%\PROGRAM FILES\DRWEB\DWSERVICE.EXE
delref %Sys32%\DRIVERS\AVGTPX86.SYS
delref %Sys32%\DRIVERS\BDSAFEBROWSER.SYS
delref %Sys32%\DRIVERS\DWDG.SYS
delref %Sys32%\DRIVERS\DWPROT.SYS
delref %Sys32%\DRIVERS\DW_WFP.SYS
delref %Sys32%\DRIVERS\SPIDERG3.SYS
delref D:\PROGRAM FILES\TENCENT\QQPCMGR\10.9.16349.225\QMUDISK.SYS
delref %Sys32%\DRIVERS\QRNFD_1_10_0_9.SYS
delref D:\PROGRAM FILES\TENCENT\QQPCMGR\10.9.16349.225\TS888.SYS
delref %Sys32%\TSSK.SYS
delref %SystemDrive%\PROGRAM FILES\DRWEB\FRWL_NOTIFY.EXE
delref %SystemDrive%\PROGRAM FILES\DRWEB\SPIDERAGENT.EXE
delref %SystemDrive%\DOCUMENTS AND SETTINGS\ADMIN\LOCAL SETTINGS\APPLICATION DATA\KOMETA\KOMETAUP.EXE
delref HTTP://WWW.DUBA.COM/?UN_449343_1617
delref HTTP://WWW.MYSTARTSEARCH.COM/?TYPE=HP&TS=1425563696&FROM=CMI&UID=ST3320613AS_9SZ60W22XXXX9SZ60W22
delref HTTP://WWW.MYSTARTSEARCH.COM/WEB/?TYPE=DS&TS=1425563696&FROM=CMI&UID=ST3320613AS_9SZ60W22XXXX9SZ60W22&Q={SEARCHTERMS}
areg

;uVS v3.85.23 [http://dsrt.dyndns.org]
;Target OS: NTv5.1
v385c
OFFSGNSAVE
zoo %SystemDrive%\DOCUMENTS AND SETTINGS\ADMIN\МОИ ДОКУМЕНТЫ\VIDEOMANIAWEB.EXE
addsgn A7679B1991CE1F245CE76E38210C9B40E503B95200BFCFF1C00B4CF99C5F3498AA521BDE7BB925652BC18477AE47B6054E1FBD1ACBC0F12C4988944B4E2611A1 8 Program.Unwanted.285 [DrWeb]

zoo %Sys32%\DRIVERS\DW_WFP.SYS
addsgn A7679B19B192CF9E3F87F8E6A38C361DE76E51AE4EBE3B58442768E4AFC361AC63174E131A71140D0F9409CA42FED90782204B62CC99B08D3DEEE72F4C4626D0 10 Carberp.1116

zoo %SystemDrive%\PROGRAM FILES\DRWEB\DW_WFP.SYS
zoo %SystemDrive%\DOCUMENTS AND SETTINGS\ADMIN\РАБОЧИЙ СТОЛ\GGS2A1.EXE
delall %Sys32%\DRIVERS\BDSAFEBROWSER.SYS
addsgn 79132211B9E9317E0AA1AB592AA61205DAFFF47DC4EA942D892B2942AF292811E11BC3DCC10016A5A0D588C9CD6341AD7269EEFF1D65F6AFD46ED32C44C6027C 64 Stantinko.AM [ESET-NOD32]

zoo %Sys32%\IHCTRL32.DLL
delall %SystemDrive%\DOCUMENTS AND SETTINGS\ADMIN\LOCAL SETTINGS\TEMP\QQPCMGR_V10.7.16066.216_71736_SILENCE.EXE
addsgn 79132211B9E9317E0AA1AB591A961205DAFFF47DC4EA942D892B2942AF292811E11BC3DCC10016A5A8FD8C9F323BB68F75B5E88D60628E2B3D88B15F070532F6 64 Stantinko.AM

zoo %Sys32%\WSAUDIO.DLL
delall %SystemDrive%\PROGRAM FILES\VER7BLOCKANDSURF\189.XPI
delall %SystemDrive%\DOCUMENTS AND SETTINGS\ADMIN\LOCAL SETTINGS\APPLICATION DATA\OPERA\OPERA\WIDGETS\DOLKA.OEX
delall %SystemDrive%\DOCUMENTS AND SETTINGS\ADMIN\LOCAL SETTINGS\APPLICATION DATA\OPERA\OPERA\WIDGETS\SUPERMEGABEST.OEX
;------------------------autoscript---------------------------

hide %Sys32%\DRIVERS\DW_WFP.SYS
chklst
delvir

deldirex %SystemDrive%\PROGRAM FILES\COMMON FILES\BAIDU\BDDOWNLOAD\108

deldirex %SystemDrive%\PROGRAM FILES\COMMON FILES\TENCENT\QQDOWNLOAD\130

delref HTTP://MAPRUT.RU/?UTM_SOURCE=UOUA03&UTM_CONTENT=D36B8E9A32BF6A2F4162AE31118069C9

delref HTTP=127.0.0.1:14030;HTTPS=127.0.0.1:14030

delref HTTP://YAMDEX.NET/?SEARCHID=1&L10N=RU&FROMSEARCH=1&IMSID=763FA5D6B03AB419900E3935A9381621&TEXT={SEARCHTERMS}

del %SystemDrive%\LAUNCHER.BAT

deldirex %SystemDrive%\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\TENCENT\TSVULFW
deldir %SystemDrive%\PROGRAM FILES\AVAST SOFTWARE\AVAST
deldirex %SystemDrive%\PROGRAM FILES\DRWEB
deldir D:\PROGRAM FILES\TENCENT\QQPCMGR\10.9.16349.225
deldirex %SystemDrive%\PROGRAM FILES\BUYIANUDDBROOWSIE
deldir %SystemDrive%\VKONTAKTEDJ


del D:\LAUNCHER.BAT

del %SystemDrive%\IEXPLORE.BAT

del %SystemDrive%\DOCUMENTS AND SETTINGS\ADMIN\APPLICATION DATA\BROWSERS\EXE.EROLPXEI.BAT

del %SystemDrive%\DOCUMENTS AND SETTINGS\ADMIN\APPLICATION DATA\BROWSERS\EXE.RESWORB-MOORONIK.BAT

del %SystemDrive%\DOCUMENTS AND SETTINGS\ADMIN\APPLICATION DATA\BROWSERS\EXE.REHCNUAL.BAT

del %SystemDrive%\PWLAUNCHER.BAT

del %SystemDrive%\PROGRAM FILES\PUNTO.BAT

regt 12
regt 27
regt 28
regt 29
; BlockAndSurf
exec C:\Program Files\ver7BlockAndSurf\Uninstall.exe
deltmp
delnfr
;-------------------------------------------------------------

restart

;uVS v3.85.23 [http://dsrt.dyndns.org]
;Target OS: NTv5.1
v385c
OFFSGNSAVE
delall D:\LАUNСHЕR.BАT.EXE
exec cmd.exe /c move/y %WinDir%\system32\GroupPolicy\Machine\Registry.pol %WinDir%\system32\GroupPolicy\Machine\Registry.pol.old & move/y %WinDir%\system32\GroupPolicy\Machine\Registry.pol.bak %WinDir%\system32\GroupPolicy\Machine\Registry.pol & gpupdate.exe /force & reg.exe DELETE HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2AEF02C3-5159-4C81-A688-8D954F0DEE56}_NewSearch /f & start "" "http://yamdex.net/?uninstall=1&imsid=763fa5d6b03ab419900e3935a9381621"
exec C:\Documents and Settings\Admin\Application Data\1H1Q\Aff Packages\uninstaller.exe /Uninstall /NM="Aff Packages" /AN="1H1Q" /MBN="Aff Packages"
exec "C:\Program Files\appsAve\appsAve.exe" /s /n /i:"ExecuteCommands;UninstallCommands" ""
exec C:\Program Files\ver7BlockAndSurf\Uninstall.exe
exec "C:\Program Files\buyianuddbroowsie\uEg45NwmOJwLZq.exe" /s /n /i:"ExecuteCommands;UninstallCommands" ""
exec "C:\Documents and Settings\All Users\Application Data\cheapcoup\cheapcoup.exe" /progname=cheapcoup /progver=3.4.2 /progpub=cheapcoup /proguninstallurl=asdahjka.com /deleteappfolder=0  /deletefile2="C:\Program Files\Google\Chrome\Applicationupdate.dll" /deletefile3="C:\Program Files\Google\Chrome\Applicationchrome.dll" /deletefile4="C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\Applicationupdate.dll" /deletefile5="C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\Applicationchrome.dll" /deletefile6="C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\Applicationupdate.dll" /deletefile7="C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\Applicationchrome.dll" /deletefile8="C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\Applicationupdate.dll" /deletefile9="C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\Applicationchrome.dll" /VERYSILENT
exec "C:\Program Files\Huntsy\Huntsy.exe" /s /n /i:"ExecuteCommands;UninstallCommands" ""
exec "C:\Program Files\lowipricees\FDI4J8eCakmgrC.exe" /s /n /i:"ExecuteCommands;UninstallCommands" ""
exec "C:\Program Files\offeraPop\WkeMaITmxBYBWo.exe" /s /n /i:"ExecuteCommands;UninstallCommands" ""
exec "C:\Program Files\rocccketsalleo\GWwKebomm5K7Tq.exe" /s /n /i:"ExecuteCommands;UninstallCommands" ""
exec "C:\Program Files\saLepriZesi\snAnvo59uvOveL.exe" /s /n /i:"ExecuteCommands;UninstallCommands" ""
exec "C:\Program Files\ssaleoofFeer\ssaleoofFeer.exe" /s /n /i:"ExecuteCommands;UninstallCommands" ""
exec "C:\Documents and Settings\Admin\Application Data\Tomb Raider\Uninstall\unins000.exe"
exec C:\Documents and Settings\Admin\Application Data\0D0S1L2Z1P1B\Video Converter Packages\uninstaller.exe /Uninstall /NM="Video Converter Packages" /AN="0D0S1L2Z1P1B" /MBN="Video Converter Packages"
exec C:\DOCUME~1\Admin\APPLIC~1\DIGITA~1\UpdateProc\UpdateTask.exe /Uninstall
exec "C:\Documents and Settings\Admin\Local Settings\Application Data\00000000-1425577349-0000-0000-00241D8870A6\uninstall.exe"
zoo %SystemDrive%\PROGRAM FILES\PW\APPDATA.EXE
delall %SystemDrive%\PROGRAM FILES\PW\APPDATA.EXE
zoo %Sys32%\LPCLIENT.EXE
delall %Sys32%\LPCLIENT.EXE
zoo %SystemDrive%\PROGRAM FILES\PW\PRINTER.EXE
delall %SystemDrive%\PROGRAM FILES\PW\PRINTER.EXE
zoo %SystemDrive%\PROGRAM FILES\PW\APPSVC.EXE
delall %SystemDrive%\PROGRAM FILES\PW\APPSVC.EXE
deltmp
delnfr
restart
czoo