Код:
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
ClearQuarantineEx(true);
TerminateProcessByName('c:\windows\temp\rjtoyuf.exe');
TerminateProcessByName('c:\documents and settings\Юля\init.exe');
TerminateProcessByName('c:\docume~1\d18e~1\locals~1\temp\04a77a8e.exe');
TerminateProcessByName('c:\docume~1\d18e~1\locals~1\temp\000d7ef4.exe');
QuarantineFile('C:\WINDOWS\system32\SSVICHOSST.exe','');
QuarantineFile('C:\WINDOWS\driver.exe','');
QuarantineFile('C:\Documents and Settings\Юля\nwdkpaef.exe','');
QuarantineFile('C:\DOCUME~1\ALLUSE~1\LOCALS~1\Temp\msaqqv.scr','');
QuarantineFile('c:\windows\temp\rjtoyuf.exe','');
QuarantineFile('c:\documents and settings\Юля\init.exe','');
QuarantineFile('c:\docume~1\d18e~1\locals~1\temp\04a77a8e.exe','');
QuarantineFile('c:\docume~1\d18e~1\locals~1\temp\000d7ef4.exe','');
DeleteFile('c:\docume~1\d18e~1\locals~1\temp\000d7ef4.exe','32');
DeleteFile('C:\DOCUME~1\ALLUSE~1\LOCALS~1\Temp\msaqqv.scr','32');
DeleteFile('C:\DOCUME~1\D18E~1\LOCALS~1\Temp\04a77a8e.exe','32');
DeleteFile('C:\Documents and Settings\Юля\init.exe','32');
DeleteFile('C:\Documents and Settings\Юля\nwdkpaef.exe','32');
DeleteFile('C:\WINDOWS\system32\SSVICHOSST.exe','32');
DeleteFile('C:\WINDOWS\Tasks\At1.job','32');
DeleteFile('C:\WINDOWS\TEMP\rjtoyuf.exe','32');
DeleteFile('C:\WINDOWS\Tasks\bjjpvdh.job','32');
DeleteFile('C:\WINDOWS\Tasks\System Components Update.job','32');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run','17920');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','System Security');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','System Security');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run','System Security');
RegKeyParamDel('HKEY_USERS','.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run','System Security');
RegKeyParamDel('HKEY_USERS','.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run','System Security');
RegKeyParamDel('HKEY_USERS','S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Run','System Security');
RegKeyParamDel('HKEY_USERS','S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run','System Security');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','SessionInit');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','MSConfig');
BC_ImportAll;
ExecuteSysClean;
ExecuteWizard('SCU',2,2,true);
BC_Activate;
RebootWindows(true);
end.