begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
ClearQuarantineEx(True);
 QuarantineFile('C:\WINDOWS\system32\BTHMHfEdbhiEIa.exe','');
 QuarantineFile('C:\Documents and Settings\User\Application Data\Ywumz\pyicv.exe','');
 DeleteService('newdriver');
 DeleteFile('C:\WINDOWS\gigalan.sys');
 DeleteFile('C:\Documents and Settings\User\Application Data\Ywumz\pyicv.exe');
 RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','{9BB56F8D-2FA0-2AE4-8911-AC0A0BDF5DDF}');
 DeleteFile('C:\WINDOWS\system32\BTHMHfEdbhiEIa.exe');
 RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run','yHFzmSmZujKRFlDJeCDwJpcJXP');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.

begin
CreateQurantineArchive(GetAVZDirectory+'quarantine.zip');
end.