;uVS v3.77.9 script [http://dsrt.dyndns.org]
;Target OS: NTv6.0
OFFSGNSAVE
addsgn 925277AA256AC1CC0B34614E3341F788B9AE7C3776052EB8D5FA19C9AB90371F4B002B663E021E8A2FD3ECA9931749ACFE1CEC21051DB32F2D75A4BF5796B2E3 8 Worm:Win32/Dorkbot.I [Microsoft]
zoo %SystemDrive%\USERS\НАДЮШКА\APPDATA\ROAMING\MICROSOFT\FMXSXX.EXE
zoo %SystemDrive%\USERS\НАДЮШКА\APPDATA\ROAMING\SCREENSAVERPRO.SCR
adddir %SystemDrive%\USERS\НАДЮШКА\APPDATA\ROAMING
delall %SystemDrive%\RECYCLER\S-1-5-21-0243556031-888888379-781863308-46689\24NAQ.EXE
delall %SystemDrive%\USERS\НАДЮШКА\APPDATA\ROAMING\73FF.EXE
delall %SystemDrive%\USERS\НАДЮШКА\APPDATA\ROAMING\8813.EXE
delall %SystemDrive%\USERS\НАДЮШКА\APPDATA\ROAMING\B762.EXE
delall %SystemDrive%\USERS\НАДЮШКА\APPDATA\ROAMING\MICROSOFT\KMXSXC.EXE
delall %SystemDrive%\USERS\НАДЮШКА\APPDATA\ROAMING\LMXSXD.SCR
zoo %SystemDrive%\RECYCLER\S-1-5-21-0243556031-888888379-781863308-91768\NEDPRO0XZ.EXE
delall %SystemDrive%\RECYCLER\S-1-5-21-0243556031-888888379-781863308-91768\NEDPRO0XZ.EXE
delall %SystemDrive%\RECYCLER\S-1-5-21-0243556031-888888379-781863308-917678\NEPRO0XZ.EXE
delall %SystemDrive%\USERS\НАДЮШКА\APPDATA\ROAMING\QIPGUARD\QIPGUARD.EXE
delall %SystemDrive%\USERS\НАДЮШКА\APPDATA\ROAMING\MICROSOFT\INTERNET EXPLORER\QIPSEARCHBAR.DLL
chklst
delvir
delall %SystemDrive%\USERS\НАДЮШКА\APPDATA\ROAMING\MICROSOFT\XMXSXP.EXE
delall %SystemDrive%\USERS\НАДЮШКА\APPDATA\ROAMING\MICROSOFT\RMXSXJ.EXE
delall %SystemDrive%\USERS\НАДЮШКА\APPDATA\ROAMING\MICROSOFT\SMXSXK.EXE
delall %SystemDrive%\USERS\НАДЮШКА\APPDATA\ROAMING\MICROSOFT\UMXSXM.EXE
delall %SystemDrive%\USERS\НАДЮШКА\APPDATA\LOCAL\YANDEX\UPDATER\PRAETORIAN.EXE
delall %SystemDrive%\USERS\НАДЮШКА\APPDATA\LOCAL\MEDIAGET2\MEDIAGET.EXE
delref HTTP://QIP.RU
delref HTTP://SEARCH.QIP.RU
deltmp
delnfr
REGT 5
regt 14
exec "C:\PROGRAM FILES\LOVIVKONTAKTE\UNINS000.EXE"
czoo
restart