Код:
begin
DeleteFileMask(GetAVZDirectory+'Quarantine', '*.*', true);
SearchRootkit(true, true);
SetAVZGuardStatus(true);
QuarantineFile('C:\F\UCK\FK.exe','');
QuarantineFile('C:\C\Settings\cl.exe','');
QuarantineFile('C:\MEMORY\S-v-6-2009\PeAcE.exe','');
QuarantineFile('C:\BIN\RECYCLE\Bin.exe','');
QuarantineFile('C:\DOCUME~1\Tanya\LOCALS~1\Temp\7.tmp.exe','');
QuarantineFile('C:\WINDOWS\system32\servises.exe','');
QuarantineFile('C:\WINDOWS\system32\sdra64.exe','');
QuarantineFile('C:\Program Files\Common Files\System\ati.exe','');
QuarantineFile('C:\WINDOWS\System32\Drivers\sfc.SYS','');
DeleteService('Explorer');
DeleteFile('C:\WINDOWS\System32\Drivers\sfc.SYS');
DeleteFile('C:\Program Files\Common Files\System\ati.exe');
DeleteFile('C:\WINDOWS\system32\sdra64.exe');
DeleteFile('C:\WINDOWS\system32\servises.exe');
DeleteFile('C:\Program Files\Ask.com\GenericAskToolbar.dll');
DeleteFile('C:\DOCUME~1\Tanya\LOCALS~1\Temp\7.tmp.exe');
DeleteFile('C:\Program Files\Ask.com\UpdateTask.exe');
DeleteFile('C:\BIN\RECYCLE\Bin.exe');
DeleteFile('C:\MEMORY\S-v-6-2009\PeAcE.exe');
DeleteFile('C:\C\Settings\cl.exe');
DeleteFile('C:\F\UCK\FK.exe');
DeleteFile('C:\WINDOWS\Installer\c2f239.msi');
DeleteFileMask('C:\Program Files\Ask.com','*.*',true);
DeleteFileMask('C:\BIN','*.*',true);
DeleteFileMask('C:\C','*.*',true);
DeleteFileMask('C:\F','*.*',true);
DeleteFileMask('C:\MEMORY','*.*',true);
DeleteFileMask('%tmp%','*.*',true);
DeleteFileMask('C:\WINDOWS\Tasks','*.job',false);
DeleteDirectory('C:\Program Files\Ask.com');
DeleteDirectory('C:\BIN');
DeleteDirectory('C:\C');
DeleteDirectory('C:\F');
DeleteDirectory('C:\MEMORY');
DelCLSID('{67KLN5J0-4OPM-00WE-AAX5-74CC2A323342}');
DelCLSID('{67XOR2B0-3GMC-89VV-JIJ1-24KL2R3251431}');
DelCLSID('{67XOR2B0-3GMC-89VV-JIJ1-32KL2R3233771}');
DelCLSID('{67XOR2B0-3GMC-89VV-JIJ1-32KL2R3423321}');
DelBHO('{D4027C7F-154A-4066-A1AD-4243D8127440}');
DelBHO('{1F460357-8A94-4D71-9CA3-AA4ACF32ED8E}');
RegKeyParamDel('HKEY_USERS','S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Run','userinit');
RegKeyParamDel('HKEY_USERS','.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run','userinit');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run','servises');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','servises');
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1201', 3);
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1001', 1);
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1004', 3);
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '2201', 3);
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '2201', 1);
QuarantineFile('C:\WINDOWS\system32\sfcfiles.dll','');
RenameFile('C:\WINDOWS\system32\sfcfiles.dll','C:\WINDOWS\system32\sfcfiles.bak');
CopyFile('C:\WINDOWS\system32\dllcache\sfcfiles.dll','C:\WINDOWS\system32\sfcfiles.dll');
DeleteFile('C:\WINDOWS\system32\sfcfiles.bak');
BC_ImportDeletedList;
ExecuteSysClean;
BC_Activate;
CreateQurantineArchive(GetAVZDirectory+'quarantine.zip');
SetAVZPMStatus(true);
RebootWindows(true);
end.
После выполнения скрипта компьютер перезагрузится