begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 QuarantineFile('C:\WINDOWS\system32\wrmzqqd.dll','');
 QuarantineFile('C:\Documents and Settings\Admin\Application Data\lsass.exe','');
 DeleteFile('C:\Documents and Settings\Admin\Application Data\lsass.exe');
 DeleteFile('C:\WINDOWS\system32\wrmzqqd.dll');
RegKeyStrParamWrite('HKEY_LOCAL_MACHINE','SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows','AppInit_DLLs','');
RegKeyStrParamWrite('HKLM', 'SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon', 'UserInit', GetEnvironmentVariable('SystemRoot')+'\system32\userinit.exe,');
ExecuteRepair(13);
ExecuteSysClean;
BC_ImportAll;
BC_Activate;
RebootWindows(true);
end.

 begin
 CreateQurantineArchive(GetAVZDirectory + 'quarantine.zip');
 end.