begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 ClearQuarantine;
 TerminateProcessByName('c:\users\Администратор\appdata\local\{da6994bc-f559-c034-4895-1d04aa5de6d5}\.exe');
 QuarantineFile('C:\Windows\system32\rlimuid.dll','');
 QuarantineFile('c:\users\Администратор\appdata\local\{da6994bc-f559-c034-4895-1d04aa5de6d5}\.exe','');
 DeleteFile('c:\users\Администратор\appdata\local\{da6994bc-f559-c034-4895-1d04aa5de6d5}\.exe');
 DeleteFile('C:\Windows\system32\rlimuid.dll');
 RegKeyIntParamWrite('HKEY_LOCAL_MACHINE', 'SYSTEM\CurrentControlSet\Control\Terminal Server','fAllowToGetHelp', 0);
 RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '2201', 1);
 RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '2201', 3);
 RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1004', 3);
 RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1001', 1);
 RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1201', 3);
BC_ImportALL;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.