Код:
begin
ShowMessage('Внимание! Перед выполнением скрипта AVZ автоматически закроет все сетевые подключения.'+#13#10+'После перезагрузки компьютера подключения к сети будут восстановлены в автоматическом режиме.');
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
StopService('WinRing0_1_2_0');
QuarantineFile('C:\iexplore.bat','');
QuarantineFile('C:\Program Files (x86)\PriceMeterLiveUpdate\Update\PriceMeterLiveUpdate.exe','');
QuarantineFile('C:\Program Files (x86)\Zaxar\timetasks.exe','');
QuarantineFile('C:\Program Files (x86)\Zaxar\ZaxarGameBrowser.exe','');
QuarantineFile('C:\Program Files (x86)\Zaxar\ZaxarLoader.exe','');
QuarantineFile('C:\ProgramData\MTA San Andreas All\Common\temp\FairplayKD.sys','');
QuarantineFile('C:\Users\zekdemon\AppData\Local\Google\chrome.bat','');
QuarantineFile('C:\Users\zekdemon\AppData\Local\Temp\tmpBA2C.tmp','');
QuarantineFile('C:\Users\zekdemon\AppData\Roaming\GameRanger\GameRanger\GameRanger.exe','');
QuarantineFile('C:\Users\zekdemon\appdata\roaming\glister\nvm.dll','');
QuarantineFileF('C:\Users\zekdemon\appdata\roaming\glister', '*', false,'', 0, 0);
QuarantineFile('C:\Users\zekdemon\AppData\Roaming\newSI_10\s_inst.exe','');
QuarantineFile('C:\Users\zekdemon\AppData\Roaming\newSI_1599\s_inst.exe','');
QuarantineFile('C:\Users\zekdemon\AppData\Roaming\newSI_2149\s_inst.exe','');
QuarantineFile('C:\Users\zekdemon\AppData\Roaming\newSI_2\s_inst.exe','');
QuarantineFile('C:\Users\zekdemon\AppData\Roaming\Origin\update.vbe','');
QuarantineFile('C:\Users\zekdemon\AppData\Roaming\PRICEM~1\UPDATE~1\UPDATE~1.EXE','');
QuarantineFile('C:\Users\zekdemon\AppData\Roaming\Steam\Reversed\steam.exe','');
QuarantineFile('C:\Windows\Temp\scvhost.exe','');
QuarantineFile('C:\Windows\Temp\lsass.exe ','');
DeleteFile('C:\iexplore.bat','32');
DeleteFile('C:\Program Files (x86)\PriceMeterLiveUpdate\Update\PriceMeterLiveUpdate.exe','32');
DeleteFile('C:\Program Files (x86)\Zaxar\timetasks.exe','32');
DeleteFile('C:\Program Files (x86)\Zaxar\ZaxarGameBrowser.exe','32');
DeleteFile('C:\Program Files (x86)\Zaxar\ZaxarLoader.exe','32');
DeleteFile('C:\Users\zekdemon\AppData\Local\Google\chrome.bat','32');
DeleteFile('C:\Users\zekdemon\AppData\Local\Temp\tmpBA2C.tmp','32');
DeleteFile('C:\Users\zekdemon\appdata\roaming\glister\nvm.dll','32');
DeleteFile('C:\Users\zekdemon\AppData\Roaming\newSI_10\s_inst.exe','32');
DeleteFile('C:\Users\zekdemon\AppData\Roaming\newSI_1599\s_inst.exe','32');
DeleteFile('C:\Users\zekdemon\AppData\Roaming\newSI_2149\s_inst.exe','32');
DeleteFile('C:\Users\zekdemon\AppData\Roaming\newSI_2\s_inst.exe','32');
DeleteFile('C:\Users\zekdemon\AppData\Roaming\Origin\update.vbe','32');
DeleteFile('C:\Users\zekdemon\AppData\Roaming\PRICEM~1\UPDATE~1\UPDATE~1.EXE','32');
DeleteFile('C:\Windows\system32\Tasks\newSI_10','64');
DeleteFile('C:\Windows\system32\Tasks\newSI_1599','64');
DeleteFile('C:\Windows\system32\Tasks\newSI_2','64');
DeleteFile('C:\Windows\system32\Tasks\newSI_2149','64');
DeleteFile('C:\Windows\system32\Tasks\Origin','64');
DeleteFile('C:\Windows\system32\Tasks\PriceMeterLiveUpdateUpdateTaskMachineCore','64');
DeleteFile('C:\Windows\system32\Tasks\PriceMeterLiveUpdateUpdateTaskMachineUA','64');
DeleteFile('C:\Windows\system32\Tasks\PriceMeterUpdater','64');
DeleteFile('C:\Windows\Tasks\newSI_10.job','64');
DeleteFile('C:\Windows\Tasks\newSI_1599.job','64');
DeleteFile('C:\Windows\Tasks\newSI_2149.job','64');
DeleteFile('C:\Windows\Tasks\PriceMeterLiveUpdateUpdateTaskMachineCore.job','64');
DeleteFile('C:\Windows\Tasks\PriceMeterLiveUpdateUpdateTaskMachineUA.job','64');
DeleteFile('C:\Windows\Tasks\PriceMeterUpdater.job','64');
DeleteService('WinRing0_1_2_0');
DeleteFileMask('C:\Users\zekdemon\AppData\Roaming\PRICEM~1', '*', true, ' ');
DeleteDirectory('C:\Users\zekdemon\AppData\Roaming\PRICEM~1');
DeleteFileMask('C:\Users\zekdemon\AppData\Roaming\Origin', '*', true, ' ');
DeleteDirectory('C:\Users\zekdemon\AppData\Roaming\Origin');
DeleteFileMask('C:\Users\zekdemon\AppData\Roaming\newSI_2', '*', true, ' ');
DeleteDirectory('C:\Users\zekdemon\AppData\Roaming\newSI_2');
DeleteFileMask('C:\Users\zekdemon\AppData\Roaming\newSI_2149', '*', true, ' ');
DeleteDirectory('C:\Users\zekdemon\AppData\Roaming\newSI_2149');
DeleteFileMask('C:\Users\zekdemon\AppData\Roaming\newSI_1599', '*', true, ' ');
DeleteDirectory('C:\Users\zekdemon\AppData\Roaming\newSI_1599');
DeleteFileMask('C:\Users\zekdemon\AppData\Roaming\newSI_10', '*', true, ' ');
DeleteDirectory('C:\Users\zekdemon\AppData\Roaming\newSI_10');
DeleteFileMask('C:\Users\zekdemon\appdata\roaming\glister', '*', true, ' ');
DeleteDirectory('C:\Users\zekdemon\appdata\roaming\glister');
DeleteFileMask('C:\Program Files (x86)\Zaxar', '*', true, ' ');
DeleteDirectory('C:\Program Files (x86)\Zaxar');
DeleteFileMask('C:\Program Files (x86)\PriceMeterLiveUpdate', '*', true, ' ');
DeleteDirectory('C:\Program Files (x86)\PriceMeterLiveUpdate');
RegKeyParamDel('HKEY_LOCAL_MACHINE','SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Timestasks','command');
RegKeyParamDel('HKEY_LOCAL_MACHINE','SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\ZaxarGameBrowser','command');
RegKeyParamDel('HKEY_LOCAL_MACHINE','SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\ZaxarLoader','command');
BC_ImportALL;
ExecuteSysClean;
BC_Activate;
ExecuteRepair(2);
ExecuteRepair(3);
ExecuteRepair(4);
ExecuteWizard('SCU', 2, 3, true);
RebootWindows(true);
end.
После выполнения скрипта компьютер перезагрузится.