begin
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
if not IsWOW64
then
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
end;
SetServiceStart('MGNlN', 4);
SetServiceStart('MWMxY2', 4);
SetServiceStart('ODdiYzEwYmM0Y', 4);
SetServiceStart('Y2Y2N2JkNTZmODZmZ', 4);
SetServiceStart('ZjM4ZDhmYjMwNGM5Mjk2', 4);
QuarantineFile('C:\Program Files (x86)\elewyVEGnvUaTSWviYR\nCpUEvQ.dll', '');
QuarantineFile('C:\Program Files (x86)\PlroZLGXU\uoUofK.dll', '');
QuarantineFile('C:\Program Files (x86)\tZcfAxFTAYLU2\KuzoYUTobfwKn.dll', '');
QuarantineFile('C:\Program Files (x86)\UWDVMgzldSYvC\zoQaYKz.dll', '');
QuarantineFile('C:\Program Files\Y2Y2N2JkNTZmODZmZ\NjY4MTgyNGN.exe', '');
QuarantineFile('C:\ProgramData\TVquuUYzfaKsETVB\dvVuAFE.wsf', '');
QuarantineFile('C:\Users\VladB\AppData\Local\11da1cc1-076e-4f8a-a316-8b0ae20a9d10\3696.tmp.exe', '');
QuarantineFile('C:\Users\VladB\AppData\Local\Temp\mdi064.dll', '');
QuarantineFile('C:\WINDOWS\nzyaxsnoyrnrelxewdv.nzya BRNLrzkE', '');
QuarantineFile('C:\WINDOWS\system32\drivers\MGNlN', '');
QuarantineFile('C:\WINDOWS\system32\drivers\MWMxY2', '');
DeleteFile('C:\Program Files (x86)\elewyVEGnvUaTSWviYR\nCpUEvQ.dll', '64');
DeleteFile('C:\Program Files (x86)\PlroZLGXU\uoUofK.dll', '64');
DeleteFile('C:\Program Files (x86)\tZcfAxFTAYLU2\KuzoYUTobfwKn.dll', '64');
DeleteFile('C:\Program Files (x86)\UWDVMgzldSYvC\zoQaYKz.dll', '64');
DeleteFile('C:\Program Files\Y2Y2N2JkNTZmODZmZ\NjY4MTgyNGN.exe', '64');
DeleteFile('C:\ProgramData\TVquuUYzfaKsETVB\dvVuAFE.wsf', '64');
DeleteFile('C:\Users\VladB\AppData\Local\11da1cc1-076e-4f8a-a316-8b0ae20a9d10\3696.tmp.exe', '64');
DeleteFile('C:\WINDOWS\nzyaxsnoyrnrelxewdv.nzya BRNLrzkE', '64');
DeleteFile('C:\WINDOWS\system32\drivers\MGNlN', '64');
DeleteFile('C:\WINDOWS\system32\drivers\MWMxY2', '64');
DeleteFile('C:\WINDOWS\system32\drivers\ODdiYzEwYmM0Y', '64');
DeleteFile('C:\Users\VladB\AppData\Local\Temp\mdi064.dll', '32');
DeleteFile('C:\Users\VladB\AppData\Local\Temp\mdi064.dll', '64');
DeleteFile('C:\Program Files\driverspacksolution\intel.exe', '64');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','tsiVideo', '32');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','tsiVideo', '64');
DeleteService('MGNlN');
DeleteService('ODdiYzEwYmM0Y');
DeleteService('Y2Y2N2JkNTZmODZmZ');
DeleteService('ZjM4ZDhmYjMwNGM5Mjk2');
DeleteSchedulerTask('{01381C9C-34B9-1F23-A203-DA845DD40955}');
DeleteSchedulerTask('FB7D8AF0-DA26-5E35-9012-F3DE277829DB');
DeleteSchedulerTask('kmZSvQaSvlFfeD');
DeleteSchedulerTask('pBOWosXuyiVIpqjiWOp2');
DeleteSchedulerTask('PUKmAxXTHESAyfAQQ2');
DeleteSchedulerTask('qYnNzBKYARTXr2');
DeleteSchedulerTask('Time Trigger Task');
DeleteSchedulerTask('uRQJqubdaywJOJH2');
DelBHO('{586E89A6-A5B5-4B36-9440-4C12FF9C74E4}');
BC_ImportALL;
ExecuteRepair(3);
ExecuteRepair(4);
ExecuteSysClean;
ExecuteWizard('SCU', 2, 3, true);
BC_Activate;
RebootWindows(true);
end.
