begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 QuarantineFile('C:\WINDOWS\wscript32.exe','');
 QuarantineFile('C:\WINDOWS\ALCMTR.EXE','');
QuarantineFile('C:\WINDOWS\windupdate\svchost.exe','');
 QuarantineFile('C:\rk\rk.exe','');
 QuarantineFile('C:\Documents and Settings\Sox\Application Data\winxzip\winzip.exe','');
 QuarantineFile('C:\Program Files\Messenger\msmsgs.exe','');
 DeleteFile('C:\Documents and Settings\Sox\Application Data\winxzip\winzip.exe');
 DeleteFile('C:\WINDOWS\wscript32.exe');
 DeleteFile('C:\WINDOWS\windupdate\svchost.exe');
 DeleteFile('C:\rk\rk.exe');
RegKeyStrParamWrite('HKLM', 'SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon', 'UserInit', GetEnvironmentVariable('SystemRoot')+'\system32\userinit.exe,');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
ExecuteWizard('TSW',2,3,true);
RebootWindows(true);
end.

 begin
 CreateQurantineArchive(GetAVZDirectory + 'quarantine.zip');
 end.

begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 DeleteFileMask('c:\program files\pchd', '*.*', true);
 DeleteDirectory('c:\program files\pchd');
 DeleteFileMask('C:\WINDOWS\windupdate', '*.*', true);
 DeleteDirectory('C:\WINDOWS\windupdate');
 DeleteFileMask('C:\Documents and Settings\Sox\Application Data\winxzip', '*.*', true);
 DeleteDirectory('C:\Documents and Settings\Sox\Application Data\winxzip');
 DeleteFileMask('C:\rk', '*.*', true);
 DeleteDirectory('C:\rk');
 StopService('abp470n5');
 BC_DeleteSvc('abp470n5');
 DeleteFile('C:\WINDOWS\system32\drivers\ipljnn.sys');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.

begin
SearchRootkit(true, true);
ExecuteRepair(11);
ExecuteRepair(17);
 BC_DeleteFile('C:\WINDOWS\system32\drivers\ipljnn.sys');
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.