begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 ClearQuarantine;
 QuarantineFile('C:\WINDOWS\System32\Drivers\sblqkjpz.sys','');
 QuarantineFile('C:\WINDOWS\System32\drivers\hmr896d.sys','');
 QuarantineFile('C:\WINDOWS\System32\Drivers\gxlbmfid.sys','');
 QuarantineFile('C:\WINDOWS\System32\Drivers\fpxjvlml.sys','');
 QuarantineFile('C:\WINDOWS\system32\regedit.exe','');
 DeleteFile('C:\WINDOWS\System32\Drivers\fpxjvlml.sys');
 DeleteFile('C:\WINDOWS\System32\Drivers\gxlbmfid.sys');
 DeleteFile('C:\WINDOWS\System32\drivers\hmr896d.sys');
 DeleteFile('C:\WINDOWS\System32\Drivers\sblqkjpz.sys');
 DeleteFile('C:\RECYCLER\S-1-5-21-4670599927-8693699653-349469172-0403\yv8g67.exe');
 DeleteFile('C:\WINDOWS\services.exe');
 DeleteFile('C:\WINDOWS\system32\regedit.exe');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','services');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','Regedit32');
RegKeyParamDel('HKLM','Software\Microsoft\Windows NT\CurrentVersion\Winlogon','Taskman');
 DeleteService('sblqkjpz');
 DeleteService('hmr896d');
 DeleteService('gxlbmfid');
 DeleteService('fpxjvlml');
BC_ImportAll;
ExecuteSysClean;
ExecuteRepair(6);
ExecuteRepair(8);
RegKeyIntParamWrite('HKLM', 'SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum', '{BDEADF00-C265-11D0-BCED-00A0C90AB50F}', 1);
BC_Activate;
RebootWindows(true);
end.