begin
 QuarantineFile('C:\Users\tiga\AppData\Roaming\Kmcuce.exe','');
 QuarantineFile('C:\Users\tiga\AppData\Roaming\Gmcuca.exe','');
 QuarantineFile('C:\Users\tiga\AppData\Roaming\69E5D2CC414E5469E5D2CC.exe','');
 QuarantineFile('c:\users\tiga\appdata\local\temp\x30811.exe','');
 TerminateProcessByName('c:\users\tiga\appdata\local\temp\x30811.exe');
 DeleteFile('c:\users\tiga\appdata\local\temp\x30811.exe');
 DeleteFile('C:\Users\tiga\AppData\Roaming\69E5D2CC414E5469E5D2CC.exe');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','69E5D2CC414E5469E5D2CC');
 RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','69E5D2CC414E5469E5D2CC');
 DeleteFile('C:\Users\tiga\AppData\Roaming\Gmcuca.exe');
 RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','Gmcuca');
 DeleteFile('C:\Users\tiga\AppData\Roaming\Kmcuce.exe');
 RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','Kmcuce');
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.

 begin
 CreateQurantineArchive(GetAVZDirectory + 'quarantine.zip');
 end.