begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
QuarantineFile('C:\WINDOWS\system32\drivers\zgoldnmdcko5.sys','');
TerminateProcessByName('c:\windows\system32\userini.exe');
TerminateProcessByName('c:\docume~1\admin\locals~1\temp\rcx7tc.exe');
TerminateProcessByName('c:\windows\system32\csrcs.exe');
TerminateProcessByName('c:\windows\system32\cftu.exe');
 DeleteFile('c:\windows\system32\cftu.exe');
 DeleteFile('c:\windows\system32\csrcs.exe');
 DeleteFile('c:\docume~1\admin\locals~1\temp\rcx7tc.exe');
 DeleteFile('c:\windows\system32\userini.exe');
 DeleteFile('C:\WINDOWS\system32\drivers\zgoldnmdcko5.sys');
 DeleteFile('C:\DOCUME~1\Admin\APPLIC~1\QipGuard\DLLDLL~1\msftldr.dll');
 DeleteFile('C:\Documents and Settings\Admin\Local Settings\Temp\3rjxrku1p.exe');
 DeleteFile('C:\Documents and Settings\Admin\Local Settings\Temp\8obv6txag.exe');
 DeleteFile('C:\WINDOWS\system32\szetyj67vx.exe');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\RunServices','csrcs');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run','csrcs');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','userini');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','userini');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run','userini');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run','userini');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','cftu');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\RunServices','cftu');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run','cftu');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run','zhswcl');
BC_ImportAll;
ExecuteSysClean;
ExecuteWizard('TSW',2,3,true);
BC_Activate;
RebootWindows(true);
end.

begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 QuarantineFile('C:\WINDOWS\system32\drivers\zgoldnmdcko5.sys','');
 DeleteFile('C:\Program Files\Mozilla Firefox\rasadhlp.dll');
 DeleteFile('C:\WINDOWS\system32\drivers\zgoldnmdcko5.sys');
 BC_DeleteFile('C:\WINDOWS\system32\drivers\zgoldnmdcko5.sys');
 DeleteFile('c:\windows\explorer.exe:userini.exe:$DATA');
 DeleteFile('C:\Program Files\Internet Explorer\rasadhlp.dll');
BC_ImportAll;
ExecuteSysClean;
ExecuteRepair (13);
BC_Activate;
ClearHostsFile;
RebootWindows(true);
end.