begin
 SearchRootkit(true, true);
 SetAVZGuardStatus(true);
 TerminateProcessByName('c:\windows\system32\user32.exe');
 TerminateProcessByName('c:\program files\richi\richi_skype_com.exe');
 DeleteFile('c:\program files\richi\richi_skype_com.exe');
 DeleteFile('c:\windows\system32\user32.exe');
 DeleteFile('C:\WINDOWS\system32\user32.exe');
 DeleteFile('C:\Program Files\Richi\Richi_Skype_Com.exe');
 RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','XtraRichi');
 DeleteFile('explorer.exe,user32.exe');
 DeleteFile('D:\autorun.inf');
 DeleteFile('D:\md.exe');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows NT\CurrentVersion\Winlogon','Shell');
 BC_ImportALL;
 ExecuteSysClean;
 BC_Activate;
 ExecuteRepair(6 );
 ExecuteRepair(11 );  
 ExecuteRepair(16 );
 ExecuteWizard('TSW', 2, 2, true);
 ExecuteWizard('SCU', 2, 2, true);
 RebootWindows(true);
end.