begin
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
ClearQuarantineEx(true);
TerminateProcessByName('c:\google\omo.exe');
QuarantineFile('\\domain3.npo\SYSVOL\DOMAIN3.NPO\scripts\LYT-SRV13.vbs', '');
QuarantineFile('C:\Google\GoogleUpdate.lnk', '');
QuarantineFile('c:\google\omo.exe', '');
QuarantineFile('C:\Google\Windowsupdate.lnk', '');
DeleteFile('C:\Google\GoogleUpdate.lnk', '32');
DeleteFile('c:\google\omo.exe', '32');
DeleteFile('C:\Google\Windowsupdate.lnk', '32');
RegKeyParamDel('HKEY_USERS', 'S-1-5-21-1445806581-3462994987-2488258624-2779\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run', '1', 'x32');
RegKeyParamDel('HKEY_USERS', 'S-1-5-21-1445806581-3462994987-2488258624-2779\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run', '1', 'x64');
RegKeyParamDel('HKEY_USERS', 'S-1-5-21-1445806581-3462994987-2488258624-2779\Software\Microsoft\Windows\CurrentVersion\Run', 'AdopeFlash', 'x32');
RegKeyParamDel('HKEY_USERS', 'S-1-5-21-1445806581-3462994987-2488258624-2779\Software\Microsoft\Windows\CurrentVersion\Run', 'AdopeFlash', 'x64');
RegKeyParamDel('HKEY_USERS', 'S-1-5-21-1445806581-3462994987-2488258624-2779\Software\Microsoft\Windows\CurrentVersion\Run', 'AdopeUpdate', 'x32');
RegKeyParamDel('HKEY_USERS', 'S-1-5-21-1445806581-3462994987-2488258624-2779\Software\Microsoft\Windows\CurrentVersion\Run', 'AdopeUpdate', 'x64');
RegKeyParamDel('HKEY_USERS', 'S-1-5-21-1445806581-3462994987-2488258624-2779\Software\Microsoft\Windows\CurrentVersion\Run', 'Windows Update', 'x32');
RegKeyParamDel('HKEY_USERS', 'S-1-5-21-1445806581-3462994987-2488258624-2779\Software\Microsoft\Windows\CurrentVersion\Run', 'Windows Update', 'x64');
ExecuteSysClean;
ExecuteWizard('SCU', 2, 3, true);
RebootWindows(true);
end.