begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 StopService('ztcvliudd');
 StopService('jwzxpshqm');
 StopService('nxwzlwh');
 StopService('GarenaPEngine');
 QuarantineFile('Local Settings\Temporary Internet Files\Content.IE5\4DI7CD6B\calc[1].exe','');
 QuarantineFile('D:\WINDOWS\system32\02.tmp','');
 QuarantineFile('D:\WINDOWS\system32\01.tmp','');
 QuarantineFile('D:\DOCUME~1\-WOVANO-\LOCALS~1\Temp\PAL242.tmp','');
 DeleteFile('D:\DOCUME~1\-WOVANO-\LOCALS~1\Temp\PAL242.tmp');
 DeleteFile('D:\WINDOWS\system32\01.tmp');
 DeleteFile('D:\WINDOWS\system32\02.tmp');
 DeleteFile('Local Settings\Temporary Internet Files\Content.IE5\4DI7CD6B\calc[1].exe');
 RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run','wininet');
 DeleteService('ztcvliudd');
 DeleteService('nxwzlwh');
 DeleteService('GarenaPEngine');
 DeleteService('jwzxpshqm');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.

Объекты реестра заражены:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken.

Заражённые папки:
d:\documents and settings\-WOVANO-\local settings\application data\bron.tok-10-17 (Worm.Brontok) -> No action taken.
d:\documents and settings\администратор\local settings\application data\bron.tok-10-1 (Worm.Brontok) -> No action taken.

Заражённые файлы:
d:\WINDOWS\system32\dp1.fne (Worm.Autorun) -> No action taken.
d:\WINDOWS\system32\spec.fne (Worm.AutoRun) -> No action taken.
d:\WINDOWS\system32\internet.fne (HackTool.Patcher) -> No action taken.
d:\documents and settings\networkservice\local settings\temporary internet files\Content.IE5\6I01S98F\sbar[1].bmp (Extension.Mismatch) -> No action taken.
d:\WINDOWS\system32\eAPI.fne (Worm.AutoRun) -> No action taken.
d:\WINDOWS\system32\krnln.fnr (Trojan.Agent) -> No action taken.
d:\WINDOWS\system32\og.dll (Worm.AutoRun) -> No action taken.
d:\WINDOWS\system32\og.EDT (Worm.AutoRun) -> No action taken.
d:\WINDOWS\system32\RegEx.fnr (Worm.AutoRun) -> No action taken.
d:\WINDOWS\system32\ul.dll (Worm.AutoRun) -> No action taken.

begin
 SearchRootkit(true, true);
 SetAVZGuardStatus(True);
 TerminateProcessByName('D:\WINDOWS\Installer\MSI2245.tmp')
 TerminateProcessByName('D:\Documents and Settings\-WOVANO-\Local Settings\Temp\FAF448A0-E1D8BDB0-BDDB6EE8-99CE8AA8\7f92aa.exe')
 TerminateProcessByName('D:\Documents and Settings\-WOVANO-\Local Settings\Temp\FAF448A0-E1D8BDB0-BDDB6EE8-99CE8AA8\13f43_xp.exe')
 QuarantineFile('D:\Documents and Settings\-WOVANO-\Главное меню\Программы\Автозагрузка\Empty.pif','');
 QuarantineFile('D:\WINDOWS\Installer\MSI2245.tmp','');
 QuarantineFile('D:\Documents and Settings\-WOVANO-\Application  Data\PnkBstrK.sys','');
 QuarantineFile('D:\Documents and Settings\-WOVANO-\Local Settings\Temp\FAF448A0-E1D8BDB0-BDDB6EE8-99CE8AA8\13f43_xp.exe','');
 QuarantineFile('D:\Documents and Settings\-WOVANO-\Local Settings\Temp\FAF448A0-E1D8BDB0-BDDB6EE8-99CE8AA8\7f92aa.exe','');
 DeleteFile('D:\WINDOWS\Installer\MSI2245.tmp');
 DeleteFile('D:\Documents and Settings\-WOVANO-\Application Data\PnkBstrK.sys');
 DeleteFile('D:\Documents and Settings\-WOVANO-\Local Settings\Temp\FAF448A0-E1D8BDB0-BDDB6EE8-99CE8AA8\13f43_xp.exe');
 DeleteFile('D:\Documents and Settings\-WOVANO-\Главное меню\Программы\Автозагрузка\Empty.pif');
 DeleteFile('D:\Documents and Settings\-WOVANO-\Local Settings\Temp\FAF448A0-E1D8BDB0-BDDB6EE8-99CE8AA8\7f92aa.exe');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.