begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 TerminateProcessByName('mshemon.exe');
 QuarantineFile('C:\WINDOWS\system32\cmdow.exe','');
 QuarantineFile('C:\Documents and Settings\Администратор\Application Data\nsvb.exe','');
 QuarantineFile('C:\Documents and Settings\All Users\Application Data\srtserv\mshemon.exe','');
 QuarantineFile('C:\Documents and Settings\All Users\Application Data\msuwarn\slqsrv.exe','');
 QuarantineFile('C:\DOCUME~1\АДМИНИ~1\LOCALS~1\Temp\VSINIT.dll','');
 QuarantineFile('C:\Documents and Settings\All Users\Application Data\srtserv\sdata.dll','');
 QuarantineFile('mshemon.exe','');
 DeleteFile('mshemon.exe');
 DeleteFile('C:\Documents and Settings\All Users\Application Data\srtserv\sdata.dll');
 DeleteFile('C:\DOCUME~1\АДМИНИ~1\LOCALS~1\Temp\VSINIT.dll');
 DeleteFile('C:\Documents and Settings\All Users\Application Data\msuwarn\slqsrv.exe');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','msuwarn');
 DeleteFile('C:\Documents and Settings\All Users\Application Data\srtserv\mshemon.exe');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','srtserv');
 DeleteFile('C:\Documents and Settings\Администратор\Application Data\nsvb.exe');
 DeleteFile('C:\autorun.inf');
 DeleteFile('D:\autorun.inf');
 DeleteFile('E:\autorun.inf');
 DeleteFile('C:\WINDOWS\system32\cmdow.exe');
BC_ImportAll;
ExecuteSysClean;
ExecuteWizard('TSW',2,3,true);
BC_Activate;
RebootWindows(true);
end.