R3 - URLSearchHook: (no name) - - (no file)
O4 - HKLM\..\Run: [MyWebSearch Plugin] rundll32 H:\PROGRA~1\MYWEBS~1\bar\1.bin\M3PLUGIN.DLL,UPF
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZRman000
O9 - Extra button: (no name) - {53F6FCCD-9E22-4d71-86EA-6E43136192AB} - (no file)
O9 - Extra button: (no name) - {8DAE90AD-4583-4977-9DD4-4360F7A45C74} - (no file)
O9 - Extra button: (no name) - {925DAB62-F9AC-4221-806A-057BFB1014AA} - (no file)

begin
 SearchRootkit(true, true);
 SetAVZGuardStatus(true);
 SetServiceStart('MyWebSearchService', 4);
 DeleteService('MyWebSearchService');
 DeleteFile('H:\PROGRA~1\MYWEBS~1\bar\1.bin\mwssvc.exe');
 DeleteFile('H:\PROGRA~1\MYWEBS~1\bar\1.bin\M3PLUGIN.DLL');
 DeleteFile('H:\WINDOWS\ &&cls &&ECHO. &&ECHO %time% - XPize');
 DeleteFile('H:\autorun.inf');
 RegKeyParamDel('HKEY_LOCAL_MACHINE, Software\Microsoft\Windows\CurrentVersion\Run ','MyWebSearch Plugin ',' ');
 RegKeyParamDel('HKEY_LOCAL_MACHINE, Software\Microsoft\Command Processor ','AutoRun ',' ');
 RegKeyParamDel('HKEY_LOCAL_MACHINE, Software\Microsoft\Command Processor\, Autorun ',' ',' ');
 BC_ImportALL;
 ExecuteSysClean;
 BC_Activate;
 ExecuteRepair(1 );
 RebootWindows(true);
end.

begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
DeleteFile('C:\WINDOWS\system32\sdra64.exe');
BC_ImportALL;
ExecuteSysClean;
ExecuteWizard('TSW', 2, 2, true);
ExecuteWizard('SCU', 2, 2, true);
BC_Activate;
RebootWindows(true);
end.