F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\autores.exe,C:\WINDOWS\system32\twex.exe,

begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 DeleteFile('C:\Documents and Settings\Администратор\Application Data\lenut.exe');
 DeleteFile('C:\Documents and Settings\Администратор\Администратор.exe');
 RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','wscco');
 RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','Администратор');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','sysgif32');
 DeleteFile('C:\WINDOWS\TEMP\~TM3B1.tmp');
 DeleteFile('C:\WINDOWS\autores.exe');
 DeleteFile('C:\WINDOWS\msauc.exe');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','lsass driver');
 DeleteFile('C:\WINDOWS\system32\twex.exe');
 DeleteFile('C:\WINDOWS\system32\ygtlib.dll');
 DelBHO('{0890773E-C574-473A-BF4B-7A0AC87A484F}');
 DelCLSID('{0890773E-C574-473A-BF4B-7A0AC87A484F}');
ExecuteSysClean;
RebootWindows(true);
end.

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://toolbar.ask.com/toolbarv/askRedirect?o=10587&gct=&gc=1&q=
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://toolbar.ask.com/toolbarv/askRedirect?o=10587&gct=&gc=1&q=
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://toolbar.ask.com/toolbarv/askRedirect?o=10587&gct=&gc=1&q=%s
R3 - URLSearchHook: DefaultSearchHook Class - {C94E154B-1459-4A47-966B-4B843BEFC7DB} - C:\Program Files\AskSearch\bin\DefaultSearch.dll (file missing)
O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)

begin
 SearchRootkit(true, true);
 SetAVZGuardStatus(true);
 DeleteFile('C:\Program Files\AskBarDis\bar\bin\askBar.dll');
 DeleteFile('C:\Program Files\AskSearch\bin\DefaultSearch.dll');
 DeleteFileMask('C:\Program Files\AskBarDis\bar\bin\', '*.*', true);
 DeleteDirectory('C:\Program Files\AskBarDis\bar\bin');
 DelBHO('{C94E154B-1459-4A47-966B-4B843BEFC7DB}');
 DelBHO('{201f27d4-3704-41d6-89c1-aa35e39143ed}');
 BC_ImportALL;
 ExecuteSysClean;
 BC_Activate;
 ExecuteRepair(13 );
 RebootWindows(true);
end.