begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
DeleteFile('C:\WINDOWS\system32\msbkbnlu.dll');
DeleteFile('C:\WINDOWS\system32\msfrzjcj.dll');
DeleteFile('C:\WINDOWS\system32\msjuehus.dll');
DeleteFile('C:\WINDOWS\system32\mssheatr.dll');
DeleteFile('C:\WINDOWS\system32\sysfldr.dll');
DeleteFile('C:\WINDOWS\system32\drivers\zgkmkxhxnv1.sys');
DeleteFile('C:\WINDOWS\system32\drivers\zpjjvnbwl9.sys');
DeleteFile('C:\WINDOWS\system32\1118');
DeleteFile('C:\Documents and Settings\Admin\imPlayok.exe');
RegKeyParamDel('HKEY_USERS','S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Run','imPlayok');
RegKeyParamDel('HKEY_USERS','.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run','imPlayok');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','imPlayok');
DeleteFile('c:\documents and settings\admin\implayok.exe');
DeleteFile('C:\RECYCLER\S-1-5-21-1649796306-9576892009-362862264-5173\sysdate.exe');
DeleteFile('C:\RECYCLER\S-1-5-21-1649796306-9576892009-362862264-5173\sysdate.exe,explorer.exe,C:\RECYCLER\S-1-5-21-3583190819-9449054480-401235205-9762\sysdate.exe');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run','exec');
DeleteFile('C:\WINDOWS\system32\imPlayok.exe');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','imPlayok');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','rscqdr');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','vkqzej');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','jhlaos');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','pgrbbb');
DeleteFile('C:\WINDOWS\system32\regedit.exe');
DeleteFile('C:\DOCUME~1\Admin\LOCALS~1\Temp\nkefk.exe');
DeleteFile('C:\WINDOWS\Fonts\services.exe');
DeleteFile('C:\System Volume Information\_restore{9921ACCF-8CD3-4CFB-A76B-A790108CFB83}\RP341\A0074512.sys');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','Regedit32');
ExecuteSysClean;
RebootWindows(true);
end.