begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 ClearQuarantine;
 TerminateProcessByName('c:\users\ПК\appdata\roaming\netprotocol.exe');
 QuarantineFile('C:\Users\ПК\appdata\local\temp\flash_player_update.exe','');
 QuarantineFile('C:\Documents and Settings\ПК\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\305.exe','');
 QuarantineFile('C:\Documents and Settings\ПК\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\272.exe','');
 QuarantineFile('C:\Documents and Settings\ПК\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\305.exe','');
 QuarantineFile('C:\Documents and Settings\ПК\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\272.exe','');
 QuarantineFile('C:\Windows\Temp\opername.exe','');
 QuarantineFile('C:\Users\ПК\utre.exe','');
 QuarantineFile('C:\Users\ПК\AppData\Roaming\gfrlcydl.exe','');
 QuarantineFile('C:\Users\A132~1\AppData\Local\Temp\windebug32.exe','');
 QuarantineFile('C:\Windows\system32\drivers\wtjgxtjo.sys','');
 QuarantineFile('C:\Windows\system32\iinqjwf.dll','');
 QuarantineFile('c:\users\ПК\appdata\roaming\netprotocol.exe','');
 DeleteFile('C:\Windows\system32\iinqjwf.dll');
 DeleteFile('C:\Windows\system32\drivers\wtjgxtjo.sys');
 DeleteFile('C:\Users\A132~1\AppData\Local\Temp\windebug32.exe');
 DeleteFile('C:\Users\ПК\AppData\Roaming\gfrlcydl.exe');
 DeleteFile('C:\Users\ПК\utre.exe');
 DeleteFile('C:\Windows\Temp\opername.exe');
 DeleteFile('C:\Documents and Settings\ПК\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\272.exe');
 DeleteFile('C:\Documents and Settings\ПК\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\305.exe');
 DeleteFile('C:\Documents and Settings\ПК\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\272.exe');
 DeleteFile('C:\Documents and Settings\ПК\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\305.exe');
 DeleteFile('C:\Users\ПК\appdata\local\temp\flash_player_update.exe');
 DeleteFile('C:\Users\ПК\appdata\roaming\netprotocol.exe');
 RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','Windows Debugger 32');
 RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','Netprotocol');
 RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','debug');
 DeleteService('wtjgxtjo');
BC_ImportALL;
ExecuteSysClean;
BC_Activate;
 ExecuteRepair(6);
 RegKeyIntParamWrite( 'HKLM', 'SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum', '{BDEADF00-C265-11D0-BCED-00A0C90AB50F}', 1);
 ExecuteWizard('TSW',2,3,true);
RebootWindows(true);
end.