;uVS v3.85.7 [http://dsrt.dyndns.org]
;Target OS: NTv6.1
v385c
OFFSGNSAVE
zoo %SystemDrive%\USERS\ПК\APPDATA\LOCAL\KOMETA\KOMETAUP.EXE
addsgn 1A79DF9A5583C58CF42B254E3143FE54A6EF00F6DF775A84D53CB0B0AFA379A432BEC357B5A51E8D270572EA5E2F0C0609CC008141DAB0A9ED03AEC72D122273 8 Win32/RuKometa.A [ESET-NOD32]

zoo %SystemDrive%\USERS\ПК\APPDATA\ROAMING\DSITE\UPDATEPROC\UPDATETASK.EXE
addsgn A7679B235D6A4C7261D4C4B12DBDEB549DC2F2B78912E1437A3CF67C05BE075C6217A7A80E31146943C088DE467E3DF63CDF6527B9623C3C6C774CA240F9DDF8 18 Win32/InstallCore.BD

zoo %SystemDrive%\USERS\ПК\APPDATA\LOCAL\SYSTEMDIR\NETHOST.EXE
addsgn 1ADFBF9A5583C58CF42BC4BD0C787D1D2062FD7989FA2C870CBE218F905D044018E0CCC2FE6E5A3C33683F8646168EFA6BDFE872BD73122C2DF46CD02EB22273 8 Win32/RuKometa.F

zoo %SystemDrive%\PROGRAM FILES (X86)\SEARCHPROTECT\SEARCHPROTECT\BIN\SPVC32LOADER.DLL
addsgn A7679B1928664D070E3CECF264C8ED70357589FA768F179082C3C5BCD3127D11E11BC33D323DFD0827906CBC661649C9BD9F6307595F4659214E918B500A327C 64 Win32/Conduit.SearchProtec

zoo %SystemDrive%\PROGRAM FILES (X86)\VIDEOPLAYERV3\VIDEOPLAYERV3BETA745\IE\VIDEOPLAYERV3BETA745.DLL
addsgn 79132211B9E9317E0AA1AB595FF01205DAFFF47DC4EA942D892B2942AF292811E11BC3DCC10016A543646A9F56E95CA69DDFF8F795AEA544F999A43F97F93713 64 Adware:Win32/BetterSurf [Microsoft]

zoo %SystemDrive%\PROGRAM FILES (X86)\BETTERSURF\BETTERSURFPLUS\IE\BETTERSRF.DLL
addsgn 79132211B9E9317E0AA1AB595FF01205DAFFF47DC4EA942D892B2942AF292811E11BC3DCC10016A5439C6B9F56E95CA69DDFF8F795AEA5442198A43F97F93713 64 Adware:Win32/BetterSurf [Microsoft]

zoo %SystemDrive%\PROGRAM FILES (X86)\WEBEXPENHANCEDV1\WEBEXPENHANCEDV1ALPHA161\IE\WEBEXPENHANCEDV1ALPHA161.DLL
addsgn 79132211B9E9317E0AA1AB595FF01205DAFFF47DC4EA942D892B2942AF292811E11BC3DCC10016A5436C6A9F56E95CA69DDFF8F795AEA544F199A43F97F93713 64 AdWare.BetterSurf.C [ESET-NOD32]

zoo %SystemDrive%\PROGRAM FILES (X86)\АУДИО И ВИДЕО СКАЧИВАНИЕ\IE\X86\DOWNLOADER.DLL
addsgn A7679B1928664D070E3CA7E064C8ED70357589FA768F179082C3C5BCD3127D11E11BC33D323DCD8D2A906C36591649C9BD9F6307595F4659214E91C3C404327C 64 Trojan.Admess.4 [DrWeb]

zoo %SystemDrive%\PROGRAM FILES (X86)\BETTER-SURF\IE\BETTERSRF.DLL
addsgn 79132211B9E9317E0AA1AB595FF01205DAFFF47DC4EA942D892B2942AF292811E11BC3DCC10016A543786A9F56E95CA69DDFF8F795AEA544C599A43F97F93713 64 Adware.BetterSurf.1 [DrWeb]

zoo %SystemDrive%\PROGRAM FILES (X86)\SEARCHPROTECT\SEARCHPROTECT\BIN\SPVC64LOADER.DLL
addsgn BA652BBE5D22C5062FC4F9F9E724324CAE72772CC171EEFB7FC2B0B9B835214C235B4890B586D5C2E5C80FC36226017109FBD03AD61E9073C474A42FC7CAEEBF 64 Win32/Conduit.SearchProtec

zoo %SystemDrive%\USERS\ПК\APPDATA\ROAMING\NEWNEXT.ME\NENGINE.DLL
addsgn 79132211B9E9317E0AA1AB59A52C1205DAFFF47DC4EA942D892B2942AF292811E11BC3DCC10016A57D0BF193CB50B67FBBABFC9ABACEB02CEA77B22FC706CA34 64 Trojan.Siggen6.685 [DrWeb]

zoo %SystemDrive%\USERS\ПК\APPDATA\LOCAL\SYSTEMDIR\SETSEARCHM.EXE
addsgn 1AFCCB9A5583C58CF42B254E3143FE8E6082AA7D783C5974854605C9333E6BDD23174A1136DED525A28E0FD72E9F07FEF6D1D37FBD82AF2959652F2267503D76 8 RuKometa.B

zoo %SystemDrive%\USERS\ПК\DOWNLOADS\381242.EXE
delall %SystemDrive%\USERS\ПК\DOWNLOADS\381242.EXE
delall %SystemDrive%\USERS\ПК\APPDATA\ROAMING\QIPGUARD\QIPGUARD.EXE
delall %SystemDrive%\PROGRAM FILES (X86)\ADVPLUGIN\_NPZSTTN8U.EXE
delall %SystemDrive%\USERS\ПК\APPDATA\ROAMING\MICROSOFT\WINDOWS\START MENU\PROGRAMS\STARTUP\ZAXAR GAMES BROWSER.LNK
hide D:\STINGER.EXE
delall %SystemDrive%\PROGRAM FILES (X86)\VK DOWNLOADER\UTIKZNZHO9.EXE
delall %SystemDrive%\USERS\ПК\APPDATA\ROAMING\MICROSOFT\INTERNET EXPLORER\QIPSEARCHBAR.DLL
delall %SystemDrive%\PROGRAM FILES (X86)\QIP 2012\QIP.EXE
delall %SystemDrive%\USERS\ПК\APPDATA\LOCAL\PRICEFOUNTAIN\PRICEFOUNTAINW.EXE
delall %SystemDrive%\PROGRA~1\PROXYL~1\PROXYCAP\PCAPUI.EXE
delall %SystemDrive%\PROGRAM FILES (X86)\SEARCHPROTECT\SEARCHPROTECT\BIN\CLTMNG.EXE
delall %SystemDrive%\PROGRAM FILES (X86)\SEARCHPROTECT\MAIN\BIN\CLTMNGSVC.EXE
delall %SystemDrive%\PROGRAM FILES (X86)\SEARCHPROTECT\UI\BIN\CLTMNGUI.EXE
addsgn BA6F9BB2926F5EC200D4AEB164C8FAA82F80FC1E0106E08715538D3F94FEB2DC705F40BB1ED054C0E0F4AC605351A8F17D97657F5D11BA2C61FAEC4F86BE0873 8 Win64/BitCoinMiner.U

zoo %SystemDrive%\USERS\ПК\APPDATA\LOCAL\TEMP\MSUPDATE71\DWM.EXE
hide %SystemRoot%\INSTALLER\{049CA433-77A0-4E48-AC76-180A282C4E10}\PYTHON_ICON.EXE
hide %SystemDrive%\PROGRAMDATA\MCAFEE SECURITY SCAN\EXTENSIONS\REGFIREFOXADDON.EXE
;------------------------autoscript---------------------------

chklst
delvir

delref {D5FEC983-01DB-414A-9456-AF95AC9ED7B5}\[CLSID]

delref {FD72061E-9FDE-484D-A58A-0BAB4151CAD8}\[CLSID]

delref HTTP://FORETUNED.COM/

delref HTTP://QIP.RU

delref HTTP://SEARCH.QIP.RU

regt 28
regt 29
; McAfee Security Scan Plus
exec C:\Program Files\McAfee Security Scan\uninstall.exe
; Java(TM) 6 Update 38 (64-bit)
exec MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F86416038FF} /quiet
; Yontoo 2.04
exec C:\PROGRA~3\TARMAI~1\{889DF~1\Setup.exe /remove /q0
; Better Surf Plus
exec  C:\Program Files (x86)\BetterSurf\BetterSurfPlus\uninstall.exe
; Media Player
exec  C:\Program Files (x86)\MediaPlayerV1\MediaPlayerV1alpha121\uninstall.exe
; Media View
exec  C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha2967\uninstall.exe
; Media Watch
exec  C:\Program Files (x86)\MediaWatchV1\MediaWatchV1home372\uninstall.exe
; Search Protect
exec  C:\PROGRA~2\SearchProtect\Main\bin\uninstall.exe" /S
; Video Player
exec  C:\Program Files (x86)\VideoPlayerV3\VideoPlayerV3beta745\uninstall.exe
; Webexp Enhanced
exec  C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha161\uninstall.exe
; Java(TM) 6 Update 43
exec  MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216043FF} /quiet
deldir %SystemDrive%\PROGRAM FILES (X86)\MOBOGENIE
deldirex %SystemDrive%\USERS\ПК\APPDATA\ROAMING\YONTOO
deldir %SystemDrive%\USERS\ПК\APPDATA\LOCAL\SWVUPDATER
deldir %SystemDrive%\USERS\90C5~1\APPDATA\ROAMING\DEALPLY\UPDATE~1
deldir %SystemDrive%\USERS\90C5~1\APPDATA\ROAMING\DIGITA~1\UPDATE~1
deldirex %SystemDrive%\USERS\ПК\APPDATA\LOCAL\TEMP\MSUPDATE71

deltmp
delnfr
;-------------------------------------------------------------

restart