R3 - URLSearchHook: (no name) -  - (no file)
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\system32\4b42b1c2.exe,\\?\globalroot\systemroot\system32\YSm1m0i.exe,
O4 - HKCU\..\Run: [synsql] C:\DOCUME~1\Admin\LOCALS~1\Temp\synsql.exe
O4 - HKLM\..\Policies\Explorer\Run: [userini] C:\WINDOWS\system32\userini.exe
O4 - HKCU\..\Policies\Explorer\Run: [userini] C:\WINDOWS\system32\userini.exe

begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 TerminateProcessByName('c:\docume~1\admin\locals~1\temp\synsql.exe');
 DeleteFile('c:\docume~1\admin\locals~1\temp\synsql.exe');
 DeleteFile('C:\DOCUME~1\Admin\LOCALS~1\Temp\synsql.exe');
DeleteFile('C:\WINDOWS\system32\4b42b1c2.exe');
DeleteFile('\\?\globalroot\systemroot\system32\YSm1m0i.exe,');
DeleteFile(' C:\WINDOWS\Temp\INF16.tmp');
DeleteFile('C:\WINDOWS\Temp\INF15.tmp');
DeleteFile('C:\WINDOWS\Temp\INF14.tmp');
BC_ImportDeletedList;
ExecuteSysClean;
BC_Activate;
ExecuteWizard('TSW', 2, 2, true);
RebootWindows(true);
end.