Код:
begin
ShowMessage('Внимание! Перед выполнением скрипта AVZ автоматически закроет все сетевые подключения.' + #13#10 + 'После перезагрузки компьютера подключения к сети будут восстановлены в автоматическом режиме.');
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
if not IsWOW64
then
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
end;
QuarantineFile('C:\Documents and Settings\All Users\Term\NetConf.exe:NetConf64.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\NetConf.exe:NetConf32.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\Net.exe:Net64.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\Net.exe:Net32.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\NDS.exe:NDS64.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\NDS.exe:NDS32.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\MyDocs.exe:MyDocs64.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\MyDocs.exe:MyDocs32.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\mstsc.exe:mstsc64.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\mstsc.exe:mstsc32.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\Mozilla.exe:Mozilla64.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\Mozilla.exe:Mozilla32.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\Monitor.exe:Monitor64.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\Monitor.exe:Monitor32.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\mobsync.exe:mobsync64.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\mobsync.exe:mobsync32.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\minwindows.exe:minwindows64.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\minwindows.exe:minwindows32.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\KerioVPN.exe:KerioVPN64.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\KerioVPN.exe:KerioVPN32.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\Kerio.exe:Kerio64.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\Kerio.exe:Kerio32.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\ISID.exe:ISID64.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\ISID.exe:ISID32.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\IE.exe:IE64.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\IE.exe:IE32.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\Hranitel.exe:Hranitel64.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\Hranitel.exe:Hranitel32.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\Hinstallr.exe:Hinstallr64.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\Hinstallr.exe:Hinstallr32.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\Hinstalli.exe:Hinstalli64.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\Hinstalli.exe:Hinstalli32.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\Hamachi.exe:Hamachi64.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\Hamachi.exe:Hamachi32.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\FineReader.exe:FineReader64.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\FineReader.exe:FineReader32.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\Explo.exe:Explo64.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\Explo.exe:Explo32.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\Excel.exe:Excel64.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\Excel.exe:Excel32.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\Everest.exe:Everest64.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\Everest.exe:Everest32.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\einisclient.exe:einisclient64.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\einisclient.exe:einisclient32.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\EFNO.exe:EFNO64.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\EFNO.exe:EFNO32.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\DM.exe:DM64.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\DM.exe:DM32.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\djvueditor.exe:djvueditor64.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\djvueditor.exe:djvueditor32.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\DeskTop.exe:DeskTop64.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\DeskTop.exe:DeskTop32.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\CorelPP.exe:CorelPP64.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\CorelPP.exe:CorelPP32.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\CorelDRAW.exe:CorelDRAW64.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\CorelDRAW.exe:CorelDRAW32.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\Chrome.exe:Chrome64.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\Chrome.exe:Chrome32.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\calc.exe:calc64.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\calc.exe:calc32.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\BackUp.exe:BackUp64.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\BackUp.exe:BackUp32.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\B1CV82Servers.exe:B1CV82Servers64.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\B1CV82Servers.exe:B1CV82Servers32.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\B1CV81Servers.exe:B1CV81Servers64.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\B1CV81Servers.exe:B1CV81Servers32.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\B1C82starter.exe:B1C82starter64.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\B1C82starter.exe:B1C82starter32.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\B1C82.exe:B1C8264.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\B1C82.exe:B1C8232.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\B1C81starter.exe:B1C81starter64.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\B1C81starter.exe:B1C81starter32.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\B1C81hinstallr.exe:B1C81hinstallr64.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\B1C81hinstallr.exe:B1C81hinstallr32.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\B1C81hinstalli.exe:B1C81hinstalli64.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\B1C81hinstalli.exe:B1C81hinstalli32.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\B1C81.exe:B1C8164.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\B1C81.exe:B1C8132.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\B1C7starter.exe:B1C7starter64.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\B1C7starter.exe:B1C7starter32.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\B1c7.exe:B1c764.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\B1c7.exe:B1c732.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\AllProgram.exe:AllProgram64.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\AllProgram.exe:AllProgram32.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\Alians.exe:Alians64.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\Alians.exe:Alians32.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\Akti.exe:Akti64.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\Akti.exe:Akti32.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\Acrobat.exe:Acrobat64.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\Acrobat.exe:Acrobat32.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\Access.exe:Access64.exe:$DATA','');
QuarantineFile('C:\Documents and Settings\All Users\Term\Access.exe:Access32.exe:$DATA','');
QuarantineFile('C:\Program Files\Music App\Datamngr\apcrtldr.dll','');
QuarantineFile('C:\Program Files\punto.bat','');
DeleteService('bd0004');
DeleteService('BDEnhanceBoost');
DeleteService('BDSafeBrowser');
DeleteFile('C:\WINDOWS\system32\DRIVERS\bd0004.sys','32');
DeleteFile('C:\WINDOWS\system32\DRIVERS\BDEnhanceBoost.sys','32');
DeleteFile('C:\WINDOWS\system32\DRIVERS\BDSafeBrowser.sys','32');
DeleteFile('C:\Program Files\punto.bat','32');
DeleteFile('C:\Program Files\Music App\Datamngr\apcrtldr.dll','32');
DeleteFile('C:\Documents and Settings\Ceasar\Главное меню\Программы\Автозагрузка\foxmail.bmp','32');
RegKeyParamDel('HKEY_LOCAL_MACHINE','System\CurrentControlSet\Control\Session Manager\AppCertDlls','x86');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RebootWindows(false);
end.
Компьютер перезагрузится.