begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 QuarantineFile('C:\WINDOWS\system32\Drivers\eewwjxyu.sys','');
 TerminateProcessByName('c:\docume~1\superv~2\locals~1\temp\x11811.exe');
 TerminateProcessByName('c:\docume~1\superv~2\locals~1\temp\hj3.exe');
 QuarantineFile('c:\docume~1\superv~2\locals~1\temp\hj3.exe','');
 DeleteFile('c:\docume~1\superv~2\locals~1\temp\hj3.exe');
 DeleteFile('c:\docume~1\superv~2\locals~1\temp\x11811.exe');
 DeleteFile('C:\DOCUME~1\SUPERV~2\LOCALS~1\Temp\Hj1.exe');
 DeleteFile('C:\DOCUME~1\SUPERV~2\LOCALS~1\Temp\Rar$EX13.625\Cracked\USBSafelyRemove.exe');
 DeleteFile('C:\Documents and Settings\SUPERVISOR_2\Application Data\Cjquqw.exe');
 DeleteFile('C:\WINDOWS\system32\Drivers\eewwjxyu.sys');
 DeleteFile('C:\Documents and Settings\SUPERVISOR_2\mxpo.exe');
 DeleteFile('C:\Program Files\Common Files\System\taskmger.exe');
 DeleteFile('C:\WINDOWS\Hkaboa.exe');
ExecuteWizard('SCU',2,2,true);
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.

begin
CreateQurantineArchive(GetAVZDirectory+'quarantine.zip');
end.

begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 DeleteFile('C:\WINDOWS\system32\sshnas21.dll');
BC_ImportDeletedList;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.

R3 - URLSearchHook: (no name) - {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} - (no file)
R3 - URLSearchHook: (no name) - {95289393-33EA-4F8D-B952-483415B9C955} - (no file)
R3 - URLSearchHook: (no name) -  - (no file)
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe
O3 - Toolbar: Foxit Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll (file missing)
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (file missing)
O9 - Extra button: (no name) - {8DAE90AD-4583-4977-9DD4-4360F7A45C74} - (no file)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O23 - Service: NetMeeting Remote Desktop Sharing (mnmsrvc) - Корпорация Майкрософт - C:\WINDOWS\system32\mnmsrvc.exe

begin
 if FileExists(GetAVZDirectory + 'log\avz_log.txt') Then DeleteFile('log\avz_log.txt');
 If DownloadFile('http://dataforce.ru/~kad/ScanVuln.txt', GetAVZDirectory +'ScanVuln.txt') Then ExecuteScript('ScanVuln.txt')
 Else ShowMessage('Невозможно загрузить скрипт AVZ для обнаружения наиболее часто используемых уязвимостей!');
 if FileExists(GetAVZDirectory + 'log\avz_log.txt') Then ExecuteFile('notepad.exe', GetAVZDirectory + 'log\avz_log.txt', 1, 0, false);
ExitAVZ;
end.