Код:
begin
ShowMessage('Внимание! Перед выполнением скрипта AVZ автоматически закроет все сетевые подключения.' + #13#10 + 'После перезагрузки компьютера подключения к сети будут восстановлены в автоматическом режиме.');
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
if not IsWOW64
then
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
end;
QuarantineFile('C:\Documents and Settings\Миша\Local Settings\Application Data\Hostinstaller\3224171349_installcube.exe','');
QuarantineFile('C:\Documents and Settings\Миша\Local Settings\Application Data\SmartWeb\SmartWebHelper.exe','');
QuarantineFile('C:\Documents and Settings\Миша\Local Settings\Application Data\Rush Builder\{5230841B-D816-DBE7-ACE8-9C55327D0393}\xepuc.dll','');
QuarantineFile('C:\Documents and Settings\Миша\Local Settings\Application Data\Rush Builder\{5230841B-D816-DBE7-ACE8-9C55327D0393}\RushBuilder.dll','');
QuarantineFile('C:\Documents and Settings\Миша\Application Data\MyDesktop\qweeeCL.exe','');
QuarantineFile('C:\Documents and Settings\Валера.PC29\Local Settings\Application Data\gmsd_ru_005010183\upgmsd_ru_005010183.exe','');
QuarantineFile('C:\Program Files\gmsd_ru_005010183\gmsd_ru_005010183.exe','');
QuarantineFile('C:\Documents and Settings\Валера.PC29\Local Settings\Application Data\gmsd_ru_005010181\upgmsd_ru_005010181.exe','');
QuarantineFile('C:\Program Files\gmsd_ru_005010181\gmsd_ru_005010181.exe','');
QuarantineFile('C:\DOCUME~1\C4C5~1\LOCALS~1\Temp\959q3yGEB2KD8W3.exe','');
QuarantineFile('C:\Program Files\SpaceSoundPro\SpaceSoundPro.exe','');
QuarantineFile('C:\Documents and Settings\Ксюша.80FD7A78EE3C44A\Local Settings\Application Data\gmsd_ru_025010179\upgmsd_ru_025010179.exe','');
QuarantineFile('C:\Program Files\gmsd_ru_025010179\gmsd_ru_025010179.exe','');
DeleteService('itdrvr_vt_1_10_0_25');
QuarantineFile('C:\WINDOWS\system32\drivers\itdrvr_vt_1_10_0_25.sys','');
DeleteService('ziminylu');
DeleteService('woforemu');
DeleteService('rizyqibe');
QuarantineFile('C:\Program Files\00000000-1450410081-0000-0000-001A4D452230\knsmD5.tmpfs','');
QuarantineFile('C:\Documents and Settings\Миша\Local Settings\Application Data\00000000-1450420926-0000-0000-001A4D452230\snso109.tmp','');
QuarantineFile('C:\Program Files\00000000-1450410081-0000-0000-001A4D452230\jnswDF.tmp','');
DeleteFile('C:\Program Files\00000000-1450410081-0000-0000-001A4D452230\jnswDF.tmp','32');
DeleteFile('C:\Documents and Settings\Миша\Local Settings\Application Data\00000000-1450420926-0000-0000-001A4D452230\snso109.tmp','32');
DeleteFile('C:\Program Files\00000000-1450410081-0000-0000-001A4D452230\knsmD5.tmpfs','32');
DeleteFile('C:\WINDOWS\system32\drivers\itdrvr_vt_1_10_0_25.sys','32');
DeleteFile('C:\Program Files\gmsd_ru_025010179\gmsd_ru_025010179.exe','32');
DeleteFile('C:\Documents and Settings\Ксюша.80FD7A78EE3C44A\Local Settings\Application Data\gmsd_ru_025010179\upgmsd_ru_025010179.exe','32');
DeleteFile('C:\Program Files\SpaceSoundPro\SpaceSoundPro.exe','32');
DeleteFile('C:\DOCUME~1\C4C5~1\LOCALS~1\Temp\959q3yGEB2KD8W3.exe','32');
DeleteFile('C:\Program Files\gmsd_ru_005010181\gmsd_ru_005010181.exe','32');
DeleteFile('C:\Documents and Settings\Валера.PC29\Local Settings\Application Data\gmsd_ru_005010181\upgmsd_ru_005010181.exe','32');
DeleteFile('C:\Program Files\gmsd_ru_005010183\gmsd_ru_005010183.exe','32');
DeleteFile('C:\Documents and Settings\Валера.PC29\Local Settings\Application Data\gmsd_ru_005010183\upgmsd_ru_005010183.exe','32');
DeleteFile('C:\Documents and Settings\Миша\Application Data\MyDesktop\qweeeCL.exe','32');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','MyDesktop');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','upgmsd_ru_005010183.exe');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','gmsd_ru_005010183');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','upgmsd_ru_005010181.exe');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','gmsd_ru_005010181');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','Alcmeter');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','SpaceSoundPro');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','upgmsd_ru_025010179.exe');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','gmsd_ru_025010179');
DeleteFile('C:\Documents and Settings\Миша\Local Settings\Application Data\Rush Builder\{5230841B-D816-DBE7-ACE8-9C55327D0393}\RushBuilder.dll','32');
DeleteFile('C:\Documents and Settings\Миша\Local Settings\Application Data\Rush Builder\{5230841B-D816-DBE7-ACE8-9C55327D0393}\xepuc.dll','32');
DeleteFile('C:\Documents and Settings\Миша\Local Settings\Application Data\SmartWeb\SmartWebHelper.exe','32');
DeleteFile('C:\Documents and Settings\Миша\Local Settings\Application Data\Hostinstaller\3224171349_installcube.exe','32');
DeleteFile('C:\WINDOWS\Tasks\Soft installer.job','32');
DeleteFile('C:\WINDOWS\Tasks\SmartWeb Upgrade Trigger Task.job','32');
DeleteFile('C:\WINDOWS\Tasks\Rush Builder2.job','32');
DeleteFile('C:\WINDOWS\Tasks\Rush Builder.job','32');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RebootWindows(false);
end.
Будет выполнена перезагрузка компьютера.