begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
DeleteFile('C:\RECYCLER\S-1-5-21-4290039517-7174199728-937556621-2181\nissan.exe');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows NT\CurrentVersion\Winlogon','Taskman');
ClearIECache;
ExecuteSysClean;
RebootWindows(true);
end.

begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 SetServiceStart('Regview Controler', 4);
 QuarantineFile('C:\WINDOWS\system32\drivers\Regview.exe','');
 QuarantineFile('C:\WINDOWS\system32\KB905474\wgasetup.exe','');
 DeleteFile('C:\WINDOWS\system32\KB905474\wgasetup.exe');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','SYSTEM\CurrentControlSet\Services\Eventlog\Application\WgaSetup','EventMessageFile');
 DeleteFile('C:\WINDOWS\system32\drivers\Regview.exe');
RegKeyIntParamWrite('HKLM','SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer','NoDriveTypeAutoRun', 221);
BC_ImportAll;
ExecuteSysClean;
BC_QrFile('C:\System Volume Information\_restore{9B6F4BCC-6E57-4292-8BD0-6F58E2D5EB36}\RP111\A0078481.exe');
 BC_DeleteFile('C:\System Volume Information\_restore{9B6F4BCC-6E57-4292-8BD0-6F58E2D5EB36}\RP111\A0078481.exe');
BC_DeleteSvc('Regview Controler');
BC_Activate;
ClearHostsFile;
ExecuteRepair(16);
ExecuteWizard('TSW', 2, 2, true);
ExecuteWizard('SCU', 2, 2, true);
RebootWindows(true);
end.

begin
CreateQurantineArchive(GetAVZDirectory+'quarantine.zip');
end.