F2 - REG:system.ini: UserInit=c:\windows\system32\userinit.exe,C:\Documents and Settings\01\hvojegi.exe \s

begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 DeleteFile('C:\Documents and Settings\NetworkService\Application Data\Microsoft\dewohik.exe');
 DeleteFile('C:\RECYCLER\S-1-5-21-5896211827-6891656580-444428749-3231\wmfcgr.exe');
 RegKeyParamDel('HKEY_USERS','.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run','woodar');
 RegKeyParamDel('HKEY_USERS','S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Run','woodar');
 DeleteFile('C:\WINDOWS\jjdrive32.exe');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','Microsoft Update Setup');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run','Microsoft Update Setup');
 DeleteFile('C:\WINDOWS\system32\dewohik.exe');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','woodar');
 DeleteFile('C:\WINDOWS\system32\vammyqu.exe');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','jupettaz');
 DeleteFile('C:\WINDOWS\system32\wshost32.exe');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','wshost32');
 DeleteFile('C:\WINDOWS\wind7upd.exe');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','Microsoft Driver Setup');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run','Microsoft Driver Setup');
 DeleteFile('C:\Program Files\IEToolbar404\find404.com search engine\mod_find404_finaaaaaal.dll');
 DelBHO('{1BB22D38-A411-4B13-A746-C2A4F4EC7344}');
 DelBHO('{FCBCCB87-9224-4B8D-B117-F56D924BEB18}');
 DelCLSID('{1BB22D38-A411-4B13-A746-C2A4F4EC7344}');
 DelCLSID('{FCBCCB87-9224-4B8D-B117-F56D924BEB18}');
ExecuteSysClean;
RebootWindows(true);
end.

 
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 DeleteService('yi9ewpydqcw');
 DeleteFile('c:\windows\system32\wygou.exe');
 DeleteFile('C:\WINDOWS\system32\dewohik.exe');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','woodar');
ExecuteSysClean;
RebootWindows(true);
end.

 
O23 - Service: Network Connectivity Service (yi9ewpydqcw) - Unknown owner - C:\WINDOWS\system32\wygou.exe (file missing)

 
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows NT\CurrentVersion\Winlogon','Taskman');
RebootWindows(true);
end.