begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 QuarantineFile('C:\Windows\svchost.exe','');
 QuarantineFile('c:\windows\winexp.exe','');
 TerminateProcessByName('c:\windows\winexp.exe');
 DeleteFile('c:\windows\winexp.exe');
 DeleteFile('C:\Windows\svchost.exe');
 RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','svchost');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','winexp');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run','winexp');
 DeleteFile('C:\$Recycle.Bin\S-1-5-21-294134965-298222569-3494615200-1003\$RHBIN8S.exe');
 DeleteFile('C:\Documents and Settings\Александр\Local Settings\Application Data\Temp\174355.exe');
 DeleteFile('Q:\autorun.inf');
 DeleteFile('C:\Windows\winexp.exe');
 DeleteFile('C:\Users\Александр\Local Settings\Temp\174355.exe');
 DeleteFile('C:\Users\Александр\Local Settings\Application Data\Temp\174355.exe');
BC_ImportDeletedList;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.

var
  qfolder: string;
  qname: string;
begin
  qname := GetAVZDirectory + '..\Quarantine\quarantine.zip';
  qfolder := ExtractFilePath(qname);
  if (not DirectoryExists(qfolder)) then CreateDirectory(qfolder);
  CreateQurantineArchive(qname);
  ExecuteFile('explorer.exe', qfolder, 1, 0, false);
end.