begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 DeleteFile('C:\WINDOWS\Tasks\autochk.job');
 QuarantineFile('C:\Documents and Settings\Миша\Local Settings\Temporary Internet Files\Content.IE5\UPMX4J6R\test2[2].exe','');
 QuarantineFile('C:\Documents and Settings\Миша\Local Settings\Temporary Internet Files\Content.IE5\UPMX4J6R\test2[1].exe','');
 QuarantineFile('C:\Documents and Settings\Миша\Local Settings\Temp\wwfgmyu.exe','');
 QuarantineFile('C:\Documents and Settings\Миша\Local Settings\Temp\bxbcwpa.exe','');
 QuarantineFile('C:\DOCUME~1\Миша\LOCALS~1\Temp\blqd.exe','');
 QuarantineFile('C:\Documents and Settings\Миша\Шаблоны\A.kotnorB.com','');
 QuarantineFile('C:\WINDOWS\system32\gufdyz.dll','');
 DeleteFile('C:\WINDOWS\system32\gufdyz.dll');
 DeleteFile('C:\Documents and Settings\Миша\Шаблоны\A.kotnorB.com');
 DeleteFile('C:\DOCUME~1\Миша\LOCALS~1\Temp\blqd.exe');
 DeleteFile('C:\Documents and Settings\Миша\Local Settings\Temp\bxbcwpa.exe');
 DeleteFile('C:\Documents and Settings\Миша\Local Settings\Temp\wwfgmyu.exe');
 DeleteFile('C:\Documents and Settings\Миша\Local Settings\Temporary Internet Files\Content.IE5\UPMX4J6R\test2[1].exe');
 DeleteFile('C:\Documents and Settings\Миша\Local Settings\Temporary Internet Files\Content.IE5\UPMX4J6R\test2[2].exe');
DelAutorunByFileName('C:\WINDOWS\system32\gufdyz.dll');
DeleteFileMask('C:\WINDOWS\Tasks','At*.job', false);
BC_ImportDeletedList;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.

var
  qfolder: string;
  qname: string;
begin
  qname := GetAVZDirectory + '..\Quarantine\quarantine.zip';
  qfolder := ExtractFilePath(qname);
  if (not DirectoryExists(qfolder)) then CreateDirectory(qfolder);
  CreateQurantineArchive(qname);
  ExecuteFile('explorer.exe', qfolder, 1, 0, false);
end.

begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 DeleteFile('C:\Windows\msnmsgr.exe');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','MSN');
 DeleteFile('C:\Documents and Settings\Миша\Local Settings\Temp\cgdkham.exe');
 DeleteFile('C:\Documents and Settings\Миша\Local Settings\Temp\crkftkx.exe');
 DeleteFile('C:\Documents and Settings\Миша\Local Settings\Temp\jqpjnkp.exe');
 DeleteFile('C:\Documents and Settings\Миша\Local Settings\Temp\jrzthom.exe');
 DeleteFile('C:\Documents and Settings\Миша\Local Settings\Temp\movhoaa.exe');
 DeleteFile('C:\Documents and Settings\Миша\Local Settings\Temp\olxjznw.exe');
 DeleteFile('C:\Documents and Settings\Миша\Local Settings\Temp\zqdyyru.exe');
 DeleteFile('C:\Documents and Settings\Миша\Local Settings\Temporary Internet Files\Content.IE5\91CDL9C5\test2[1].exe');
BC_ImportDeletedList;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.

R3 - URLSearchHook: (no name) -  - (no file)
R3 - URLSearchHook: DefaultSearchHook Class - {C94E154B-1459-4A47-966B-4B843BEFC7DB} - C:\Program Files\AskSearch\bin\DefaultSearch.dll
F2 - REG:system.ini: UserInit=explorer.exe
O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O20 - AppInit_DLLs: C:\WINDOWS\system32\gufdyz.dll

begin
 SearchRootkit(true, true);
 SetAVZGuardStatus(true);
 DelBHO('{C94E154B-1459-4A47-966B-4B843BEFC7DB}');
 DeleteFile('C:\Program Files\AskSearch\bin\DefaultSearch.dll');
 DeleteFileMask('C:\Program Files\Ask.com\ ','*.* ', true );
 DeleteDirectory('C:\Program Files\Ask.com ');
 BC_ImportALL;
 ExecuteSysClean;
 BC_Activate;
 RebootWindows(true);
end.