begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
SetServiceStart('Schedule', 4);
TerminateProcessByName('c:\windows\system32\csrcs.exe');
DeleteService('sysrest.sys');
DeleteService('helpsvcMSDTC');
DeleteFile('C:\WINDOWS\system32\nvrtm.dll');
DeleteFile('C:\WINDOWS\system32\amstreamq.exe');
DeleteFile('C:\windows\system32\sysrest.sys');
DeleteFile('C:\Documents and Settings\Школа\Главное меню\Программы\Автозагрузка\mhbupd32.exe');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run','csrcs');
DeleteFile('C:\WINDOWS\system32\twext.exe');
DeleteFile('Explorer.exe csrcs.exe');
DeleteFile('C:\WINDOWS\System32\y18IYe4t.exe');
DeleteFile('C:\WINDOWS\Temp\wpv121238107706.exe');
DeleteFile('C:\WINDOWS\Temp\wpv431238422083.exe');
DeleteFile('C:\WINDOWS\Temp\wpv591238107706.exe');
DeleteFile('C:\WINDOWS\Temp\wpv941238422083.exe');
DeleteFile('C:\WINDOWS\system32\csrcs.exe');
DeleteFile('C:\Documents and Settings\Школа\Application Data\svchosts.exe');
DeleteFileMask('C:\WINDOWS\Temp', '*.*', true);
DeleteFileMask('C:\Documents and Settings\Школа\Local Settings\Temp', '*.*', true);
ClearQuarantine;
ClearIECache;
ExecuteSysClean;
ExecuteRepair(1);
ExecuteRepair(6);
ExecuteRepair(16);
RebootWindows(true);
end.

 
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
DelCLSID('{83821C2B-32A8-4DD7-B6D4-44309A78E668}');
DelBHO('{83821C2B-32A8-4DD7-B6D4-44309A78E668}');
DeleteFile('D:\autorun.inf');
ExecuteSysClean;
RebootWindows(true);
end.