begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
DeleteService('wiaxax');
DeleteService('pqucricrcejt');
DeleteService('dsggrfnjov');
DeleteService('hsutnxpoq');
DeleteFile('C:\DOCUME~1\sasha\LOCALS~1\Temp\ouiytu.sys');
DeleteFile('C:\DOCUME~1\sasha\LOCALS~1\Temp\hvxtpmag.sys');
DeleteFile('C:\DOCUME~1\sasha\LOCALS~1\Temp\sakvlhqgswd.sys');
DeleteFile('C:\DOCUME~1\sasha\LOCALS~1\Temp\pcjhxtetydihfs.sys');
DeleteFile('C:\DOCUME~1\sasha\LOCALS~1\Temp\w_w20A.tmp');
DeleteFile('%AppData%\CMedia\CMedia.dll');
DeleteFile('%AppData%\CMedia\Uninstall.exe');
RegKeyDel('HKLM','SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CMedia');
DeleteFile('C:\System Volume Information\_restore{DF7843EB-FA4D-4D20-9E75-A1E4263ACDA9}\RP62\A0035706.exe:userini.exe:$DATA');
DelCLSID('{6B830884-20E3-4AB6-B672-2629F0F72071}');
DeleteFileMask('C:\Documents and Settings\sasha\Local Settings\Temp','*.*',true);
DeleteFileMask('C:\WINDOWS\Temp','*.*',true);
ExecuteSysClean;
RebootWindows(true);
end.

 
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
DeleteFile('C:\WINDOWS\ingvuso.dll');
RegKeyParamDel('HKEY_USERS','.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run','Lbiyagifinosob');
RegKeyParamDel('HKEY_USERS','S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Run','Lbiyagifinosob');
DeleteFile('C:\Program Files\Common Files\Target Marketing Agency\TMAgent\tmagent.dll');
DelBHO('{35A6E2B1-27A9-47D2-913C-559E1EF1D034}');
ExecuteSysClean;
RebootWindows(true);
end.

begin
ExecuteRepair(20);
ExecuteWizard('TSW', 2, 2, true);
ExecuteWizard('SCU', 2, 2, true);
RebootWindows(true);
end.