;uVS v3.85.7 [http://dsrt.dyndns.org]
;Target OS: NTv6.2
v385c
OFFSGNSAVE

hide %SystemDrive%\PROGRAM FILES (X86)\CYBERLINK\POWERDVD10\AUDIOFILTER\CLAUD.AX
;------------------------autoscript---------------------------

chklst
delvir

; Surfing Protection
exec  C:\Program Files (x86)\IObit\Surfing Protection\unins000.exe
deltmp
delnfr
;-------------------------------------------------------------

restart

;uVS v3.85.7 [http://dsrt.dyndns.org]
;Target OS: NTv5.1
v385c
OFFSGNSAVE
zoo %SystemDrive%\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\IEPLUGINSERVICE\PLUGINSERVICE.EXE
addsgn 1A03BF9A5583338CF42B627DA804DEC9E946303A4536D3B4D2954EC874C6FA000703482B1A591688A05187597DE83FF24627E7F03DD9B02C22CD81772E402272 8 a variant of Win32/ELEX.AD

zoo %SystemDrive%\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\WPM\WPROTECTMANAGER.EXE
addsgn 1A61A69A5583338CF42B627DEF8C3609760F3C82DB714B5C8DF01E360CF27DBBE114C3573E218BC32103469E74DD3D88FE37E906672D722F2D77A45A2D85CA77 8 Trojan.Wprot.3 [DrWeb]

zoo %SystemDrive%\DOCUMENTS AND SETTINGS\ADMIN\LOCAL SETTINGS\APPLICATION DATA\YANDEX\UPDATER\PRAETORIAN.EXE
addsgn 1AF67A9B5583358CF42B254E3143FE547601B9FA0A3A13F1C03FA1374DD6714C239CC0339D559D492B0BC197CD4B457110236311A9255077E4B5AC2F9F5FA577 8 praetorian

deldir %SystemDrive%\PROGRA~1\SUPTAB
;------------------------autoscript---------------------------

chklst
delvir

delref HTTP://WWW.SWEET-PAGE.COM/WEB/?TYPE=DS&TS=1396483396&FROM=COR&UID=WDCXWD5000AAKX-08ERMA0_WD-WCC2ET36536365363&Q={SEARCHTERMS}

; McAfee Security Scan Plus
exec C:\Program Files\McAfee Security Scan\uninstall.exe
; WPM17.8.0.3442
exec C:\Documents and Settings\All Users\Application Data\WPM\wprotectmanager.exe -uninstall
deltmp
delnfr
;-------------------------------------------------------------

restart

;uVS v3.85.10 [http://dsrt.dyndns.org]
;Target OS: NTv5.1
v385c
OFFSGNSAVE

zoo %SystemDrive%\PROGRAM FILES\CONDUIT\COMMUNITY ALERTS\ALERT0.DLL
addsgn 79132211B9E9317E0AA1AB59AE4B1205DAFFF47DC4EA942D892B2942AF292811E11BC3DCC10016A5A0C58CF9CD4345117AB9D3B821CBF06C22C0AC4942CF5782 64 Win32/Toolbar.Conduit.Y [ESET-NOD32]

zoo %SystemDrive%\PROGRAM FILES\ALAWAR ELEMENTS\BACKGROUNDHOST.EXE
addsgn 1A1ED59A5583C58CF42BFED59BFD1205258A71B2ADF6341CA1CF96EA075F59C7CBB6CFE17655AE8C7B7FF1638153B505822017FF102ED48F2D77A42F0456468C 8 Adware.BGuard.32 [DrWeb]

delall %Sys32%\431738\D8A210.EXE
delall %SystemDrive%\DOCUMENTS AND SETTINGS\ADMIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\K7WUI19F.DEFAULT\EXTENSIONS\{4788AC5B-FCE4-47C8-BFAF-9B1C29BDF93D}\CTYPES\FIREFOXCTYPE.DLL
delall %SystemDrive%\DOCUMENTS AND SETTINGS\ADMIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\K7WUI19F.DEFAULT\EXTENSIONS\{4788AC5B-FCE4-47C8-BFAF-9B1C29BDF93D}\PLUGINS\NPFIREFOXPLUGIN.DLL
delall %SystemDrive%\PROGRAM FILES\KINO-FILMOV.NET\PRXTBKIN0.DLL
delall %SystemDrive%\PROGRAM FILES\ALAWAR ELEMENTS\BACKGROUNDHOST.EXE
hide %Sys32%\FSUSBEXDISK.SYS
hide %SystemDrive%\PROGRAM FILES\UTORRENT\UTORRENT.EXE
;------------------------autoscript---------------------------

chklst
delvir

delref {8984B388-A5BB-4DF7-B274-77B879E179DB}\[CLSID]

delref {D5FEC983-01DB-414A-9456-AF95AC9ED7B5}\[CLSID]

; OpenAL
exec C:\Program Files\OpenAL\OpenAL.exe" /U
; Java(TM) 6 Update 7
exec MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070} /quiet
deltmp
delnfr
;-------------------------------------------------------------

restart

;uVS v3.85.14 [http://dsrt.dyndns.org]
;Target OS: NTv6.1
v385c
OFFSGNSAVE

delall %SystemDrive%\PROGRA~2\SEARCH~1\DATAMNGR\IEBHO.DLL
del %SystemDrive%\PROGRAM FILES (X86)\OPERA\OPERA.URL
delall %SystemDrive%\PROGRAMDATA\MICROSOFT\WINDOWS\START MENU\PROGRAMS\STARTUP\ZAXAR GAMES BROWSER.LNK
delall %SystemDrive%\PROGRAMDATA\MICROSOFT\WINDOWS\START MENU\PROGRAMS\STARTUP\SCHEDULE.LNK
del %SystemDrive%\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.URL
del %SystemDrive%\PROGRAM FILES (X86)\INTERNET EXPLORER\IEXPLORE.URL
;------------------------autoscript---------------------------

chklst
delvir

regt 28
regt 29
; Pandora Service
exec  C:\Program Files (x86)\PANDORA.TV\PanService\unins000.exe
; OpenAL
exec  C:\Program Files (x86)\OpenAL\oalinst.exe" /U
; Searchqu Toolbar
exec  C:\Program Files (x86)\Searchqu Toolbar\uninstall.exe
; Zaxar Games Browser 4
exec  C:\Program Files\Zaxar\unins000.exe
; Java(TM) 6 Update 31
exec  MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216031FF} /quiet
; Ask Toolbar
exec  MsiExec.exe /X{86D4B82A-ABED-442A-BE86-96357B70F4FE} /quiet

deldirex %SystemDrive%\USERS\ПОЛЬЗОВАТЕЛЬ\APPDATA\LOCAL\MEDIAGET2

deltmp
delnfr

;-------------------------------------------------------------

restart