begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 TerminateProcessByName('e:\documents and settings\localservice\application data\691447002.exe');
 DeleteService('restore');
 DeleteService('protect');
 DeleteService('apg6a54');
 DeleteService('avast!Antivirus');
 DeleteService('30c9c3d'); 
 DeleteFile('e:\documents and settings\localservice\application data\691447002.exe');
 DeleteFile('E:\WINDOWS\system32\jhxm32.dll');
 DeleteFile('E:\WINDOWS\System32\drivers\30c9c3d.sys');
 DeleteFile('avast!Antivirus.sys');
 DeleteFile('E:\WINDOWS\System32\drivers\apg6a54.sys');
 DeleteFile('E:\WINDOWS\System32\drivers\protect.sys');
 DeleteFile('E:\WINDOWS\system32\drivers\restore.sys');
 DeleteFile('E:\Documents and Settings\маздай\reader_s.exe');
 DeleteFile('E:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe');
 DeleteFile('jhxm32.dll');
 DeleteFile('E:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\C1ERST6V\mlw[1].exe');
 DeleteFile('E:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\WXYNCDQF\f469[1].exe');
 DelBHO('{F30B5E7E-CFBB-44fb-A947-226E5A7A4290}');
 DelCLSID('{F30B5E7E-CFBB-44fb-A947-226E5A7A4290}');
 DeleteFileMask('E:\WINDOWS\Temp', '*.*', true);
 DeleteFileMask('E:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files', '*.*', true);
 ClearQuarantine;  
 ClearIECache;
 BC_DeleteSvc('avast!antivirus');
 BC_DeleteSvc('30c9c3d');
 BC_DeleteFile('E:\WINDOWS\system32\jhxm32.dll');
 BC_DeleteFile('E:\WINDOWS\System32\drivers\30c9c3d.sys'); 
 BC_ImportDeletedList;
 ExecuteRepair(6);
 ExecuteRepair(11);
 ExecuteRepair(17);
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.

 
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
DeleteService('42b5600c');
DeleteFile('E:\WINDOWS\System32\drivers\42b5600c.sys');
BC_DeleteSvc('42b5600c');
BC_DeleteFile('E:\WINDOWS\System32\drivers\42b5600c.sys');
BC_ImportDeletedList;
ClearHostsFile;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.

 
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
TerminateProcessByName('c:\windows\system32\bevtservice.exe');
TerminateProcessByName('c:\windows\system32\avast!antivirus.exe');
TerminateProcessByName('c:\documents and settings\localservice\application data\691447002.exe');
DeleteService('6to4');
DeleteService('avast!Antivirus');
DeleteFile('c:\documents and settings\localservice\application data\691447002.exe');
DeleteFile('c:\windows\system32\avast!antivirus.exe');
DeleteFile('c:\windows\system32\bevtservice.exe');
DeleteFile('C:\Documents and Settings\Накурен\reader_s.exe');
DeleteFile('jhxm32.dll');
DeleteFile('C:\Program Files\Internet Explorer\setupapi.dll');
DelBHO('{f30b5e7e-cfbb-44fb-a947-226e5a7a4290}');
DelCLSID('{f30b5e7e-cfbb-44fb-a947-226e5a7a4290}');
BC_DeleteSvc('avast!Antivirus');
BC_DeleteSvc('6to4');
BC_DeleteFile('C:\Program Files\Internet Explorer\setupapi.dll');
BC_ImportDeletedList;
ExecuteRepair(1);
ExecuteRepair(6);
 ExecuteRepair(11);
 ExecuteRepair(17);
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.

 
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
TerminateProcessByName('c:\windows\system32\sopidkc.exe');
DeleteService('1ffd46d3');
DeleteService('56e9792c');
DeleteService('sndintd');
DeleteService('protect');
DeleteService('restore');
DeleteService('sopidkc');
DeleteFile('c:\windows\system32\sopidkc.exe');
DeleteFile('c:\windows\system32\msncache.dll');
DeleteFile('C:\WINDOWS\TEMP\mpj106852.dll');
DeleteFile('C:\WINDOWS\TEMP\mta75091.dll');
DeleteFile('C:\WINDOWS\System32\drivers\1ffd46d3.sys');
DeleteFile('C:\WINDOWS\System32\drivers\56e9792c.sys');
DeleteFile('C:\WINDOWS\system32\drivers\restore.sys');
DeleteFile('C:\WINDOWS\system32\drivers\protect.sys');
DeleteFile('C:\WINDOWS\system32\sndintd.sys');
DeleteFile('C:\Program Files\Internet Explorer\setupapi.dll');
BC_DeleteSvc('1ffd46d3');
BC_DeleteSvc('56e9792c');
BC_DeleteSvc('sndintd');
BC_DeleteSvc('protect');
BC_DeleteSvc('restore');
BC_DeleteSvc('sopidkc');
BC_DeleteFile('C:\WINDOWS\System32\drivers\1ffd46d3.sys');
BC_DeleteFile('C:\WINDOWS\System32\drivers\56e9792c.sys');
BC_DeleteFile('C:\WINDOWS\system32\sopidkc.exe');
BC_DeleteFile('C:\Program Files\Internet Explorer\setupapi.dll');
BC_ImportDeletedList;
ExecuteRepair(6);
ExecuteRepair(13);
ExecuteSysClean;
SetAVZPMStatus(true);
BC_Activate;
RebootWindows(true);
end.