Код:
begin
ShowMessage('Внимание! Перед выполнением скрипта AVZ автоматически закроет все сетевые подключения.' + #13#10 + 'После перезагрузки компьютера подключения к сети будут восстановлены в автоматическом режиме.');
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
if not IsWOW64
then
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
end;
QuarantineFile('C:\Program Files\microsoft data\installaddons.exe','');
QuarantineFile('C:\Program Files\manager\manager.exe','');
QuarantineFile('C:\Program Files\content defender\nss\certutil.exe','');
QuarantineFile('C:\Program Files\content defender\nfregdrv.exe','');
QuarantineFile('C:\Program Files\content defender\import_root_cert.exe','');
QuarantineFile('C:\Program Files\content defender\contentdefenderps.dll','');
QuarantineFile('C:\Program Files\content defender\contentdefender.exe','');
QuarantineFile('C:\Program Files\content defender\condefsetup.exe','');
QuarantineFile('C:\Program Files\content defender\condefclean.exe','');
QuarantineFile('C:\Users\Nastya\AppData\Local\Form Food\{1EDE4822-461A-49A0-80EC-D7E413B1A819}\jedzrkwf.dll','');
QuarantineFile('C:\Users\Nastya\AppData\Local\Form Food\{1EDE4822-461A-49A0-80EC-D7E413B1A819}\FormFood.dll','');
QuarantineFile('C:\Users\Nastya\AppData\Local\Component Experience\{1EDE4822-461A-49A0-80EC-D7E413B1A819}\ComponentExperience.dll','');
QuarantineFile('C:\Users\Nastya\AppData\Local\Component Experience\{1EDE4822-461A-49A0-80EC-D7E413B1A819}\wyo.dll','');
QuarantineFile('C:\Users\Nastya\AppData\Local\Camera Plugin\{1EDE4822-461A-49A0-80EC-D7E413B1A819}\wqstitbf.dll','');
QuarantineFile('C:\Users\Nastya\AppData\Local\Camera Plugin\{1EDE4822-461A-49A0-80EC-D7E413B1A819}\CameraPlugin.dll','');
QuarantineFile('C:\Users\Nastya\AppData\Local\JbfXvbuLeK\NpmMNh1.bat','');
QuarantineFile('C:\ProgramData\xAUgZXLiC\JYYRJPNgaJKoYq5.bat','');
DeleteService('BDMWrench');
DeleteService('bd0001');
DeleteService('bd0002');
DeleteService('BDArKit');
DeleteService('BDDefense');
DeleteService('BDMNetMon');
DeleteService('condef');
DeleteService('QMUdisk');
DeleteService('TFsFlt');
DeleteService('TsFltMgr');
QuarantineFile('C:\Windows\system32\drivers\condef.sys','');
DeleteService('QQPCRTP');
DeleteService('lewuboxozbt');
DeleteService('behudeto');
DeleteService('BDSGRTP');
DeleteService('BDMRTP');
DeleteService('BDKVRTP');
QuarantineFile('C:\Program Files\4B435451-1449012216-3043-4A32-10BF4837A49D\knsrCC2B.tmp','');
QuarantineFile('C:\Program Files\4B435451-1449012216-3043-4A32-10BF4837A49D\jnszDAE8.tmp','');
QuarantineFile('C:\Users\Nastya\AppData\Local\Component Diner\{1EDE4822-461A-49A0-80EC-D7E413B1A819}\uhx.dll','');
QuarantineFile('C:\Users\Nastya\AppData\Local\Component Diner\{1EDE4822-461A-49A0-80EC-D7E413B1A819}\ComponentDiner.dll','');
QuarantineFile('C:\Users\Nastya\AppData\Local\Bus Browser\{1EDE4822-461A-49A0-80EC-D7E413B1A819}\jmopdl.dll','');
QuarantineFile('C:\Users\Nastya\AppData\Local\Bus Browser\{1EDE4822-461A-49A0-80EC-D7E413B1A819}\BusBrowser.dll','');
TerminateProcessByName('c:\program files\gmsd_re_005010197\gmsd_re_005010197.exe');
QuarantineFile('c:\program files\gmsd_re_005010197\gmsd_re_005010197.exe','');
DeleteFile('c:\program files\gmsd_re_005010197\gmsd_re_005010197.exe','32');
DeleteFile('C:\Users\Nastya\AppData\Local\Bus Browser\{1EDE4822-461A-49A0-80EC-D7E413B1A819}\BusBrowser.dll','32');
DeleteFile('C:\Users\Nastya\AppData\Local\Bus Browser\{1EDE4822-461A-49A0-80EC-D7E413B1A819}\jmopdl.dll','32');
DeleteFile('C:\Users\Nastya\AppData\Local\Component Diner\{1EDE4822-461A-49A0-80EC-D7E413B1A819}\ComponentDiner.dll','32');
DeleteFile('C:\Users\Nastya\AppData\Local\Component Diner\{1EDE4822-461A-49A0-80EC-D7E413B1A819}\uhx.dll','32');
DeleteFile('C:\Program Files\Tencent\QQPCMgr\10.7.16066.216\QQPCRtp.exe','32');
DeleteFile('C:\Program Files\4B435451-1449012216-3043-4A32-10BF4837A49D\jnszDAE8.tmp','32');
DeleteFile('C:\Program Files\4B435451-1449012216-3043-4A32-10BF4837A49D\knsrCC2B.tmp','32');
DeleteFile('C:\Program Files\Common Files\Baidu\BaiduProtect1.3\1.3.0.521\BaiduProtect.exe','32');
DeleteFile('C:\Program Files\Baidu\BaiduAn\3.0.0.3971\BaiduAnSvc.exe','32');
DeleteFile('C:\Program Files\BaiduSd2.1\BaiduSd\2.1.0.3086\BaiduSdSvc.exe','32');
DeleteFile('C:\Windows\system32\DRIVERS\BDMWrench.sys','32');
DeleteFile('C:\Windows\system32\DRIVERS\bd0001.sys','32');
DeleteFile('C:\Windows\system32\DRIVERS\bd0002.sys','32');
DeleteFile('C:\Windows\system32\DRIVERS\BDArKit.sys','32');
DeleteFile('C:\Windows\system32\drivers\BDDefense.sys','32');
DeleteFile('C:\Windows\system32\DRIVERS\BDMNetMon.sys','32');
DeleteFile('C:\Windows\system32\drivers\condef.sys','32');
DeleteFile('C:\Program Files\Tencent\QQPCMgr\10.7.16066.216\QMUdisk.sys','32');
DeleteFile('C:\Windows\system32\Drivers\TFsFlt.sys','32');
DeleteFile('C:\Windows\system32\drivers\TsFltMgr.sys','32');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','gmsd_re_005010197');
DeleteFile('C:\ProgramData\xAUgZXLiC\JYYRJPNgaJKoYq5.bat','32');
DeleteFile('C:\Users\Nastya\AppData\Local\JbfXvbuLeK\NpmMNh1.bat','32');
DeleteFile('C:\Windows\system32\Tasks\Bus Browser','32');
DeleteFile('C:\Windows\system32\Tasks\Bus Browser2','32');
DeleteFile('C:\Users\Nastya\AppData\Local\Camera Plugin\{1EDE4822-461A-49A0-80EC-D7E413B1A819}\CameraPlugin.dll','32');
DeleteFile('C:\Users\Nastya\AppData\Local\Camera Plugin\{1EDE4822-461A-49A0-80EC-D7E413B1A819}\wqstitbf.dll','32');
DeleteFile('C:\Windows\system32\Tasks\Camera Plugin2','32');
DeleteFile('C:\Windows\system32\Tasks\Camera Plugin','32');
DeleteFile('C:\Windows\system32\Tasks\Component Diner2','32');
DeleteFile('C:\Windows\system32\Tasks\Component Diner','32');
DeleteFile('C:\Windows\system32\Tasks\Component Experience','32');
DeleteFile('C:\Windows\system32\Tasks\Component Experience2','32');
DeleteFile('C:\Users\Nastya\AppData\Local\Component Experience\{1EDE4822-461A-49A0-80EC-D7E413B1A819}\wyo.dll','32');
DeleteFile('C:\Users\Nastya\AppData\Local\Component Experience\{1EDE4822-461A-49A0-80EC-D7E413B1A819}\ComponentExperience.dll','32');
DeleteFile('C:\Users\Nastya\AppData\Local\Form Food\{1EDE4822-461A-49A0-80EC-D7E413B1A819}\FormFood.dll','32');
DeleteFile('C:\Users\Nastya\AppData\Local\Form Food\{1EDE4822-461A-49A0-80EC-D7E413B1A819}\jedzrkwf.dll','32');
DeleteFile('C:\Windows\system32\Tasks\Form Food2','32');
DeleteFile('C:\Windows\system32\Tasks\Form Food','32');
DeleteFile('C:\Program Files\content defender\condefclean.exe','32');
DeleteFile('C:\Program Files\content defender\condefsetup.exe','32');
DeleteFile('C:\Program Files\content defender\contentdefender.exe','32');
DeleteFile('C:\Program Files\content defender\contentdefenderps.dll','32');
DeleteFile('C:\Program Files\content defender\import_root_cert.exe','32');
DeleteFile('C:\Program Files\content defender\libeay32.dll','32');
DeleteFile('C:\Program Files\content defender\nfregdrv.exe','32');
DeleteFile('C:\Program Files\content defender\nss\certutil.exe','32');
DeleteFile('C:\Program Files\content defender\nss\mozcrt19.dll','32');
DeleteFile('C:\Program Files\content defender\nss\nspr4.dll','32');
DeleteFile('C:\Program Files\content defender\nss\nss3.dll','32');
DeleteFile('C:\Program Files\content defender\nss\plc4.dll','32');
DeleteFile('C:\Program Files\content defender\nss\plds4.dll','32');
DeleteFile('C:\Program Files\content defender\nss\smime3.dll','32');
DeleteFile('C:\Program Files\content defender\nss\softokn3.dll','32');
DeleteFile('C:\Program Files\content defender\ssleay32.dll','32');
DeleteFile('C:\Program Files\manager\manager.exe','32');
DeleteFile('C:\Program Files\microsoft data\installaddons.exe','32');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RebootWindows(false);
end.
Будет выполнена перезагрузка компьютера.