Код:
begin
ShowMessage('Внимание! Перед выполнением скрипта AVZ автоматически закроет все сетевые подключения.' + #13#10 + 'После перезагрузки компьютера подключения к сети будут восстановлены в автоматическом режиме.');
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
if not IsWOW64
then
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
end;
QuarantineFile('C:\WINDOWS\system32\76.exe','');
QuarantineFile('C:\WINDOWS\system32\10.exe','');
QuarantineFile('C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-46689\24naq.exe','');
QuarantineFile('C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-17259\proxzy19.exe','');
QuarantineFile('C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-17258\proxzy18.exe','');
QuarantineFile('C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-17257\proxzy17.exe','');
QuarantineFile('C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-17256\proxzy16.exe','');
QuarantineFile('C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-17255\proxzy15.exe','');
QuarantineFile('C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-17254\proxzy14.exe','');
QuarantineFile('C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-17253\proxzy13.exe','');
QuarantineFile('C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-17251\proxzy12.exe','');
QuarantineFile('C:\Documents and Settings\Администратор\Application Data\ScreenSaverPro.scr','');
QuarantineFile('C:\Documents and Settings\Администратор\Application Data\RECYCLER\login.exe','');
QuarantineFile('C:\Documents and Settings\Администратор\Application Data\Microsoft\Xamamx.exe','');
QuarantineFile('c:\windows\system32\mspaint.exe','');
TerminateProcessByName('c:\windows\pmdrive32.exe');
QuarantineFile('c:\windows\pmdrive32.exe','');
TerminateProcessByName('c:\documents and settings\Администратор\application data\1d.exe');
QuarantineFile('c:\documents and settings\Администратор\application data\1d.exe','');
DeleteFile('c:\documents and settings\Администратор\application data\1d.exe');
DeleteFile('c:\windows\pmdrive32.exe');
DeleteFile('C:\Documents and Settings\Администратор\Application Data\Microsoft\Xamamx.exe');
DeleteFile('C:\Documents and Settings\Администратор\Application Data\RECYCLER\login.exe');
DeleteFile('C:\Documents and Settings\Администратор\Application Data\ScreenSaverPro.scr');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','Screen Saver Pro 3.1');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','Remote Start Manager');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','Xamamx');
DeleteFile('C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-10259\proxzy109.exe');
DeleteFile('C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-17251\proxzy12.exe');
DeleteFile('C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-17253\proxzy13.exe');
DeleteFile('C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-17254\proxzy14.exe');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','proxzy024');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','proxzy023');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','proxzy022');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','proxzy0209');
DeleteFile('C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-17255\proxzy15.exe');
DeleteFile('C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-17256\proxzy16.exe');
DeleteFile('C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-17257\proxzy17.exe');
DeleteFile('C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-17258\proxzy18.exe');
DeleteFile('C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-17259\proxzy19.exe');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','proxzy029');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','proxzy028');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','proxzy027');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','proxzy026');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','proxzy025');
DeleteFile('C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-46689\24naq.exe');
DeleteFile('C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-46689\24naq.exe,C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-17256\proxzy16.exe,C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-17255\proxzy15.exe,C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-17259\proxzy19.exe,C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-17257\proxzy17.exe,C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-10259\proxzy109.exe,C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-17253\proxzy13.exe,C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-17258\proxzy18.exe,C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-17251\proxzy12.exe,explorer.exe,C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-17254\proxzy14.exe,Explorer.exe');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','t4q');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','Microsoft Driver Setup');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run','Microsoft Driver Setup');
DeleteFile('C:\WINDOWS\system32\10.exe');
DeleteFile('C:\WINDOWS\system32\76.exe');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows NT\CurrentVersion\Winlogon','Taskman');
RebootWindows(true);
end.
Компьютер перезагрузится.