begin
 SearchRootkit(true, true);
 SetAVZGuardStatus(true);
 DeleteService('AshEvtSvc');
 TerminateProcessByName('c:\documents and settings\all users\wordpad\{e933a789-8a5d-c7fd-1e69-d8f4e63bce2c}\cftmon.exe');
 DeleteFile('c:\documents and settings\all users\wordpad\{e933a789-8a5d-c7fd-1e69-d8f4e63bce2c}\cftmon.exe');
 DeleteFile('C:\Documents and Settings\All Users\WordPad\{E933A789-8A5D-C7FD-1E69-D8F4E63BCE2C}\cftmon.exe');
 DeleteFile('C:\WINDOWS\system32\sdra64.exe');
 DeleteFile('C:\WINDOWS\system32\userini.exe');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','userini');
 RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','userini');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run','userini');
 RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run','userini');
 BC_ImportALL;
 ExecuteSysClean;
 BC_Activate;
 ExecuteRepair(6 );
 ExecuteRepair(16 );
 RebootWindows(true);
end.