begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
TerminateProcessByName('c:\program files\common files\2a617352-d396-46a3-a71b-5d89535356cf\updater.exe');
TerminateProcessByName('c:\programdata\2a617352-d396-46a3-a71b-5d89535356cf\plugincontainer.exe');
TerminateProcessByName('c:\programdata\2a617352-d396-46a3-a71b-5d89535356cf\plugins\3\plugin.exe');
TerminateProcessByName('c:\programdata\2a617352-d396-46a3-a71b-5d89535356cf\plugins\8\plugin.exe');
TerminateProcessByName('c:\programdata\2a617352-d396-46a3-a71b-5d89535356cf\plugins\5\plugin.exe');
QuarantineFile('C:\Program Files\Roll Around\Extensions\83c0e288-8fa0-43d3-acc7-c1e839d85abc.dll', '');
QuarantineFile('c:\program files\common files\2a617352-d396-46a3-a71b-5d89535356cf\updater.exe', '');
QuarantineFile('c:\programdata\2a617352-d396-46a3-a71b-5d89535356cf\plugincontainer.exe', '');
QuarantineFile('c:\programdata\2a617352-d396-46a3-a71b-5d89535356cf\plugins\3\plugin.exe', '');
QuarantineFile('c:\programdata\2a617352-d396-46a3-a71b-5d89535356cf\plugins\8\plugin.exe', '');
QuarantineFile('c:\programdata\2a617352-d396-46a3-a71b-5d89535356cf\plugins\5\plugin.exe', '');
DeleteFile('c:\programdata\2a617352-d396-46a3-a71b-5d89535356cf\plugins\5\plugin.exe', '32');
DeleteFile('c:\programdata\2a617352-d396-46a3-a71b-5d89535356cf\plugins\8\plugin.exe', '32');
DeleteFile('c:\programdata\2a617352-d396-46a3-a71b-5d89535356cf\plugins\3\plugin.exe', '32');
DeleteFile('c:\programdata\2a617352-d396-46a3-a71b-5d89535356cf\plugincontainer.exe', '32');
DeleteFile('c:\program files\common files\2a617352-d396-46a3-a71b-5d89535356cf\updater.exe', '32');
DeleteFile('C:\Program Files\Roll Around\Extensions\83c0e288-8fa0-43d3-acc7-c1e839d85abc.dll', '32');
DeleteFileMask('C:\Program Files\Roll Around', '*', true);
DeleteFileMask('c:\programdata\2a617352-d396-46a3-a71b-5d89535356cf', '*', true);
DeleteFileMask('c:\program files\common files\2a617352-d396-46a3-a71b-5d89535356cf', '*', true);
DeleteDirectory('C:\Program Files\Roll Around');
DeleteDirectory('c:\programdata\2a617352-d396-46a3-a71b-5d89535356cf');
DeleteDirectory('c:\program files\common files\2a617352-d396-46a3-a71b-5d89535356cf');
DelBHO('{83c0e288-8fa0-43d3-acc7-c1e839d85abc}');
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1804', 1);
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '2201', 3);
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1004', 3);
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1001', 1);
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1201', 3);
BC_ImportDeletedList;
ExecuteSysClean;
ExecuteWizard('SCU', 2, 2, true);
BC_Activate;
RebootWindows(true);
end.