begin
 QuarantineFile('C:\Windows\system32\swvkyuh.dll','');
 QuarantineFile('C:\Users\Елена\appdata\roaming\system.exe','');
 QuarantineFile('C:\Users\Елена\appdata\roaming\netprotocol.exe','');
 QuarantineFile('C:\Users\Елена\appdata\local\temp\flash_player_update.exe','');
 QuarantineFile('C:\Users\Елена\AppData\Roaming\system.exe','');
 DelCLSID('{61772ADE-7CC1-410B-A449-8EEED0930EDE}');
 QuarantineFile('C:\Windows\SYSTEM32\drivers\avgntflt.sys','');
 QuarantineFile('C:\Windows\SysWow64\EZUPBH~1.DLL','');
 QuarantineFile('C:\Users\Елена\AppData\Roaming\netprotocol.exe','');
 QuarantineFile('C:\Users\Елена\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2HMG4LGT\f4eeba7[1].exe','');
 QuarantineFile('C:\Program Files (x86)\EMOTIONSOFT\HomePage\HomePage.exe','');
 QuarantineFile('C:\Program Files (x86)\EMOTIONSOFT\EmotionsBar\IeEmotionBarComServer.dll','');
 QuarantineFile('C:\Program Files (x86)\EMOTIONSOFT\EmotionsBar\EmotionsBar.exe','');
 DeleteFile('C:\Windows\system32\swvkyuh.dll');
 DeleteFile('C:\Program Files (x86)\EMOTIONSOFT\EmotionsBar\EmotionsBar.exe');
 RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','EmotionsBarTray');
 DeleteFile('C:\Program Files (x86)\EMOTIONSOFT\EmotionsBar\IeEmotionBarComServer.dll');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved','{61772ADE-7CC1-410B-A449-8EEED0930EDE}');
 DeleteFile('C:\Program Files (x86)\EMOTIONSOFT\HomePage\HomePage.exe');
 RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','SetPageOnce');
 DeleteFile('C:\Users\Елена\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2HMG4LGT\f4eeba7[1].exe');
 RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','userinit');
 DeleteFile('C:\Users\Елена\AppData\Roaming\netprotocol.exe');
 RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','Netprotocol');
 DeleteFile('C:\Users\Елена\AppData\Roaming\system.exe');
 DeleteFile('C:\Users\Елена\appdata\local\temp\flash_player_update.exe');
 DeleteFile('C:\Users\Елена\appdata\roaming\netprotocol.exe');
 DeleteFile('C:\Users\Елена\appdata\roaming\system.exe');
RegKeyStrParamWrite('HKLM', 'SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon', 'UserInit', GetEnvironmentVariable('SystemRoot')+'\system32\userinit.exe,');
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.

 begin
 CreateQurantineArchive(GetAVZDirectory + 'quarantine.zip');
 end.