Код:
begin
ShowMessage('Внимание! Перед выполнением скрипта AVZ автоматически закроет все сетевые подключения.' + #13#10 + 'После перезагрузки компьютера подключения к сети будут восстановлены в автоматическом режиме.');
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
if not IsWOW64
then
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
end;
QuarantineFile('C:\Program Files (x86)\WordWizard_1.10.0.24\Update\WordwizardAutoUpdateClient.exe','');
QuarantineFile('C:\Program Files (x86)\CiPlus-4.5vV16.09\caf6752b-c61a-494b-bcb7-fd0c006d87be-5.exe','');
QuarantineFile('C:\Program Files (x86)\CiPlus-4.5vV16.09\caf6752b-c61a-494b-bcb7-fd0c006d87be-4.exe','');
QuarantineFile('C:\Program Files (x86)\CiPlus-4.5vV16.09\caf6752b-c61a-494b-bcb7-fd0c006d87be-11.exe','');
QuarantineFile('C:\Program Files (x86)\CiPlus-4.5vV16.09\caf6752b-c61a-494b-bcb7-fd0c006d87be-10.exe','');
QuarantineFile('C:\Program Files (x86)\CiPlus-4.5vV16.09\caf6752b-c61a-494b-bcb7-fd0c006d87be-1-7.exe','');
QuarantineFile('C:\Program Files (x86)\CiPlus-4.5vV16.09\caf6752b-c61a-494b-bcb7-fd0c006d87be-1-6.exe','');
QuarantineFile('C:\Program Files (x86)\CinemaP-1.9cV17.09\3731ec71-8d83-493b-91c8-140a3eae3df8-5.exe','');
QuarantineFile('C:\Program Files (x86)\CinemaP-1.9cV17.09\3731ec71-8d83-493b-91c8-140a3eae3df8-4.exe','');
QuarantineFile('C:\Program Files (x86)\CinemaP-1.9cV17.09\3731ec71-8d83-493b-91c8-140a3eae3df8-10.exe','');
QuarantineFile('C:\Program Files (x86)\CinemaP-1.9cV17.09\3731ec71-8d83-493b-91c8-140a3eae3df8-1-7.exe','');
QuarantineFile('C:\Program Files (x86)\CinemaP-1.9cV17.09\3731ec71-8d83-493b-91c8-140a3eae3df8-1-6.exe','');
QuarantineFile('C:\Windows\system32\drivers\wwfd_vt_1_10_0_24.sys','');
TerminateProcessByName('c:\program files (x86)\wordwizard_1.10.0.24\update\wordwizardautoupdateclient.exe');
TerminateProcessByName('c:\program files (x86)\wordwizard_1.10.0.24\service\wwsvc.exe');
QuarantineFile('c:\program files (x86)\wordwizard_1.10.0.24\service\wwsvc.exe','');
QuarantineFile('c:\program files (x86)\wordwizard_1.10.0.24\update\wordwizardautoupdateclient.exe','');
TerminateProcessByName('c:\program files (x86)\ciplus-4.5vv16.09\caf6752b-c61a-494b-bcb7-fd0c006d87be-1-6.exe');
QuarantineFile('c:\program files (x86)\ciplus-4.5vv16.09\caf6752b-c61a-494b-bcb7-fd0c006d87be-1-6.exe','');
TerminateProcessByName('c:\program files (x86)\cinemap-1.9cv17.09\3731ec71-8d83-493b-91c8-140a3eae3df8-1-6.exe');
QuarantineFile('c:\program files (x86)\cinemap-1.9cv17.09\3731ec71-8d83-493b-91c8-140a3eae3df8-1-6.exe','');
DeleteFile('c:\program files (x86)\cinemap-1.9cv17.09\3731ec71-8d83-493b-91c8-140a3eae3df8-1-6.exe','32');
DeleteFile('c:\program files (x86)\ciplus-4.5vv16.09\caf6752b-c61a-494b-bcb7-fd0c006d87be-1-6.exe','32');
DeleteFile('c:\program files (x86)\wordwizard_1.10.0.24\update\wordwizardautoupdateclient.exe','32');
DeleteFile('c:\program files (x86)\wordwizard_1.10.0.24\service\wwsvc.exe','32');
DeleteFile('C:\Windows\system32\drivers\wwfd_vt_1_10_0_24.sys','32');
DeleteFile('C:\Program Files (x86)\CinemaP-1.9cV17.09\3731ec71-8d83-493b-91c8-140a3eae3df8-1-6.exe','32');
DeleteFile('C:\Program Files (x86)\CinemaP-1.9cV17.09\3731ec71-8d83-493b-91c8-140a3eae3df8-1-7.exe','32');
DeleteFile('C:\Program Files (x86)\CinemaP-1.9cV17.09\3731ec71-8d83-493b-91c8-140a3eae3df8-10.exe','32');
DeleteFile('C:\Program Files (x86)\CinemaP-1.9cV17.09\3731ec71-8d83-493b-91c8-140a3eae3df8-4.exe','32');
DeleteFile('C:\Program Files (x86)\CinemaP-1.9cV17.09\3731ec71-8d83-493b-91c8-140a3eae3df8-5.exe','32');
DeleteFile('C:\Windows\Tasks\3731ec71-8d83-493b-91c8-140a3eae3df8-5_user.job','32');
DeleteFile('C:\Windows\Tasks\3731ec71-8d83-493b-91c8-140a3eae3df8-5.job','32');
DeleteFile('C:\Windows\Tasks\3731ec71-8d83-493b-91c8-140a3eae3df8-4.job','32');
DeleteFile('C:\Windows\Tasks\3731ec71-8d83-493b-91c8-140a3eae3df8-10_user.job','32');
DeleteFile('C:\Windows\Tasks\3731ec71-8d83-493b-91c8-140a3eae3df8-1-7.job','32');
DeleteFile('C:\Windows\Tasks\3731ec71-8d83-493b-91c8-140a3eae3df8-1-6.job','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV16.09\caf6752b-c61a-494b-bcb7-fd0c006d87be-1-6.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV16.09\caf6752b-c61a-494b-bcb7-fd0c006d87be-1-7.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV16.09\caf6752b-c61a-494b-bcb7-fd0c006d87be-10.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV16.09\caf6752b-c61a-494b-bcb7-fd0c006d87be-11.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV16.09\caf6752b-c61a-494b-bcb7-fd0c006d87be-4.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV16.09\caf6752b-c61a-494b-bcb7-fd0c006d87be-5.exe','32');
DeleteFile('C:\Windows\Tasks\caf6752b-c61a-494b-bcb7-fd0c006d87be-1-6.job','32');
DeleteFile('C:\Windows\Tasks\caf6752b-c61a-494b-bcb7-fd0c006d87be-1-7.job','32');
DeleteFile('C:\Windows\Tasks\caf6752b-c61a-494b-bcb7-fd0c006d87be-10_user.job','32');
DeleteFile('C:\Windows\Tasks\caf6752b-c61a-494b-bcb7-fd0c006d87be-11.job','32');
DeleteFile('C:\Windows\Tasks\caf6752b-c61a-494b-bcb7-fd0c006d87be-4.job','32');
DeleteFile('C:\Windows\Tasks\caf6752b-c61a-494b-bcb7-fd0c006d87be-5.job','32');
DeleteFile('C:\Windows\Tasks\caf6752b-c61a-494b-bcb7-fd0c006d87be-5_user.job','32');
DeleteFile('C:\Windows\Tasks\EEZgHt4ApMiYtHZ6Co6hYMG.job','32');
DeleteFile('C:\Windows\Tasks\VWmUDxr01LIQrJaVlwG9C.job','32');
DeleteFile('C:\Windows\system32\Tasks\3731ec71-8d83-493b-91c8-140a3eae3df8-1-6','64');
DeleteFile('C:\Windows\system32\Tasks\3731ec71-8d83-493b-91c8-140a3eae3df8-1-7','64');
DeleteFile('C:\Windows\system32\Tasks\3731ec71-8d83-493b-91c8-140a3eae3df8-4','64');
DeleteFile('C:\Windows\system32\Tasks\3731ec71-8d83-493b-91c8-140a3eae3df8-5','64');
DeleteFile('C:\Windows\system32\Tasks\caf6752b-c61a-494b-bcb7-fd0c006d87be-1-6','64');
DeleteFile('C:\Windows\system32\Tasks\caf6752b-c61a-494b-bcb7-fd0c006d87be-1-7','64');
DeleteFile('C:\Windows\system32\Tasks\caf6752b-c61a-494b-bcb7-fd0c006d87be-11','64');
DeleteFile('C:\Windows\system32\Tasks\caf6752b-c61a-494b-bcb7-fd0c006d87be-4','64');
DeleteFile('C:\Windows\system32\Tasks\caf6752b-c61a-494b-bcb7-fd0c006d87be-5','64');
DeleteFile('C:\Windows\system32\Tasks\WordWizard Auto Updater 1.10.0.24 Core','64');
DeleteFile('C:\Windows\system32\Tasks\WordWizard Auto Updater 1.10.0.24 Pending Update','64');
DeleteFile('C:\Program Files (x86)\WordWizard_1.10.0.24\Update\WordwizardAutoUpdateClient.exe','32');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RebootWindows(false);
end.
Будет выполнена перезагрузка компьютера.