Код:
begin
ShowMessage('Внимание! Перед выполнением скрипта AVZ автоматически закроет все сетевые подключения.' + #13#10 + 'После перезагрузки компьютера подключения к сети будут восстановлены в автоматическом режиме.');
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
if not IsWOW64
then
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
end;
QuarantineFile('C:\Users\4E81~1\AppData\Roaming\UPDATE~1\UPDATE~1\UPDATE~1.EXE','');
QuarantineFile('C:\Program Files (x86)\Radio Canyon\d95fe8de-4a72-46b0-8310-faa63f67d942-7.exe','');
QuarantineFile('C:\Program Files (x86)\Radio Canyon\d95fe8de-4a72-46b0-8310-faa63f67d942-6.exe','');
QuarantineFile('C:\Program Files (x86)\Radio Canyon\d95fe8de-4a72-46b0-8310-faa63f67d942-5.exe','');
QuarantineFile('C:\Program Files (x86)\Radio Canyon\d95fe8de-4a72-46b0-8310-faa63f67d942-4.exe','');
QuarantineFile('C:\Program Files (x86)\Radio Canyon\d95fe8de-4a72-46b0-8310-faa63f67d942-2.exe','');
QuarantineFile('C:\Program Files (x86)\Radio Canyon\d95fe8de-4a72-46b0-8310-faa63f67d942-11.exe','');
SetServiceStart('WindowsMedia', 4);
DeleteService('WindowsMedia');
QuarantineFile('c:\program files (x86)\common files\spigot\search settings\searchsettings.exe','');
TerminateProcessByName('c:\program files (x86)\neya\neyasvc.exe');
QuarantineFile('c:\program files (x86)\neya\neyasvc.exe','');
TerminateProcessByName('c:\program files (x86)\neya\neya.exe');
QuarantineFile('c:\program files (x86)\neya\neya.exe','');
DeleteFile('c:\program files (x86)\neya\neya.exe','32');
DeleteFile('c:\program files (x86)\neya\neyasvc.exe','32');
DeleteFile('C:\Program Files (x86)\Radio Canyon\d95fe8de-4a72-46b0-8310-faa63f67d942-11.exe','32');
DeleteFile('C:\Windows\Tasks\d95fe8de-4a72-46b0-8310-faa63f67d942-11.job','64');
DeleteFile('C:\Program Files (x86)\Radio Canyon\d95fe8de-4a72-46b0-8310-faa63f67d942-2.exe','32');
DeleteFile('C:\Windows\Tasks\d95fe8de-4a72-46b0-8310-faa63f67d942-2.job','64');
DeleteFile('C:\Windows\Tasks\d95fe8de-4a72-46b0-8310-faa63f67d942-4.job','64');
DeleteFile('C:\Program Files (x86)\Radio Canyon\d95fe8de-4a72-46b0-8310-faa63f67d942-4.exe','32');
DeleteFile('C:\Program Files (x86)\Radio Canyon\d95fe8de-4a72-46b0-8310-faa63f67d942-5.exe','32');
DeleteFile('C:\Windows\Tasks\d95fe8de-4a72-46b0-8310-faa63f67d942-5.job','64');
DeleteFile('C:\Windows\Tasks\d95fe8de-4a72-46b0-8310-faa63f67d942-5_user.job','64');
DeleteFile('C:\Program Files (x86)\Radio Canyon\d95fe8de-4a72-46b0-8310-faa63f67d942-6.exe','32');
DeleteFile('C:\Windows\Tasks\d95fe8de-4a72-46b0-8310-faa63f67d942-6.job','64');
DeleteFile('C:\Program Files (x86)\Radio Canyon\d95fe8de-4a72-46b0-8310-faa63f67d942-7.exe','32');
DeleteFile('C:\Windows\Tasks\d95fe8de-4a72-46b0-8310-faa63f67d942-7.job','64');
DeleteFile('C:\Users\4E81~1\AppData\Roaming\UPDATE~1\UPDATE~1\UPDATE~1.EXE','32');
DeleteFile('C:\Windows\Tasks\UpdaterEX.job','64');
DeleteFile('C:\Windows\system32\Tasks\d95fe8de-4a72-46b0-8310-faa63f67d942-1','64');
DeleteFile('C:\Windows\system32\Tasks\d95fe8de-4a72-46b0-8310-faa63f67d942-11','64');
DeleteFile('C:\Windows\system32\Tasks\d95fe8de-4a72-46b0-8310-faa63f67d942-2','64');
DeleteFile('C:\Windows\system32\Tasks\d95fe8de-4a72-46b0-8310-faa63f67d942-4','64');
DeleteFile('C:\Windows\system32\Tasks\d95fe8de-4a72-46b0-8310-faa63f67d942-5','64');
DeleteFile('C:\Windows\system32\Tasks\d95fe8de-4a72-46b0-8310-faa63f67d942-6','64');
DeleteFile('C:\Windows\system32\Tasks\d95fe8de-4a72-46b0-8310-faa63f67d942-7','64');
DeleteFile('C:\Windows\system32\Tasks\UpdaterEX','64');
DeleteFileMask('C:\Program Files (x86)\Radio Canyon', '*', true);
DeleteDirectory('C:\Program Files (x86)\Radio Canyon');
DeleteFileMask('c:\program files (x86)\neya', '*', true);
DeleteDirectory('c:\program files (x86)\neya');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RebootWindows(false);
end.
Компьютер перезагрузится.