begin
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
if not IsWOW64
then
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
end;
SetServiceStart('MaskitService', 4);
QuarantineFile('C:\Program Files (x86)\Common Files\Stanplus\uninstall.dat', '');
QuarantineFile('C:\Program Files (x86)\Common Files\Stanplus\uninstall.exe', '');
QuarantineFile('C:\Program Files (x86)\Common Files\SVCUPDATE\gpupdate.exe', '');
QuarantineFile('c:\program files (x86)\emoticons mail\emomail.exe', '');
QuarantineFile('c:\program files (x86)\machinerdata\emomail.exe', '');
QuarantineFile('C:\Program Files (x86)\Maskit\MaskitService.exe', '');
QuarantineFile('C:\Program Files (x86)\Sexteen\520034864.exe', '');
QuarantineFile('C:\Program Files\1CW48EBR5E\1CW48EBR5.exe', '');
QuarantineFile('C:\Program Files\HG29JTQGHU\HG29JTQGH.exe', '');
QuarantineFile('C:\Program Files\ITJ1Z1GL27\ITJ1Z1GL2.exe', '');
QuarantineFile('C:\Program Files\KWEAULIIUW\KWEAULIIU.exe', '');
QuarantineFile('C:\Program Files\RCC8DEXXOV\RCC8DEXXO.exe', '');
QuarantineFile('C:\Program Files\SYR6EC2T4I\SYR6EC2T4.exe', '');
QuarantineFile('C:\Program Files\W7UYB2EU19\W7UYB2EU1.exe', '');
QuarantineFile('C:\Program Files\YJF4CWGLGQ\YJF4CWGLG.exe', '');
QuarantineFile('c:\programdata\cloudprinter\cloudprinter.exe', '');
QuarantineFile('C:\Users\castle\AppData\Local\ocxtti.dll', '');
QuarantineFile('C:\Users\castle\AppData\Local\Temp\is-I2TG2.tmp\Suiters.exe', '');
QuarantineFile('C:\Users\castle\appdata\local\updaterprobrowser\updaterprobrowser.exe', '');
QuarantineFile('C:\Users\castle\AppData\Roaming\0k3zbcgypmu\y3u33isjsdz.exe', '');
QuarantineFile('C:\Users\castle\AppData\Roaming\dmgo1eozwa4\wdz5geedsvj.exe', '');
QuarantineFile('C:\Users\castle\AppData\Roaming\f3e2njliens\bltvxogsdrh.exe', '');
QuarantineFile('C:\Users\castle\AppData\Roaming\k2axlfu1acp\cj5wdmc0ynf.exe', '');
QuarantineFile('C:\Users\castle\AppData\Roaming\lwyeyeptpfo\qvg50d1jvb3.exe', '');
QuarantineFile('C:\Users\castle\AppData\Roaming\MarketAdvior\python\pythonw.exe', '');
QuarantineFile('C:\Users\castle\AppData\Roaming\SearchNewTab\python\pythonw.exe', '');
QuarantineFile('C:\Users\castle\AppData\Roaming\uikmzt0qxal\2hla3krfbu4.exe', '');
QuarantineFile('C:\Users\castle\AppData\Roaming\xzjbt2chmo3\mhwaizyjblx.exe', '');
QuarantineFile('C:\Windows\mibyhy2.exe', '');
DeleteFile('C:\Program Files (x86)\Common Files\Stanplus\uninstall.dat', '64');
DeleteFile('C:\Program Files (x86)\Common Files\Stanplus\uninstall.exe', '64');
DeleteFile('C:\Program Files (x86)\Common Files\SVCUPDATE\gpupdate.exe', '64');
DeleteFile('C:\Program Files (x86)\Maskit\MaskitService.exe', '64');
DeleteFile('C:\Program Files (x86)\Sexteen\520034864.exe', '64');
DeleteFile('C:\Program Files\1CW48EBR5E\1CW48EBR5.exe', '32');
DeleteFile('C:\Program Files\1CW48EBR5E\1CW48EBR5.exe', '64');
DeleteFile('C:\Program Files\HG29JTQGHU\HG29JTQGH.exe', '32');
DeleteFile('C:\Program Files\HG29JTQGHU\HG29JTQGH.exe', '64');
DeleteFile('C:\Program Files\ITJ1Z1GL27\ITJ1Z1GL2.exe', '32');
DeleteFile('C:\Program Files\ITJ1Z1GL27\ITJ1Z1GL2.exe', '64');
DeleteFile('C:\Program Files\KWEAULIIUW\KWEAULIIU.exe', '32');
DeleteFile('C:\Program Files\KWEAULIIUW\KWEAULIIU.exe', '64');
DeleteFile('C:\Program Files\RCC8DEXXOV\RCC8DEXXO.exe', '32');
DeleteFile('C:\Program Files\RCC8DEXXOV\RCC8DEXXO.exe', '64');
DeleteFile('C:\Program Files\SYR6EC2T4I\SYR6EC2T4.exe', '32');
DeleteFile('C:\Program Files\SYR6EC2T4I\SYR6EC2T4.exe', '64');
DeleteFile('C:\Program Files\W7UYB2EU19\W7UYB2EU1.exe', '32');
DeleteFile('C:\Program Files\W7UYB2EU19\W7UYB2EU1.exe', '64');
DeleteFile('C:\Program Files\YJF4CWGLGQ\YJF4CWGLG.exe', '32');
DeleteFile('C:\Program Files\YJF4CWGLGQ\YJF4CWGLG.exe', '64');
DeleteFile('c:\programdata\cloudprinter\cloudprinter.exe', '32');
DeleteFile('c:\users\castle\appdata\local\ocxtti.dll', '32');
DeleteFile('C:\Users\castle\AppData\Local\ocxtti.dll', '64');
DeleteFile('C:\Users\castle\AppData\Local\Temp\is-I2TG2.tmp\Suiters.exe', '32');
DeleteFile('C:\Users\castle\AppData\Local\Temp\is-I2TG2.tmp\Suiters.exe', '64');
DeleteFile('C:\Users\castle\appdata\local\updaterprobrowser\updaterprobrowser.exe', '32');
DeleteFile('C:\Users\castle\AppData\Roaming\0k3zbcgypmu\y3u33isjsdz.exe', '32');
DeleteFile('C:\Users\castle\AppData\Roaming\0k3zbcgypmu\y3u33isjsdz.exe', '64');
DeleteFile('C:\Users\castle\AppData\Roaming\dmgo1eozwa4\wdz5geedsvj.exe', '32');
DeleteFile('C:\Users\castle\AppData\Roaming\dmgo1eozwa4\wdz5geedsvj.exe', '64');
DeleteFile('C:\Users\castle\AppData\Roaming\f3e2njliens\bltvxogsdrh.exe', '32');
DeleteFile('C:\Users\castle\AppData\Roaming\f3e2njliens\bltvxogsdrh.exe', '64');
DeleteFile('C:\Users\castle\AppData\Roaming\k2axlfu1acp\cj5wdmc0ynf.exe', '32');
DeleteFile('C:\Users\castle\AppData\Roaming\k2axlfu1acp\cj5wdmc0ynf.exe', '64');
DeleteFile('C:\Users\castle\AppData\Roaming\lwyeyeptpfo\qvg50d1jvb3.exe', '32');
DeleteFile('C:\Users\castle\AppData\Roaming\lwyeyeptpfo\qvg50d1jvb3.exe', '64');
DeleteFile('C:\Users\castle\AppData\Roaming\MarketAdvior\python\pythonw.exe', '64');
DeleteFile('C:\Users\castle\AppData\Roaming\SearchNewTab\python\pythonw.exe', '64');
DeleteFile('C:\Users\castle\AppData\Roaming\uikmzt0qxal\2hla3krfbu4.exe', '32');
DeleteFile('C:\Users\castle\AppData\Roaming\uikmzt0qxal\2hla3krfbu4.exe', '64');
DeleteFile('C:\Users\castle\AppData\Roaming\xzjbt2chmo3\mhwaizyjblx.exe', '32');
DeleteFile('C:\Users\castle\AppData\Roaming\xzjbt2chmo3\mhwaizyjblx.exe', '64');
DeleteFile('C:\Windows\mibyhy2.exe', '32');
DeleteService('MaskitService');
DeleteSchedulerTask('{50CE04C4-2E8B-4229-91D7-275BDCE17709}');
DeleteSchedulerTask('BrowserUpdateTaskMachineCore');
DeleteSchedulerTask('MarketAdvior');
DeleteSchedulerTask('MarketAdvior2');
DeleteSchedulerTask('SearchNewTab');
DeleteSchedulerTask('SearchNewTab2');
BC_ImportALL;
ExecuteSysClean;
ExecuteRepair(3);
ExecuteRepair(4);
ExecuteWizard('SCU', 2, 3, true);
BC_Activate;
RebootWindows(true);
end.