Код:
begin
ShowMessage('Внимание! Перед выполнением скрипта AVZ автоматически закроет все сетевые подключения.' + #13#10 + 'После перезагрузки компьютера подключения к сети будут восстановлены в автоматическом режиме.');
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
if not IsWOW64
then
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
end;
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1804', 1);
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '2201', 3);
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1004', 3);
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1001', 1);
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1201', 3);
DelBHO('{FB4F6285-4C32-49F2-950F-A5998F9CEC6C}');
QuarantineFile('D:\IQIYI Video\Common\Accelerator\IEHelper.dll','');
QuarantineFile('C:\Users\PC\AppData\Roaming\Browsers\exe.erolpxei.bat','');
QuarantineFile('C:\Users\PC\AppData\Roaming\Browsers\exe.emorhc.bat','');
DeleteService('TS888x64');
DeleteService('QMUdisk');
SetServiceStart('Update Service for BonusBerry', 4);
DeleteService('Update Service for BonusBerry');
TerminateProcessByName('d:\iqiyi video\common\qyfragment.exe');
TerminateProcessByName('d:\iqiyi video\lstyle\qyclient.exe');
TerminateProcessByName('d:\iqiyi video\lstyle\mobprotect.exe');
TerminateProcessByName('d:\iqiyi video\common\hcdnclient.exe');
TerminateProcessByName('c:\program files (x86)\bonusberry\basement\extensionupdaterservice.exe');
QuarantineFile('c:\program files (x86)\bonusberry\basement\extensionupdaterservice.exe','');
TerminateProcessByName('d:\iqiyi video\lstyle\androidservice.exe');
DeleteFile('d:\iqiyi video\lstyle\androidservice.exe','32');
DeleteFile('c:\program files (x86)\bonusberry\basement\extensionupdaterservice.exe','32');
DeleteFile('d:\iqiyi video\common\hcdnclient.exe','32');
DeleteFile('d:\iqiyi video\lstyle\mobprotect.exe','32');
DeleteFile('d:\iqiyi video\lstyle\qyclient.exe','32');
DeleteFile('d:\iqiyi video\common\qyfragment.exe','32');
DeleteFile('D:\IQIYI Video\Common\Accelerator\browseradapter.dll','32');
DeleteFile('C:\Users\PC\AppData\Local\Temp\QYAgent_runxx.dl','32');
DeleteFile('D:\IQIYI Video\Common\AppNet.dll','32');
DeleteFile('D:\IQIYI Video\Common\avcodec-55.dll','32');
DeleteFile('D:\IQIYI Video\Common\avformat-55.dll','32');
DeleteFile('D:\IQIYI Video\Common\avutil-52.dll','32');
DeleteFile('D:\IQIYI Video\Common\fp2xh.dll','32');
DeleteFile('D:\IQIYI Video\Common\freetype6.dll','32');
DeleteFile('D:\IQIYI Video\Common\HCDNClientNet.dll','32');
DeleteFile('D:\IQIYI Video\Common\HCDNProxy.dll','32');
DeleteFile('D:\IQIYI Video\Common\libass.dll','32');
DeleteFile('D:\IQIYI Video\Common\libcdn-dll.dll','32');
DeleteFile('D:\IQIYI Video\Common\LIBEAY32.dll','32');
DeleteFile('D:\IQIYI Video\Common\libexpat-1.dll','32');
DeleteFile('D:\IQIYI Video\Common\libfontconfig-1.dll','32');
DeleteFile('D:\IQIYI Video\Common\PopupWndProxy.dll','32');
DeleteFile('D:\IQIYI Video\Common\pthreadGC2.dll','32');
DeleteFile('D:\IQIYI Video\Common\pthreadVC2.dll','32');
DeleteFile('D:\IQIYI Video\Common\puma.dll','32');
DeleteFile('D:\IQIYI Video\Common\QuiLib.dll','32');
DeleteFile('D:\IQIYI Video\Common\QyPopWndDll.dll','32');
DeleteFile('D:\IQIYI Video\Common\SSLEAY32.dll','32');
DeleteFile('D:\IQIYI Video\Common\swresample-0.dll','32');
DeleteFile('D:\IQIYI Video\Common\swscale-2.dll','32');
DeleteFile('D:\IQIYI Video\Common\TrayMgr.dll','32');
DeleteFile('D:\IQIYI Video\Common\UI.dll','32');
DeleteFile('D:\IQIYI Video\LStyle\AdbWinApi.DLL','32');
DeleteFile('D:\IQIYI Video\LStyle\AdbWinUsbApi.dll','32');
DeleteFile('D:\IQIYI Video\LStyle\AppNotice.dll','32');
DeleteFile('D:\IQIYI Video\LStyle\CrashReport.dll','32');
DeleteFile('D:\IQIYI Video\LStyle\GBase.dll','32');
DeleteFile('D:\IQIYI Video\LStyle\libcurl.dll','32');
DeleteFile('D:\IQIYI Video\LStyle\LIBEAY32.dll','32');
DeleteFile('D:\IQIYI Video\LStyle\nslookup-netdoctor.dll','32');
DeleteFile('D:\IQIYI Video\LStyle\PHM.dll','32');
DeleteFile('D:\IQIYI Video\LStyle\ppsmb.dll','32');
DeleteFile('D:\IQIYI Video\LStyle\PumaPlayer.dll','32');
DeleteFile('D:\IQIYI Video\LStyle\QYDownLoadProxy.dll','32');
DeleteFile('D:\IQIYI Video\LStyle\Qylogger.dll','32');
DeleteFile('D:\IQIYI Video\LStyle\SSLEAY32.dll','32');
DeleteFile('D:\IQIYI Video\LStyle\UI.dll','32');
DeleteFile('D:\IQIYI Video\LStyle\utility.dll','32');
DeleteFile('D:\IQIYI Video\LStyle\WebBrowserCtrl.dll','32');
DeleteFile('D:\IQIYI Video\LStyle\zlib1.dll','32');
DeleteFile('C:\Program Files (x86)\Tencent\QQPCMgr\10.6.15950.224\QMUdisk64.sys','32');
DeleteFile('C:\Program Files (x86)\Tencent\QQPCMgr\10.6.15950.224\TS888x64.sys','32');
DeleteFile('C:\Users\PC\AppData\Roaming\Browsers\exe.emorhc.bat','32');
DeleteFile('C:\Users\PC\AppData\Roaming\Browsers\exe.erolpxei.bat','32');
DeleteFile('D:\IQIYI Video\Common\Accelerator\IEHelper.dll','32');
DeleteFile('D:\IQIYI Video\LStyle\MobProtect.exe','32');
DeleteFile('C:\Windows\Tasks\MobProtect.job','64');
DeleteFile('C:\Windows\system32\Tasks\MobProtect','64');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RebootWindows(false);
end.
Компьютер перезагрузится.