F2 - REG:system.ini: UserInit=E:\WINDOWS\system32\userinit.exe,E:\WINDOWS\system32\twex.exe,

 
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
TerminateProcessByName('e:\windows\temp\_ex-68.exe');
TerminateProcessByName('e:\documents and settings\all users\application data\19770934\19770934.exe');
DeleteService('Httcnen');
DeleteFile('e:\documents and settings\all users\application data\19770934\19770934.exe');
DeleteFile('e:\windows\temp\_ex-68.exe');
DeleteFile('Httcnen.sys');
DeleteFile('E:\WINDOWS\system32\twex.exe');
ExecuteSysClean;
RebootWindows(true);
end.