begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
QuarantineFile('C:\thumbs.db','');
QuarantineFile('C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll','');
QuarantineFile('C:\WINDOWS\system32\XDva349.sys','');
QuarantineFile('dwshd.sys','');
QuarantineFile('\\?\globalroot\systemroot\system32\qofzkg3.exe','');
QuarantineFile('\\?\globalroot\systemroot\system32\xwdixdf.exe','');
DeleteFile('\\?\globalroot\systemroot\system32\qofzkg3.exe');
DeleteFile('\\?\globalroot\systemroot\system32\xwdixdf.exe');
DeleteFile('C:\thumbs.db');
RegKeyStrParamWrite('HKLM', 'SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon', 'UserInit', GetEnvironmentVariable('SystemRoot')+'\system32\userinit.exe,');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
ExecuteRepair(20);
RebootWindows(true);
end.