R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.smaxxi.biz
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.smaxxi.biz
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.smaxxi.biz
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.smaxxi.biz
R3 - URLSearchHook: (no name) -  - (no file)
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Спутник@Mail.Ru - {8984B388-A5BB-4DF7-B274-77B879E179DB} - (no file)
O4 - HKLM\..\Run: [vamzipper] "C:\Users\Александр\AppData\Roaming\validzip\validzip.exe" autostar_1917

begin
 QuarantineFile('C:\Users\Александр\AppData\Roaming\validzip\validzip.exe','');
 TerminateProcessByName('c:\users\Александр\appdata\roaming\qipguard\qipguard.exe');
 DeleteFile('c:\users\Александр\appdata\roaming\qipguard\qipguard.exe');
 DeleteFile('C:\Users\Александр\AppData\Roaming\validzip\validzip.exe');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','vamzipper');
ExecuteSysClean;
BC_ImportAll;
BC_Activate;
RebootWindows(true);
end.

 begin
 CreateQurantineArchive(GetAVZDirectory + 'quarantine.zip');
 end.