;uVS v3.81.7 [http://dsrt.dyndns.org]
;Target OS: NTv6.1

OFFSGNSAVE
zoo %SystemRoot%\BOX_CFOSTASK.EXE
addsgn 9252770A1D6AC1CC0B54594E33231995AF8CBA7E8EBD1EA3F0C44EA2D3388D5DF8652EEF3F559D492A5BF198CD08CA1481CE336395DB6B5F26028CA4D985CC8F 14 tr.agent

zoo %SystemDrive%\PROGRAM FILES (X86)\FUNMOODS\1.5.23.22\ESCORTLBR.DLL
addsgn 79132211B9E9317E0AA1AB5967871205DAFFF47DC4EA942D892B2942AF292811E11BC3DCC10016A5A86C94C8B9635977302F001AA0254FA7507F21D0B221CAC8 64 Adware.Funmoods.1 [DrWeb]

zoo %SystemDrive%\PROGRAM FILES (X86)\FUNMOODS\1.5.23.22\BH\ESCORT.DLL
addsgn 79132211B9E9317E0AA1AB59DBBD1205DAFFF47DC4EA942D892B2942AF292811E11BC302B5B9CA1FA0F588140B06C287755429F984D97617D301AC143F09A0D3 64 Adware.Funmoods.1 [DrWeb]

zoo %SystemRoot%\ADOBE FLASH\ADOBE.EXE
addsgn 9AB47ADB5582A28DF42BAEB164C81205158AFCF6B1FA1F7885C3C5BC8D7938CC0060D31DAFBCC8D10274035E461649FA7DDFE97255DAB02C2D77A42F814A2273 8 Win32/TrojanClicker.VB.OCH

;------------------------autoscript---------------------------

chklst
delvir

delref HTTP://START.FUNMOODS.COM/?F=2&A=IRON2&CHNL=IRON2&CD=2XZUYETN2Y1L1QZUYETDTB0C0FYETAYD0FTDTBZZTDTAYBYDTN0D0TZU0CTBYEYBTN1L2XZUTBTFTCTFTCTFTATCTB&CR=1791282805

delref %SystemDrive%\PROGRAM FILES (X86)\TICNO\TICNO IO\IO.EXE

delref HTTP://START.FUNMOODS.COM/?F=1&A=IRON2&CHNL=IRON2&CD=2XZUYETN2Y1L1QZUYETDTB0C0FYETAYD0FTDTBZZTDTAYBYDTN0D0TZU0CTBYEYBTN1L2XZUTBTFTCTFTCTFTATCTB&CR=1791282805

delref %SystemDrive%\PROGRAM FILES (X86)\TICNO\SHEXTMNG\SHEXTMNGSERVICE.EXE

; Funmoods Web Search
exec C:\PROGRA~2\FUNMOODS\1.5.23.22\UNINSTALL.EXE

; Ticno Shell Extension Manager
exec C:\PROGRAM FILES (X86)\TICNO\SHEXTMNG\UNINSTALL.EXE

; Ticno iO
exec C:\PROGRAM FILES (X86)\TICNO\TICNO IO\UNINSTALL.EXE

deltmp
delnfr
;-------------------------------------------------------------

restart