begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 QuarantineFile('C:\SETUP\DATA\June.exe','');
 QuarantineFile('C:\Documents and Settings\All Users\systems.exe','');
 QuarantineFile('C:\Documents and Settings\Admin\Application Data\nsvb.exe','');
 DeleteFile('C:\Documents and Settings\Admin\Application Data\nsvb.exe');
 DeleteFile('C:\Documents and Settings\All Users\systems.exe');
 DeleteFile('C:\SETUP\DATA\June.exe');
 DelCLSID('{67KLN5J0-4OPM-33WE-AAX5-34KC2A3453431}');
BC_ImportAll;
ExecuteSysClean;
ExecuteWizard('TSW',2,3,true);
BC_Activate;
RebootWindows(true);
end.

Зараженные ключи в реестре:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Active Setup\Installed Components\{67kln5j0-4opm-33we-aax5-34kc2a3453431} (Trojan.Agent) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\StimulProfit (Adware.Agent) -> No action taken.

Объекты реестра заражены:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken.

Зараженные файлы:
D:\System Volume Information\_restore{76567D99-FBA5-46CB-A829-5512704D05A5}\RP40\A0008283.exe (Rogue.Installer) -> No action taken.
C:\Documents and Settings\Admin\Application Data\nsvb.exe (Worm.Palevo) -> No action taken.

begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
DeleteFile('C:\Documents and Settings\Admin\Application Data\nsvb.exe');
DeleteFile('D:\System Volume Information\_restore{76567D99-FBA5-46CB-A829-5512704D05A5}\RP40\A0008283.exe ');
BC_ImportAll;
ExecuteSysClean;
ExecuteWizard('TSW',2,3,true);
BC_Activate;
RebootWindows(true);
end.