begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 ClearQuarantine;
 TerminateProcessByName('c:\windows\sviq.exe');
 TerminateProcessByName('c:\docume~1\grimmjow\locals~1\temp\hwprla.exe');
 TerminateProcessByName('c:\windows\system\fun.exe');
 TerminateProcessByName('c:\windows\dc.exe');
 QuarantineFile('Explorer.exe C:\WINDOWS\system32\WinSit.exe','');
 QuarantineFile('C:\WINDOWS\inf\Other.exe','');
 QuarantineFile('c:\windows\sviq.exe','');
 QuarantineFile('c:\docume~1\grimmjow\locals~1\temp\hwprla.exe','');
 QuarantineFile('c:\windows\system\fun.exe','');
 DeleteFile('c:\windows\dc.exe');
 DeleteFile('c:\docume~1\grimmjow\locals~1\temp\hwprla.exe');
 DeleteFile('C:\WINDOWS\system32\drivers\jingqo.sys');
 DeleteFile('C:\WINDOWS\inf\Other.exe');
 DeleteFile('C:\WINDOWS\system\Fun.exe');
 DeleteFile('Explorer.exe C:\WINDOWS\system32\WinSit.exe');
 DeleteFile('C:\autorun.inf');
 DeleteFile('C:\lskvtq.exe');
 DeleteFile('D:\autorun.inf');
 DeleteFile('D:\rpei.exe');
 DeleteFile('E:\autorun.inf');
 DeleteFile('E:\wgepxo.exe');
 DeleteFile('F:\autorun.inf');
 DeleteFile('F:\mxoh.exe');
 DeleteFile('L:\autorun.inf');
 DeleteFile('wpgb.exe');
 DeleteFile('L:\wpgb.exe');
 DeleteFile('C:\WINDOWS\sviq.exe');
 RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','dc2k5');
 RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','dc');
 RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','Fun');
 DeleteService('amsint32');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
 ExecuteWizard('TSW',2,3,true);
RebootWindows(true);
end.