begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
ExecuteRepair(6);
ExecuteRepair(8);
RebootWindows(true);
end.

 
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
DeleteFile('c:\windows\system32\algssl.exe');
DeleteFile('c:\windows\system32\explorer.exe');
DeleteFile('c:\windows\system32\xp-4ff57ddc.exe');
DeleteFile('C:\DOCUME~1\08E2~1\LOCALS~1\Temp\E_4\com.run');
DeleteFile('C:\DOCUME~1\08E2~1\LOCALS~1\Temp\E_4\dp1.fne');
DeleteFile('C:\DOCUME~1\08E2~1\LOCALS~1\Temp\E_4\eAPI.fne');
DeleteFile('C:\DOCUME~1\08E2~1\LOCALS~1\Temp\E_4\internet.fne');
DeleteFile('C:\DOCUME~1\08E2~1\LOCALS~1\Temp\E_4\krnln.fnr');
DeleteFile('C:\DOCUME~1\08E2~1\LOCALS~1\Temp\E_4\RegEx.fnr');
DeleteFile('C:\DOCUME~1\08E2~1\LOCALS~1\Temp\E_4\shell.fne');
DeleteFile('C:\WINDOWS\system32\XP-4FF57DDC.EXE');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','EXPLORER.EXE');
DeleteFile('C:\WINDOWS\system32\msfir80.exe');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','MsServer');
DeleteFile('C:\WINDOWS\system32\msime80.exe');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','IMJPMIG8.2');
DeleteFile('C:\autorun.inf');
DeleteFile('C:\sal.xls.exe');
DeleteFile('E:\autorun.inf');
DeleteFile('E:\sal.xls.exe');
ExecuteSysClean;
ExecuteRepair(6);
ExecuteRepair(8);
RegKeyIntParamWrite('HKLM','SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer','NoDriveTypeAutoRun', 221);
RebootWindows(true);
end.