begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 DelBHO('{D4027C7F-154A-4066-A1AD-4243D8127440}');
 QuarantineFile('C:\WINDOWS\kokscoribkiy.bat','');
 DeleteService('XDva385');
 TerminateProcessByName('c:\documents and settings\admin\application data\netprotocol.exe');
 DeleteFile('c:\documents and settings\admin\application data\netprotocol.exe');
 DeleteFile('C:\WINDOWS\system32\yeoqitd.dll');
 DeleteFile('C:\WINDOWS\system32\XDva385.sys');
 DeleteFile('C:\WINDOWS\apppatch\ibleco.exe');
 DeleteFile('C:\Program Files\Ask.com\UpdateTask.exe');
 DeleteFile('C:\Program Files\Ask.com\GenericAskToolbar.dll');
 DeleteFile('C:\WINDOWS\system32\windebug32.exe');
ExecuteSysClean;
ExecuteWizard('TSW',2,3,true);
BC_Activate;
RebootWindows(true);
end.

begin
CreateQurantineArchive(GetAVZDirectory+'quarantine.zip');
end.