begin
 SearchRootkit(true, true);
 SetAVZGuardStatus(true);
 DeleteService('E98EB618');
 DeleteFile('C:\WINDOWS\system32\E023DC9C.EXE');
 BC_ImportALL;
 ExecuteSysClean;
 BC_Activate;
 ExecuteWizard('TSW', 2, 2, true);
 ExecuteWizard('SCU', 2, 2, true);
 RebootWindows(true);
end.

 
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
DeleteFile('C:\BlaB\LaBLa\StReeT.exe');
RegKeyParamDel('HKEY_USERS','S-1-5-21-1200143256-3170838021-1506991540-1132\Software\Microsoft\Windows\CurrentVersion\Run','IOvEDViJeDuSe');
DeleteFile('C:\Early\life\UpDaTe.exe');
RegKeyParamDel('HKEY_USERS','S-1-5-21-1200143256-3170838021-1506991540-1132\Software\Microsoft\Windows\CurrentVersion\Run','LiNeoFDefense');
ExecuteSysClean;
RebootWindows(true);
end.

O2 - BHO: MyCentria Internet Mate v1.9 - {FFFC57DB-1DE3-4303-B24D-CEE6DCDD3D86} - (no file)
O4 - HKCU\..\Run: [vuzeb] C:\Documents and Settings\Администратор\vuzeb.exe

begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
TerminateProcessByName('c:\documents and settings\Администратор\vuzeb.exe');
QuarantineFile('c:\documents and settings\Администратор\vuzeb.exe','');
QuarantineFile('C:\ne_smijem\stati\t1kv1c3.exe','');
QuarantineFile('C:\Ozzy\iSaWeSoMe\BooMdEYaDa.exe','');
QuarantineFile('c:\SYSTEM\G-923-321232-3232-32211-23\memory.exe','');
DeleteFile('c:\documents and settings\Администратор\vuzeb.exe');
DeleteFile('c:\SYSTEM\G-923-321232-3232-32211-23\memory.exe');
DeleteFile('C:\Ozzy\iSaWeSoMe\BooMdEYaDa.exe');
DeleteFile('C:\ne_smijem\stati\t1kv1c3.exe');
DeleteFileMask('C:\Documents and Settings\Администратор\Local Settings\Temp', '*.*', true);
DelBHO('FFFC57DB-1DE3-4303-B24D-CEE6DCDD3D86');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','vuzeb');
BC_ImportALL;
ExecuteSysClean;
ExecuteWizard('TSW', 2, 2, true);
ExecuteWizard('SCU', 2, 2, true);
BC_Activate;
RebootWindows(true);
end.

begin
CreateQurantineArchive(GetAVZDirectory+'quarantine.zip');
end.