;uVS v3.87.7 [http://dsrt.dyndns.org]
;Target OS: NTv6.1
OFFSGNSAVE
zoo %SystemDrive%\PROGRAM FILES\CONTENTPROTECTOR\CONTENTPROTECTORUPDATE.EXE
addsgn 1AC52F9A55834C720BD4C4A50CD017472562C9D789FAF796B3C3C5B3E7261B4ECBAB94573E0C2504718084F97F1349FA3DDF9C7666015B1F8C4BA46FC7879A73 8 Win32/RiskWare.NetFilter

zoo %SystemDrive%\PROGRAM FILES\IOBIT\DRIVER BOOSTER\SETUPHLP.EXE
addsgn A7679B234A6A4C7261D4C4B12DBDEB5476DCAB4ECDD87A786D688067AFE5B1194BBEFC323E3162794F09A4AC8643219D42BAE816AAEAD4A50DFAF1C37F072273 8 Win32/NeoSpy.AA [ESET-NOD32]

zoo %SystemDrive%\PROGRAM FILES\IOBIT\ADVANCED SYSTEMCARE 8\REGISTER.EXE
addsgn A7679B23506A4C7261D4C4B12DBDEB5673DD44BACFBA1F90A1203A4363162424107583575AAAAD2DA2A0B74D137E47983DDF8C8D67BE390EA0224897C6062273 17 Trojan.Siggen5.64545 [DrWeb]

zoo %SystemDrive%\USERS\АДМИНИСТРАТОР\APPDATA\ROAMING\IMAGECROPRESIZE\IMAGECROPRESIZE.EXE
addsgn 0DC977BA156A4C728BEBAEB1E4F71205A5B5FCF689FA1F7805FCC5BC50D64C463428FE5D296AA0433CBF849F461649FA7DDFE87255DADF3EAE4DCB3D443C4D61 9 Trojan.StartPage1.25908 [DrWeb]

zoo %SystemDrive%\PROGRAM FILES\CONTENTPROTECTOR\NSS\CERTUTIL.EXE
addsgn A7679BF0AA0244B74BD4C671CC881261848AFCF689AA7BF1A0C3C5BC50559D6C704194DE5BBD1E2CD780EE9EB903DD4A3DDFB1F158F2DB6D2D882722EB6D6373 8 AdWare.Trioris.A [ESET-NOD32]

delref HTTP://ALL-BEST.PRO
addsgn 1A720B9A5583C58CF42B254E3143FE54A6EF00F6DF775A84D53CB0B0AFA379A4396AC357B5A51E8D270572EA5E2F0C0609CC00B541DAB0A9ED03AEC779122273 8 Win32/RuKometa

zoo %SystemDrive%\USERS\АДМИНИСТРАТОР\APPDATA\LOCAL\KOMETA\KOMETAUP.EXE
;------------------------autoscript---------------------------

sreg

chklst
delvir

delref {10921475-03CE-4E04-90CE-E2E7EF20C814}\[CLSID]
delref {8E8F97CD-60B5-456F-A201-73065652D099}\[CLSID]
delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DILAMGBDAEBKBPKKMFMMFBNAAMKHIJDEK%26INSTALLSOURCE%3DONDEMAND%26UC

delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DOFDGAFMDEGFKHFDFKMLLFEFMCMCJLLEC%26INSTALLSOURCE%3DONDEMAND%26UC

delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DPNOOFFJHCLKOCPLOPFFDBCDGHMIFFHJI%26INSTALLSOURCE%3DONDEMAND%26UC

delref %Sys32%\DRIVERS\CONTENTPROTECTORDRV.SYS
del %Sys32%\DRIVERS\CONTENTPROTECTORDRV.SYS

deldirex %SystemDrive%\PROGRAM FILES\TENCENT\QQPCMGR\10.10.16443.223

delref %Sys32%\TSSK.SYS
del %Sys32%\TSSK.SYS

delref %SystemDrive%\USERS\АДМИНИСТРАТОР\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\ILAMGBDAEBKBPKKMFMMFBNAAMKHIJDEK\4.0.25_0\ПОИСК MAIL.RU
deldirex %SystemDrive%\USERS\АДМИНИСТРАТОР\APPDATA\LOCAL\KOMETA\APPLICATION\45.0.2454.103

delref %SystemDrive%\USERS\АДМИНИСТРАТОР\APPDATA\LOCAL\TEMP\KOMETA1113131\KOMETAMINI.EXE
del %SystemDrive%\USERS\АДМИНИСТРАТОР\APPDATA\LOCAL\TEMP\KOMETA1113131\KOMETAMINI.EXE

deldirex %SystemDrive%\USERS\АДМИНИСТРАТОР\APPDATA\LOCAL\KOMETA\APPLICATION

delref %SystemDrive%\PROGRAM FILES\CONTENTPROTECTOR\SSLEAY32.DLL
del %SystemDrive%\PROGRAM FILES\CONTENTPROTECTOR\SSLEAY32.DLL

delref %SystemDrive%\PROGRAM FILES\CONTENTPROTECTOR\LIBEAY32.DLL
del %SystemDrive%\PROGRAM FILES\CONTENTPROTECTOR\LIBEAY32.DLL

delref %SystemDrive%\PROGRAM FILES\CONTENTPROTECTOR\NSS\SMIME3.DLL
del %SystemDrive%\PROGRAM FILES\CONTENTPROTECTOR\NSS\SMIME3.DLL

delref %SystemDrive%\PROGRAM FILES\CONTENTPROTECTOR\NSS\NSS3.DLL
del %SystemDrive%\PROGRAM FILES\CONTENTPROTECTOR\NSS\NSS3.DLL

delref %SystemDrive%\PROGRAM FILES\CONTENTPROTECTOR\NSS\SOFTOKN3.DLL
del %SystemDrive%\PROGRAM FILES\CONTENTPROTECTOR\NSS\SOFTOKN3.DLL

delref %SystemDrive%\PROGRAM FILES\CONTENTPROTECTOR\NSS\PLC4.DLL
del %SystemDrive%\PROGRAM FILES\CONTENTPROTECTOR\NSS\PLC4.DLL

delref %SystemDrive%\PROGRAM FILES\CONTENTPROTECTOR\NSS\NSPR4.DLL
del %SystemDrive%\PROGRAM FILES\CONTENTPROTECTOR\NSS\NSPR4.DLL

delref %SystemDrive%\PROGRAM FILES\CONTENTPROTECTOR\NSS\MOZCRT19.DLL
del %SystemDrive%\PROGRAM FILES\CONTENTPROTECTOR\NSS\MOZCRT19.DLL

delref %SystemDrive%\PROGRAM FILES\CONTENTPROTECTOR\NSS\PLDS4.DLL
del %SystemDrive%\PROGRAM FILES\CONTENTPROTECTOR\NSS\PLDS4.DLL

regt 27
; Surfing Protection
exec C:\Program Files\IObit\Surfing Protection\unins000.exe
; Java(TM) 6 Update 26
exec MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216026FF} /quiet
deltmp
delnfr
areg

;-------------------------------------------------------------