Код:
begin
SetupAVZ('QrOnlyEXE=Y');
SearchRootkit(true, true);
SetAVZGuardStatus(True);
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
ClearQuarantineEx(true);
TerminateProcessByName('d:\documents and settings\all users\application data\5wminipro5\wminipro.exe');
SetServiceStart('SSFK', 4);
SetServiceStart('WdsManPro', 4);
StopService('SSFK');
StopService('WdsManPro');
QuarantineFile('D:\Program Files\swiftsearch_1.10.0.25\update\swiftsearchautoupdateclient.exe', '');
QuarantineFile('D:\Program Files\swiftsearch_1.10.0.25\service\swsesrvc.exe', '');
QuarantineFile('D:\WINDOWS\system32\Drivers\swsedrvr_vw_1_10_0_25.sys', '');
QuarantineFile('D:\Program Files\sfk\ssfk.exe', '');
QuarantineFile('D:\WINDOWS\system32\Drivers\swsedrvr_vt_1_10_0_25.sys', '');
QuarantineFile('SSFK.sys', '');
QuarantineFile('d:\documents and settings\all users\application data\5wminipro5\wminipro.exe', '');
QuarantineFileF('D:\Program Files\swiftsearch_1.10.0.25\', '*', true, '', 0, 0);
QuarantineFileF('D:\Documents and Settings\All Users\Application Data\3WMiniPro3', '*', true, '', 0, 0);
QuarantineFileF('D:\Documents and Settings\All Users\Application Data\5WMiniPro5', '*', true, '', 0, 0);
QuarantineFileF('D:\Documents and Settings\All Users\Application Data\gWMiniProg', '*', true, '', 0, 0);
QuarantineFileF(' D:\Documents and Settings\All Users\Application Data\lWMiniProl', '*', true, '', 0, 0);
QuarantineFileF('D:\Documents and Settings\Надежда\Application Data\oursurfing', '*', true, '', 0, 0);
QuarantineFileF('D:\Documents and Settings\Надежда\Local Settings\Application Data\globalUpdate', '*', true, '', 0, 0);
QuarantineFileF('D:\Documents and Settings\Надежда\Application Data\istartpageing', '*', true, '', 0, 0);
QuarantineFile('D:\Documents and Settings\Надежда\Local Settings\Application Data\gmsd_ru_005010157\upgmsd_ru_005010157.exe', '');
DeleteFile('D:\Documents and Settings\All Users\Application Data\5WMiniPro5\WMiniPro.exe', '32');
DeleteFile('D:\Program Files\sfk\ssfk.exe', '32');
DeleteFile('D:\WINDOWS\system32\Drivers\swsedrvr_vw_1_10_0_25.sys', '32');
DeleteFile('D:\WINDOWS\system32\Drivers\swsedrvr_vt_1_10_0_25.sys', '32');
DeleteFile('D:\Program Files\swiftsearch_1.10.0.25\update\swiftsearchautoupdateclient.exe', '32');
DeleteFile('D:\Program Files\SwiftSearch_1.10.0.25\Service\swsesrvc.exe', '32');
DeleteFile('D:\Documents and Settings\Надежда\Local Settings\Application Data\gmsd_ru_005010157\upgmsd_ru_005010157.exe', '32');
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
DeleteService('SSFK');
DeleteService('WdsManPro');
DeleteFileMask('D:\Documents and Settings\All Users\Application Data\3WMiniPro3', '*', true);
DeleteFileMask('D:\Documents and Settings\All Users\Application Data\5WMiniPro5', '*', true);
DeleteFileMask('D:\Documents and Settings\All Users\Application Data\gWMiniProg', '*', true);
DeleteFileMask(' D:\Documents and Settings\All Users\Application Data\lWMiniProl', '*', true);
DeleteFileMask('D:\Documents and Settings\Надежда\Application Data\oursurfing', '*', true);
DeleteFileMask('D:\Documents and Settings\Надежда\Local Settings\Application Data\globalUpdate', '*', true);
DeleteFileMask('D:\Documents and Settings\Надежда\Application Data\istartpageing', '*', true);
DeleteDirectory('D:\Documents and Settings\All Users\Application Data\3WMiniPro3');
DeleteDirectory('D:\Documents and Settings\All Users\Application Data\5WMiniPro5');
DeleteDirectory('D:\Documents and Settings\All Users\Application Data\gWMiniProg');
DeleteDirectory(' D:\Documents and Settings\All Users\Application Data\lWMiniProl');
DeleteDirectory('D:\Documents and Settings\Надежда\Application Data\oursurfing');
DeleteDirectory('D:\Documents and Settings\Надежда\Local Settings\Application Data\globalUpdate');
DeleteDirectory('D:\Documents and Settings\Надежда\Application Data\istartpageing');
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'Software\Microsoft\Windows\CurrentVersion\Run', 'upgmsd_ru_005010157.exe');
BC_ImportALL;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.