Код:
begin
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
QuarantineFile('C:\Users\Dima Kadanov\AppData\Roaming\Unarchiver\Unarchiver.exe', '');
QuarantineFileF('c:\users\dima kadanov\appdata\roaming\unarchiver', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.ps1, *.js*, *.tmp*', false, '', 0 , 0);
DeleteFile('C:\Program Files (x86)\Lavasoft\Web', '64');
DeleteFile('C:\Users\Dima Kadanov\AppData\Roaming\Unarchiver\Unarchiver.exe', '64');
DeleteService('AvastWscReporter');
DeleteFileMask('c:\program files (x86)\lavasoft', '*', true);
DeleteFileMask('c:\users\dima kadanov\appdata\roaming\unarchiver', '*', true);
DeleteDirectory('c:\program files (x86)\lavasoft');
DeleteDirectory('c:\users\dima kadanov\appdata\roaming\unarchiver');
RegKeyParamDel('HKEY_CURRENT_USER', 'Software\Microsoft\Windows\CurrentVersion\Run', 'Web Companion', '32');
RegKeyParamDel('HKEY_CURRENT_USER', 'Software\Microsoft\Windows\CurrentVersion\Run', 'Web Companion', '64');
RegKeyParamDel('HKEY_USERS', 'S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run', 'OneDriveSetup', 'x32');
RegKeyParamDel('HKEY_USERS', 'S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run', 'OneDriveSetup', 'x64');
RegKeyParamDel('HKEY_USERS', 'S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run', 'OneDriveSetup', 'x32');
RegKeyParamDel('HKEY_USERS', 'S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run', 'OneDriveSetup', 'x64');
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1001', 1);
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1004', 3);
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1201', 3);
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1804', 1);
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '2201', 3);
DeleteSchedulerTask('ContentManagement');
DeleteSchedulerTask('Microsoft\Windows\applicationdata\ApplicationData');
DeleteSchedulerTask('Microsoft\Windows\Maintenance\WinDAT');
CreateQurantineArchive(GetAVZDirectory + 'quarantine.zip');
ExecuteSysClean;
ExecuteWizard('SCU', 3, 3, true);
RebootWindows(true);
end.
Компьютер перезагрузится.
Майнеры и прочее
