begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
TerminateProcessByName('c:\windows\system32\ashevtsvc.exe');
TerminateProcessByName('c:\documents and settings\localservice\application data\916653139.exe');
DeleteService('9d888f5');
DeleteFile('c:\documents and settings\localservice\application data\916653139.exe');
DeleteFile('c:\windows\system32\ashevtsvc.exe');
DeleteFile('C:\WINDOWS\System32\drivers\9d888f5.sys');
DeleteFile('C:\Program Files\Agent Vkontakte\AgentVkontakte.exe');
DeleteFile('avldr.dll');
DeleteFile('C:\PROGRA~1\FieryAds\FieryAds.dll');
DeleteFile('D:\autorun.inf');
DelAutorunByFileName('avldr.dll');
DelAutorunByFileName('C:\Program Files\Agent Vkontakte\AgentVkontakte.exe');
DelAutorunByFileName('C:\Documents and Settings\LocalService\Application Data\916653139.exe');
DelWinlogonNotifyByFileName('avldr.dll');
DelBHO('{56BB6D01-7BD5-4458-A4AE-F03DF643D6EE}');
DelBHO('{638e9359-625e-4e8a-aa5b-824654c3239b}');
DelBHO('{CF272101-7F6E-4CF2-9453-B4C5D2FC32C0}');
DelCLSID('{56BB6D01-7BD5-4458-A4AE-F03DF643D6EE}');
DelCLSID('{638e9359-625e-4e8a-aa5b-824654c3239b}');
DelCLSID('{CF272101-7F6E-4CF2-9453-B4C5D2FC32C0}');
ExecuteRepair(6);
ExecuteRepair(11);
ExecuteRepair(17);
ExecuteSysClean;
RebootWindows(true);
end.

 
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 TerminateProcessByName('c:\documents and settings\localservice\application data\916653139.exe');
 DeleteFile('c:\documents and settings\localservice\application data\916653139.exe');
 DeleteFile('C:\WINDOWS\system32\stfa.dll');
 DeleteFile('stfa.dll');
 DeleteFile('D:\autorun.wsh');
 DelAutorunByFileName('c:\documents and settings\localservice\application data\916653139.exe');
 DelBHO('{56BB6D01-7BD5-4458-A4AE-F03DF643D6EE}');
 DelCLSID('{56BB6D01-7BD5-4458-A4AE-F03DF643D6EE}');
 DeleteFileMask('C:\Documents and Settings\sah9i\Local Settings\Temp', '*.*', true);
 ClearQuarantine;
 ClearIECache;
ExecuteRepair(6);
ExecuteRepair(11);
ExecuteRepair(17);
ExecuteSysClean;
RebootWindows(true);
end.

 
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 TerminateProcessByName('c:\windows\services.exe');
 TerminateProcessByName('c:\windows\system32\b.tmp');
 TerminateProcessByName('c:\windows\system32\ashevtsvc.exe');
 TerminateProcessByName('c:\documents and settings\localservice\application data\916653139.exe');
 DeleteService('AshEvtSvc');
 DeleteFile('c:\documents and settings\localservice\application data\916653139.exe');
 DeleteFile('c:\windows\system32\ashevtsvc.exe');
 DeleteFile('c:\windows\system32\b.tmp');
 DeleteFile('c:\windows\services.exe');
 DeleteFile('C:\WINDOWS\System32\AshEvtSvc.exe');
 DeleteFile('C:\WINDOWS\System32\drivers\protect.sys');
 DeleteFile('C:\Documents and Settings\Admin\reader_s.exe');
 DeleteFile('C:\WINDOWS\System32\reader_s.exe');
 DeleteFile('C:\WINDOWS\Temp\VRT14.tmp');
 DelAutorunByFileName('c:\documents and settings\localservice\application data\916653139.exe');
 DelAutorunByFileName('c:\windows\services.exe');
 DelAutorunByFileName('C:\WINDOWS\System32\reader_s.exe');
 DelAutorunByFileName('C:\Documents and Settings\Admin\reader_s.exe');
ClearQuarantine;
 ClearIECache;
ExecuteRepair(1);
ExecuteRepair(6);
ExecuteRepair(11);
ExecuteRepair(17);
ExecuteSysClean;
RebootWindows(true);
end.