Код:
begin
ShowMessage('Внимание! Перед выполнением скрипта AVZ автоматически закроет все сетевые подключения.'+#13#10+'После перезагрузки компьютера подключения к сети будут восстановлены в автоматическом режиме.');
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
DelBHO('{03AE1B7B-A9E7-4D5A-9D34-89999C31B659}');
DelBHO('{6E727987-C8EA-44DA-8749-310C0FBE3C3E}');
DelBHO('{78549bde-b964-4d2a-b7b1-c4ac15ddff64}');
TerminateProcessByName('c:\program files (x86)\assets manager\smdmf\smdmfservice.exe');
StopService('bd0004');
StopService('F06DEFF2-5B9C-490D-910F-35D3A9119622');
StopService('SmdmFService');
StopService('Update Round World');
StopService('Util Round World');
StopService('{237a87b5-881c-4fd8-b80a-c3b471ff75d7}Gw64');
StopService('{237a87b5-881c-4fd8-b80a-c3b471ff75d7}w64');
StopService('{4cc550cb-ad95-48a3-ae71-6ab7c8433971}Gw64');
StopService('{72502b1b-b916-4994-814e-c516f9f681b2}Gw64');
StopService('{8f5b8fd1-2f96-4fbf-974b-7f28fa0f93d7}Gw64');
StopService('{97a224e4-fe41-4078-b1ef-069fe8cd6d9f}Gw64');
QuarantineFile('C:\Program Files (x86)\Assets Manager\smdmf\SmdmFService.exe','');
QuarantineFile('C:\Program Files (x86)\Assets Manager\smdmf\x64\smdmfmgrc3.cfg','');
QuarantineFile('C:\Program Files (x86)\Microsoft Data\install_addons.exe','');
QuarantineFile('c:\program files (x86)\round world\bin\roundworld.browseradapter.exe','');
QuarantineFile('C:\Program Files (x86)\Round World\bin\RoundWorld.BrowserAdapter64.exe','');
QuarantineFile('c:\program files (x86)\round world\bin\roundworld.expext.exe','');
QuarantineFile('C:\Program Files (x86)\Round World\bin\RoundWorld.PurBrowse64.exe','');
QuarantineFile('C:\Program Files (x86)\Round World\bin\utilRoundWorld.exe','');
QuarantineFile('C:\Program Files (x86)\Round World\RoundWorldbho.dll','');
QuarantineFile('C:\Program Files (x86)\Round World\updateRoundWorld.exe','');
QuarantineFile('C:\Program Files (x86)\Torrent Search\akYj9zn.exe','');
QuarantineFile('C:\Program Files (x86)\Torrent Search\IEEF\5a5FZy_IjY.dll','');
QuarantineFile('c:\program files (x86)\torrent search\ieef\anuvwqlc_o.exe','');
QuarantineFile('C:\ProgramData\TimeTasks\timetasks.exe','');
QuarantineFile('C:\Users\Boss\AppData\Local\Kometa\Application\kometa.exe','');
QuarantineFile('c:\users\boss\appdata\local\linkey\ieextension\ietlbl.exe','');
QuarantineFile('C:\Users\Boss\AppData\Local\Linkey\IEExtension\ietlbl64.exe','');
QuarantineFile('C:\Users\Boss\AppData\Local\Microsoft\Redist\vcredist_x86.exe','');
QuarantineFile('C:\Users\Boss\appdata\local\microsoft\start menu\вoйти в интeрнeт.exe','');
QuarantineFile('C:\Users\Boss\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.26.12\dsrlte.exe','');
QuarantineFile('C:\Users\Boss\AppData\Local\SystemDir\nethost.exe','');
QuarantineFile('C:\Users\Boss\AppData\Roaming\cpuminer\sgminer\sgminer.cmd','');
QuarantineFile('C:\Users\Boss\AppData\Roaming\eTranslator\eTranslator.exe','');
QuarantineFile('C:\Users\Boss\appdata\roaming\steam\reversed\steam.exe','');
QuarantineFile('C:\Windows\System32\cpuminer-gw64.exe','');
QuarantineFile('C:\Windows\system32\DRIVERS\bd0004.sys','');
QuarantineFile('C:\Windows\system32\drivers\{237a87b5-881c-4fd8-b80a-c3b471ff75d7}Gw64.sys','');
QuarantineFile('C:\Windows\system32\drivers\{237a87b5-881c-4fd8-b80a-c3b471ff75d7}w64.sys','');
QuarantineFile('C:\Windows\system32\drivers\{4cc550cb-ad95-48a3-ae71-6ab7c8433971}Gw64.sys','');
QuarantineFile('C:\Windows\system32\drivers\{72502b1b-b916-4994-814e-c516f9f681b2}Gw64.sys','');
QuarantineFile('C:\Windows\system32\drivers\{8f5b8fd1-2f96-4fbf-974b-7f28fa0f93d7}Gw64.sys','');
QuarantineFile('C:\Windows\system32\drivers\{97a224e4-fe41-4078-b1ef-069fe8cd6d9f}Gw64.sys','');
QuarantineFile('C:\Windows\system32\drivers\{c9a465a5-420c-4acc-b1be-3ac71ae80fda}Gw64.sys','');
DeleteFile('c:\program files (x86)\assets manager\smdmf\smdmfservice.exe','32');
DeleteFile('C:\Program Files (x86)\Assets Manager\smdmf\x64\smdmfmgrc3.cfg','32');
DeleteFile('C:\Program Files (x86)\Microsoft Data\install_addons.exe','32');
DeleteFile('c:\program files (x86)\round world\bin\roundworld.browseradapter.exe','32');
DeleteFile('C:\Program Files (x86)\Round World\bin\RoundWorld.BrowserAdapter64.exe','32');
DeleteFile('c:\program files (x86)\round world\bin\roundworld.expext.exe','32');
DeleteFile('C:\Program Files (x86)\Round World\bin\RoundWorld.PurBrowse64.exe','32');
DeleteFile('c:\program files (x86)\round world\bin\utilroundworld.exe','32');
DeleteFile('C:\Program Files (x86)\Round World\RoundWorldbho.dll','32');
DeleteFile('c:\program files (x86)\round world\updateroundworld.exe','32');
DeleteFile('C:\Program Files (x86)\Torrent Search\akYj9zn.exe','32');
DeleteFile('C:\Program Files (x86)\Torrent Search\IEEF\5a5FZy_IjY.dll','32');
DeleteFile('c:\program files (x86)\torrent search\ieef\anuvwqlc_o.exe','32');
DeleteFile('C:\ProgramData\TimeTasks\timetasks.exe','32');
DeleteFile('C:\Users\Boss\AppData\Local\Kometa\Application\kometa.exe','32');
DeleteFile('c:\users\boss\appdata\local\linkey\ieextension\ietlbl.exe','32');
DeleteFile('C:\Users\Boss\AppData\Local\Linkey\IEExtension\ietlbl64.exe','32');
DeleteFile('C:\Users\Boss\appdata\local\microsoft\start menu\вoйти в интeрнeт.exe','32');
DeleteFile('C:\Users\Boss\appdata\local\systemdir\nethost.exe','32');
DeleteFile('C:\Users\Boss\AppData\Roaming\cpuminer\sgminer\sgminer.cmd','32');
DeleteFile('C:\Users\Boss\AppData\Roaming\eTranslator\eTranslator.exe','32');
DeleteFile('C:\Windows\system32\cpuminer-gw64.exe','32');
DeleteFile('C:\Windows\system32\DRIVERS\bd0004.sys','32');
DeleteFile('C:\Windows\system32\drivers\{237a87b5-881c-4fd8-b80a-c3b471ff75d7}Gw64.sys','32');
DeleteFile('C:\Windows\system32\drivers\{237a87b5-881c-4fd8-b80a-c3b471ff75d7}w64.sys','32');
DeleteFile('C:\Windows\system32\drivers\{4cc550cb-ad95-48a3-ae71-6ab7c8433971}Gw64.sys','32');
DeleteFile('C:\Windows\system32\drivers\{72502b1b-b916-4994-814e-c516f9f681b2}Gw64.sys','32');
DeleteFile('C:\Windows\system32\drivers\{8f5b8fd1-2f96-4fbf-974b-7f28fa0f93d7}Gw64.sys','32');
DeleteFile('C:\Windows\system32\drivers\{97a224e4-fe41-4078-b1ef-069fe8cd6d9f}Gw64.sys','32');
DeleteFile('C:\Windows\system32\drivers\{c9a465a5-420c-4acc-b1be-3ac71ae80fda}Gw64.sys','32');
DeleteFileMask('C:\Users\Boss\AppData\Roaming\eTranslator', '*', true, ' ');
DeleteDirectory('C:\Users\Boss\AppData\Roaming\eTranslator');
DeleteFileMask('C:\Users\Boss\appdata\local\systemdir', '*', true, ' ');
DeleteDirectory('C:\Users\Boss\appdata\local\systemdir');
DeleteFileMask('C:\Users\Boss\AppData\Local\Linkey', '*', true, ' ');
DeleteDirectory('C:\Users\Boss\AppData\Local\Linkey');
DeleteFileMask('C:\Users\Boss\AppData\Local\Kometa', '*', true, ' ');
DeleteDirectory('C:\Users\Boss\AppData\Local\Kometa');
DeleteFileMask('c:\program files (x86)\torrent search', '*', true, ' ');
DeleteDirectory('c:\program files (x86)\torrent search');
DeleteFileMask('C:\ProgramData\TimeTasks', '*', true, ' ');
DeleteDirectory('C:\ProgramData\TimeTasks');
DeleteFileMask('c:\program files (x86)\round world', '*', true, ' ');
DeleteDirectory('c:\program files (x86)\round world');
DeleteFileMask('C:\Program Files (x86)\Assets Manager', '*', true, ' ');
DeleteDirectory('C:\Program Files (x86)\Assets Manager');
DeleteFile('C:\Windows\system32\Tasks\chrome5','64');
DeleteFile('C:\Windows\system32\Tasks\chrome5_logon','64');
DeleteFile('C:\Windows\system32\Tasks\nethost task','64');
DeleteFile('C:\Windows\system32\Tasks\Update Service for Torrent Search','64');
DeleteFile('C:\Windows\system32\Tasks\Update Service for Torrent Search2','64');
DeleteFile('C:\Windows\Tasks\Update Service for Torrent Search.job','64');
DeleteFile('C:\Windows\Tasks\Update Service for Torrent Search2.job','64');
DeleteService('bd0004');
DeleteService('F06DEFF2-5B9C-490D-910F-35D3A9119622');
DeleteService('SmdmFService');
DeleteService('Update Round World');
DeleteService('Util Round World');
DeleteService('{237a87b5-881c-4fd8-b80a-c3b471ff75d7}Gw64');
DeleteService('{237a87b5-881c-4fd8-b80a-c3b471ff75d7}w64');
DeleteService('{4cc550cb-ad95-48a3-ae71-6ab7c8433971}Gw64');
DeleteService('{72502b1b-b916-4994-814e-c516f9f681b2}Gw64');
DeleteService('{8f5b8fd1-2f96-4fbf-974b-7f28fa0f93d7}Gw64');
DeleteService('{97a224e4-fe41-4078-b1ef-069fe8cd6d9f}Gw64');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','ckvblxwhoi');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','eTranslator Automatic Update');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','Linkey');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','Linkeyx64');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','cpuminer');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','gpuminer');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','Timestasks');
BC_ImportALL;
ExecuteSysClean;
BC_Activate;
ExecuteRepair(2);
ExecuteRepair(3);
ExecuteRepair(4);
ExecuteWizard('SCU', 2, 3, true);
RebootWindows(true);
end.
После выполнения скрипта компьютер перезагрузится.