Код:
begin
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
QuarantineFile('C:\Program Files (x86)\24Seven savings\24seven_savings_notification_service.exe', '');
QuarantineFile('C:\Users\WJ\AppData\Roaming\BLXP.exe', '');
QuarantineFile('C:\Users\WJ\AppData\Roaming\bo8BpfW10Hw63QZ4J.exe', '');
QuarantineFile('C:\Windows\TEMP\CUpdater\s78c..exe', '');
ExecuteFile('schtasks.exe', '/delete /TN "24seven_savings_notification_service.job" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "BLXP.job" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "bo8BpfW10Hw63QZ4J.job" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "24seven_savings_notification_service" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "Sunrise" /F', 0, 15000, true);
DeleteFile('C:\Program Files (x86)\24Seven savings\24seven_savings_notification_service.exe', '32');
DeleteFile('C:\Users\WJ\AppData\Roaming\BLXP.exe', '32');
DeleteFile('C:\Users\WJ\AppData\Roaming\bo8BpfW10Hw63QZ4J.exe', '32');
DeleteFile('C:\Windows\TEMP\CUpdater\s78c..exe', '32');
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1201', 3);
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1001', 1);
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1004', 3);
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '2201', 3);
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1804', 1);
ExecuteSysClean;
ExecuteWizard('SCU', 2, 3, true);
CreateQurantineArchive(GetAVZDirectory + 'quarantine.zip');
RebootWindows(true);
end.
Компьютер