begin
 SearchRootkit(true, true);
 SetAVZGuardStatus(true);
 TerminateProcessByName('c:\windows\system32\av_md.exe');
 TerminateProcessByName('c:\documents and settings\Егор\av_md.exe');
 DeleteFile('c:\documents and settings\Егор\av_md.exe');
 DeleteFile('c:\windows\system32\av_md.exe');
 DeleteFile('C:\Documents and Settings\Егор\av_md.exe');
 DeleteFile('C:\WINDOWS\system32\av_md.exe');
 DeleteFile('C:\WINDOWS\system32\drivers\unpr.sys');
 DeleteFile('C:\Documents and Settings\Егор\Главное меню\Программы\Автозагрузка\updxsp32.exe');
 DeleteFile('C:\WINDOWS\TEMP\~TM197.tmp');
 DeleteFile('C:\WINDOWS\system32\189.tmp');
 DeleteFile('C:\WINDOWS\system32\gebbccy.dll');
 DeleteFile('C:\WINDOWS\system32\xm1985.dll');
 DeleteFile('c:\windows\system32\gebbccy.dll');
 DeleteFile('E:\autorun.inf');
 DeleteFile('C:\WINDOWS\fonts\services.exe');
 DeleteFile('c:\windows\system32\gebbccy.dll');
 DeleteFile('E:\autorun.inf');
 DeleteFile('C:\WINDOWS\system32\xm1985.dll');
 DelBHO('{F4002052-AB29-4B33-8C8D-0E99084564EC}');
 DeleteService('unpr');
 RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','av_md');
 RegKeyParamDel('HKEY_USERS','.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run','av_md');
 RegKeyParamDel('HKEY_USERS','S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Run','av_md');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','sysgif32');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run','exec');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','14527');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','av_md');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks','{F4002052-AB29-4B33-8C8D-0E99084564EC}');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','MsWerr');
 RegKeyParamDel('	HKEY_USERS, .DEFAULT\Software\Microsoft\Windows NT\CurrentVersion\Windows, Run ',' ',' ');
 RegKeyParamDel('	HKEY_USERS, .DEFAULT\Software\Microsoft\Windows NT\CurrentVersion\Windows, Load ',' ',' ');
 RegKeyParamDel('HKEY_USERS, S-1-5-18\Software\Microsoft\Windows NT\CurrentVersion\Windows, Run ',' ',' ');
 RegKeyParamDel('HKEY_USERS, S-1-5-18\Software\Microsoft\Windows NT\CurrentVersion\Windows, Load ',' ',' ');
 RegKeyParamDel('	HKEY_CURRENT_USER, Software\Microsoft\Windows NT\CurrentVersion\Windows, Run ',' ',' ');
 RegKeyParamDel('HKEY_CURRENT_USER, Software\Microsoft\Windows NT\CurrentVersion\Windows, Load ',' ',' ');
 BC_ImportALL;
 ExecuteSysClean;
 BC_Activate;
 ExecuteRepair(13);
 RebootWindows(true);
end.

begin
 SearchRootkit(true, true);
 SetAVZGuardStatus(true);
 BC_ImportALL;
 ExecuteSysClean;
 BC_Activate;
 ExecuteRepair(14);
 RebootWindows(true);
end.

begin
SearchRootkit(true, true);
SetAVZGuardStatus(true);
DeleteFile('c:\windows\system32\DRIVERS\lcafrwol.s ys');
DeleteFile('70.103.101.103\aekgoprn.dll');
DeleteFile('\??\C2CAD972#4079#4fd3#A68D#AD34CC1210 74\b48dadf8.sys');
BC_ImportALL;
ExecuteSysClean;
BC_DeleteFile('70.103.101.103\aekgoprn.dll');
BC_DeleteFile('\??\C2CAD972#4079#4fd3#A68D#AD34CC1 21074\b48dadf8.sys');
BC_DeleteFile('c:\windows\system32\DRIVERS\lcafrwo l.sys ');
BC_Activate;
ExecuteRepair(2 );
ExecuteRepair(4 );
RebootWindows(true);
end.

begin
 SearchRootkit(true, true);
 SetAVZGuardStatus(true);
 DeleteFile('C:\Documents and Settings\Администратор\Главное меню\Программы\Автозагрузка\siszyd32.exe');
 DeleteFile('C:\WINDOWS\system32\PavSRK.sys');
 DeleteFile('C:\WINDOWS\system32\PavTPK.sys');
 DeleteFile('C:\WINDOWS\TEMP\~TM174.tmp');
 DeleteFile('C:\Program Files\Pivim Multibar\pivim.dll');
 DelBHO('{1BB22D38-A411-4B13-A746-C2A4F4EC7344}');
 DelBHO('{FCBCCB87-9224-4B8D-B117-F56D924BEB18}');
 DeleteService('PavTPK.sys');
 DeleteService('PavSRK.sys');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','sysgif32');
 BC_ImportALL;
 ExecuteSysClean;
 BC_Activate;
 ExecuteRepair(5 );
 ExecuteRepair(6 );
 ExecuteRepair(8 );
 RebootWindows(true);
end.