begin
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '2201', 3);
SearchRootkit(true, true);
SetAVZGuardStatus(True);
TerminateProcessByName('d:\windows\system32\drivers\pwds.exe');
TerminateProcessByName('d:\windows\system32\drivers\prgds.exe');
DeleteService('AVPsys');
DeleteFile('d:\windows\system32\drivers\prgds.exe');
DeleteFile('d:\windows\system32\drivers\pwds.exe');
DeleteFile('c:\abs.exe');
DeleteFile('Explorer.exe D:\WINDOWS\system32\drivers\Prgds.exe');
DeleteFile('Explorer.exe %windir%\system32\drivers\Prgds.exe');
DeleteFile('C:\autorun.inf');
DeleteFile('C:\hm1bfpuj.exe');
DeleteFile('E:\autorun.inf');
DeleteFile('E:\hm1bfpuj.exe');
RenameFile('D:\WINDOWS\System32\drivers\cdaudio.sys','D:\WINDOWS\System32\drivers\cdaudio.bak');
RenameFile('D:\WINDOWS\system32\sfc_os.dll','D:\WINDOWS\system32\sfc_os.bak');
CopyFile('D:\files\cdaudio.sys','D:\WINDOWS\System32\drivers\cdaudio.sys');
CopyFile('D:\files\sfc_os.dll','D:\WINDOWS\system32\sfc_os.dll');
DeleteFile('D:\WINDOWS\system32\sfc_os.bak');
DeleteFile('D:\WINDOWS\System32\drivers\cdaudio.bak');
ClearIECache;
ClearQuarantine;
ExecuteRepair(6);
ExecuteRepair(11);
ExecuteRepair(16);
ExecuteRepair(17);
ExecuteSysClean;
RebootWindows(true);
end.