Папки на флешке стали ярлыками

begin
ShowMessage('Внимание! Перед выполнением скрипта AVZ автоматически закроет все сетевые подключения.'+#13#10+'После перезагрузки компьютера подключения к сети будут восстановлены в автоматическом режиме.');
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
SearchRootkit(true, true);
SetAVZGuardStatus(True);
QuarantineFile('C:\Documents and Settings\Ника\ewh.exe','');
QuarantineFile('C:\Documents and Settings\Ника\Application Data\Whomoi.exe','');
DeleteFile('C:\Documents and Settings\Ника\Application Data\Whomoi.exe');
DeleteFile('C:\Documents and Settings\Ника\ewh.exe');
 QuarantineFile('C:\Documents and Settings\Ника\Application Data\6.exe','');
 QuarantineFile('C:\Documents and Settings\Ника\Application Data\5.tmp','');
 QuarantineFile('C:\Documents and Settings\Ника\Application Data\18.exe','');
 QuarantineFile('C:\Documents and Settings\Ника\Application Data\F.exe','');
 QuarantineFile('C:\Documents and Settings\Ника\Application Data\10.exe','');
 DeleteFile('C:\Documents and Settings\Ника\Application Data\10.exe');
 DeleteFile('C:\Documents and Settings\Ника\Application Data\F.exe');
 DeleteFile('C:\Documents and Settings\Ника\Application Data\18.exe');
 DeleteFile('C:\Documents and Settings\Ника\Application Data\5.tmp');
 DeleteFile('C:\Documents and Settings\Ника\Application Data\6.exe');
RegKeyStrParamWrite('HKEY_LOCAL_MACHINE','SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows','AppInit_DLLs','');
RegKeyIntParamWrite('HKLM','SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer','NoDriveTypeAutoRun',221);  
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','Whomoi');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','MSConfig');
DeleteFileMask('C:\WINDOWS\Help\tcpmon.hlp:AFf0vijY','*.*', true);
DeleteFileMask('AFf0vijY','*.*', true);
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
ExecuteRepair(1);
ExecuteRepair(8);
RebootWindows(true);
end.

begin
 CreateQurantineArchive(GetAVZDirectory+'quarantine.zip');
end.

attrib -S -H /D /S

Заражённые ключи в реестре:
HKEY_CLASSES_ROOT\idid (Trojan.Sasfix) -> No action taken.
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\MSrtn (Trojan.Agent) -> No action taken.
 
Заражённые папки:
c:\documents and settings\all users\application data\srtserv (Worm.AutoRun) -> No action taken.
 
Заражённые файлы:
c:\documents and settings\Ника\doctorweb\quarantine\whomoi.exe (Backdoor.IRCBot.Gen) -> No action taken.
c:\documents and settings\all users\application data\srtserv\task.dat (Worm.AutoRun) -> No action taken.
c:\documents and settings\all users\application data\srtserv\set.dat (Worm.AutoRun) -> No action taken.
c:\WINDOWS\system32\secupdat.dat (Backdoor.Bot) -> No action taken.
c:\documents and settings\Ника\secupdat.dat (Worm.Autorun) -> No action taken.

R3 - URLSearchHook: (no name) - - (no file)
    O9 - Extra button: (no name) - {8DAE90AD-4583-4977-9DD4-4360F7A45C74} - (no file)