Код:
begin
ShowMessage('Внимание! Перед выполнением скрипта AVZ автоматически закроет все сетевые подключения.' + #13#10 + 'После перезагрузки компьютера подключения к сети будут восстановлены в автоматическом режиме.');
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
if not IsWOW64
then
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
end;
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1804', 1);
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '2201', 3);
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1004', 3);
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1001', 1);
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1201', 3);
DelCLSID('{754DF2CE-51E8-4895-B53C-6381418B84AE}');
DeleteService('TSDefenseBt');
SetServiceStart('TSSysKit', 4);
DeleteService('TSSysKit');
SetServiceStart('TS888x64', 4);
DeleteService('TS888x64');
SetServiceStart('TFsFlt', 4);
DeleteService('TFsFlt');
SetServiceStart('TAOKernelDriver', 4);
DeleteService('TAOKernelDriver');
SetServiceStart('TAOAccelerator', 4);
DeleteService('TAOAccelerator');
SetServiceStart('TAOFrame', 4);
DeleteService('TAOFrame');
SetServiceStart('serverjo', 4);
DeleteService('serverjo');
SetServiceStart('QQPCRTP', 4);
DeleteService('QQPCRTP');
QuarantineFile('C:\Program Files (x86)\Tencent\QQPCMgr\10.5.15816.217\TSSysKit64.sys','');
QuarantineFile('C:\Program Files (x86)\Tencent\QQPCMgr\10.5.15816.217\tscpm64.sys','');
QuarantineFile('C:\Program Files (x86)\Tencent\QQPCMgr\10.5.15816.217\TS888x64.sys','');
QuarantineFile('c:\program files (x86)\tencent\qqpcmgr\10.5.15816.217\taoframe.exe','');
TerminateProcessByName('c:\program files (x86)\tencent\qqpcmgr\10.5.15816.217\taoframe.exe');
TerminateProcessByName('c:\program files (x86)\tencent\qqpcmgr\10.5.15816.217\qqpcrtp.exe');
QuarantineFile('c:\program files (x86)\tencent\qqpcmgr\10.5.15816.217\qqpcrtp.exe','');
TerminateProcessByName('c:\users\user\appdata\roaming\00000011-1424023853-0000-0000-e03f49c6cc71\nsrc8e6.tmp');
QuarantineFile('c:\users\user\appdata\roaming\00000011-1424023853-0000-0000-e03f49c6cc71\nsrc8e6.tmp','');
TerminateProcessByName('c:\users\user\appdata\roaming\00000011-1424023853-0000-0000-e03f49c6cc71\josrv.exe');
QuarantineFile('c:\users\user\appdata\roaming\00000011-1424023853-0000-0000-e03f49c6cc71\josrv.exe','');
DeleteFile('c:\users\user\appdata\roaming\00000011-1424023853-0000-0000-e03f49c6cc71\josrv.exe','32');
DeleteFile('c:\users\user\appdata\roaming\00000011-1424023853-0000-0000-e03f49c6cc71\nsrc8e6.tmp','32');
DeleteFile('c:\program files (x86)\tencent\qqpcmgr\10.5.15816.217\qqpcrtp.exe','32');
DeleteFile('c:\program files (x86)\tencent\qqpcmgr\10.5.15816.217\taoframe.exe','32');
DeleteFile('C:\Program Files (x86)\Tencent\QQPCMgr\10.5.15816.217\Common.dll','32');
DeleteFile('C:\Program Files (x86)\Tencent\QQPCMgr\10.5.15816.217\communic.dll','32');
DeleteFile('C:\Program Files (x86)\Tencent\QQPCMgr\10.5.15816.217\dr.dll','32');
DeleteFile('C:\Program Files (x86)\Tencent\QQPCMgr\10.5.15816.217\libexpatw.dll','32');
DeleteFile('C:\Program Files (x86)\Tencent\QQPCMgr\10.5.15816.217\oDayProtect.dll','32');
DeleteFile('C:\Program Files (x86)\Tencent\QQPCMgr\10.5.15816.217\plugins\QMCloudInter\QMCloudInter.dll','32');
DeleteFile('C:\Program Files (x86)\Tencent\QQPCMgr\10.5.15816.217\plugins\QMCpm.dll','32');
DeleteFile('C:\Program Files (x86)\Tencent\QQPCMgr\10.5.15816.217\plugins\QMHips.dll','32');
DeleteFile('C:\Program Files (x86)\Tencent\QQPCMgr\10.5.15816.217\plugins\QMHipsEngine.dll','32');
DeleteFile('C:\Program Files (x86)\Tencent\QQPCMgr\10.5.15816.217\plugins\qmiemalrtpplugin\qmiemalrtpplugin.dll','32');
DeleteFile('C:\Program Files (x86)\Tencent\QQPCMgr\10.5.15816.217\plugins\QMRepairPlugin.dll','32');
DeleteFile('C:\Program Files (x86)\Tencent\QQPCMgr\10.5.15816.217\plugins\RtpCommon.dll','32');
DeleteFile('C:\Program Files (x86)\Tencent\QQPCMgr\10.5.15816.217\plugins\SpecialPlugin\QMHipsSpecial.dll','32');
DeleteFile('C:\Program Files (x86)\Tencent\QQPCMgr\10.5.15816.217\plugins\sysspeeduprtpplugin\SysSpeedupRtpPlugin.dll','32');
DeleteFile('C:\Program Files (x86)\Tencent\QQPCMgr\10.5.15816.217\ptrate.dll','32');
DeleteFile('C:\Program Files (x86)\Tencent\QQPCMgr\10.5.15816.217\QMAssocScan.dll','32');
DeleteFile('C:\Program Files (x86)\Tencent\QQPCMgr\10.5.15816.217\TS888x64.sys','32');
DeleteFile('C:\Program Files (x86)\Tencent\QQPCMgr\10.5.15816.217\tscpm64.sys','32');
DeleteFile('C:\Program Files (x86)\Tencent\QQPCMgr\10.5.15816.217\TSSysKit64.sys','32');
DeleteFile('C:\Program Files (x86)\Tencent\QQPCMgr\10.5.15816.217\QMUdisk64.sys','32');
DeleteFile('C:\Windows\system32\Drivers\TAOAccelerator64.sys','32');
DeleteFile('C:\Windows\System32\Drivers\TAOKernel64.sys','32');
DeleteFile('C:\Windows\system32\Drivers\TFsFltX64.sys','32');
DeleteFile('C:\Program Files (x86)\Tencent\QQPCMgr\10.5.15816.217\TSDefenseBT64.sys','32');
DeleteFile('C:\Program Files (x86)\Tencent\QQPCMgr\10.5.15816.217\plugins\FileSmash\QMSoftExt.dll','32');
DeleteFile('C:\Program Files (x86)\Tencent\QQPCMgr\10.5.15816.217\plugins\FileSmash\QMSoftExt64.dll','32');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved','{754DF2CE-51E8-4895-B53C-6381418B84AE}');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','QQPCTray');
DeleteFile('C:\ProgramData\Tencent\TSVulFw\TSVulFW.DAT','32');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RebootWindows(false);
end.
Компьютер перезагрузится.