R3 - URLSearchHook: (no name) -  - (no file)
O4 - HKLM\..\Run: [Generic Host for Win32 Services] L‘|x
O20 - AppInit_DLLs:  eqeenb.dll

begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 DelBHO('{DFDC8970-FD66-4385-B8C0-835A4AA1DA00}');
RenameFile('C:\WINDOWS\System32\sfcfiles.dll', 'C:\WINDOWS\System32\sfcfiles.bak');
CopyFile('C:\WINDOWS\System32\dllcache\sfcfiles.dll','C:\WINDOWS\System32\sfcfiles.dll');
 QuarantineFile('C:\WINDOWS\system32\eqeenb.dll','');
 DeleteService('GarenaPEngine');
 DeleteFile('C:\DOCUME~1\Admin\LOCALS~1\Temp\SVW1EA.tmp');
DeleteFile('C:\WINDOWS\System32\sfcfiles.bak');
DeleteFile('C:\WINDOWS\system32\eqeenb.dll');
DeleteFileMask('%Tmp%', '*.*', true);
DeleteFileMask('C:\Documents and Settings\Admin\Local Settings\Temp', '*.*', true);
BC_ImportDeletedList;
ExecuteSysClean;
ExecuteWizard('TSW', 2, 2, true);
ExecuteWizard('SCU', 2, 2, true);
BC_Activate;
RebootWindows(true);
end.