begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
TerminateProcessByName('c:\documents and settings\im\application data\svcst.exe');
TerminateProcessByName('c:\windows\system32\servises.exe');
TerminateProcessByName('c:\documents and settings\im\application data\seres.exe');
TerminateProcessByName('c:\windows\system32\restorer64_a.exe');
TerminateProcessByName('c:\documents and settings\im\restorer64_a.exe');
TerminateProcessByName('c:\windows\system32\b.tmp');
DeleteService('acssrv');
DeleteFile('c:\windows\system32\b.tmp');
DeleteFile('c:\documents and settings\im\restorer64_a.exe');
DeleteFile('c:\documents and settings\im\application data\seres.exe');
DeleteFile('c:\documents and settings\im\application data\svcst.exe');
DeleteFile('C:\WINDOWS\system32\restorer64_a.exe');
DeleteFile('C:\WINDOWS\system32\servises.exe');
DeleteFile('C:\WINDOWS\TEMP\VRT4.tmp');
DeleteFile('C:\RECYCLER\S-1-5-21-5951944284-5843191050-649169918-1754\f1.exe');
DeleteFile('C:\WINDOWS\Temp\wpv421254983689.exe');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','sysgif32');
DeleteFile('C:\WINDOWS\system32\regedit.exe');
ExecuteSysClean;
RebootWindows(true);
end.

 
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
DeleteService('acssrv');
DeleteFile('C:\WINDOWS\TEMP\VRT4.tmp');
DeleteFile('C:\WINDOWS\system32\regedit.exe');
DeleteFile('explorer.exe,c:\recycler\s-1-5-21-5951944284-5843191050-649169918-1754\f1.exe');
ExecuteSysClean;
RebootWindows(true);
end.