begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 DeleteFile('C:\Documents and Settings\User\Application Data\au5FtikM_89_sB.dll');
 DelBHO('{9A727FBF-480A-5BE7-11F6-4AFB9E290E21}');
 DelCLSID('{9A727FBF-480A-5BE7-11F6-4AFB9E290E21}');
 ExecuteSysClean;
RebootWindows(true);
end.

begin
SetAVZGuardStatus(True);
SearchRootkit(true, true);
 DelBHO('{2670000A-7350-4f3c-8081-5663EE0C6C49}');
 DelBHO('{6D125299-C2A9-4DBC-BEC3-6F7124E39A41}');
 DeleteFile('C:\DOCUME~1\MadD\APPLIC~1\FieryAds\FieryAds.dll');
 DeleteFile('C:\Program Files\Bonjour\mDNSResponder.exe');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','SYSTEM\CurrentControlSet\Services\Eventlog\Application\Bonjour Service','EventMessageFile');
 DeleteFile('C:\WINDOWS\system32\linkdel.cmd');
 RegKeyParamDel('HKEY_USERS','S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Run','LinkDel');
 RegKeyParamDel('HKEY_USERS','S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run','LinkDel');
 RegKeyParamDel('HKEY_USERS','S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run','LinkDel');
 RegKeyParamDel('HKEY_USERS','.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run','LinkDel');
 DeleteFile('C:\WINDOWS\system32\psxss.exe');
 DeleteFile('C:\WINDOWS\System32\tssdis.exe');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','SYSTEM\CurrentControlSet\Services\Eventlog\System\TermServSessDir','EventMessageFile');
BC_ImportDeletedList;
BC_Activate;
ExecuteSysClean;
RebootWindows(true);
end.