begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 QuarantineFile('C:\WINDOWS\system32\ghplwm.exe','');
 QuarantineFile('C:\WINDOWS\system32\59609ca9.exe','');
 QuarantineFile('C:\WINDOWS\system32\410a7df0.exe','');
 QuarantineFile('C:\WINDOWS\system32\1758a161.exe','');
 QuarantineFile('C:\WINDOWS\system32\Drivers\fyhsqzah.sys','');
 DeleteFile('C:\WINDOWS\system32\Drivers\fyhsqzah.sys');
 DeleteFile('C:\WINDOWS\system32\1758a161.exe');
 DeleteFile('C:\WINDOWS\system32\410a7df0.exe');
 DeleteFile('C:\WINDOWS\system32\59609ca9.exe');
 DeleteFile('C:\WINDOWS\system32\ghplwm.exe');
RegKeyStrParamWrite('HKLM', 'SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon', 'UserInit', GetEnvironmentVariable('SystemRoot')+'\system32\userinit.exe,');
BC_ImportAll;
 BC_DeleteFile('C:\WINDOWS\system32\Drivers\fyhsqzah.sys');
ExecuteSysClean;
ExecuteWizard('TSW',2,3,true);
BC_Activate;
RebootWindows(true);
end.