begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
DeleteService('jpaaw');
DeleteService('panp');
DeleteService('stkqds');
DeleteService('xjdmlm');
DeleteService('Avsdx');
DeleteService('BackGround switch');
DeleteService('BGd Switch');
DeleteService('bsf');
DeleteService('CF1.5');
DeleteService('CF1.6');
DeleteService('cs1.44');
DeleteService('DescriptionHero2');
DeleteService('GGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGG');
DeleteService('gs');
DeleteService('msdsdear');
DeleteService('sdesasawe DDOS Service');
DeleteService('sdewgfdge DDOS Service');
DeleteService('vare');
DeleteService('vrs');
DeleteService('vsdvxx');
DeleteService('vyjh');
DeleteService('WinHelp32');
DeleteService('wyssdf360');
DeleteFile('d:\windows\system32\jpaaw.exe');
DeleteFile('d:\windows\system32\panp.exe');
DeleteFile('d:\windows\system32\stkqds.exe');
DeleteFile('d:\windows\system32\xjdmlm.exe');
DeleteFile('d:\docume~1\locals~1\applic~1\acdsys~1\acdsee\imagess.ddf');
DeleteFile('d:\docume~1\networ~1\applic~1\acdsys~1\acdsee\imagedd.ddf');
DeleteFile('D:\WINDOWS\system32\drivers\tcpz-x86d.sys');
DeleteFile('D:\WINDOWS\vsxxx.exe');
DeleteFile('D:\WINDOWS\system32\regedit32.exe');
DeleteFile('D:\WINDOWS\system32\re32.exe');
DeleteFile('D:\WINDOWS\system32\VL03PWSEAM\M001.exe');
DeleteFile('D:\WINDOWS\system32\llkm.exe');
DeleteFile('D:\WINDOWS\system32\jbci.exe');
DeleteFile('D:\WINDOWS\system32\kxtgk.exe');
DeleteFile('D:\WINDOWS\system32\VL03PWSEAM\P001.exe');
DeleteFile('D:\WINDOWS\system32\VL03PWSEAM\J002.exe');
DeleteFile('D:\WINDOWS\system32\GGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGG.exe');
DeleteFile('D:\WINDOWS\system32\UHKM2PNC4O\D001.exe');
DeleteFile('D:\WINDOWS\system32\hma.exe');
DeleteFile('D:\WINDOWS\system32\Q3M4RIMT8G\J002.exe');
DeleteFile('D:\WINDOWS\system32\server.exe');
DeleteFile('D:\WINDOWS\system32\5I9NRBM6PI\J001.exe');
DeleteFile('D:\WINDOWS\system32\Z\d001.exe');
DeleteFile('D:\WINDOWS\vsdzxx.exe');
DeleteFile('D:\WINDOWS\system32\SF5M0TWGEK\Q.exe');
DeleteFile('D:\WINDOWS\system32\WinHelp32.exe');
DeleteFile('D:\WINDOWS\system32\upatcc0.exe');
DeleteFile('D:\WINDOWS\system32\stkqds.exe');
DeleteFile('D:\WINDOWS\system32\panp.exe');
DeleteFile('D:\WINDOWS\system32\jpaaw.exe');
DeleteFile('D:\WINDOWS\system32\sdra64.exe');
DeleteFile('D:\WINDOWS\system32\xkpwa.bmp');
RegKeyParamDel('HKEY_LOCAL_MACHINE','SYSTEM\CurrentControlSet\Services\ias\Parameters','ServiceDll');
DeleteFile('D:\WINDOWS\system32\seserunsrv.dll');
ExecuteSysClean;
RebootWindows(true);
end.

 
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
DeleteFile('d:\windows\system32\rmmhtoc.dll');
DeleteFile('D:\WINDOWS\system32\RbmmtfC.dll');
RegKeyParamDel('HKEY_LOCAL_MACHINE','SYSTEM\CurrentControlSet\Services\sfjieawr\Parameters','ServiceDll');
DeleteFile('D:\WINDOWS\system32\RhmwtdC.dll');
RegKeyParamDel('HKEY_LOCAL_MACHINE','SYSTEM\CurrentControlSet\Services\MMeica\Parameters','ServiceDll');
DeleteFile('D:\WINDOWS\system32\RmmhtoC.dll');
RegKeyParamDel('HKEY_LOCAL_MACHINE','SYSTEM\CurrentControlSet\Services\Metcwar\Parameters','ServiceDll');
DeleteFile('D:\WINDOWS\system32\RvmutlC.dll');
RegKeyParamDel('HKEY_LOCAL_MACHINE','SYSTEM\CurrentControlSet\Services\MediaCenter\Parameters','ServiceDll');
DeleteFile('D:\WINDOWS\system32\RvmuttC.dll');
RegKeyParamDel('HKEY_LOCAL_MACHINE','SYSTEM\CurrentControlSet\Services\BITS\Parameters','ServiceDll');
DeleteFile('H:\autorun.inf');
BC_ImportAll;
ExecuteSysClean;
RegKeyIntParamWrite('HKLM','SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer','NoDriveTypeAutoRun', 221); 
BC_Activate;
RebootWindows(true);
end.

 
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
DeleteService('Oraber');
DeleteFile('D:\WINDOWS\TEMP\Oraber.sys');
ExecuteSysClean;
RebootWindows(true);
end.

begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 DeleteFile('C:\Documents and Settings\Admin\Local Settings\Application Data\FIE2.Customers\ICLCrypt.dll');
 RegKeyDel('HKLM','SOFTWARE\Microsoft\Code Store Database\Distribution Units\{2E3F2257-5717-48F6-B923-F83E908E2311}');
 DelCLSID('{2E3F2257-5717-48F6-B923-F83E908E2311}');
BC_ImportAll;
ExecuteSysClean;
ExecuteWizard('TSW',2,3,true);
BC_Activate;
RebootWindows(true);
end.