begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 RegKeyResetSecurity('HKLM', 'SYSTEM\CurrentControlSet\Services\gribz');
 RegKeyResetSecurity('HKLM', 'SYSTEM\ControlSet002\Services\gribz');
 RegKeyDel('HKLM','SYSTEM\CurrentControlSet\Services\gribz');
 RegKeyDel('HKLM','SYSTEM\ControlSet002\Services\gribz');
 DeleteService('gribz');
 DeleteFile('C:\WINDOWS\system32\jynnby.dll');
 DeleteFile('c:\windows\jjdrive32.exe');
 DeleteFile('C:\RECYCLER\S-1-5-21-8074408533-6980195813-894622228-5143\wmfcgr.exe');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','Microsoft Update Setup');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows NT\CurrentVersion\Winlogon','Taskman');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run','Microsoft Update Setup');
 DeleteFile('J:\autorun.inf');
 DeleteFileMask('C:\Documents and Settings\qN\Local Settings\Temp', '*.*', true);
 DeleteFileMask('C:\WINDOWS\Temp', '*.*', true);
 DelBHO('{1BB22D38-A411-4B13-A746-C2A4F4EC7344}');
 DelBHO('{FCBCCB87-9224-4B8D-B117-F56D924BEB18}');
 DeleteFile('C:\Program Files\IEToolbar404\find404.com search engine\mod_find404_finaaaaaal.dll');
 DelCLSID('{1BB22D38-A411-4B13-A746-C2A4F4EC7344}');
 DelCLSID('{FCBCCB87-9224-4B8D-B117-F56D924BEB18}');
 ExecuteSysClean;
 ClearIECache;
 ExecuteWizard('TSW', 2, 2, true);
RebootWindows(true);
end.