begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 DelCLSID('{67MAD3M8-3MAD-81AD-MAD6-78OP5G1234521}');
 DelCLSID('{67KLN5J0-4OPM-61WE-KKX3-457QWE23218}');
 QuarantineFile('C:\MAD\TRACK\mad.exe','');
 QuarantineFile('C:\ACC2\F2C2\acc1.exe','');
 QuarantineFile('C:\WINDOWS\system32\sdra64.exe','');
 QuarantineFile('C:\WINDOWS\system32\XP-D16C5EDC.EXE','');
 QuarantineFile('C:\WINDOWS\svcgoost.exe','');
 QuarantineFile('C:\DOCUME~1\Admin\LOCALS~1\Temp\E_4\shell.fne','');
 QuarantineFile('C:\DOCUME~1\Admin\LOCALS~1\Temp\E_4\krnln.fnr','');
 QuarantineFile('C:\DOCUME~1\Admin\LOCALS~1\Temp\E_4\internet.fne','');
 QuarantineFile('C:\DOCUME~1\Admin\LOCALS~1\Temp\E_4\eAPI.fne','');
 QuarantineFile('C:\DOCUME~1\Admin\LOCALS~1\Temp\E_4\dp1.fne','');
 QuarantineFile('C:\DOCUME~1\Admin\LOCALS~1\Temp\E_4\com.run','');
 QuarantineFile('c:\windows\system32\xp-d16c5edc.exe','');
 TerminateProcessByName('c:\windows\system32\xp-d16c5edc.exe');
 QuarantineFile('c:\windows\svcgoost.exe','');
 TerminateProcessByName('c:\windows\svcgoost.exe');
 DeleteFile('c:\windows\svcgoost.exe');
 DeleteFile('c:\windows\system32\xp-d16c5edc.exe');
 DeleteFile('C:\DOCUME~1\Admin\LOCALS~1\Temp\E_4\com.run');
 DeleteFile('C:\DOCUME~1\Admin\LOCALS~1\Temp\E_4\dp1.fne');
 DeleteFile('C:\DOCUME~1\Admin\LOCALS~1\Temp\E_4\eAPI.fne');
 DeleteFile('C:\DOCUME~1\Admin\LOCALS~1\Temp\E_4\internet.fne');
 DeleteFile('C:\DOCUME~1\Admin\LOCALS~1\Temp\E_4\krnln.fnr');
 DeleteFile('C:\DOCUME~1\Admin\LOCALS~1\Temp\E_4\shell.fne');
 DeleteFile('C:\WINDOWS\svcgoost.exe');
 DeleteFile('C:\WINDOWS\system32\XP-D16C5EDC.EXE');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','ATI Helper');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','XP-D16C5EDC');
 DeleteFile('C:\WINDOWS\system32\sdra64.exe');
 DeleteFile('C:\ACC2\F2C2\acc1.exe');
 DeleteFile('C:\MAD\TRACK\mad.exe');
BC_ImportDeletedList;
ExecuteSysClean;
BC_Activate;
ExecuteRepair(17);
RebootWindows(true);
end.

var
  qfolder: string;
  qname: string;
begin
  qname := GetAVZDirectory + '..\Quarantine\quarantine.zip';
  qfolder := ExtractFilePath(qname);
  if (not DirectoryExists(qfolder)) then CreateDirectory(qfolder);
  CreateQurantineArchive(qname);
  ExecuteFile('explorer.exe', qfolder, 1, 0, false);
end.