HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken.
c:\program files\alcohol soft\alcohol 120\Langs\ax_ru.dll.bak (Malware.Packer.GenX) -> No action taken.
c:\program files\total commander\Plugins\arc\Default.sfx (Malware.Packer.Gen) -> No action taken.
c:\program files\total commander\Utils\SFX Tool\Upack.exe (Malware.Packer.Gen) -> No action taken.
c:\program files\total commander\Utils\UUDS\WnASPI32.dll (Malware.Packer.Gen) -> No action taken.
c:\program files\игры от nevosoft\super cow\wrapperinstall.exe (Spyware.Banker) -> No action taken.
d:\мои документы\документы-елена\Архив\Zuma\crack_zumadlx1001_crack.exe (Malware.Packer.Gen) -> No action taken.

begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 DeleteFile('c:\windows\system32\msdtc\trace\winlogon.exe');
BC_ImportDeletedList;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.smaxl.net
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.smaxl.netR3 - URLSearchHook: (no name) - {83821C2B-32A8-4DD7-B6D4-44309A78E668} - (no file)
R3 - URLSearchHook: (no name) -  - (no file)
F2 - REG:system.ini: UserInit=c:\windows\system32\userinit.exe,c:\windows\system32\msdtc\trace\winlogon.exe,
O2 - BHO: WebaltaBHO Object - {6C3BDD12-4B6F-44F1-87CB-4D94E1ED38A5} - (no file)
O2 - BHO: (no name) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - (no file)
O3 - Toolbar: QT Breadcrumbs Address Bar - {af83e43c-dd2b-4787-826b-31b17dee52ed} - mscoree.dll (file missing)
3 - Toolbar: (no name) - {D4C56A33-3488-495B-8033-9BF834E276D8} - (no file)
O4 - HKCU\..\Run: [userini] C:\WINDOWS\explorer.exe:userini.exe
O23 - Service: PLFlash DeviceIoControl Service - Корпорация Майкрософт - (no file)
O23 - Service: SpIDer Guard for Windows (SPIDERNT) - Unknown owner - C:\PROGRA~1\DrWeb\spidernt.exe (file missing)
O23 - Service: Webalta Controller (WebaltaController) - Unknown owner - C:\Program Files\Webalta\WebaltaUpdaterService.exe (file missing)