Код:
begin
ShowMessage('Внимание! Перед выполнением скрипта AVZ автоматически закроет все сетевые подключения.' + #13#10 + 'После перезагрузки компьютера подключения к сети будут восстановлены в автоматическом режиме.');
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
if not IsWOW64
then
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
end;
QuarantineFile('C:\Program Files\ver7BlockAndSurf\J6BlockAndSurfR79.exe','');
QuarantineFile('C:\Documents and Settings\Администратор\Local Settings\Application Data\SystemDir\nethost.exe','');
QuarantineFile('C:\Documents and Settings\Администратор\Application Data\7790\Updater.exe','');
DelBHO('{1B75FDE9-A250-DF68-EAAA-A78DDC1F49AC}');
DelBHO('{1FE48F08-A2AC-44AC-A21C-0556D91C50DA}');
DelBHO('{7CE987D5-11B3-44FC-9C3D-03069360D462}');
QuarantineFile('C:\Program Files\advPlugin\Toolbar32.dll','');
QuarantineFile('C:\Program Files\ver7BlockAndSurf\184.dll','');
QuarantineFile('C:\Program Files\Zaxar\ZaxarLoader.exe','');
QuarantineFile('C:\Program Files\Microsoft Data\InstallAddons.exe','');
QuarantineFile('C:\Program Files\Kinoroom Browser\kinoroom-browser.exe','');
QuarantineFile('C:\Program Files\Common Files\Distribute Application\appdistrib.exe','');
QuarantineFile('C:\Program Files\Google\chrome.bat','');
QuarantineFile('C:\Launcher.bat','');
QuarantineFile('C:\IEXPLORE.bat','');
QuarantineFile('C:\Documents and Settings\Администратор\Local Settings\Application Data\Microsoft\Windows\system.exe','');
QuarantineFile('C:\Documents and Settings\Администратор\Local Settings\Application Data\Microsoft\Extensions\safebrowser.exe','');
QuarantineFile('C:\Documents and Settings\Администратор\Local Settings\Application Data\Adobe\Flash Player\airappinstaller.exe','');
QuarantineFile('C:\windows\system32\drivers\{371bcf01-e691-44bf-9345-60788e5d16a5}Gt.sys','');
DeleteService('{371bcf01-e691-44bf-9345-60788e5d16a5}Gt');
QuarantineFile('C:\windows\system32\drivers\ccnfd_1_10_0_4.sys','');
DeleteService('ccnfd_1_10_0_4');
SetServiceStart('{a5c25b9e-3974-4e91-9864-34f9aca33ff3}Gt', 4);
DeleteService('{a5c25b9e-3974-4e91-9864-34f9aca33ff3}Gt');
SetServiceStart('{8d9c9462-4635-4cc0-ab2c-0e46af3a958b}Gt', 4);
DeleteService('{8d9c9462-4635-4cc0-ab2c-0e46af3a958b}Gt');
SetServiceStart('{76eaa25f-d535-414d-8a8b-4bce0a94d247}Gt', 4);
DeleteService('{76eaa25f-d535-414d-8a8b-4bce0a94d247}Gt');
SetServiceStart('{6e9af5d3-a8f9-4461-ad38-1433888f55dc}Gt', 4);
DeleteService('{6e9af5d3-a8f9-4461-ad38-1433888f55dc}Gt');
SetServiceStart('{693a0a5b-aa08-4a3c-b7e8-398a93e02cf2}Gt', 4);
DeleteService('{693a0a5b-aa08-4a3c-b7e8-398a93e02cf2}Gt');
SetServiceStart('{4cff408a-d9e7-47c3-a711-95133fcf7f45}Gt', 4);
DeleteService('{4cff408a-d9e7-47c3-a711-95133fcf7f45}Gt');
SetServiceStart('{371bcf01-e691-44bf-9345-60788e5d16a5}t', 4);
DeleteService('{371bcf01-e691-44bf-9345-60788e5d16a5}t');
SetServiceStart('{31c21995-b861-4864-ab50-4a53fbca73d4}t', 4);
DeleteService('{31c21995-b861-4864-ab50-4a53fbca73d4}t');
SetServiceStart('{29b8df85-56af-474f-9022-e376793679f9}Gt', 4);
DeleteService('{29b8df85-56af-474f-9022-e376793679f9}Gt');
QuarantineFile('C:\Program Files\advPlugin\Basement\ExtensionUpdaterService.exe','');
QuarantineFile('C:\Documents and Settings\Администратор\Application Data\VOPackage\VOsrv.exe','');
DeleteService('Update Service for advPlugin');
DeleteService('servervo');
QuarantineFile('C:\Program Files\ver7BlockAndSurf\U7qQ184.exe','');
DeleteService('BlockAndSurf');
SetServiceStart('Util Solution Real', 4);
DeleteService('Util Solution Real');
SetServiceStart('Update Solution Real', 4);
DeleteService('Update Solution Real');
QuarantineFile('C:\windows\system32\drivers\{edf2e803-e64b-4078-9a9f-33672590ad18}Gt.sys','');
QuarantineFile('C:\windows\system32\drivers\{a5c25b9e-3974-4e91-9864-34f9aca33ff3}Gt.sys','');
QuarantineFile('C:\windows\system32\drivers\{8d9c9462-4635-4cc0-ab2c-0e46af3a958b}Gt.sys','');
QuarantineFile('C:\windows\system32\drivers\{76eaa25f-d535-414d-8a8b-4bce0a94d247}Gt.sys','');
QuarantineFile('C:\windows\system32\drivers\{6e9af5d3-a8f9-4461-ad38-1433888f55dc}Gt.sys','');
QuarantineFile('C:\windows\system32\drivers\{693a0a5b-aa08-4a3c-b7e8-398a93e02cf2}Gt.sys','');
QuarantineFile('C:\windows\system32\drivers\{4cff408a-d9e7-47c3-a711-95133fcf7f45}Gt.sys','');
QuarantineFile('C:\windows\system32\drivers\{371bcf01-e691-44bf-9345-60788e5d16a5}t.sys','');
QuarantineFile('C:\windows\system32\drivers\{31c21995-b861-4864-ab50-4a53fbca73d4}t.sys','');
QuarantineFile('C:\windows\system32\drivers\{29b8df85-56af-474f-9022-e376793679f9}Gt.sys','');
TerminateProcessByName('c:\program files\solution real\bin\utilsolutionreal.exe');
QuarantineFile('c:\program files\solution real\bin\utilsolutionreal.exe','');
TerminateProcessByName('c:\program files\solution real\updatesolutionreal.exe');
QuarantineFile('c:\program files\solution real\updatesolutionreal.exe','');
TerminateProcessByName('c:\documents and settings\Администратор\application data\cppredistx86.exe');
QuarantineFile('c:\documents and settings\Администратор\application data\cppredistx86.exe','');
DeleteFile('c:\documents and settings\Администратор\application data\cppredistx86.exe','32');
DeleteFile('c:\program files\solution real\updatesolutionreal.exe','32');
DeleteFile('c:\program files\solution real\bin\utilsolutionreal.exe','32');
DeleteFile('C:\windows\system32\drivers\{29b8df85-56af-474f-9022-e376793679f9}Gt.sys','32');
DeleteFile('C:\windows\system32\drivers\{31c21995-b861-4864-ab50-4a53fbca73d4}t.sys','32');
DeleteFile('C:\windows\system32\drivers\{371bcf01-e691-44bf-9345-60788e5d16a5}t.sys','32');
DeleteFile('C:\windows\system32\drivers\{4cff408a-d9e7-47c3-a711-95133fcf7f45}Gt.sys','32');
DeleteFile('C:\windows\system32\drivers\{693a0a5b-aa08-4a3c-b7e8-398a93e02cf2}Gt.sys','32');
DeleteFile('C:\windows\system32\drivers\{6e9af5d3-a8f9-4461-ad38-1433888f55dc}Gt.sys','32');
DeleteFile('C:\windows\system32\drivers\{76eaa25f-d535-414d-8a8b-4bce0a94d247}Gt.sys','32');
DeleteFile('C:\windows\system32\drivers\{8d9c9462-4635-4cc0-ab2c-0e46af3a958b}Gt.sys','32');
DeleteFile('C:\windows\system32\drivers\{a5c25b9e-3974-4e91-9864-34f9aca33ff3}Gt.sys','32');
DeleteFile('C:\windows\system32\drivers\{edf2e803-e64b-4078-9a9f-33672590ad18}Gt.sys','32');
DeleteFile('C:\Program Files\ver7BlockAndSurf\U7qQ184.exe','32');
DeleteFile('C:\Documents and Settings\Администратор\Application Data\VOPackage\VOsrv.exe','32');
DeleteFile('C:\Program Files\advPlugin\Basement\ExtensionUpdaterService.exe','32');
DeleteFile('C:\windows\system32\drivers\ccnfd_1_10_0_4.sys','32');
DeleteFile('C:\windows\system32\drivers\{371bcf01-e691-44bf-9345-60788e5d16a5}Gt.sys','32');
DeleteFile('C:\Documents and Settings\All Users\Application Data\Kbupdater Utility\kbupdater-utility.exe','32');
BC_DeleteFile('C:\Documents and Settings\All Users\Application Data\Kbupdater Utility\kbupdater-utility.exe');
DeleteFile('C:\Documents and Settings\Администратор\Application Data\Microsoft\Internet Explorer\Quick Launch\Вoйти в Интeрнет 2inf.net.lnk','32');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','Microsoft Visual C++ 2010');
DeleteFile('C:\Documents and Settings\Администратор\Local Settings\Application Data\Adobe\Flash Player\airappinstaller.exe','32');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','KometaLaunchPanel');
DeleteFile('C:\Documents and Settings\Администратор\Local Settings\Application Data\Microsoft\Extensions\safebrowser.exe','32');
DeleteFile('C:\Documents and Settings\Администратор\Local Settings\Application Data\Microsoft\Windows\system.exe','32');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','SystemScript');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','SystemScript');
DeleteFile('C:\IEXPLORE.bat','32');
DeleteFile('C:\Launcher.bat','32');
DeleteFile('C:\Program Files\Google\chrome.bat','32');
DeleteFile('C:\Program Files\Kinoroom Browser\kinoroom-browser.exe','32');
DeleteFile('C:\Program Files\Microsoft Data\InstallAddons.exe','32');
DeleteFile('C:\Program Files\Zaxar\ZaxarLoader.exe','32');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','ZaxarLoader');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','mobilegeni daemon');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','chrome5');
DeleteFile('C:\Program Files\ver7BlockAndSurf\184.dll','32');
DeleteFile('C:\Program Files\advPlugin\Toolbar32.dll','32');
DeleteFile('C:\Documents and Settings\Администратор\Application Data\7790\Updater.exe','32');
DeleteFile('C:\windows\Tasks\AmiUpdXp.job','32');
DeleteFile('C:\windows\Tasks\APSnotifierPP1.job','32');
DeleteFile('C:\windows\Tasks\APSnotifierPP2.job','32');
DeleteFile('C:\windows\Tasks\APSnotifierPP3.job','32');
DeleteFile('C:\windows\Tasks\BlockAndSurf Update.job','32');
DeleteFile('C:\windows\Tasks\nethost task.job','32');
DeleteFile('C:\Documents and Settings\Администратор\Local Settings\Application Data\SystemDir\nethost.exe','32');
DeleteFile('C:\Program Files\ver7BlockAndSurf\J6BlockAndSurfR79.exe','32');
DeleteFile('C:\Program Files\AnyProtectEx\AnyProtect.exe','32');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RebootWindows(false);
end.
Компьютер перезагрузится.