O2 - BHO: MyCentria Internet Mate v1.9 - {FFFC57DB-1DE3-4303-B24D-CEE6DCDD3D86} - (no file)
O4 - HKCU\..\Run: [vuzeb] C:\Documents and Settings\Администратор\vuzeb.exe

begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
TerminateProcessByName('c:\documents and settings\Администратор\vuzeb.exe');
QuarantineFile('c:\documents and settings\Администратор\vuzeb.exe','');
QuarantineFile('C:\ne_smijem\stati\t1kv1c3.exe','');
QuarantineFile('C:\Ozzy\iSaWeSoMe\BooMdEYaDa.exe','');
QuarantineFile('c:\SYSTEM\G-923-321232-3232-32211-23\memory.exe','');
DeleteFile('c:\documents and settings\Администратор\vuzeb.exe');
DeleteFile('c:\SYSTEM\G-923-321232-3232-32211-23\memory.exe');
DeleteFile('C:\Ozzy\iSaWeSoMe\BooMdEYaDa.exe');
DeleteFile('C:\ne_smijem\stati\t1kv1c3.exe');
DeleteFileMask('C:\Documents and Settings\Администратор\Local Settings\Temp', '*.*', true);
DelBHO('FFFC57DB-1DE3-4303-B24D-CEE6DCDD3D86');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','vuzeb');
BC_ImportALL;
ExecuteSysClean;
ExecuteWizard('TSW', 2, 2, true);
ExecuteWizard('SCU', 2, 2, true);
BC_Activate;
RebootWindows(true);
end.

begin
CreateQurantineArchive(GetAVZDirectory+'quarantine.zip');
end.

begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
TerminateProcessByName('c:\program files\adminmagicservice\repservice.exe');
StopService('T4eRemoteDesktopViewer');
DeleteFile('c:\program files\adminmagicservice\repservice.exe');
DeleteFile('c:\Program files\AdminMagicService\JvrLog.dll');
DeleteFile('c:\Program files\AdminMagicService\RepService.exe');
DeleteFile('C:\Ozzy\iSaWeSoMe\BooMdEYaDa.exe');
DeleteFile('c:\SYSTEM\G-923-321232-3232-32211-23\memory.exe');
DeleteFile('C:\ne_smijem\stati\t1kv1c3.exe');
DelCLSID('35TBC6G0-4FuO-31XF-ABC4-21CX1Z6Og22');
DelCLSID('67KLN5J0-4OPM-00WE-AAX5-74CC3A187132');
DelCLSID('9F8HB0-E6WQ7A-S4IGS-3RAB12-O5UT7F');
DeleteService('T4eRemoteDesktopViewer');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.