Код:
begin
ShowMessage('Внимание! Перед выполнением скрипта AVZ автоматически закроет все сетевые подключения.' + #13#10 + 'После перезагрузки компьютера подключения к сети будут восстановлены в автоматическом режиме.');
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
if not IsWOW64
then
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
end;
DelBHO('{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}');
DelBHO('{FB4F6285-4C32-49F2-950F-A5998F9CEC6C}');
QuarantineFile('D:\IQIYI Video\Common\Accelerator\IEHelper.dll','');
QuarantineFile('C:\Users\Андрей\AppData\Roaming\Browsers\exe.rehcnualebivsusa.bat','');
QuarantineFile('C:\Users\Андрей\AppData\Roaming\Browsers\exe.erolpxei.bat','');
QuarantineFile('C:\Users\Андрей\AppData\Local\Yandex\browser.bat','');
QuarantineFile('C:\Program Files (x86)\Google\chrome.bat','');
QuarantineFile('wpnfd_1_10_0_6.sys','');
DeleteService('wpnfd_1_10_0_6');
QuarantineFile('C:\Users\Андрей\AppData\Roaming\VOPackage\JOSrv.exe','');
DeleteService('serverjo');
QuarantineFile('C:\Users\Андрей\AppData\Roaming\VOPackage\nsd894.tmpfs','');
DeleteService('bykeqyle');
SetServiceStart('WindowsMangerProtect', 4);
DeleteService('WindowsMangerProtect');
SetServiceStart('IHProtect Service', 4);
DeleteService('IHProtect Service');
QuarantineFile('C:\Windows\system32\drivers\{e65048d8-bd76-44ed-ac28-c25d339ab590}Gw64.sys','');
QuarantineFile('C:\Program Files (x86)\XTab\SupTab.dll','');
QuarantineFile('C:\Program Files (x86)\XTab\IeWatchDog.dll','');
QuarantineFile('C:\Program Files (x86)\XTab\BrowserAction.dll','');
TerminateProcessByName('c:\users\Андрей\appdata\local\microsoft\windows\vkmusicdownloader.exe');
QuarantineFile('c:\users\Андрей\appdata\local\microsoft\windows\vkmusicdownloader.exe','');
QuarantineFile('c:\programdata\windowsmangerprotect\protectwindowsmanager.exe','');
TerminateProcessByName('c:\programdata\windowsmangerprotect\protectwindowsmanager.exe');
TerminateProcessByName('c:\program files (x86)\xtab\protectservice.exe');
QuarantineFile('c:\program files (x86)\xtab\protectservice.exe','');
TerminateProcessByName('c:\program files (x86)\xtab\hpnotify.exe');
QuarantineFile('c:\program files (x86)\xtab\hpnotify.exe','');
TerminateProcessByName('c:\program files (x86)\xtab\cmdshell.exe');
QuarantineFile('c:\program files (x86)\xtab\cmdshell.exe','');
DeleteFile('c:\program files (x86)\xtab\cmdshell.exe','32');
DeleteFile('c:\program files (x86)\xtab\hpnotify.exe','32');
DeleteFile('c:\program files (x86)\xtab\protectservice.exe','32');
DeleteFile('c:\programdata\windowsmangerprotect\protectwindowsmanager.exe','32');
DeleteFile('c:\users\Андрей\appdata\local\microsoft\windows\vkmusicdownloader.exe','32');
DeleteFile('C:\Program Files (x86)\XTab\BrowserAction.dll','32');
DeleteFile('C:\Program Files (x86)\XTab\IeWatchDog.dll','32');
DeleteFile('C:\Program Files (x86)\XTab\SupTab.dll','32');
DeleteFile('C:\Windows\system32\drivers\{e65048d8-bd76-44ed-ac28-c25d339ab590}Gw64.sys','32');
DeleteFile('C:\Users\Андрей\AppData\Roaming\VOPackage\nsd894.tmpfs','32');
DeleteFile('C:\Users\Андрей\AppData\Roaming\VOPackage\JOSrv.exe','32');
DeleteFile('wpnfd_1_10_0_6.sys','32');
DeleteFile('C:\Program Files (x86)\Google\chrome.bat','32');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','Vkmusicdownloader');
RegKeyParamDel('HKEY_LOCAL_MACHINE','SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Vkmusicdownloader','command');
DeleteFile('C:\Users\Андрей\AppData\Local\Yandex\browser.bat','32');
DeleteFile('C:\Users\Андрей\AppData\Roaming\Browsers\exe.erolpxei.bat','32');
DeleteFile('C:\Users\Андрей\AppData\Roaming\Browsers\exe.rehcnualebivsusa.bat','32');
DeleteFile('D:\IQIYI Video\Common\Accelerator\IEHelper.dll','32');
DeleteFile('C:\Windows\system32\Tasks\Vkmusicdownloader','64');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RebootWindows(false);
end.
Компьютер перезагрузится.