begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
QuarantineFile('C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\vdg4njgz.sys','');
QuarantineFile('c:\windows\system32\388fc5d8.exe','');
QuarantineFile('c:\windows\system32\4ad5141e.exe','');
QuarantineFile('c:\windows\system32\5c26b57d.exe','');
QuarantineFile('c:\windows\system32\6c3661d1.exe','');
QuarantineFile('c:\windows\system32\e7f965e6.exe','');
QuarantineFile('c:\windows\system32\mvchys.exe','');
QuarantineFile('\\?\globalroot\systemroot\system32\dddb6sw.exe','');
QuarantineFile('\\?\globalroot\systemroot\system32\k9hvnkh.exe','');
QuarantineFile('\\?\globalroot\systemroot\system32\rmqewbc.exe','');
QuarantineFile('\\?\globalroot\systemroot\system32\heifrci.exe','');
QuarantineFile('\\?\globalroot\systemroot\system32\s2xaoqz.exe','');
DeleteFile('c:\windows\system32\388fc5d8.exe');
DeleteFile('c:\windows\system32\4ad5141e.exe');
DeleteFile('c:\windows\system32\5c26b57d.exe');
DeleteFile('c:\windows\system32\6c3661d1.exe');
DeleteFile('c:\windows\system32\e7f965e6.exe');
DeleteFile('c:\windows\system32\mvchys.exe');
DeleteFile('\\?\globalroot\systemroot\system32\dddb6sw.exe');
DeleteFile('\\?\globalroot\systemroot\system32\k9hvnkh.exe');
DeleteFile('\\?\globalroot\systemroot\system32\rmqewbc.exe');
DeleteFile('\\?\globalroot\systemroot\system32\heifrci.exe');
DeleteFile('\\?\globalroot\systemroot\system32\s2xaoqz.exe');
RegKeyStrParamWrite('HKLM', 'SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon', 'UserInit', GetEnvironmentVariable('SystemRoot')+'\system32\userinit.exe,');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
ExecuteRepair(20);
RebootWindows(true);
end.