Код:
begin
ShowMessage('Внимание! Перед выполнением скрипта AVZ автоматически закроет все сетевые подключения.' + #13#10 + 'После перезагрузки компьютера подключения к сети будут восстановлены в автоматическом режиме.');
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
if not IsWOW64
then
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
end;
QuarantineFile('C:\WINDOWS\system32\24.exe','');
QuarantineFile('C:\WINDOWS\pmdrive32.exe','');
QuarantineFile('C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-46689\24naq.exe','');
QuarantineFile('C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-17259\proxzy19.exe','');
QuarantineFile('C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-17258\proxzy18.exe','');
QuarantineFile('C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-17257\proxzy17.exe','');
QuarantineFile('C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-17256\proxzy16.exe','');
QuarantineFile('C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-17255\proxzy15.exe','');
QuarantineFile('C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-17254\proxzy14.exe','');
QuarantineFile('C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-17253\proxzy13.exe','');
QuarantineFile('C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-17251\proxzy12.exe','');
QuarantineFile('C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-10259\proxzy109.exe','');
QuarantineFile('C:\Documents and Settings\oshchepkova\Application Data\ScreenSaverPro.scr','');
QuarantineFile('C:\Documents and Settings\oshchepkova\Application Data\RECYCLER\login.exe','');
QuarantineFile('C:\Documents and Settings\oshchepkova\Application Data\Microsoft\Zjhqhp.exe','');
DeleteFile('C:\Documents and Settings\oshchepkova\Application Data\Microsoft\Zjhqhp.exe');
DeleteFile('C:\Documents and Settings\oshchepkova\Application Data\RECYCLER\login.exe');
DeleteFile('C:\Documents and Settings\oshchepkova\Application Data\ScreenSaverPro.scr');
DeleteFile('C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-10259\proxzy109.exe');
DeleteFile('C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-17251\proxzy12.exe');
DeleteFile('C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-17253\proxzy13.exe');
DeleteFile('C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-17254\proxzy14.exe');
DeleteFile('C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-17255\proxzy15.exe');
DeleteFile('C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-17256\proxzy16.exe');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','Zjhqhp');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','Remote Start Manager');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','Screen Saver Pro 3.1');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','proxzy0209');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','proxzy022');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','proxzy023');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','proxzy024');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','proxzy025');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','proxzy026');
DeleteFile('C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-17257\proxzy17.exe');
DeleteFile('C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-17258\proxzy18.exe');
DeleteFile('C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-17259\proxzy19.exe');
DeleteFile('C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-46689\24naq.exe');
DeleteFile('C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-17256\proxzy16.exe,C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-17257\proxzy17.exe,C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-46689\24naq.exe,C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-17258\proxzy18.exe,C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-17259\proxzy19.exe,C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-10259\proxzy109.exe,C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-17251\proxzy12.exe,C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-17253\proxzy13.exe,C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-17254\proxzy14.exe,explorer.exe,C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-17255\proxzy15.exe,Explorer.exe');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','proxzy027');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','proxzy028');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','proxzy029');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','t4q');
DeleteFile('C:\WINDOWS\pmdrive32.exe');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','Microsoft Driver Setup');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run','Microsoft Driver Setup');
DeleteFile('C:\WINDOWS\system32\24.exe');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows NT\CurrentVersion\Winlogon','Taskman');
RebootWindows(true);
end.
Компьютер перезагрузится.