begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
DeleteFile('C:\Program Files\plugin.exe');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','plugin');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','Generic Host for Win32 Services');
DeleteFile('C:\DOCUME~1\Admin\LOCALS~1\Temp\ztapi.exe');
DeleteFile('C:\Windows\Tasks\Windows Update.job');
ExecuteSysClean;
ExecuteRepair(6);
ExecuteRepair(16);
RebootWindows(true);
end.

 
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
DeleteFile('c:\windows\system32\csrcs.exe');
DeleteFile('c:\docume~1\7384~1\locals~1\temp\synsql.exe');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','synsql');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\RunServices','csrcs');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run','csrcs');
DeleteFile('Explorer.exe csrcs.exe');
DeleteFile('E:\autorun.inf');
DeleteFile('E:\JvHaeL.EXe');
DeleteFile('E:\jvHaeL.ExE');
ExecuteSysClean;
ExecuteRepair(6);
ExecuteRepair(16);
RegKeyIntParamWrite('HKLM','SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer','NoDriveTypeAutoRun', 221); 
RebootWindows(true);
end.