begin 
SearchRootkit(true, true);
SetAVZGuardStatus(True);
QuarantineFile('C:\system32\system.exe','');
QuarantineFile('C:\WINDOWS\system32\config\svchost.exe','');
QuarantineFile('c:\:services.exe','');
QuarantineFile('C:\boli_me\palac\TzK.exe','');
QuarantineFile('C:\Early\life\UpDaTe.exe','');
QuarantineFile('C:\Ozzy\iSaWeSoMe\BooMdEYaDa.exe','');
QuarantineFile('C:\Documents and Settings\1\Главное меню\Программы\Автозагрузка\RavMonE.exe','');
 DeleteFile('C:\Documents and Settings\1\Главное меню\Программы\Автозагрузка\RavMonE.exe');
 DeleteFile('C:\system32\system.exe');
 DeleteFile('C:\WINDOWS\system32\config\svchost.exe');
 DeleteFile('c:\:services.exe');
 DeleteFile('C:\Documents and Settings\1\ydwzro.exe');
 DeleteFile('C:\Ozzy\iSaWeSoMe\BooMdEYaDa.exe');
 DeleteFile('C:\Early\life\UpDaTe.exe');
 DeleteFile('C:\boli_me\palac\TzK.exe');
 DelCLSID('{9L6ME-5454E-4EDXE-4E7SQ-9KJHI}');
 DelCLSID('{67WNC6Z0-4F0Z-A1RP-4FMB-F4CXM36D9RQ}');
 DelCLSID('{35TBC6G0-4FuO-31XF-ABC4-21CX1Z6Og22}');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','system');
RegKeyParamDel('HKLM','Software\Microsoft\Windows NT\CurrentVersion\Winlogon','Taskman');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','RavAV');
BC_ImportALL;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.

c:\WINDOWS\system32\inetsrv\iissync.exe (Virus.Expiro) -> No action taken.