Код:
begin
ShowMessage('Внимание! Перед выполнением скрипта AVZ автоматически закроет все сетевые подключения.' + #13#10 + 'После перезагрузки компьютера подключения к сети будут восстановлены в автоматическом режиме.');
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
if not IsWOW64
then
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
end;
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1804', 1);
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '2201', 3);
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1004', 3);
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1001', 1);
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1201', 3);
QuarantineFile('C:\ProgramData\5fd2ca9d-b04a-4998-b7e8-2d30ebba8fbe\maintainer.bak','');
QuarantineFile('C:\Users\Ann\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.25.0\dsrsetup.exe','');
QuarantineFile('C:\Users\Ann\AppData\Roaming\UPDATE~1\UPDATE~1\UPDATE~1.EXE','');
DelBHO('{7e6d4e3e-fc66-4036-9799-ce5c625c4c56}');
QuarantineFile('C:\Users\Ann\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.25.0\dsrlte.exe','');
DeleteService('{e5e8bd85-21de-4190-b364-33beb625e47f}w64');
DeleteService('{d609e0eb-8157-494a-b166-6f24f8a1cbb4}w64');
DeleteService('{cf9dbb3a-fbdd-44ad-8691-de2ae76a11d7}w64');
DeleteService('{c5e48979-bd7f-4cf7-9b73-2482a67a4f37}w64');
DeleteService('{94538859-34de-4cd4-9dc6-aa29e98ff214}w64');
DeleteService('{6cfec6a5-9d93-4492-985a-470a68eff4e9}w64');
DeleteService('{2ac9eb83-636e-4a51-ab66-bf4f388a02ab}w64');
DeleteService('{2429c312-24d3-4127-94ed-c247fe9e02fc}w64');
DeleteService('{1fe5a9eb-d0ad-44c6-8e0e-e079118db915}w64');
QuarantineFile('C:\Windows\system32\drivers\{e5e8bd85-21de-4190-b364-33beb625e47f}w64.sys','');
QuarantineFile('C:\Windows\system32\drivers\{d609e0eb-8157-494a-b166-6f24f8a1cbb4}w64.sys','');
QuarantineFile('C:\Windows\system32\drivers\{cf9dbb3a-fbdd-44ad-8691-de2ae76a11d7}w64.sys','');
QuarantineFile('C:\Windows\system32\drivers\{c5e48979-bd7f-4cf7-9b73-2482a67a4f37}w64.sys','');
QuarantineFile('C:\Windows\system32\drivers\{94538859-34de-4cd4-9dc6-aa29e98ff214}w64.sys','');
QuarantineFile('C:\Windows\system32\drivers\{6cfec6a5-9d93-4492-985a-470a68eff4e9}w64.sys','');
QuarantineFile('C:\Windows\system32\drivers\{2ac9eb83-636e-4a51-ab66-bf4f388a02ab}w64.sys','');
QuarantineFile('C:\Windows\system32\drivers\{2429c312-24d3-4127-94ed-c247fe9e02fc}w64.sys','');
QuarantineFile('C:\Windows\system32\drivers\{1fe5a9eb-d0ad-44c6-8e0e-e079118db915}w64.sys','');
SetServiceStart('{bcd08fc8-cb56-41a3-8b19-3c556687a504}w64', 4);
DeleteService('{bcd08fc8-cb56-41a3-8b19-3c556687a504}w64');
SetServiceStart('{b0a5840a-2650-4fc0-a6fa-0368fffc6737}w64', 4);
DeleteService('{b0a5840a-2650-4fc0-a6fa-0368fffc6737}w64');
SetServiceStart('Util ClearThink', 4);
DeleteService('Util ClearThink');
SetServiceStart('Update ClearThink', 4);
DeleteService('Update ClearThink');
QuarantineFile('C:\Windows\system32\drivers\{bcd08fc8-cb56-41a3-8b19-3c556687a504}w64.sys','');
QuarantineFile('C:\Windows\system32\drivers\{b0a5840a-2650-4fc0-a6fa-0368fffc6737}w64.sys','');
QuarantineFile('C:\Program Files (x86)\ClearThink\bin\bcd08fc8cb5641a38b193c556687a504.dll','');
QuarantineFile('C:\Program Files (x86)\ClearThink\bin\bcd08fc8cb5641a38b19.dll','');
TerminateProcessByName('c:\program files (x86)\clearthink\bin\utilclearthink.exe');
QuarantineFile('c:\program files (x86)\clearthink\bin\utilclearthink.exe','');
TerminateProcessByName('c:\program files (x86)\clearthink\updateclearthink.exe');
QuarantineFile('c:\program files (x86)\clearthink\updateclearthink.exe','');
TerminateProcessByName('C:\Program Files (x86)\ClearThink\bin\ClearThink.PurBrowse64.exe');
QuarantineFile('C:\Program Files (x86)\ClearThink\bin\ClearThink.PurBrowse64.exe','');
TerminateProcessByName('C:\Program Files (x86)\ClearThink\bin\ClearThink.BrowserAdapter64.exe');
QuarantineFile('C:\Program Files (x86)\ClearThink\bin\ClearThink.BrowserAdapter64.exe','');
TerminateProcessByName('c:\program files (x86)\clearthink\bin\clearthink.browseradapter.exe');
QuarantineFile('c:\program files (x86)\clearthink\bin\clearthink.browseradapter.exe','');
DeleteFile('c:\program files (x86)\clearthink\bin\clearthink.browseradapter.exe','32');
DeleteFile('C:\Program Files (x86)\ClearThink\bin\ClearThink.BrowserAdapter64.exe','32');
DeleteFile('C:\Program Files (x86)\ClearThink\bin\ClearThink.PurBrowse64.exe','32');
DeleteFile('c:\program files (x86)\clearthink\updateclearthink.exe','32');
DeleteFile('c:\program files (x86)\clearthink\bin\utilclearthink.exe','32');
DeleteFile('C:\Program Files (x86)\ClearThink\bin\bcd08fc8cb5641a38b19.dll','32');
DeleteFile('C:\Program Files (x86)\ClearThink\bin\bcd08fc8cb5641a38b193c556687a504.dll','32');
DeleteFile('C:\Windows\system32\drivers\{b0a5840a-2650-4fc0-a6fa-0368fffc6737}w64.sys','32');
DeleteFile('C:\Windows\system32\drivers\{bcd08fc8-cb56-41a3-8b19-3c556687a504}w64.sys','32');
DeleteFile('C:\Windows\system32\drivers\{1fe5a9eb-d0ad-44c6-8e0e-e079118db915}w64.sys','32');
DeleteFile('C:\Windows\system32\drivers\{2429c312-24d3-4127-94ed-c247fe9e02fc}w64.sys','32');
DeleteFile('C:\Windows\system32\drivers\{2ac9eb83-636e-4a51-ab66-bf4f388a02ab}w64.sys','32');
DeleteFile('C:\Windows\system32\drivers\{6cfec6a5-9d93-4492-985a-470a68eff4e9}w64.sys','32');
DeleteFile('C:\Windows\system32\drivers\{94538859-34de-4cd4-9dc6-aa29e98ff214}w64.sys','32');
DeleteFile('C:\Windows\system32\drivers\{c5e48979-bd7f-4cf7-9b73-2482a67a4f37}w64.sys','32');
DeleteFile('C:\Windows\system32\drivers\{cf9dbb3a-fbdd-44ad-8691-de2ae76a11d7}w64.sys','32');
DeleteFile('C:\Windows\system32\drivers\{d609e0eb-8157-494a-b166-6f24f8a1cbb4}w64.sys','32');
DeleteFile('C:\Windows\system32\drivers\{e5e8bd85-21de-4190-b364-33beb625e47f}w64.sys','32');
DeleteFile('C:\Users\Ann\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.25.0\dsrlte.exe','32');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','Yahoo! Search');
DeleteFile('C:\Users\Ann\AppData\Roaming\UPDATE~1\UPDATE~1\UPDATE~1.EXE','32');
DeleteFile('C:\Windows\Tasks\UpdaterEX.job','64');
DeleteFile('C:\Windows\system32\Tasks\UpdaterEX','64');
DeleteFile('C:\Windows\system32\Tasks\Yahoo! Search','64');
DeleteFile('C:\Windows\system32\Tasks\Yahoo! Search Updater','64');
DeleteFile('C:\Users\Ann\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.25.0\dsrsetup.exe','32');
DeleteFile('C:\ProgramData\5fd2ca9d-b04a-4998-b7e8-2d30ebba8fbe\maintainer.bak','32');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RebootWindows(false);
end.
Компьютер перезагрузится.