begin
 QuarantineFile('C:\Users\Ден\AppData\Roaming\Jkryrh.exe','');
 QuarantineFile('C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-1830\zaberg.exe','');
 QuarantineFile('C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-1413\syitm.exe,explorer.exe,C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-1830\zaberg.exe','');
 QuarantineFile('C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-1413\syitm.exe','');
 QuarantineFile('d:\Архив\zaberg.exe','');
 TerminateProcessByName('d:\Архив\zaberg.exe');
 QuarantineFile('c:\users\Ден\appdata\roaming\95ea.tmp','');
 TerminateProcessByName('c:\users\Ден\appdata\roaming\95ea.tmp');
 QuarantineFile('c:\users\Ден\appdata\roaming\7a6d.tmp','');
 TerminateProcessByName('c:\users\Ден\appdata\roaming\7a6d.tmp');
 QuarantineFile('c:\users\Ден\appdata\roaming\6a08.tmp','');
 TerminateProcessByName('c:\users\Ден\appdata\roaming\6a08.tmp');
 DeleteFile('c:\users\Ден\appdata\roaming\6a08.tmp');
 DeleteFile('c:\users\Ден\appdata\roaming\7a6d.tmp');
 DeleteFile('c:\users\Ден\appdata\roaming\95ea.tmp');
 DeleteFile('d:\Архив\zaberg.exe');
 DeleteFile('C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-1413\syitm.exe');
 RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','Tnaww');
 DeleteFile('C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-1413\syitm.exe,explorer.exe,C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-1830\zaberg.exe');
 DeleteFile('C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-1830\zaberg.exe');
 RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','zaber0');
 DeleteFile('C:\Users\Ден\AppData\Roaming\Jkryrh.exe');
 RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','Jkryrh');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows NT\CurrentVersion\Winlogon','Taskman');
ExecuteSysClean;
BC_ImportAll;
BC_Activate;
ExecuteRepair(16);
RebootWindows(true);
end.

 begin
 CreateQurantineArchive(GetAVZDirectory + 'quarantine.zip');
 end.