F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,\\?\globalroot\systemroot\system32\9UXtIlv.exe,\\?\globalroot\systemroot\system32\Fd65RtA.exe,
O2 - BHO: (no name) - AutorunsDisabled - (no file)
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - (no file)
O2 - BHO: VirtualNetwork module - {6C517674-DE1C-4493-977C-34A1BFAB35BA} - (no file)

begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 DeleteService('WINIO');
 DeleteFile('D:\Temp\Rar$EX00.797\winio.sys');
 DeleteFile('C:\WINDOWS\System32\netprotocol.exe');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','Netprotocol');
 DeleteFile('C:\DOCUME~1\Moon\LOCALS~1\Temp\espCCFF.tmp');
 RegSearch('HKLM', '', 'espCCFF');
 SaveLog(GetAVZDirectory + 'avz.log');
BC_ImportDeletedList;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.