;uVS v3.85.17 [http://dsrt.dyndns.org]
;Target OS: NTv6.1
v385c
OFFSGNSAVE
zoo %SystemDrive%\USERS\USER\APPDATA\LOCAL\COMMANDHOTSTARTSCHED\COMMANDHOTSTARTSCHED.EXE
addsgn 1A4C739A5583FF8FF42BC4A50C109945256220F789FA9C1D79C33AF140AE4BC76E1FE81A32DCD041D4D59074AB9D0C16F49A0CF9103E3B2CA43244A482E6A34B 8 Adw.ZugaraInvestmentsLimited

zoo %SystemDrive%\PROGRAM FILES (X86)\GAMESRS\GUPDATER.EXE
addsgn 1A4C739A55832F8FF42BC4A50C90D445256220F789FA9C1D79C33AF140AE4BC76E1FE81A32DCD041D4D59074AB9D0C16F49A0CF9103E3B2CA43244A482E6A34B 14 AdWare.Pirrit.A [ESET-NOD32]

zoo %SystemRoot%\SYSWOW64\NETHTSRV.EXE
addsgn 1A970F9A5583C58CF42B254E3143FE865882FC82A4056A70EFC33A892CD94C4CDC0207D7025518895E98D277CB3949FAF62F1767715A8C2C7D9F9900C7067BFA 8 Win32/Amonetize.CH [ESET-NOD32]

zoo %SystemDrive%\PROGRAM FILES (X86)\ADVPLUGIN\OZENA52KRU.EXE
addsgn 1A592F9A5583C58CF42B627DA804DE8E71AEF07DC5DE1BFD57B7AC8F905C35682B93032228D467C92B8084ED489574EEE39EE87221DF59367477A4784CFFA189 8 Adware.Downware.10694 [DrWeb]

zoo %SystemDrive%\PROGRAM FILES (X86)\SPEED ANALYSIS 2\SCRIPTHOST.DLL
addsgn 79132211B9E9317E0AA1AB59E2A31205DAFFF47DC4EA942D892B2942AF292811E11BC33D323DC5B72E906C385A16499073379D1F55DAE9AF488BA4A4B20EA93D 64 Besttoolbars.J [ESET-NOD32]

zoo %SystemDrive%\USERS\USER\APPDATA\LOCAL\SWVUPDATER\UPDATER.EXE
addsgn 9252772A106AC1CC0BB4544E334BDFFACE9A6C66196A8FE80FC583345791709756104849BDBB6158F0F26927471649FA7C049D75DEC433C2D1667F3E0707F900 8 Adware.Downware.1528 [DrWeb]

zoo %SystemDrive%\PROGRAM FILES (X86)\ADVPLUGIN\FASYEUDMN8.EXE
zoo %SystemDrive%\PROGRAM FILES (X86)\ADVPLUGIN\GY5KAK6L0N.EXE
zoo %SystemDrive%\PROGRAM FILES (X86)\ADVPLUGIN\NRGOWE8ENJ.EXE
zoo %SystemRoot%\SYSWOW64\NETUPDSRV.EXE
addsgn 1A869C9A5583D98CF42B254E3143FE86C9AA77B381AC48128D9A7B90159271C15EF730F2B71065C26E8CDB1603EA177FBDABE48455D2C42BEA32502F879F23FE 8 Win32/Amonetize.AZ [ESET-NOD32]

delall %Sys32%\PIRRITDESKTOP.EXE
delall %SystemDrive%\USERS\USER\APPDATA\LOCAL\SCHEDULE\SCHEDULE.EXE
delall %SystemDrive%\USERS\USER\APPDATA\ROAMING\NEWSI_23\S_INST.EXE
delall %SystemDrive%\USERS\USER\APPDATA\ROAMING\NEWSI_2\S_INST.EXE
delall %SystemDrive%\PROGRAM FILES (X86)\ASKPARTNERNETWORK\TOOLBAR\UPDATER\TBNOTIFIER.EXE
delall %SystemDrive%\USERS\USER\APPDATA\LOCAL\MICROSOFT\START MENU\ВOЙТИ В ИНТEРНEТ.EXE
;------------------------autoscript---------------------------

sreg

chklst
delvir

delref %Sys32%\DRIVERS\NETHFDRV.SYS
del %Sys32%\DRIVERS\NETHFDRV.SYS

delref HTTP://HOME.WEBALTA.RU/?LINK
delref HTTP://WINDOWSMAC.RU/?UTM_SOURCE=UOUA03&UTM_CONTENT=E06EE3DCAD9FD1781A76C92FE0BD311D
delref HTTP://YAMDEX.NET/?ZID=134865416&UID=2B9A3D53BA470849F3B257B24C803526&TYPE=5&IV=3
delref HTTP://YAMDEX.NET/?SEARCHID=1&L10N=RU&FROMSEARCH=1&IMSID=7AA1E873FC5A11FA1EBA88F22E07EC20&TEXT={SEARCHTERMS}
regt 27
; OffersWizard Network System Driver
exec  C:\Program Files (x86)\Common Files\Config\uninstinethnfd.exe
; Java(TM) 6 Update 30
exec  MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216030FF} /quiet

deldirex %SystemDrive%\PROGRAM FILES (X86)\EDEALPOP

deltmp
delnfr
areg

;-------------------------------------------------------------