Код:
begin
ShowMessage('Внимание! Перед выполнением скрипта AVZ автоматически закроет все сетевые подключения.'+#13#10+'После перезагрузки компьютера подключения к сети будут восстановлены в автоматическом режиме.');
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
SearchRootkit(true, true);
SetAVZGuardStatus(True);
TerminateProcessByName('c:\program files\firefox\bin\firefoxupdate.exe');
StopService('iSafeNetFilter');
StopService('iSafeKrnlR3');
StopService('iSafeKrnlMon');
StopService('FirefoxU');
StopService('ed2kidle');
QuarantineFile('C:\ProgramData\wintools\WintoolUprI.exe','');
QuarantineFile('C:\ProgramData\vCore\VCore.exe','');
QuarantineFile('C:\Users\Анна\AppData\Roaming\bestsalesprofit\updater.py','');
QuarantineFile('C:\Program Files\Atulet\hizuge.exe','');
QuarantineFile('C:\Users\Анна\AppData\Roaming\bestsalesprofit\ml.py','');
QuarantineFile('C:\Program Files\Elex-tech\YAC\iSafeKrnl.sys','');
QuarantineFile('C:\Windows\system32\DRIVERS\iSafeNetFilter.sys','');
QuarantineFile('C:\Program Files\Elex-tech\YAC\iSafeKrnlR3.sys','');
QuarantineFile('C:\Program Files\Elex-tech\YAC\iSafeKrnlMon.sys','');
QuarantineFile('C:\Program Files\Elex-tech\YAC\iSafeSvc.exe','');
QuarantineFile('C:\Program Files\amuleC2\ed2k.exe','');
QuarantineFile('c:\users\анна\appdata\roaming\winsnare\winsnare.dll','');
QuarantineFile('c:\programdata\winsapsvc\winsap.dll','');
QuarantineFile('c:\programdata\microsoft\phone tools\corecon\12.0\3082\nonsdkaddonlangver.dll','');
QuarantineFile('c:\program files\firefox\bin\firefoxupdate.exe','');
DeleteFile('C:\Windows\system32\DRIVERS\iSafeNetFilter.sys','32');
DeleteFile('C:\Program Files\Elex-tech\YAC\iSafeKrnl.sys','32');
DeleteFile('C:\Windows\system32\DRIVERS\iSafeKrnlBoot.sys','32');
DeleteFile('C:\Program Files\Elex-tech\YAC\iSafeKrnlKit.sys','32');
DeleteFile('C:\Users\Анна\AppData\Roaming\bestsalesprofit\ml.py','32');
DeleteFile('C:\ProgramData\Microsoft\Phone Tools\CoreCon\12.0\3082\NonSDKAddonLangVer.dll','32');
DeleteFile('C:\ProgramData\WinSAPSvc\WinSAP.dll','32');
DeleteFile('C:\Users\Анна\AppData\Roaming\WinSnare\WinSnare.dll','32');
DeleteFile('C:\Windows\system32\Tasks\bestsalesprofit','32');
DeleteFile('C:\Users\Анна\AppData\Roaming\bestsalesprofit\updater.py','32');
DeleteFile('C:\Windows\system32\Tasks\bestsalesprofit2','32');
DeleteFile('C:\ProgramData\vCore\VCore.exe','32');
DeleteFile('C:\Windows\system32\Tasks\Microsoft\Windows\Media Center\VCore','32');
DeleteFile('C:\Windows\system32\Tasks\Milimili','32');
DeleteFile('C:\ProgramData\wintools\WintoolUprI.exe','32');
DeleteFile('C:\Windows\system32\Tasks\WinTOOL','32');
DeleteFile('C:\Program Files\amulec2\ed2k.exe','32');
DeleteFile('C:\Program Files\elex-tech\yac\bugreport.exe','32');
DeleteFile('C:\Program Files\elex-tech\yac\curlpp.dll','32');
DeleteFile('C:\Program Files\elex-tech\yac\iddmgr.dll','32');
DeleteFile('C:\Program Files\elex-tech\yac\idesk.exe','32');
DeleteFile('C:\Program Files\elex-tech\yac\idskdllpatch.dll','32');
DeleteFile('C:\Program Files\elex-tech\yac\idskdllpatch64.dll','32');
DeleteFile('C:\Program Files\elex-tech\yac\ipcdl.exe','32');
DeleteFile('C:\Program Files\elex-tech\yac\ipcproxy.dll','32');
DeleteFile('C:\Program Files\elex-tech\yac\isafeadfv.dll','32');
DeleteFile('C:\Program Files\elex-tech\yac\isafeadless.dll','32');
DeleteFile('C:\Program Files\elex-tech\yac\isafebugreport.exe','32');
DeleteFile('C:\Program Files\elex-tech\yac\isafechlp.dll','32');
DeleteFile('C:\Program Files\elex-tech\yac\isafeclcv.dll','32');
DeleteFile('C:\Program Files\elex-tech\yac\isafeclc.dll','32');
DeleteFile('C:\Program Files\elex-tech\yac\isafekrnlmon.sys','32');
DeleteFile('C:\Program Files\elex-tech\yac\isafe.exe','32');
DeleteFile('C:\Program Files\elex-tech\yac\isafekrnlr3.sys','32');
DeleteFile('C:\Program Files\elex-tech\yac\isafemsmv.dll','32');
DeleteFile('C:\Program Files\elex-tech\yac\isafemoptv.dll','32');
DeleteFile('C:\Program Files\elex-tech\yac\isafetbv.dll','32');
DeleteFile('C:\Program Files\elex-tech\yac\isafesv.dll','32');
DeleteFile('C:\Program Files\elex-tech\yac\isafesvc.exe','32');
DeleteFile('C:\Program Files\elex-tech\yac\isafesptv.dll','32');
DeleteFile('C:\Program Files\elex-tech\yac\isafesmgr.dll','32');
DeleteFile('C:\Program Files\elex-tech\yac\isafethlp.exe','32');
DeleteFile('C:\Program Files\elex-tech\yac\istart.exe','32');
DeleteFile('C:\Program Files\elex-tech\yac\isafembp.dll','32');
DeleteFile('C:\Program Files\firefox\bin\firefoxupdate.exe','32');
DeleteFile('C:\Program Files\elex-tech\yac\ssleay32.dll','32');
DeleteFile('C:\Program Files\elex-tech\yac\libeay32.dll','32');
DeleteFile('C:\Program Files\elex-tech\yac\libcurl.dll','32');
DelBHO('{D5FEC983-01DB-414A-9456-AF95AC9ED7B5}');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','bestsalesprofit');
RegKeyParamDel('HKEY_LOCAL_MACHINE','SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\bestsalesprofit','command');
RegKeyParamDel('HKEY_LOCAL_MACHINE','SYSTEM\CurrentControlSet\Services\MSLN\Parameters','ServiceDll');
RegKeyParamDel('HKEY_LOCAL_MACHINE','SYSTEM\CurrentControlSet\Services\WinSAPSvc\Parameters','ServiceDll');
RegKeyParamDel('HKEY_LOCAL_MACHINE','SYSTEM\CurrentControlSet\Services\WinSnare\Parameters','ServiceDll');
DeleteService('softaal');
DeleteService('QMUdisk');
DeleteService('iSafeKrnlKit');
DeleteService('iSafeKrnlBoot');
DeleteService('iSafeKrnl');
DeleteService('iSafeNetFilter');
DeleteService('iSafeKrnlR3');
DeleteService('iSafeKrnlMon');
DeleteService('iSafeService');
DeleteService('FirefoxU');
DeleteService('ed2kidle');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
ExecuteRepair(3);
ExecuteRepair(4);
RebootWindows(true);
end.
После перезагрузки выполните скрипт: