begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
DeleteFile('c:\windows\system32\8234213f.exe');
DeleteFile('c:\windows\system32\lbzgyh.exe');
DeleteFile('c:\docume~1\234a~1\locals~1\temp\esp4a0a.tmp');
RegSearch('HKLM', '', 'esp4a0a.tmp');
SaveLog(GetAVZDirectory + 'avz.log');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
ExecuteRepair(20);
ExecuteWizard('TSW', 2, 2, true);
ExecuteWizard('SCU', 2, 2, true);
RebootWindows(true);
end.

O2 - BHO: xqqlibP - {CEDE4FF1-FE77-415F-9458-867F9E8E7E3C} - (no file)
O2 - BHO: (no name) - {e3aaf71e-b295-4156-ae11-777237a1db3c} - (no file)
O4 - Startup: wwwznv32.exe

begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
DeleteFile('C:\DOCUME~1\234A~1\LOCALS~1\Temp\esp4A0A.tmp');
DeleteFile('C:\Documents and Settings\Артемка\Главное меню\Программы\Автозагрузка\wwwznv32.exe');
RegKeyDel('HKEY_LOCAL_MACHINE','SYSTEM\CurrentControlSet\Control\Print\Providers\992F21D4');
RegKeyDel('HKEY_LOCAL_MACHINE','SYSTEM\ControlSet001\Control\Print\Providers\992F21D4');
RegKeyDel('HKEY_LOCAL_MACHINE','SYSTEM\ControlSet003\Control\Print\Providers\992F21D4');
BC_ImportALL;
ExecuteSysClean;
BC_Activate;
ExecuteWizard('TSW', 2, 2, true);
ExecuteWizard('SCU', 2, 2, true);
RebootWindows(true);
end.

begin
RegSearch('HKLM', '', 'wwwznv32.exe');
SaveLog(GetAVZDirectory + 'avz.log');
end.