Код:
begin
ShowMessage('Внимание! Перед выполнением скрипта AVZ автоматически закроет все сетевые подключения.'+#13#10+'После перезагрузки компьютера подключения к сети будут восстановлены в автоматическом режиме.');
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
if not IsWOW64
then
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
end;
DelBHO('{0633EE93-D776-472f-A0FF-E1416B8B2E3D}');
DelBHO('{09900DE8-1DCA-443F-9243-26FF581438AF}');
DelBHO('{11111111-1111-1111-1111-110511731104}');
DelBHO('{1FAFD711-ABF9-4F6A-8130-5166C7371427}');
DelBHO('{84FF7BD6-B47F-46F8-9130-01B2696B36CB}');
StopService('BAPIDRV');
StopService('moqitiqy');
StopService('zejimumi');
QuarantineFile('C:\Documents and Settings\Компьютер\Application Data\Allmyapps\Allmyapps.exe','');
QuarantineFile('C:\Documents and Settings\Компьютер\Application Data\Allmyapps\AllmyappsUpdater.exe','');
QuarantineFile('C:\Documents and Settings\Компьютер\Application Data\FFFFFFFF-1426422666-FFFF-FFFF-FFFFFFFFFFFF\nslF4.tmpfs','');
QuarantineFile('C:\Documents and Settings\Компьютер\Application Data\Microsoft\Internet Explorer\Quick Launch\Свернуть все окна.scf','');
QuarantineFile('C:\Documents and Settings\Компьютер\Local Settings\Application Data\Facebook\Update\FacebookUpdate.exe','');
QuarantineFile('C:\Documents and Settings\Компьютер\Local Settings\Application Data\FFFFFFFF-1426437407-FFFF-FFFF-FFFFFFFFFFFF\snsi169.tmp','');
QuarantineFile('C:\Documents and Settings\Компьютер\Local Settings\Application Data\Kometa\kometaup.exe','');
QuarantineFile('C:\Documents and Settings\Компьютер\Local Settings\Application Data\MediaGet2\mediaget.exe','');
QuarantineFile('C:\DOCUME~1\911C~1\LOCALS~1\Temp\30329937FdOh','');
QuarantineFile('C:\DOCUME~1\911C~1\LOCALS~1\Temp\30388234FdOh','');
QuarantineFile('C:\Program Files\AnyProtectEx\AnyProtect.exe','');
QuarantineFile('C:\windows\system32\DRIVERS\BAPIDRV.sys','');
QuarantineFile('D:\Music_Manager_2007\Rn5d3357.dll','');
DeleteFile('C:\Documents and Settings\Компьютер\Application Data\FFFFFFFF-1426422666-FFFF-FFFF-FFFFFFFFFFFF\nslF4.tmpfs','32');
DeleteFile('C:\Documents and Settings\Компьютер\Local Settings\Application Data\FFFFFFFF-1426437407-FFFF-FFFF-FFFFFFFFFFFF\snsi169.tmp','32');
DeleteFile('C:\Documents and Settings\Компьютер\Local Settings\Application Data\Kometa\kometaup.exe','32');
DeleteFile('C:\Documents and Settings\Компьютер\Local Settings\Application Data\MediaGet2\mediaget.exe','32');
DeleteFile('C:\DOCUME~1\911C~1\LOCALS~1\Temp\30329937FdOh','32');
DeleteFile('C:\DOCUME~1\911C~1\LOCALS~1\Temp\30388234FdOh','32');
DeleteFile('C:\Program Files\AnyProtectEx\AnyProtect.exe','32');
DeleteFile('C:\windows\system32\DRIVERS\BAPIDRV.sys','32');
DeleteFileMask('C:\Program Files\AnyProtectEx', '*', true, ' ');
DeleteDirectory('C:\Program Files\AnyProtectEx');
DeleteFileMask('C:\Documents and Settings\Компьютер\Local Settings\Application Data\Kometa', '*', true, ' ');
DeleteDirectory('C:\Documents and Settings\Компьютер\Local Settings\Application Data\Kometa');
DeleteFileMask('C:\Documents and Settings\Компьютер\Local Settings\Application Data\FFFFFFFF-1426437407-FFFF-FFFF-FFFFFFFFFFFF', '*', true, ' ');
DeleteDirectory('C:\Documents and Settings\Компьютер\Local Settings\Application Data\FFFFFFFF-1426437407-FFFF-FFFF-FFFFFFFFFFFF');
DeleteFileMask('C:\Documents and Settings\Компьютер\Local Settings\Application Data\MediaGet2', '*', true, ' ');
DeleteDirectory('C:\Documents and Settings\Компьютер\Local Settings\Application Data\MediaGet2');
DeleteFile('C:\windows\Tasks\APSnotifierPP1.job','32');
DeleteFile('C:\windows\Tasks\APSnotifierPP2.job','32');
DeleteFile('C:\windows\Tasks\APSnotifierPP3.job','32');
DeleteService('BAPIDRV');
DeleteService('moqitiqy');
DeleteService('zejimumi');
RegKeyStrParamWrite('HKCU', 'Control Panel\Desktop', 'WaitToKillAppTimeout', '20000');
RegKeyParamDel('HKEY_LOCAL_MACHINE','SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\30330000','command');
RegKeyParamDel('HKEY_LOCAL_MACHINE','SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\30388265','command');
RegKeyParamDel('HKEY_LOCAL_MACHINE','SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Allmyapps Update','command');
RegKeyParamDel('HKEY_LOCAL_MACHINE','SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Allmyapps','command');
RegKeyParamDel('HKEY_LOCAL_MACHINE','SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\kometaup','command');
RegKeyParamDel('HKEY_LOCAL_MACHINE','SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\MediaGet2','command');
BC_ImportALL;
ExecuteSysClean;
BC_Activate;
ExecuteRepair(1);
ExecuteRepair(2);
ExecuteRepair(3);
ExecuteRepair(4);
ExecuteWizard('SCU', 2, 3, true);
RebootWindows(true);
end.
После выполнения скрипта компьютер перезагрузится.
Ответить с цитированием
и сохраните на Рабочем столе.
Сообщение от offshore
