begin
 SearchRootkit(true, true);
 SetAVZGuardStatus(true);
 TerminateProcessByName('c:\sysprep\psr\hookpril.exe');
 DeleteFile('C:\Windows\Tasks\PCConfidential.job');
 DeleteFile('C:\Documents and Settings\Владелец\Local Settings\Temp\~DF176F.tmp');
 DeleteFile('c:\sysprep\psr\hookpril.exe');
 DeleteFile('C:\Sysprep\PSR\hook_dll.dll');
 DeleteFile('C:\Sysprep\PSR\hookpril.exe');
 DeleteFile('C:\Sysprep\PSR\PcPexG.exe');
 DeleteFile('C:\DOCUME~1\7B5C~1\LOCALS~1\Temp\catchme.sys');
 DeleteFile('C:\DOCUME~1\7B5C~1\LOCALS~1\Temp\file_4632.exe');
 DeleteFile('C:\WINDOWS\system32\ngrskter.dll');
 DeleteFile('C:\Program Files\AskBarDis\bar\bin\askBar.dll');
 DeleteFile('C:\WINDOWS\system32\amylib.dll');
 DeleteFile('C:\WINDOWS\system32\qxalib.dll');
 DeleteFile('C:\WINDOWS\system32\fxolib.dll');
 DeleteFile('C:\Documents and Settings\Владелец\Application Data\ajsa8W7OqX.dll');
 DeleteFile('C:\SysFiles\a_u0GEbdJrt0_Rln_U97.dll');
 DeleteFile('C:\Program Files\Winferno\PC Confidential\PCConfidential.exe');
 DeleteFile('C:\WINDOWS\system32\kavo.exe');
 DeleteFile('c:\Sysprep\PSR\PcPexG.exe');
 DelBHO('{92780B25-18CC-41C8-B9BE-3C9C571A8263}');
 DelBHO('{925DAB62-F9AC-4221-806A-057BFB1014AA}');
 DelBHO('{53F6FCCD-9E22-4d71-86EA-6E43136192AB}');
 DelBHO('{3041d03e-fd4b-44e0-b742-2d9b88305f98}');
 DelBHO('{DEF20AEC-48FE-A995-01E4-4C6F357D5E3B}');
 DelBHO('{9211574A-C6C0-05AF-2294-5AD1F8314A80}');
 DelBHO('{88888888-8888-8888-8888-888888888888}');
 DelBHO('{749987AA-C119-4D17-953F-BCE41C2129E8}');
 DelBHO('{40363E61-D5A4-4258-813C-9363C076253E}');
 DelBHO('{29B981AD-1CE1-42A4-84B1-EF7781BF4326}');
 DelBHO('{201f27d4-3704-41d6-89c1-aa35e39143ed}');
 DelBHO('{1DFA2A6E-3CB3-4141-A96F-D42244A6B50E}');
 DeleteService('catchme');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','PcPexG.exe');
 RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','kava');
 RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','file_4632');
 BC_ImportALL;
 ExecuteSysClean;
 BC_Activate;
 ExecuteRepair(1 );
 RebootWindows(true);
end.

 
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
DeleteFile('C:\Documents and Settings\Преподаватель\Application Data\msmedia.dll');
DeleteFile('c:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1033\netsrv.exe');
DeleteFileMask('%AppData%\CMedia', '*.*', true);
DeleteDirectory('%AppData%\CMedia');
RegKeyDel('HKLM','SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CMedia');
DelCLSID('{28ABC5C0-4FCB-11CF-AAX5-81CX1C635612}');
DelCLSID('{9D64F819-9380-8473-DAB2-702FCB3D7A3E}');
DelCLSID('{88888888-8888-8888-8888-888888888888}');
DelCLSID('{6B830884-20E3-4AB6-B672-2629F0F72071}');
DelBHO('{9D64F819-9380-8473-DAB2-702FCB3D7A3E}');
DelBHO('{88888888-8888-8888-8888-888888888888}');
ExecuteSysClean;
RebootWindows(true);
end.

begin
 SearchRootkit(true, true);
 SetAVZGuardStatus(true);
 TerminateProcessByName('c:\docume~1\c741~1.ole\locals~1\temp\file_4632.exe');
 DeleteFile('C:\System Volume Information\_restore{743BC187-BF3F-4F48-AAB7-66B0BCEBE791}\RP31\A0006037.msi');
 DeleteFile('C:\WINDOWS\Installer\8e71f5.msi');
 DeleteFile('c:\docume~1\c741~1.ole\locals~1\temp\file_4632.exe');
 DeleteFile('C:\DOCUME~1\C741~1.OLE\LOCALS~1\Temp\file_4632.exe');
 DeleteFile('C:\SysFiles\a0NLvILlbUQbIf_mWyK.dll');
 DelBHO('{88888888-8888-8888-8888-888888888888}');
 DelBHO('{765C5053-3C98-968B-2490-E4532BBB03E6}');
 RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','file_4632');
 BC_ImportALL;
 ExecuteSysClean;
 BC_Activate;
 RebootWindows(true);
end.