begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
TerminateProcessByName('c:\documents and settings\Павел\mkvkrj.exe');
TerminateProcessByName('c:\documents and settings\all users\application data\csrss.exe');
DelBHO('{CF272101-7F6E-4CF2-9453-B4C5D2FC32C0}');
DeleteFile('c:\documents and settings\all users\application data\csrss.exe');
DeleteFile('c:\documents and settings\Павел\mkvkrj.exe');
DeleteFile('C:\Documents and Settings\Павел\Application Data\AdSubscribe\AdSubscribe.dll');
DeleteFile('C:\Documents and Settings\Павел\mkvkrj.exe');
DeleteFile('C:\PROGRA~1\MYCENT~1\InfoBar\MYCENT~1.DLL');
DeleteFile('C:\WINDOWS\system32\csrss8.dll');
DeleteFile('C:\PROGRA~1\FieryAds\FieryAds.dll');
DeleteFile('C:\System Volume Information\_restore{D6B343E6-D489-4B44-9134-E0E9EA5B19D0}\RP87\A0042145.DLL');
ExecuteSysClean;
RebootWindows(true);
end.

 
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 DeleteFile('C:\Documents and Settings\BaskeT\Application Data\AdSubscribe\AdSubscribe.dll');
 DeleteFile('C:\PROGRA~1\FieryAds\FieryAds.dll');
 DeleteFile('C:\Documents and Settings\BaskeT\Local Settings\Temp\~DF9AD0.tmp');
 DeleteFile('C:\Documents and Settings\BaskeT\Local Settings\Temp\~DFE07.tmp');
 DelCLSID('{CF272101-7F6E-4CF2-9453-B4C5D2FC32C0}');
 DelBHO('{CF272101-7F6E-4CF2-9453-B4C5D2FC32C0}');
ClearQuarantine;
 ClearIECache;
 ClearHostsFile;
ExecuteSysClean;
RebootWindows(true);
end.

 
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
DeleteFile('C:\Documents and Settings\pgolubets\Application Data\AdSubscribe\AdSubscribe.dll');
DeleteFile('ckpNotify.dll');
DeleteFile('C:\DOCUME~1\PGOLUB~1\APPLIC~1\FieryAds\FieryAds.dll');
DelBHO('{6D125299-C2A9-4DBC-BEC3-6F7124E39A41}');
DelCLSID('{6D125299-C2A9-4DBC-BEC3-6F7124E39A41}');
DelWinlogonNotifyByFileName('ckpNotify.dll');
ExecuteSysClean;
RebootWindows(true);
end.

 
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 DeleteFile('C:\Documents and Settings\Алексей\Application Data\AdSubscribe\AdSubscribe.dll');
 DeleteFile('C:\WINDOWS\system32\cimanqrs.dll');
 DeleteFile('xxyyxUOF.dll');
 DeleteFile('C:\DOCUME~1\07C4~1\APPLIC~1\FieryAds\FieryAds.dll');
 DeleteFile('C:\PROGRA~1\FieryAds\FieryAds.dll');
 DelCLSID('{CF272101-7F6E-4CF2-9453-B4C5D2FC32C0}');
 DelCLSID('{6D125299-C2A9-4DBC-BEC3-6F7124E39A41}');
 DelCLSID('{82C885EE-6B87-4D51-9EF4-0CFE9FADA900}');
 DelBHO('{CF272101-7F6E-4CF2-9453-B4C5D2FC32C0}');
 DelBHO('{6D125299-C2A9-4DBC-BEC3-6F7124E39A41}');
ExecuteSysClean;
RebootWindows(true);
end.