;uVS v3.87 [http://dsrt.dyndns.org]
;Target OS: NTv5.1
v385c
OFFSGNSAVE
zoo %SystemDrive%\PROGRAM FILES\MBOT_RU_014010208\MBOT_RU_014010208.EXE
addsgn 1A55C39A5583C58CF42B254E3143FE86C9C65D5689821F4B404A804003E5AA1BA8EE4A0AFEDCC0F5107BF185AEFB0FFA7D18E86455DAB0C459F0A42F44CCDDF8 8 Adware.Downware.11216 [DrWeb]

zoo %SystemDrive%\DOCUMENTS AND SETTINGS\ADMIN\LOCAL SETTINGS\APPLICATION DATA\MBOT_RU_014010208\UPMBOT_RU_014010208.EXE
addsgn 1A3BCA9A5583C58CF42B254E3143FEFA5082AD1E46441F78DC9A987E54D6FAB372D0C2E34F3C9DA1603E849F1FD5C20528540424DE2B58CFD2885BD9820E2307 8 Win32/Adware.EoRezo

zoo %SystemDrive%\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\TMP0X0X\PROTECTWINDOWSMANAGER.EXE
addsgn 1A9D969A5583338CF42BFB3A88434711AEC7F4A00C286A75000AB0B1699B7D39022403BC10D0543D320BC193C3D63DE8F80D9D76DDCB5BC5A602B4AA317335B5 8 Win32/ELEX

zoo %SystemDrive%\PROGRAM FILES\MBOT_RU_014010208\MYBESTOFFERSTODAY_WIDGET.EXE
addsgn 1A4CB19A5583C58CF42B254E3143FE86C9C65DAEC9971F4B404A804003E5AA1BA8EE4A0AFEDCC0F5107BF185AEC55BFA7D18E86455DAB0C4DDDBA42F44CCDDF8 8 Win32/AdWare.EoRezo

delall %SystemDrive%\DOCUMENTS AND SETTINGS\ADMIN\LOCAL SETTINGS\APPLICATION DATA\HOSTINSTALLER\2158784453_INSTALLCUBE.EXE
addsgn 1A60A29A5583338CF42BFB3A884BFE0973DD430976FA1F2FEDFCD6BC503E738723171E1236DE6D10720BC991FEE636FA7DD05FBB7612D617E502D97E96DB3E57 8 Win32/RuKometa

zoo %SystemDrive%\DOCUMENTS AND SETTINGS\ADMIN\LOCAL SETTINGS\APPLICATION DATA\SYSTEMDIR\NETHOST.EXE
delall %SystemDrive%\DOCUMENTS AND SETTINGS\ADMIN\LOCAL SETTINGS\APPLICATION DATA\PROFITSAVER\RFT_SB.EXE
addsgn 1A7A6E9A5583C58CF42B254E3143FE86C9AA77B381AC48128D9A7B24D19671C15EF730F2B71065C26E8CDB1603EA177FBDABE48455D2C42BEA32502F879F23FE 8 Win32/Adware.OxyPumper.L [ESET-NOD32]

zoo %SystemDrive%\DOCUMENTS AND SETTINGS\ADMIN\APPLICATION DATA\WINDOWSUPDATER\UPDATER.EXE
delall %SystemDrive%\DOCUMENTS AND SETTINGS\ADMIN\APPLICATION DATA\NSSM.EXE
;------------------------autoscript---------------------------

chklst
delvir

delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DEIODDFAEPDOEIFBHJPHFEFGIPCJCDIEO%26INSTALLSOURCE%3DONDEMAND%26UC

delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DIFLPPBJNPNEIIGCBDFJPNKEBIDMKJMOI%26INSTALLSOURCE%3DONDEMAND%26UC

delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DPALMGGEFDFEIKONGHAEONGKABMGCAGCO%26INSTALLSOURCE%3DONDEMAND%26UC

delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DPPOILMFKBPCKODOIFDLKMKEPCAJFJMHL%26INSTALLSOURCE%3DONDEMAND%26UC

delref %SystemDrive%\DOCUMENTS AND SETTINGS\ADMIN\APPLICATION DATA\ADOBE\NATIVEPLUGIN\OOBA\PPAPI\03995A3E-0E5D-4B70-887E-483BF7B688AA\A66D3A5D-5A7D-4AE7-86C7-99A678320596.EXE

delref %SystemDrive%\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\KRB UPDATER UTILITY\KRBUPDATER-UTILITY.EXE

delref %SystemDrive%\DOCUMENTS AND SETTINGS\ADMIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\EIODDFAEPDOEIFBHJPHFEFGIPCJCDIEO\5.0.1_0\ПОИСК MAIL.RU

delref %SystemDrive%\DOCUMENTS AND SETTINGS\ADMIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\PMMEMLNPJMFKCDDKNIBCHODLLHNNIDLP\4.5.132_0\ПОДЕЛИТЬСЯ ВКОНТАКТЕ

deldirex %SystemDrive%\PROGRAM FILES\CONTENT DEFENDER

delref HTTP://AXTONVE.RU/?UTM_SOURCE=UOUA03N&UTM_CONTENT=401B360A5CA5CA93813769A47EE6842E&UTM_TERM=0C3622013AABD05D75A7EDB50E29A09B

delref %SystemDrive%\DOCUMENTS AND SETTINGS\ADMIN\APPLICATION DATA\MYDESKTOP\QWEEECL.EXE

delref HTTP:\\HELLO.LIMBBO.RU\OFFERS\RU.CSV

deldirex %SystemDrive%\DOCUMENTS AND SETTINGS\ALL USERS\ГЛАВНОЕ МЕНЮ\ПРОГРАММЫ\CONTENT DEFENDER

; Java(TM) 6 Update 16
exec MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216016FF} /quiet
deltmp
delnfr
;-------------------------------------------------------------

restart