begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
DeleteFile('c:\windows\system32\user32.exe');
DeleteFile('C:\Program Files\plugin.exe');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','plugin');
DeleteFile('E:\autorun.inf');
DeleteFile('E:\md.exe');
DeleteFile('C:\WINDOWS\System32\netprotocol.dll');
ExecuteSysClean;
ExecuteRepair(16);
ExecuteWizard('TSW', 3, 3, true);
RebootWindows(true);
end.

begin
SetAVZGuardStatus(True);
SearchRootkit(true, true);
 DeleteService('upperdev');
 DeleteFile('C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys');
 DeleteFile('C:\DOCUME~1\АДМИНИ~1\LOCALS~1\Temp\UIUCU.EXE');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','UIUCU');
 DeleteFile('C:\Program Files\Bonjour\mDNSResponder.exe');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','SYSTEM\CurrentControlSet\Services\Eventlog\Application\Bonjour Service','EventMessageFile');
 DeleteFile('C:\WINDOWS\system32\vksaver.dll');
BC_ImportDeletedList;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.

 
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
DeleteFile('d:\windows\system32\7312c7\fcdc19.exe');
DeleteFile('D:\DOCUME~1\7922~1\LOCALS~1\Temp\E_N4\dp1.fne');
DeleteFile('D:\DOCUME~1\7922~1\LOCALS~1\Temp\E_N4\eAPI.fne');
DeleteFile('D:\DOCUME~1\7922~1\LOCALS~1\Temp\E_N4\HtmlView.fne');
DeleteFile('D:\DOCUME~1\7922~1\LOCALS~1\Temp\E_N4\internet.fne');
DeleteFile('D:\DOCUME~1\7922~1\LOCALS~1\Temp\E_N4\krnln.fnr');
DeleteFile('D:\DOCUME~1\7922~1\LOCALS~1\Temp\E_N4\shell.fne');
DeleteFile('D:\WINDOWS\system32\7312C7\FCDC19.EXE');
DeleteFile('D:\WINDOWS\system32\vcmgcd32.dll');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','FCDC19');
DeleteFile('D:\a_safC3TJq5Mrr_Mgz.dll');
DeleteFile('D:\System Volume Information\_restore{23F06CC7-706E-4AA1-AB81-98FA8A91366B}\RP61\A0011327.exe:BAK:$DATA');
DeleteFile('D:\System Volume Information\_restore{23F06CC7-706E-4AA1-AB81-98FA8A91366B}\RP61\A0011386.exe:BAK:$DATA');
DelBHO('{21B88D41-A30C-1DC9-F336-C8F310ABB17A}');
DelCLSID('{21B88D41-A30C-1DC9-F336-C8F310ABB17A}');
ExecuteSysClean;
ExecuteRepair(1);
ExecuteRepair(6);
RebootWindows(true);
end.

 
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
DeleteFile('D:\WINDOWS\system32\vcmgcd32.dll');
DeleteFile('F:\autorun.inf');
BC_DeleteFile('D:\WINDOWS\system32\vcmgcd32.dll');
BC_ImportDeletedList;
ExecuteSysClean;
RegKeyIntParamWrite('HKLM','SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer','NoDriveTypeAutoRun', 221);
BC_Activate;
RebootWindows(true);
end.