begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
DeleteService('msupdate');
DeleteFile('C:\WINDOWS\System32\Drivers\sfc.SYS');
DeleteFile('msupdate.sys');
RenameFile('C:\WINDOWS\System32\sfcfiles.dll', 'C:\WINDOWS\System32\sfcfiles.bak');
CopyFile('C:\WINDOWS\System32\dllcache\sfcfiles.dll','C:\WINDOWS\System32\sfcfiles.dll');
DeleteFile('C:\WINDOWS\system32\ntos.exe');
RegKeyParamDel('HKEY_USERS','S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Run','userinit');
RegKeyParamDel('HKEY_USERS','.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run','userinit');
DeleteFile('C:\WINDOWS\system32\sdra64.exe');
DeleteFile('C:\WINDOWS\system32\mssrv32.exe');
DeleteFile('C:\System Volume Information\_restore{29394C2C-082D-4AC6-AB11-87419269F681}\RP176\A0118552.dll');
BC_DeleteFile('C:\WINDOWS\system32\mssrv32.exe');
BC_ImportDeletedList;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.

begin
 SearchRootkit(true, true);
 SetAVZGuardStatus(true);
 DeleteFile('C:\WINDOWS\system32\config\systemprofile\av_md.exe');
 DeleteFile('C:\WINDOWS\system32\sdra64.exe');
 DeleteFile('C:\Documents and Settings\Sergey\Application Data\AdSubscribe\AdSubscribe.dll');
 DeleteFile('C:\WINDOWS\system32\av_md.exe');
 DeleteFile('C:\WINDOWS\system32\Drivers\gxanmu.sys');       
 DelCLSID('{82C885EE-6B87-4D51-9EF4-0CFE9FADA900}');
 DeleteFileMask('%Tmp%', '*.*', true);     
 BC_ImportALL;
 ExecuteSysClean;
 BC_Activate;
 RebootWindows(true);
end.

 
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
DelBHO('{92860A02-4D69-48c1-82D7-EF6B2C609502}');
DelBHO('{6C517674-DE1C-4493-977C-34A1BFAB35BA}');
DelCLSID('{92860A02-4D69-48c1-82D7-EF6B2C609502}');
DelCLSID('{6C517674-DE1C-4493-977C-34A1BFAB35BA}');
ExecuteSysClean;
RebootWindows(true);
end.