Код:
begin
ShowMessage('Внимание! Перед выполнением скрипта AVZ автоматически закроет все сетевые подключения.' + #13#10 + 'После перезагрузки компьютера подключения к сети будут восстановлены в автоматическом режиме.');
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
if not IsWOW64
then
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
end;
QuarantineFile('C:\Program Files\SwiftSearch_1.10.0.25\Update\SwiftSearchAutoUpdateClient.exe','');
QuarantineFile('C:\Program Files\PhraseProfessor_1.10.0.24\Update\PhraseProfessorAutoUpdateClient.exe','');
QuarantineFile('C:\Program Files\CiPlus-4.5vV25.10\c50fb50a-9fc3-4fed-b01c-06db9359859c-7.exe','');
QuarantineFile('C:\Program Files\CiPlus-4.5vV25.10\c50fb50a-9fc3-4fed-b01c-06db9359859c-6.exe','');
QuarantineFile('C:\Program Files\CiPlus-4.5vV25.10\c50fb50a-9fc3-4fed-b01c-06db9359859c-5.exe','');
QuarantineFile('C:\Program Files\CiPlus-4.5vV25.10\c50fb50a-9fc3-4fed-b01c-06db9359859c-3.exe','');
QuarantineFile('C:\Program Files\CiPlus-4.5vV25.10\c50fb50a-9fc3-4fed-b01c-06db9359859c-11.exe','');
QuarantineFile('C:\Program Files\CiPlus-4.5vV25.10\c50fb50a-9fc3-4fed-b01c-06db9359859c-10.exe','');
QuarantineFile('C:\Program Files\CiPlus-4.5vV25.10\c50fb50a-9fc3-4fed-b01c-06db9359859c-1-7.exe','');
QuarantineFile('C:\Program Files\CiPlus-4.5vV24.10\a4d0648d-2a27-4ab3-8090-0fe650ed0c02-7.exe','');
QuarantineFile('C:\Program Files\CiPlus-4.5vV24.10\a4d0648d-2a27-4ab3-8090-0fe650ed0c02-6.exe','');
QuarantineFile('C:\Program Files\CiPlus-4.5vV24.10\a4d0648d-2a27-4ab3-8090-0fe650ed0c02-5.exe','');
QuarantineFile('C:\Program Files\CiPlus-4.5vV24.10\a4d0648d-2a27-4ab3-8090-0fe650ed0c02-3.exe','');
QuarantineFile('C:\Program Files\CiPlus-4.5vV24.10\a4d0648d-2a27-4ab3-8090-0fe650ed0c02-11.exe','');
QuarantineFile('C:\Program Files\CiPlus-4.5vV24.10\a4d0648d-2a27-4ab3-8090-0fe650ed0c02-10.exe','');
QuarantineFile('C:\Program Files\CiPlus-4.5vV24.10\a4d0648d-2a27-4ab3-8090-0fe650ed0c02-1-7.exe','');
QuarantineFile('C:\Program Files\CiPlus-4.5vV24.10\a4d0648d-2a27-4ab3-8090-0fe650ed0c02-1-6.exe','');
QuarantineFile('C:\Program Files\CiPlus-4.5vV18.10\38b5d2ba-9dbd-432f-913c-1af7cb6b140e-7.exe','');
QuarantineFile('C:\Program Files\CiPlus-4.5vV18.10\38b5d2ba-9dbd-432f-913c-1af7cb6b140e-6.exe','');
QuarantineFile('C:\Program Files\CiPlus-4.5vV18.10\38b5d2ba-9dbd-432f-913c-1af7cb6b140e-5.exe','');
QuarantineFile('C:\Program Files\CiPlus-4.5vV18.10\38b5d2ba-9dbd-432f-913c-1af7cb6b140e-3.exe','');
QuarantineFile('C:\Program Files\CiPlus-4.5vV18.10\38b5d2ba-9dbd-432f-913c-1af7cb6b140e-11.exe','');
QuarantineFile('C:\Program Files\CiPlus-4.5vV18.10\38b5d2ba-9dbd-432f-913c-1af7cb6b140e-10.exe','');
QuarantineFile('C:\Program Files\CiPlus-4.5vV18.10\38b5d2ba-9dbd-432f-913c-1af7cb6b140e-1-7.exe','');
QuarantineFile('C:\Program Files\CiPlus-4.5vV18.10\38b5d2ba-9dbd-432f-913c-1af7cb6b140e-1-6.exe','');
DelBHO('{D4027C7F-154A-4066-A1AD-4243D8127440}');
DeleteService('amsint32');
SetServiceStart('tydyxule', 4);
SetServiceStart('ihpmServer', 4);
SetServiceStart('hykikyfo', 4);
DeleteService('hykikyfo');
DeleteService('ihpmServer');
DeleteService('tydyxule');
DeleteService('dealplylive');
DeleteService('dealplylivem');
QuarantineFile('C:\Program Files\DealPlyLive\Update\DealPlyLive.exe','');
TerminateProcessByName('c:\program files\raydld\ihpmserver.exe');
TerminateProcessByName('c:\program files\03000200-1444762211-0500-0006-000700080009\jnsv1512.tmp');
TerminateProcessByName('c:\program files\03000200-1444762211-0500-0006-000700080009\knsm13a6.tmpfs');
QuarantineFile('c:\program files\03000200-1444762211-0500-0006-000700080009\knsm13a6.tmpfs','');
QuarantineFile('c:\program files\03000200-1444762211-0500-0006-000700080009\jnsv1512.tmp','');
QuarantineFile('c:\program files\raydld\ihpmserver.exe','');
DeleteFile('c:\program files\raydld\ihpmserver.exe','32');
DeleteFile('c:\program files\03000200-1444762211-0500-0006-000700080009\jnsv1512.tmp','32');
DeleteFile('c:\program files\03000200-1444762211-0500-0006-000700080009\knsm13a6.tmpfs','32');
DeleteFile('C:\Program Files\DealPlyLive\Update\DealPlyLive.exe','32');
DeleteFile('C:\WINDOWS\system32\drivers\jjjkr.sys','32');
DeleteFile('C:\Program Files\CiPlus-4.5vV18.10\38b5d2ba-9dbd-432f-913c-1af7cb6b140e-1-6.exe','32');
DeleteFile('C:\Program Files\CiPlus-4.5vV18.10\38b5d2ba-9dbd-432f-913c-1af7cb6b140e-1-7.exe','32');
DeleteFile('C:\Program Files\CiPlus-4.5vV18.10\38b5d2ba-9dbd-432f-913c-1af7cb6b140e-10.exe','32');
DeleteFile('C:\Program Files\CiPlus-4.5vV18.10\38b5d2ba-9dbd-432f-913c-1af7cb6b140e-11.exe','32');
DeleteFile('C:\Program Files\CiPlus-4.5vV18.10\38b5d2ba-9dbd-432f-913c-1af7cb6b140e-3.exe','32');
DeleteFile('C:\Program Files\CiPlus-4.5vV18.10\38b5d2ba-9dbd-432f-913c-1af7cb6b140e-5.exe','32');
DeleteFile('C:\Program Files\CiPlus-4.5vV18.10\38b5d2ba-9dbd-432f-913c-1af7cb6b140e-6.exe','32');
DeleteFile('C:\Program Files\CiPlus-4.5vV18.10\38b5d2ba-9dbd-432f-913c-1af7cb6b140e-7.exe','32');
DeleteFile('C:\WINDOWS\Tasks\38b5d2ba-9dbd-432f-913c-1af7cb6b140e-7.job','32');
DeleteFile('C:\WINDOWS\Tasks\38b5d2ba-9dbd-432f-913c-1af7cb6b140e-6.job','32');
DeleteFile('C:\WINDOWS\Tasks\38b5d2ba-9dbd-432f-913c-1af7cb6b140e-5.job','32');
DeleteFile('C:\WINDOWS\Tasks\38b5d2ba-9dbd-432f-913c-1af7cb6b140e-3.job','32');
DeleteFile('C:\WINDOWS\Tasks\38b5d2ba-9dbd-432f-913c-1af7cb6b140e-11.job','32');
DeleteFile('C:\WINDOWS\Tasks\38b5d2ba-9dbd-432f-913c-1af7cb6b140e-10_user.job','32');
DeleteFile('C:\WINDOWS\Tasks\38b5d2ba-9dbd-432f-913c-1af7cb6b140e-1-7.job','32');
DeleteFile('C:\WINDOWS\Tasks\38b5d2ba-9dbd-432f-913c-1af7cb6b140e-1-6.job','32');
DeleteFile('C:\WINDOWS\Tasks\52ZXTOp7I6Xbj1OCSzeosCv.job','32');
DeleteFile('C:\Program Files\CiPlus-4.5vV24.10\a4d0648d-2a27-4ab3-8090-0fe650ed0c02-1-6.exe','32');
DeleteFile('C:\Program Files\CiPlus-4.5vV24.10\a4d0648d-2a27-4ab3-8090-0fe650ed0c02-1-7.exe','32');
DeleteFile('C:\Program Files\CiPlus-4.5vV24.10\a4d0648d-2a27-4ab3-8090-0fe650ed0c02-10.exe','32');
DeleteFile('C:\Program Files\CiPlus-4.5vV24.10\a4d0648d-2a27-4ab3-8090-0fe650ed0c02-11.exe','32');
DeleteFile('C:\Program Files\CiPlus-4.5vV24.10\a4d0648d-2a27-4ab3-8090-0fe650ed0c02-3.exe','32');
DeleteFile('C:\Program Files\CiPlus-4.5vV24.10\a4d0648d-2a27-4ab3-8090-0fe650ed0c02-5.exe','32');
DeleteFile('C:\Program Files\CiPlus-4.5vV24.10\a4d0648d-2a27-4ab3-8090-0fe650ed0c02-6.exe','32');
DeleteFile('C:\Program Files\CiPlus-4.5vV24.10\a4d0648d-2a27-4ab3-8090-0fe650ed0c02-7.exe','32');
DeleteFile('C:\WINDOWS\Tasks\a4d0648d-2a27-4ab3-8090-0fe650ed0c02-7.job','32');
DeleteFile('C:\WINDOWS\Tasks\a4d0648d-2a27-4ab3-8090-0fe650ed0c02-6.job','32');
DeleteFile('C:\WINDOWS\Tasks\a4d0648d-2a27-4ab3-8090-0fe650ed0c02-5.job','32');
DeleteFile('C:\WINDOWS\Tasks\a4d0648d-2a27-4ab3-8090-0fe650ed0c02-3.job','32');
DeleteFile('C:\WINDOWS\Tasks\a4d0648d-2a27-4ab3-8090-0fe650ed0c02-11.job','32');
DeleteFile('C:\WINDOWS\Tasks\a4d0648d-2a27-4ab3-8090-0fe650ed0c02-10_user.job','32');
DeleteFile('C:\WINDOWS\Tasks\a4d0648d-2a27-4ab3-8090-0fe650ed0c02-1-7.job','32');
DeleteFile('C:\WINDOWS\Tasks\a4d0648d-2a27-4ab3-8090-0fe650ed0c02-1-6.job','32');
DeleteFile('C:\WINDOWS\Tasks\Ae3NMYl0cQdFLO7.job','32');
DeleteFile('C:\Program Files\CiPlus-4.5vV25.10\c50fb50a-9fc3-4fed-b01c-06db9359859c-1-7.exe','32');
DeleteFile('C:\Program Files\CiPlus-4.5vV25.10\c50fb50a-9fc3-4fed-b01c-06db9359859c-10.exe','32');
DeleteFile('C:\Program Files\CiPlus-4.5vV25.10\c50fb50a-9fc3-4fed-b01c-06db9359859c-11.exe','32');
DeleteFile('C:\Program Files\CiPlus-4.5vV25.10\c50fb50a-9fc3-4fed-b01c-06db9359859c-3.exe','32');
DeleteFile('C:\Program Files\CiPlus-4.5vV25.10\c50fb50a-9fc3-4fed-b01c-06db9359859c-5.exe','32');
DeleteFile('C:\Program Files\CiPlus-4.5vV25.10\c50fb50a-9fc3-4fed-b01c-06db9359859c-6.exe','32');
DeleteFile('C:\Program Files\CiPlus-4.5vV25.10\c50fb50a-9fc3-4fed-b01c-06db9359859c-7.exe','32');
DeleteFile('C:\WINDOWS\Tasks\c50fb50a-9fc3-4fed-b01c-06db9359859c-7.job','32');
DeleteFile('C:\WINDOWS\Tasks\c50fb50a-9fc3-4fed-b01c-06db9359859c-6.job','32');
DeleteFile('C:\WINDOWS\Tasks\c50fb50a-9fc3-4fed-b01c-06db9359859c-5.job','32');
DeleteFile('C:\WINDOWS\Tasks\c50fb50a-9fc3-4fed-b01c-06db9359859c-3.job','32');
DeleteFile('C:\WINDOWS\Tasks\c50fb50a-9fc3-4fed-b01c-06db9359859c-11.job','32');
DeleteFile('C:\WINDOWS\Tasks\c50fb50a-9fc3-4fed-b01c-06db9359859c-10_user.job','32');
DeleteFile('C:\WINDOWS\Tasks\c50fb50a-9fc3-4fed-b01c-06db9359859c-1-7.job','32');
DeleteFile('C:\WINDOWS\Tasks\c50fb50a-9fc3-4fed-b01c-06db9359859c-1-6.job','32');
DeleteFile('C:\WINDOWS\Tasks\cPe7yOkhxfiX7oElG8fKF4e.job','32');
DeleteFile('C:\WINDOWS\Tasks\dcng1Iz.job','32');
DeleteFile('C:\WINDOWS\Tasks\FE184E30-A7D6-4B7F-B7FC-CC90CA450FB.job','32');
DeleteFile('C:\WINDOWS\Tasks\fTD5Q1Gs.job','32');
DeleteFile('C:\WINDOWS\Tasks\HL9gA9Wn.job','32');
DeleteFile('C:\WINDOWS\Tasks\ikL507BW.job','32');
DeleteFile('C:\Program Files\PhraseProfessor_1.10.0.24\Update\PhraseProfessorAutoUpdateClient.exe','32');
DeleteFile('C:\WINDOWS\Tasks\PhraseProfessor Auto Updater 1.10.0.24 Pending Update.job','32');
DeleteFile('C:\WINDOWS\Tasks\PhraseProfessor Auto Updater 1.10.0.24 Core.job','32');
DeleteFile('C:\WINDOWS\Tasks\RFGVbmaecsWN9vdIxBo.job','32');
DeleteFile('C:\WINDOWS\Tasks\Scheduled Update for Ask Toolbar.job','32');
DeleteFile('C:\Program Files\Ask.com\UpdateTask.exe','32');
DeleteFile('C:\WINDOWS\Tasks\SwiftSearch Auto Updater 1.10.0.25 Core.job','32');
DeleteFile('C:\WINDOWS\Tasks\SwiftSearch Auto Updater 1.10.0.25 Pending Update.job','32');
DeleteFile('C:\Program Files\SwiftSearch_1.10.0.25\Update\SwiftSearchAutoUpdateClient.exe','32');
DeleteFile('C:\WINDOWS\Tasks\X7KRdmts.job','32');
DeleteFile('C:\WINDOWS\Tasks\xPmBDCo1QYaXnuz9xD.job','32');
DeleteFile('C:\WINDOWS\Tasks\yc8nSet1j0n.job','32');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RebootWindows(false);
end.
Будет выполнена перезагрузка компьютера.