begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
TerminateProcessByName('c:\windows\system32\avast!antivirus.exe');
TerminateProcessByName('c:\documents and settings\localservice\application data\916653139.exe');
DeleteService('avast!antivirus');
DeleteFile('c:\documents and settings\localservice\application data\916653139.exe');
DeleteFile('c:\windows\system32\avast!antivirus.exe');
DeleteFileMask('C:\WINDOWS\TEMP', '*.*', true);
BC_DeleteFile('C:\WINDOWS\System32\drivers\ea61176c.sys');
BC_DeleteFile('C:\WINDOWS\System32\avast!Antivirus.exe');
BC_ImportDeletedList;
ExecuteRepair(6);
ExecuteRepair(9);
ExecuteRepair(11);
ExecuteRepair(17);
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.

 
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
TerminateProcessByName('e:\windows.0\system32\avast!antivirus.exe');
TerminateProcessByName('e:\documents and settings\localservice.nt authority\application data\916653139.exe');
DeleteService('avast!antivirus');
DeleteService('audiosrvrasauto');
DeleteFile('e:\documents and settings\localservice.nt authority\application data\916653139.exe');
DeleteFile('E:\WINDOWS.0\system32\VDnet.dll');
DeleteFile('E:\Program Files\VirtualNetwork\VirtualNetwork.dll');
DeleteFile('E:\Program Files\BitAccelerator\BitAccelerator.exe');
DeleteFile('E:\Program Files\bitaccelerator\bitaccelerator.*');
DeleteFile('e:\windows.0\system32\avast!antivirus.exe');
DeleteFileMask('E:\WINDOWS.0\Temp', '*.*', true);
DeleteFileMask('E:\Documents and Settings\vovdm.VOVDM-B2E67F47F\Local Settings\Temp', '*.*', true);
DelAutorunByFileName('e:\documents and settings\localservice.nt authority\application data\916653139.exe');
DelAutorunByFileName('E:\WINDOWS.0\system32\digiwet.dll');
DelAutorunByFileName('csrss5.dll');
DelBHO('{6C517674-DE1C-4493-977C-34A1BFAB35BA}');
DelBHO('{24783612-0199-4A37-B205-847853E151C6}');
DelCLSID('{6C517674-DE1C-4493-977C-34A1BFAB35BA}');
DelCLSID('{24783612-0199-4A37-B205-847853E151C6}');
BC_DeleteSvc('avast!antivirus');
BC_DeleteSvc('audiosrvrasauto');
BC_DeleteFile('e:\documents and settings\localservice.nt authority\application data\916653139.exe');
BC_DeleteFile('E:\WINDOWS.0\System32\drivers\54d8642f.sys');
BC_DeleteFile('E:\WINDOWS.0\System32\avast!Antivirus.exe');
BC_DeleteFile('E:\WINDOWS.0\system32\digiwet.dll');
BC_DeleteFile('csrss5.dll');
BC_DeleteFile('E:\WINDOWS.0\system32\nppz.exe');
BC_ImportDeletedList;
ExecuteRepair(6);
ExecuteRepair(9);
ExecuteRepair(11);
ExecuteRepair(17);
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.

 
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 TerminateProcessByName('c:\windows\system32\avast!antivirus.exe');
 TerminateProcessByName('c:\documents and settings\localservice\application data\916653139.exe');
 DeleteService('seclogonW32Time');
 DeleteService('avast!antivirus');
 DeleteFile('c:\documents and settings\localservice\application data\916653139.exe');
 DeleteFile('c:\windows\system32\avast!antivirus.exe');
 DeleteFileMask('C:\WINDOWS\Temp', '*.*', true);
 DeleteFileMask('C:\Documents and Settings\Admin\Local Settings\Temp', '*.*', true);
 DelAutorunByFileName('c:\documents and settings\localservice\application data\916653139.exe');
 DelAutorunByFileName('C:\Documents and Settings\Admin\Главное меню\Программы\Автозагрузка\officexp.exe');
 DelAutorunByFileName('C:\WINDOWS\system32\digiwet.dll');
 DelAutorunByFileName('C:\WINDOWS\system32\tscupgrd.exe');
 BC_DeleteSvc('seclogonW32Time');
 BC_DeleteSvc('avast!antivirus');
 BC_DeleteFile('c:\documents and settings\localservice\application data\916653139.exe');
 BC_DeleteFile('c:\windows\system32\avast!antivirus.exe');
 BC_DeleteFile('C:\Program Files\Mozilla Firefox\SETUPAPI.dll');
 BC_DeleteFile('C:\WINDOWS\system32\inter32.dll');
 BC_DeleteFile('C:\WINDOWS\system32\shell64.dll');
 BC_DeleteFile('C:\WINDOWS\System32\drivers\db7e8b2e.sys');
 BC_DeleteFile('C:\WINDOWS\system32\12520437s.exe');
 BC_DeleteFile('C:\WINDOWS\system32\digiwet.dll');
 BC_DeleteFile('C:\WINDOWS\system32\tscupgrd.exe');
 BC_DeleteFile('C:\Documents and Settings\Admin\Главное меню\Программы\Автозагрузка\officexp.exe');
 BC_DeleteFile('C:\WINDOWS\system32\nvidia32.exe');
 BC_DeleteFile('C:\WINDOWS\system32\windfire.exe');
 BC_ImportDeletedList;
 ExecuteRepair(6);
 ExecuteRepair(9);
 ExecuteRepair(11);
 ExecuteRepair(17);
 ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.

 
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
TerminateProcessByName('c:\windows\system32\avast!antivirus.exe');
TerminateProcessByName('c:\documents and settings\localservice\application data\916653139.exe');
DeleteService('winvncPolicyAgent');
DeleteService('avast!antivirus');
DeleteFile('c:\documents and settings\localservice\application data\916653139.exe');
DeleteFile('c:\windows\system32\avast!antivirus.exe');
DeleteFile('C:\WINDOWS\System32\drivers\895b2926.sys');
DeleteFile('C:\WINDOWS\system32\apcupsj.exe');
DelAutorunByFileName('c:\documents and settings\localservice\application data\916653139.exe');
DelAutorunByFileName('C:\WINDOWS\system32\rebuild.exe');
BC_DeleteSvc('winvncPolicyAgent');
BC_DeleteSvc('avast!antivirus');
BC_DeleteFile('c:\documents and settings\localservice\application data\916653139.exe');
BC_DeleteFile('c:\windows\system32\avast!antivirus.exe');
BC_DeleteFile('C:\WINDOWS\System32\drivers\895b2926.sys');
BC_DeleteFile('C:\WINDOWS\system32\apcupsj.exe');
BC_DeleteFile('C:\WINDOWS\system32\rebuild.exe');
BC_ImportDeletedList;
ExecuteRepair(6);
ExecuteRepair(9);
ExecuteRepair(11);
ExecuteRepair(17);
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.

 
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 DeleteService('db7e8b2e');
 DeleteFile('C:\WINDOWS\System32\drivers\db7e8b2e.sys');
 DeleteFile('digiwet.dll');
 DeleteFile('C:\WINDOWS\system32\tscupgrd.exe');
 DelAutorunByFileName('C:\WINDOWS\system32\tscupgrd.exe');
 DelAutorunByFileName('digiwet.dll');
 BC_DeleteSvc('db7e8b2e');
 BC_DeleteFile('C:\WINDOWS\System32\drivers\db7e8b2e.sys');
 BC_ImportDeletedList;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.

 
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 DeleteService('895b2926');
 DeleteFile('C:\WINDOWS\System32\drivers\895b2926.sys');
 DelAutorunByFileName('rebuild.exe');
 DeleteFile('rebuild.exe');
 BC_DeleteSvc('895b2926');
 BC_DeleteFile('C:\WINDOWS\System32\drivers\895b2926.sys');
 BC_ImportDeletedList;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.