O4 - HKLM\..\Run: [ctfmom] C:\WINDOWS\system32\ctfmom.exe
O4 - HKCU\..\Run: [Fun] C:\WINDOWS\system\Fun.exe
O4 - S-1-5-18 Startup: ЎЎЎЎЎЎ.lnk = C:\WINDOWS\system32\XP-EF692D3B.EXE (User 'SYSTEM')
O4 - .DEFAULT Startup: ЎЎЎЎЎЎ.lnk = C:\WINDOWS\system32\XP-EF692D3B.EXE (User 'Default user')
O4 - Startup: ЎЎЎЎЎЎ.lnk = C:\WINDOWS\system32\XP-EF692D3B.EXE

begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 DeleteService('amsint32');
 QuarantineFile('C:\WINDOWS\system32\drivers\oqfikn.sys','');
 TerminateProcessByName('c:\docume~1\КАТЕРИНА\locals~1\temp\winwnkksr.exe');
 TerminateProcessByName('c:\docume~1\КАТЕРИНА\locals~1\temp\w7b634.exe');
 DeleteFile('c:\docume~1\КАТЕРИНА\locals~1\temp\w7b634.exe');
 DeleteFile('c:\docume~1\КАТЕРИНА\locals~1\temp\winwnkksr.exe');
 DeleteFile('C:\WINDOWS\system32\drivers\oqfikn.sys');
 DeleteFile('C:\autorun.inf');
 DeleteFile('C:\doqq.exe');
 DeleteFile('D:\autorun.inf');
 DeleteFile('D:\vqbu.exe');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.