begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
DeleteFile('D:\Documents and Settings\balkan\tmp\nvondgc.exe');
DeleteFile('Error scan.job');
DeleteFile('SocksA.exe');
DeleteFile('D:\System Volume Information\_restore{94BEBBCA-BDE4-4ED8-9899-00D55FE449AA}\RP135\A0222174.msi');
DeleteFile('D:\System Volume Information\_restore{94BEBBCA-BDE4-4ED8-9899-00D55FE449AA}\RP136\A0222220.msi');
DeleteFile('D:\System Volume Information\_restore{94BEBBCA-BDE4-4ED8-9899-00D55FE449AA}\RP139\A0223423.msi');
DeleteFile('D:\System Volume Information\_restore{94BEBBCA-BDE4-4ED8-9899-00D55FE449AA}\RP146\A0224933.msi');
DeleteFile('D:\Documents and Settings\balkan\tmp\qllib.tmp');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','ASocksrv');
BC_ImportALL;
ExecuteSysClean;
ExecuteWizard('TSW', 2, 2, true);
ExecuteWizard('SCU', 2, 2, true);
BC_Activate;
RebootWindows(true);
end.

begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 RegKeyDel('HKLM','SOFTWARE\Microsoft\Code Store Database\Distribution Units\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}');
 RegKeyDel('HKLM','SOFTWARE\Microsoft\Code Store Database\Distribution Units\{31435657-9980-0010-8000-00AA00389B71}');
 BC_DeleteFile('D:\Documents and Settings\balkan\tmp\nvondgc.exe');
BC_DeleteFile('d:\windows\Tasks\Error scan.job');
BC_Activate;
ExecuteSysClean;
RebootWindows(true);
end.