begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
  QuarantineFile('I:\RECYCLER\bcd8f464.exe','');
 QuarantineFile('I:\autorun.inf','');
 QuarantineFile('E:\Documents and Settings\User\iqmcmo.exe','');
 QuarantineFile('E:\Documents and Settings\User\Start Menu\Programs\Startup\wuT.exe','');
 QuarantineFile('E:\Documents and Settings\User\Start Menu\Programs\Startup\hahahahaha.exe','');
 QuarantineFile('E:\Documents and Settings\User\Application Data\Qjfify.exe','');
 QuarantineFile('C:\Documents and Settings\Roor\ctfmon.exe','');
 QuarantineFile('e:\docume~1\user\locals~1\temp\a\mamatije.exe','');
 TerminateProcessByName('e:\docume~1\user\locals~1\temp\a\mamatije.exe');
 DeleteFile('e:\docume~1\user\locals~1\temp\a\mamatije.exe');
 DeleteFile('C:\Documents and Settings\Roor\ctfmon.exe');
 DeleteFile('E:\Documents and Settings\User\Application Data\Qjfify.exe');
 RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','Qjfify');
 DeleteFile('E:\Documents and Settings\User\Start Menu\Programs\Startup\hahahahaha.exe');
 DeleteFile('E:\Documents and Settings\User\Start Menu\Programs\Startup\wuT.exe');
 DeleteFile('E:\Documents and Settings\User\iqmcmo.exe');
 RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','MSConfig');
 DeleteFile('I:\autorun.inf');
 DeleteFile('I:\RECYCLER\bcd8f464.exe');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows NT\CurrentVersion\Winlogon','Taskman');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.

 begin
 CreateQurantineArchive(GetAVZDirectory + 'quarantine.zip');
 end.

begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 DeleteFile('C:\Program Files\facemoods.com\facemoods\1.4.17.11\facemoodssrv.exe');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','facemoods');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.