Код:
begin
ShowMessage('Внимание! Перед выполнением скрипта AVZ автоматически закроет все сетевые подключения.' + #13#10 + 'После перезагрузки компьютера подключения к сети будут восстановлены в автоматическом режиме.');
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
if not IsWOW64
then
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
end;
QuarantineFile('C:\Users\Вероника\appdata\local\pay-by-ads\yahoo! search\1.3.12.4\dsrlte.exe','');
QuarantineFile('C:\Users\Вероника\appdata\local\pay-by-ads\yahoo! search\1.3.12.4\dsrsetup.exe','');
QuarantineFile('C:\Users\Вероника\appdata\roaming\pricem~1\update~1\update~1.exe','');
QuarantineFile('C:\Windows\syswow64\hfpapi.dll','');
QuarantineFile('C:\Windows\syswow64\hfnapi.dll','');
QuarantineFile('C:\Windows\system32\hfpapi.dll','');
QuarantineFile('C:\Windows\system32\hfnapi.dll','');
QuarantineFile('C:\Users\Вероника\AppData\Roaming\Steam\Reversed\steam.exe','');
QuarantineFile('C:\Users\Вероника\AppData\Roaming\EurekaLog\googleupd.exe','');
QuarantineFile('C:\Users\1C98~1\AppData\Roaming\PRICEM~1\UPDATE~1\UPDATE~1.EXE','');
QuarantineFile('C:\Users\Вероника\AppData\Roaming\newSI_602\s_inst.exe','');
QuarantineFile('C:\Users\Вероника\AppData\Local\7133\Updater.exe','');
DelCLSID('{11292110-6F8D-4D56-863C-44902A1E7880}');
DelCLSID('{00890530-6A9F-4be2-B1BB-73F01E2BB986}');
QuarantineFile('C:\Users\Вероника\AppData\Local\Microsoft\Internet Explorer\Extensions\APIHelper.dll','');
DelBHO('{c6673938-a52b-4dc6-af05-783e7e2c8b65}');
QuarantineFile('C:\Program Files (x86)\Surftastic\SurftasticBHO.dll','');
QuarantineFile('C:\Users\Лера\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.12.4\dsrlte.exe','');
SetServiceStart('{fff2d2b4-0f90-4edd-a75a-047e2658236a}w64', 4);
DeleteService('{fff2d2b4-0f90-4edd-a75a-047e2658236a}w64');
SetServiceStart('{f8280ede-2ab0-420d-ae0f-169ba406978b}w64', 4);
DeleteService('{f8280ede-2ab0-420d-ae0f-169ba406978b}w64');
SetServiceStart('{c89879cb-75b8-4cb6-bc13-07c704396fd0}w64', 4);
DeleteService('{c89879cb-75b8-4cb6-bc13-07c704396fd0}w64');
SetServiceStart('{c5e48979-bd7f-4cf7-9b73-2482a67a4f37}w64', 4);
DeleteService('{c5e48979-bd7f-4cf7-9b73-2482a67a4f37}w64');
SetServiceStart('{b35afcf6-0992-4551-b2da-3af8a5dc5119}w64', 4);
DeleteService('{b35afcf6-0992-4551-b2da-3af8a5dc5119}w64');
SetServiceStart('{b0c51d23-966e-4986-81ac-a04859acb990}w64', 4);
DeleteService('{b0c51d23-966e-4986-81ac-a04859acb990}w64');
SetServiceStart('{ad28a4d5-ff34-4e4c-af95-b3aa1bbc1d20}w64', 4);
DeleteService('{ad28a4d5-ff34-4e4c-af95-b3aa1bbc1d20}w64');
SetServiceStart('{9ce7879e-efcb-4d59-a160-5f2b28c004e0}w64', 4);
DeleteService('{9ce7879e-efcb-4d59-a160-5f2b28c004e0}w64');
SetServiceStart('{94538859-34de-4cd4-9dc6-aa29e98ff214}w64', 4);
DeleteService('{94538859-34de-4cd4-9dc6-aa29e98ff214}w64');
SetServiceStart('{9390ab08-5703-448b-94f8-b8b1934c8841}w64', 4);
DeleteService('{9390ab08-5703-448b-94f8-b8b1934c8841}w64');
SetServiceStart('{9307392e-ba24-447f-958f-5a785f03634f}w64', 4);
DeleteService('{9307392e-ba24-447f-958f-5a785f03634f}w64');
SetServiceStart('{6cfec6a5-9d93-4492-985a-470a68eff4e9}w64', 4);
DeleteService('{6cfec6a5-9d93-4492-985a-470a68eff4e9}w64');
SetServiceStart('{4dbbe3b0-af29-43dd-bcba-7bfabd419f61}w64', 4);
DeleteService('{4dbbe3b0-af29-43dd-bcba-7bfabd419f61}w64');
SetServiceStart('{38f72c19-9857-4bc2-b729-9d00bd429872}w64', 4);
DeleteService('{38f72c19-9857-4bc2-b729-9d00bd429872}w64');
SetServiceStart('{2ac9eb83-636e-4a51-ab66-bf4f388a02ab}w64', 4);
DeleteService('{2ac9eb83-636e-4a51-ab66-bf4f388a02ab}w64');
SetServiceStart('{2429c312-24d3-4127-94ed-c247fe9e02fc}w64', 4);
DeleteService('{2429c312-24d3-4127-94ed-c247fe9e02fc}w64');
SetServiceStart('{1fe5a9eb-d0ad-44c6-8e0e-e079118db915}w64', 4);
DeleteService('{1fe5a9eb-d0ad-44c6-8e0e-e079118db915}w64');
SetServiceStart('{0c7dc56c-1fb8-4d6b-a40f-10611881a3b6}w64', 4);
DeleteService('{0c7dc56c-1fb8-4d6b-a40f-10611881a3b6}w64');
SetServiceStart('{0729a3ff-5ca9-4654-a275-96df29273fbf}w64', 4);
DeleteService('{0729a3ff-5ca9-4654-a275-96df29273fbf}w64');
SetServiceStart('{01531192-f7ef-415f-a549-cfdb11836731}w64', 4);
DeleteService('{01531192-f7ef-415f-a549-cfdb11836731}w64');
SetServiceStart('wStLibG64', 4);
DeleteService('wStLibG64');
SetServiceStart('nethfdrv', 4);
DeleteService('nethfdrv');
SetServiceStart('Util Surftastic', 4);
DeleteService('Util Surftastic');
SetServiceStart('Util ClearThink', 4);
DeleteService('Util ClearThink');
SetServiceStart('Update Surftastic', 4);
DeleteService('Update Surftastic');
SetServiceStart('Update ClearThink', 4);
DeleteService('Update ClearThink');
SetServiceStart('ServiceUpdater', 4);
DeleteService('ServiceUpdater');
SetServiceStart('NetHttpService', 4);
DeleteService('NetHttpService');
QuarantineFile('C:\Windows\system32\drivers\{fff2d2b4-0f90-4edd-a75a-047e2658236a}w64.sys','');
QuarantineFile('C:\Windows\system32\drivers\{f8280ede-2ab0-420d-ae0f-169ba406978b}w64.sys','');
QuarantineFile('C:\Windows\system32\drivers\{c89879cb-75b8-4cb6-bc13-07c704396fd0}w64.sys','');
QuarantineFile('C:\Windows\system32\drivers\{c5e48979-bd7f-4cf7-9b73-2482a67a4f37}w64.sys','');
QuarantineFile('C:\Windows\system32\drivers\{b35afcf6-0992-4551-b2da-3af8a5dc5119}w64.sys','');
QuarantineFile('C:\Windows\system32\drivers\{b0c51d23-966e-4986-81ac-a04859acb990}w64.sys','');
QuarantineFile('C:\Windows\system32\drivers\{ad28a4d5-ff34-4e4c-af95-b3aa1bbc1d20}w64.sys','');
QuarantineFile('C:\Windows\system32\drivers\{9ce7879e-efcb-4d59-a160-5f2b28c004e0}w64.sys','');
QuarantineFile('C:\Windows\system32\drivers\{94538859-34de-4cd4-9dc6-aa29e98ff214}w64.sys','');
QuarantineFile('C:\Windows\system32\drivers\{9390ab08-5703-448b-94f8-b8b1934c8841}w64.sys','');
QuarantineFile('C:\Windows\system32\drivers\{9307392e-ba24-447f-958f-5a785f03634f}w64.sys','');
QuarantineFile('C:\Windows\system32\drivers\{6cfec6a5-9d93-4492-985a-470a68eff4e9}w64.sys','');
QuarantineFile('C:\Windows\system32\drivers\{4dbbe3b0-af29-43dd-bcba-7bfabd419f61}w64.sys','');
QuarantineFile('C:\Windows\system32\drivers\{38f72c19-9857-4bc2-b729-9d00bd429872}w64.sys','');
QuarantineFile('C:\Windows\system32\drivers\{2ac9eb83-636e-4a51-ab66-bf4f388a02ab}w64.sys','');
QuarantineFile('C:\Windows\system32\drivers\{2429c312-24d3-4127-94ed-c247fe9e02fc}w64.sys','');
QuarantineFile('C:\Windows\system32\drivers\{1fe5a9eb-d0ad-44c6-8e0e-e079118db915}w64.sys','');
QuarantineFile('C:\Windows\system32\drivers\{0c7dc56c-1fb8-4d6b-a40f-10611881a3b6}w64.sys','');
QuarantineFile('C:\Windows\system32\drivers\{0729a3ff-5ca9-4654-a275-96df29273fbf}w64.sys','');
QuarantineFile('C:\Windows\system32\drivers\{01531192-f7ef-415f-a549-cfdb11836731}w64.sys','');
QuarantineFile('C:\Windows\system32\drivers\wStLibG64.sys','');
QuarantineFile('C:\Windows\system32\drivers\nethfdrv.sys','');
QuarantineFile('C:\Program Files (x86)\ClearThink\bin\{6cfec6a5-9d93-4492-985a-470a68eff4e9}.dll','');
TerminateProcessByName('c:\program files (x86)\surftastic\bin\utilsurftastic.exe');
QuarantineFile('c:\program files (x86)\surftastic\bin\utilsurftastic.exe','');
TerminateProcessByName('c:\program files (x86)\clearthink\bin\utilclearthink.exe');
QuarantineFile('c:\program files (x86)\clearthink\bin\utilclearthink.exe','');
TerminateProcessByName('c:\program files (x86)\surftastic\updatesurftastic.exe');
QuarantineFile('c:\program files (x86)\surftastic\updatesurftastic.exe','');
TerminateProcessByName('c:\program files (x86)\clearthink\updateclearthink.exe');
QuarantineFile('c:\program files (x86)\clearthink\updateclearthink.exe','');
TerminateProcessByName('C:\Program Files (x86)\Surftastic\bin\Surftastic.PurBrowse64.exe');
QuarantineFile('C:\Program Files (x86)\Surftastic\bin\Surftastic.PurBrowse64.exe','');
TerminateProcessByName('C:\Program Files (x86)\Surftastic\bin\Surftastic.BrowserAdapter64.exe');
QuarantineFile('C:\Program Files (x86)\Surftastic\bin\Surftastic.BrowserAdapter64.exe','');
TerminateProcessByName('c:\program files (x86)\surftastic\bin\surftastic.boashelper.exe');
QuarantineFile('c:\program files (x86)\surftastic\bin\surftastic.boashelper.exe','');
QuarantineFile('c:\users\Вероника\appdata\roaming\installer\rotator3.exe','');
TerminateProcessByName('c:\windows\syswow64\nethtsrv.exe');
TerminateProcessByName('c:\windows\syswow64\netupdsrv.exe');
QuarantineFile('c:\windows\syswow64\netupdsrv.exe','');
QuarantineFile('c:\windows\syswow64\nethtsrv.exe','');
TerminateProcessByName('C:\Program Files (x86)\ClearThink\bin\ClearThink.PurBrowse64.exe');
QuarantineFile('C:\Program Files (x86)\ClearThink\bin\ClearThink.PurBrowse64.exe','');
TerminateProcessByName('C:\Program Files (x86)\ClearThink\bin\ClearThink.BrowserAdapter64.exe');
TerminateProcessByName('c:\program files (x86)\clearthink\bin\clearthink.boashelper.exe');
TerminateProcessByName('c:\program files (x86)\clearthink\bin\clearthink.browseradapter.exe');
QuarantineFile('C:\Program Files (x86)\ClearThink\bin\ClearThink.BrowserAdapter64.exe','');
QuarantineFile('c:\program files (x86)\clearthink\bin\clearthink.browseradapter.exe','');
QuarantineFile('c:\program files (x86)\clearthink\bin\clearthink.boashelper.exe','');
DeleteFile('c:\program files (x86)\clearthink\bin\clearthink.boashelper.exe','32');
DeleteFile('c:\program files (x86)\clearthink\bin\clearthink.browseradapter.exe','32');
DeleteFile('C:\Program Files (x86)\ClearThink\bin\ClearThink.BrowserAdapter64.exe','32');
DeleteFile('C:\Program Files (x86)\ClearThink\bin\ClearThink.PurBrowse64.exe','32');
DeleteFile('c:\windows\syswow64\nethtsrv.exe','32');
DeleteFile('c:\windows\syswow64\netupdsrv.exe','32');
DeleteFile('c:\program files (x86)\surftastic\bin\surftastic.boashelper.exe','32');
DeleteFile('C:\Program Files (x86)\Surftastic\bin\Surftastic.BrowserAdapter64.exe','32');
DeleteFile('C:\Program Files (x86)\Surftastic\bin\Surftastic.PurBrowse64.exe','32');
DeleteFile('c:\program files (x86)\clearthink\updateclearthink.exe','32');
DeleteFile('c:\program files (x86)\surftastic\updatesurftastic.exe','32');
DeleteFile('c:\program files (x86)\clearthink\bin\utilclearthink.exe','32');
DeleteFile('c:\program files (x86)\surftastic\bin\utilsurftastic.exe','32');
DeleteFile('C:\Program Files (x86)\ClearThink\bin\{6cfec6a5-9d93-4492-985a-470a68eff4e9}.dll','32');
DeleteFile('C:\Windows\system32\drivers\nethfdrv.sys','32');
DeleteFile('C:\Windows\system32\drivers\{01531192-f7ef-415f-a549-cfdb11836731}w64.sys','32');
DeleteFile('C:\Windows\system32\drivers\{0729a3ff-5ca9-4654-a275-96df29273fbf}w64.sys','32');
DeleteFile('C:\Windows\system32\drivers\{0c7dc56c-1fb8-4d6b-a40f-10611881a3b6}w64.sys','32');
DeleteFile('C:\Windows\system32\drivers\{1fe5a9eb-d0ad-44c6-8e0e-e079118db915}w64.sys','32');
DeleteFile('C:\Windows\system32\drivers\{2429c312-24d3-4127-94ed-c247fe9e02fc}w64.sys','32');
DeleteFile('C:\Windows\system32\drivers\{2ac9eb83-636e-4a51-ab66-bf4f388a02ab}w64.sys','32');
DeleteFile('C:\Windows\system32\drivers\{38f72c19-9857-4bc2-b729-9d00bd429872}w64.sys','32');
DeleteFile('C:\Windows\system32\drivers\{4dbbe3b0-af29-43dd-bcba-7bfabd419f61}w64.sys','32');
DeleteFile('C:\Windows\system32\drivers\{6cfec6a5-9d93-4492-985a-470a68eff4e9}w64.sys','32');
DeleteFile('C:\Windows\system32\drivers\{9307392e-ba24-447f-958f-5a785f03634f}w64.sys','32');
DeleteFile('C:\Windows\system32\drivers\{9390ab08-5703-448b-94f8-b8b1934c8841}w64.sys','32');
DeleteFile('C:\Windows\system32\drivers\{94538859-34de-4cd4-9dc6-aa29e98ff214}w64.sys','32');
DeleteFile('C:\Windows\system32\drivers\{9ce7879e-efcb-4d59-a160-5f2b28c004e0}w64.sys','32');
DeleteFile('C:\Windows\system32\drivers\{ad28a4d5-ff34-4e4c-af95-b3aa1bbc1d20}w64.sys','32');
DeleteFile('C:\Windows\system32\drivers\{b0c51d23-966e-4986-81ac-a04859acb990}w64.sys','32');
DeleteFile('C:\Windows\system32\drivers\{b35afcf6-0992-4551-b2da-3af8a5dc5119}w64.sys','32');
DeleteFile('C:\Windows\system32\drivers\{c5e48979-bd7f-4cf7-9b73-2482a67a4f37}w64.sys','32');
DeleteFile('C:\Windows\system32\drivers\{f8280ede-2ab0-420d-ae0f-169ba406978b}w64.sys','32');
DeleteFile('C:\Windows\system32\drivers\{fff2d2b4-0f90-4edd-a75a-047e2658236a}w64.sys','32');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved','{00890530-6A9F-4be2-B1BB-73F01E2BB986}');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','BaiduAnTray');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved','{11292110-6F8D-4D56-863C-44902A1E7880}');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','pcket_x86');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','pcket_x64');
DeleteFile('C:\Users\Вероника\AppData\Local\Amigo\Application\amigo.exe','32');
DeleteFile('C:\Users\Лера\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.12.4\dsrlte.exe','32');
RegKeyParamDel('HKEY_USERS','S-1-5-21-3742690064-3373136505-1929445239-1002\Software\Microsoft\Windows\CurrentVersion\Run','Yahoo! Search');
DeleteFile('C:\Program Files (x86)\Surftastic\SurftasticBHO.dll','32');
DeleteFile('C:\Users\Вероника\AppData\Local\7133\Updater.exe','32');
DeleteFile('C:\Windows\Tasks\AmiUpdXp.job','64');
DeleteFile('C:\Windows\Tasks\newSI_602.job','64');
DeleteFile('C:\Users\Вероника\AppData\Roaming\newSI_602\s_inst.exe','32');
DeleteFile('C:\Users\1C98~1\AppData\Roaming\PRICEM~1\UPDATE~1\UPDATE~1.EXE','32');
DeleteFile('C:\Windows\Tasks\PriceMeterUpdater.job','64');
DeleteFile('C:\Windows\system32\Tasks\AmiUpdXp','64');
DeleteFile('C:\Users\Вероника\AppData\Roaming\EurekaLog\googleupd.exe','32');
DeleteFile('C:\Windows\system32\Tasks\GoogleUpdateTaskUserS-1-5-21-1970835742GUI','64');
DeleteFile('C:\Windows\system32\Tasks\newSI_602','64');
DeleteFile('C:\Windows\system32\Tasks\PriceMeterUpdater','64');
DeleteFile('C:\Windows\system32\Tasks\Steam-S-1-8-22-9865GUI','64');
DeleteFile('C:\Users\Вероника\AppData\Roaming\Steam\Reversed\steam.exe','32');
DeleteFile('C:\Windows\system32\Tasks\Yahoo! Search','64');
DeleteFile('C:\Windows\system32\Tasks\Yahoo! Search Udpater','64');
DeleteFile('C:\Windows\system32\hfnapi.dll','32');
DeleteFile('C:\Windows\syswow64\hfnapi.dll','32');
DeleteFile('C:\Windows\syswow64\hfpapi.dll','32');
DeleteFile('C:\Users\Вероника\appdata\roaming\pricem~1\update~1\update~1.exe','32');
DeleteFile('C:\Users\Вероника\appdata\local\pay-by-ads\yahoo! search\1.3.12.4\dsrsetup.exe','32');
DeleteFile('C:\Users\Вероника\appdata\local\pay-by-ads\yahoo! search\1.3.12.4\dsrlte.exe','32');
BC_ImportAll;
ExecuteSysClean;
BC_DeleteFile('c:\program files (x86)\baidu\baiduan\3.0.0.3971\baiduansvc.exe');
BC_DeleteFile('c:\program files (x86)\baidu\baiduan\3.0.0.3971\baiduantray.exe');
BC_DeleteFile('c:\program files (x86)\common files\baidu\baiduhips\1.1.0.733\baiduhips.exe');
BC_DeleteFile('c:\program files (x86)\common files\baidu\baiduprotect1.3\1.3.0.593\baiduprotect.exe');
BC_DeleteFile('c:\program files (x86)\baidu\baidusd\1.8.0.1255\baidusdsvc.exe');
BC_DeleteFile('c:\program files (x86)\baidu\baidusd\1.8.0.1255\baidusdtray.exe');
BC_DeleteFile('C:\Program Files (x86)\Baidu\BaiduSd\1.8.0.1255\BaiduSdUProxy64.exe');
BC_DeleteFile('c:\program files (x86)\common files\baidu\bddownload\108\bddownloader.exe');
BC_DeleteFile('C:\Program Files (x86)\Baidu\BaiduAn\3.0.0.3971\ad.dll');
BC_DeleteFile('C:\Program Files (x86)\Baidu\BaiduAn\3.0.0.3971\BDLogicUtils.dll');
BC_DeleteFile('C:\Program Files (x86)\Baidu\BaiduAn\3.0.0.3971\bdmantivirus\BDKitUtils.dll');
BC_DeleteFile('C:\Program Files (x86)\Baidu\BaiduAn\3.0.0.3971\bdmantivirus\BDMAVEng.dll');
BC_DeleteFile('C:\Program Files (x86)\Baidu\BaiduAn\3.0.0.3971\bdmantivirus\bduf.dll');
BC_DeleteFile('C:\Program Files (x86)\Baidu\BaiduAn\3.0.0.3971\BDMCommon.dll');
BC_DeleteFile('C:\Program Files (x86)\Baidu\BaiduAn\3.0.0.3971\BDMDbSqlite.dll');
BC_DeleteFile('C:\Program Files (x86)\Baidu\BaiduAn\3.0.0.3971\BDMDownload.dll');
BC_DeleteFile('C:\Program Files (x86)\Baidu\BaiduAn\3.0.0.3971\BDMFrameWork.dll');
BC_DeleteFile('C:\Program Files (x86)\Baidu\BaiduAn\3.0.0.3971\BDMNet.dll');
BC_DeleteFile('C:\Program Files (x86)\Baidu\BaiduAn\3.0.0.3971\BDMReport.dll');
BC_DeleteFile('C:\Program Files (x86)\Baidu\BaiduAn\3.0.0.3971\BDMSkin.dll');
BC_DeleteFile('C:\Program Files (x86)\Baidu\BaiduAn\3.0.0.3971\BDMUpdate.dll');
BC_DeleteFile('C:\Program Files (x86)\Baidu\BaiduAn\3.0.0.3971\DriverManager.dll');
BC_DeleteFile('C:\Program Files (x86)\Baidu\BaiduAn\3.0.0.3971\EnhanceBoost.dll');
BC_DeleteFile('C:\Program Files (x86)\Baidu\BaiduAn\3.0.0.3971\FTSOManager\BDMNetMonMgrDll.dll');
BC_DeleteFile('C:\Program Files (x86)\Baidu\BaiduAn\3.0.0.3971\FTSOManager\BDMProcessRunningTime.dll');
BC_DeleteFile('C:\Program Files (x86)\Baidu\BaiduAn\3.0.0.3971\FTSOManager\BDMSOLiveAccDataMgr.dll');
BC_DeleteFile('C:\Program Files (x86)\Baidu\BaiduAn\3.0.0.3971\FTSOManager\BDMSOLiveAccEngine.dll');
BC_DeleteFile('C:\Program Files (x86)\Baidu\BaiduAn\3.0.0.3971\FTSOManager\SysAccMgrDll.dll');
BC_DeleteFile('C:\Program Files (x86)\Baidu\BaiduAn\3.0.0.3971\libcurl.dll');
BC_DeleteFile('C:\Program Files (x86)\Baidu\BaiduAn\3.0.0.3971\plugins\bdmsusplugins\BDMNetMonSusPlugin.dll');
BC_DeleteFile('C:\Program Files (x86)\Baidu\BaiduAn\3.0.0.3971\Plugins\BDMPatcherPlugins\BDMConnect.dll');
BC_DeleteFile('C:\Program Files (x86)\Baidu\BaiduAn\3.0.0.3971\Plugins\bdmtrayplugins\BDMAccount.dll');
BC_DeleteFile('C:\Program Files (x86)\Baidu\BaiduAn\3.0.0.3971\Plugins\bdmtrayplugins\BDMSOAccTrayPlugin.dll');
BC_DeleteFile('C:\Program Files (x86)\Baidu\BaiduAn\3.0.0.3971\Plugins\BDMTrayPlugins\BDMSusPlugin.dll');
BC_DeleteFile('C:\Program Files (x86)\Baidu\BaiduAn\3.0.0.3971\Plugins\bdmtrayplugins\BDMSOCleanerTrayPlugin.dll');
BC_DeleteFile('C:\Program Files (x86)\Baidu\BaiduAn\3.0.0.3971\Plugins\bdmtrayplugins\BDMTrayTipsPlugin.dll');
BC_DeleteFile('C:\Program Files (x86)\Baidu\BaiduAn\3.0.0.3971\plugins\RTPPlugins\BDMSOAccServicePlugin.dll');
BC_DeleteFile('C:\Program Files (x86)\Baidu\BaiduAn\3.0.0.3971\plugins\RTPPlugins\HipsClient.dll');
BC_DeleteFile('C:\Program Files (x86)\Baidu\BaiduSd\1.8.0.1255\bdmantivirus\BDKitUtils.dll');
BC_DeleteFile('C:\Program Files (x86)\baidu\BaiduSd\1.8.0.1255\Plugins\bdkvtrayplugins\BDKVTrayTipsPlugin.dll');
BC_DeleteFile('C:\Program Files (x86)\baidu\BaiduSd\1.8.0.1255\Plugins\bdkvtrayplugins\BDKVRmvDevPlugin.dll');
BC_DeleteFile('C:\Program Files (x86)\baidu\BaiduSd\1.8.0.1255\Plugins\bdkvtrayplugins\BDDownLoadProtectPlugin.dll');
BC_DeleteFile('C:\Program Files (x86)\Baidu\BaiduSd\1.8.0.1255\plugins\bdkvrtpplugins\PrivacyProtect.dll');
BC_DeleteFile('C:\Program Files (x86)\Baidu\BaiduSd\1.8.0.1255\plugins\bdkvrtpplugins\HIPSClient.dll');
BC_DeleteFile('C:\Program Files (x86)\Common Files\Baidu\BaiduHips\1.1.0.733\ad.dll');
BC_DeleteFile('C:\Program Files (x86)\Common Files\Baidu\BaiduHips\1.1.0.733\BaiduHipsBusiness.dll');
BC_DeleteFile('C:\Program Files (x86)\Common Files\Baidu\BaiduHips\1.1.0.733\BaiduHipsCore.dll');
BC_DeleteFile('C:\Windows\system32\DRIVERS\bd0001.sys');
BC_DeleteFile('C:\Windows\system32\DRIVERS\bd0002.sys');
BC_DeleteFile('C:\Windows\system32\DRIVERS\bd0004.sys');
BC_DeleteFile('C:\Windows\system32\DRIVERS\BDArKit.sys');
BC_DeleteFile('C:\Windows\system32\drivers\BDDefense.sys');
BC_DeleteFile('C:\Windows\system32\DRIVERS\BDMWrench_x64.sys');
BC_DeleteFile('C:\Windows\system32\DRIVERS\BDSafeBrowser.sys');
BC_DeleteSvc('BaiduHips');
BC_DeleteSvc('BDMRTP');
BC_DeleteSvc('BDSGRTP');
BC_DeleteSvc('bd0001');
BC_DeleteSvc('bd0002');
BC_DeleteSvc('bd0004');
BC_DeleteSvc('BDArKit');
BC_DeleteSvc('BDDefense');
BC_DeleteSvc('BDSafeBrowser');
BC_DeleteFile('C:\Program Files (x86)\BaiduEx\uninit.exe');
BC_DeleteFile('C:\Program Files (x86)\Baidu\BaiduAn\3.0.0.3971\BDSWShellExt.dll');
BC_DeleteFile('C:\Program Files (x86)\Baidu\BaiduAn\3.0.0.3971\BDSWShellExt64.dll');
BC_DeleteFile('C:\Program Files (x86)\Baidu\BaiduAn\3.0.0.3971\BaiduAnTray.exe');
BC_DeleteFile('C:\Program Files (x86)\Baidu\BaiduSd\1.8.0.1255\BDShellExt.dll');
BC_DeleteFile('C:\Program Files (x86)\Baidu\BaiduSd\1.8.0.1255\BDShellExt64.dll');
BC_Activate;
RebootWindows(false);
end.
Компьютер перезагрузится.