;uVS v3.77.16 script [http://dsrt.dyndns.org]
;Target OS: NTv5.1
OFFSGNSAVE
zoo %SystemDrive%\RECYCLER\S-1-5-21-0243556031-888888379-781863308-17256\PROXZY16.EXE
addsgn A7679BF0AA029C224BD4C6F946881261848AFCF689AA7BF1A0C3C5BC50559D14704194DE5BBD625C0FD0C49F75C4C32EF4CA801415DA3BE4AC965B2FC706AB7E 8 BackDoor.Gurl.2 [DrWeb]
zoo %SystemDrive%\DOCUMENTS AND SETTINGS\FIRST\APPLICATION DATA\SCREENSAVERPRO.SCR
addsgn A7679B1991AAC76F5405EFB1EDD57605678A77EB5DFF5D780CDE9A6D11D6FA7147178157B76874956A800FAA19C708FAF4EA01AE14DA3B114EA6E52F4E3BF676 8 BackDoor.IRC.NgrBot.42 [DrWeb]
zoo %SystemDrive%\DOCUMENTS AND SETTINGS\FIRST\APPLICATION DATA\MICROSOFT\NGZCZP.EXE
zoo %SystemDrive%\RECYCLER\S-1-5-21-0243556031-888888379-781863308-17255\PROXZY15.EXE
zoo %SystemDrive%\RECYCLER\S-1-5-21-0243556031-888888379-781863308-17254\PROXZY14.EXE
zoo %SystemDrive%\RECYCLER\S-1-5-21-0243556031-888888379-781863308-17253\PROXZY13.EXE
zoo %SystemDrive%\RECYCLER\S-1-5-21-0243556031-888888379-781863308-17251\PROXZY12.EXE
zoo %SystemDrive%\RECYCLER\S-1-5-21-0243556031-888888379-781863308-10259\PROXZY109.EXE
zoo %SystemDrive%\RECYCLER\S-1-5-21-0243556031-888888379-781863308-17259\PROXZY19.EXE
zoo %SystemDrive%\RECYCLER\S-1-5-21-0243556031-888888379-781863308-17258\PROXZY18.EXE
zoo %SystemDrive%\RECYCLER\S-1-5-21-0243556031-888888379-781863308-17257\PROXZY17.EXE
addsgn 1AA3119A5583D98CF42B95BC7490500550880F35602C797885483AE9DB3AFA09374146974A141E342380F18CAE155BFA7DB5FE2CDCEA58684477A4A401ED08F0 8 dork.20130526
zoo %SystemDrive%\DOCUMENTS AND SETTINGS\FIRST\APPLICATION DATA\20.EXE
delall I:\RECYCLER\S-51-9-25-3434476501-1644491922-601013333-1214\WINLOGON.EXE
delall J:\RECYCLER\S-51-9-25-3434476501-1644491922-601013333-1214\WINLOGON.EXE
delall G:\RECYCLER\S-51-9-25-3434476501-1644491922-601013333-1214\WINLOGON.EXE
addsgn 1AA1119A5583D98CF42B95BC74A0500550880F35602E797885483AE9DB3AFA09374146974A141E342380F18CAE175BFA7DB5FE2CDCEA586E4477A4A401ED08F0 8 Win32/VBInject.gen!IK [Microsoft]
zoo %SystemDrive%\DOCUMENTS AND SETTINGS\FIRST\APPLICATION DATA\IEUPDATE.SCR
adddir %SystemDrive%\DOCUMENTS AND SETTINGS\FIRST\APPLICATION DATA
chklst
delvir
deltmp
delnfr
regt 5
CZOO
restart