begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 ClearQuarantine;
 TerminateProcessByName('c:\windows\system32\msvmiode.exe');
 TerminateProcessByName('c:\windows\temp\479059.exe');
 DeleteFile('C:\RECYCLER\S-1-5-21-2985434289-4469914983-305989244-5957\syscr.exe');
 DeleteFile('C:\WINDOWS\Temp\479059.exe');
 DeleteFile('C:\WINDOWS\system32\msvmiode.exe');
 DeleteFile('C:\Documents and Settings\Admin\Application Data\ltzqai.exe');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','Advanced EHTAL Enable');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','MSODESNV7');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
 ExecuteWizard('TSW',2,3,true);
RebootWindows(true);
end.

begin 
SearchRootkit(true, true);
SetAVZGuardStatus(True);
TerminateProcessByName('c:\windows\cwdrive32.exe');
QuarantineFile('c:\windows\cwdrive32.exe','');
DeleteFile('c:\windows\cwdrive32.exe');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','Microsoft Driver Setup');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run','Microsoft Driver Setup');
BC_ImportALL;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.

begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
DeleteFile('c:\documents and settings\Admin\application data\ltzqai.exe');
DeleteFile('c:\WINDOWS\Temp\75183.exe');
DeleteFile('c:\WINDOWS\Temp\735.exe');
DeleteFile('c:\WINDOWS\Temp\6362.exe');
DeleteFile('c:\WINDOWS\Temp\56842.exe');
DeleteFile('c:\WINDOWS\Temp\4399775.exe');
DeleteFile('c:\WINDOWS\Temp\431787.exe');
DeleteFile('c:\WINDOWS\Temp\420.exe');
DeleteFile('c:\WINDOWS\Temp\358278.exe');
DeleteFile('c:\WINDOWS\Temp\35726.exe');
DeleteFile('c:\WINDOWS\Temp\2887.exe');
DeleteFile('c:\WINDOWS\Temp\272366.exe');
DeleteFile('c:\WINDOWS\Temp\1971460.exe');
DeleteFile('c:\WINDOWS\Temp\980.exe');
DeleteFile('c:\WINDOWS\Temp\8894549.exe');
DeleteFile('c:\WINDOWS\Temp\865.exe');
DeleteFile('c:\WINDOWS\Temp\86485.exe');
DeleteFile('c:\WINDOWS\Temp\84165.exe');
DeleteFile('c:\WINDOWS\Temp\8126364.exe');
DeleteFile('c:\WINDOWS\Temp\765131.exe');
DeleteFile('c:\WINDOWS\green fields.scr');
BC_ImportAll;
ExecuteSysClean;
RebootWindows(true);
end.

begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 QuarantineFile('ltrmh.sys','');
 QuarantineFile('ierxili.sys','');
 DeleteFile('ierxili.sys');
 DeleteFile('ltrmh.sys');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.