Код:
begin
ShowMessage('Внимание! Перед выполнением скрипта AVZ автоматически закроет все сетевые подключения.' + #13#10 + 'После перезагрузки компьютера подключения к сети будут восстановлены в автоматическом режиме.');
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
if not IsWOW64
then
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
end;
QuarantineFile('C:\Users\Лерон\AppData\Local\Hostinstaller\1150376010_monster.exe','');
QuarantineFile('C:\Users\Лерон\AppData\Local\SystemDir\nethost.exe','');
QuarantineFile('C:\Users\Лерон\AppData\Roaming\MicrosoftUpdater\MicrosoftUpdater.exe','');
QuarantineFile('C:\Program Files (x86)\Kinoroom Browser\krbrowser.exe','');
QuarantineFile('C:\ProgramData\KRB Updater Utility\krbupdater.exe','');
QuarantineFile('C:\Users\Лерон\AppData\Local\Microsoft\Extensions\extsetup.exe','');
QuarantineFile('C:\Users\E784~1\AppData\Roaming\DealPly\UPDATE~1\UPDATE~1.EXE','');
QuarantineFile('C:\Program Files (x86)\DealPly\DealPlyUpdate.exe','');
QuarantineFile('C:\Users\E784~1\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE','');
QuarantineFile('C:\Users\E784~1\AppData\Roaming\UPDATE~1\UPDATE~1\UPDATE~1.EXE','');
QuarantineFile('C:\Users\Лерон\AppData\Local\rInVQqUC\RwDKsb1.bat','');
QuarantineFile('C:\Users\Лерон\AppData\Roaming\worlduarchive\worlduarchive.exe','');
QuarantineFile('C:\Users\Лерон\AppData\Local\gmsd_ru_005010232\upgmsd_ru_005010232.exe','');
QuarantineFile('C:\Program Files\SpaceSoundPro\SpaceSoundPro.exe','');
QuarantineFile('C:\Program Files\Sound+\Sound+.exe','');
QuarantineFile('C:\Program Files (x86)\gmsd_ru_005010232\gmsd_ru_005010232.exe','');
QuarantineFile('C:\Users\Лерон\Documents\Iterra\xwwnzih.dll','');
QuarantineFile('C:\Program Files (x86)\rec_ru_192\rec_ru_192.exe','');
SetServiceStart('SSFK', 4);
SetServiceStart('WdMan', 4);
DeleteService('WdMan');
DeleteService('SSFK');
QuarantineFile('c:\programdata\wwdmw\wdman.exe','');
QuarantineFile('c:\program files (x86)\sfk\ssfk.exe','');
DeleteFile('c:\program files (x86)\sfk\ssfk.exe','32');
DeleteFile('c:\programdata\wwdmw\wdman.exe','32');
DeleteFile('C:\Program Files (x86)\rec_ru_192\rec_ru_192.exe','32');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','rec_ru_192');
DeleteFile('C:\Users\Лерон\Documents\Iterra\xwwnzih.dll','32');
DeleteFile('C:\Users\Лерон\AppData\Local\Amigo\Application\amigo.exe','32');
RegKeyParamDel('HKEY_LOCAL_MACHINE','SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\amigo','command');
DeleteFile('C:\Program Files (x86)\gmsd_ru_005010232\gmsd_ru_005010232.exe','32');
RegKeyParamDel('HKEY_LOCAL_MACHINE','SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\gmsd_ru_005010232','command');
DeleteFile('C:\Program Files\Sound+\Sound+.exe','32');
DeleteFile('C:\Program Files\SpaceSoundPro\SpaceSoundPro.exe','32');
RegKeyParamDel('HKEY_LOCAL_MACHINE','SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\upgmsd_ru_005010232.exe','command');
RegKeyParamDel('HKEY_LOCAL_MACHINE','SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\SpaceSoundPro','command');
RegKeyParamDel('HKEY_LOCAL_MACHINE','SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Sound+','command');
DeleteFile('C:\Users\Лерон\AppData\Local\gmsd_ru_005010232\upgmsd_ru_005010232.exe','32');
DeleteFile('C:\Users\Лерон\AppData\Roaming\worlduarchive\worlduarchive.exe','32');
RegKeyParamDel('HKEY_LOCAL_MACHINE','SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\VertZip','command');
DeleteFile('C:\Users\Лерон\AppData\Local\rInVQqUC\RwDKsb1.bat','32');
DeleteFile('C:\Users\E784~1\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE','32');
DeleteFile('C:\Windows\Tasks\DSite.job','32');
DeleteFile('C:\Windows\Tasks\UpdaterEX.job','32');
DeleteFile('C:\Users\E784~1\AppData\Roaming\UPDATE~1\UPDATE~1\UPDATE~1.EXE','32');
DeleteFile('C:\Windows\system32\Tasks\DealPly','64');
DeleteFile('C:\Windows\system32\Tasks\DealPlyUpdate','64');
DeleteFile('C:\Windows\system32\Tasks\DSite','64');
DeleteFile('C:\Program Files (x86)\DealPly\DealPlyUpdate.exe','32');
DeleteFile('C:\Users\E784~1\AppData\Roaming\DealPly\UPDATE~1\UPDATE~1.EXE','32');
DeleteFile('C:\Users\Лерон\AppData\Local\Microsoft\Extensions\extsetup.exe','32');
DeleteFile('C:\Windows\system32\Tasks\Microsoft\extsetup','64');
DeleteFile('C:\Program Files (x86)\Kinoroom Browser\krbrowser.exe','32');
DeleteFile('C:\Windows\system32\Tasks\Microsoft\SafeBrowser','64');
DeleteFile('C:\Windows\system32\Tasks\Microsoft\KRBUUS\KRBLNKRUN','64');
DeleteFile('C:\Windows\system32\Tasks\Microsoft\KRBUUS\KRB Updater Utility Service','64');
DeleteFile('C:\Windows\system32\Tasks\Microsoft\Windows\extsetup','64');
DeleteFile('C:\Users\Лерон\AppData\Roaming\MicrosoftUpdater\MicrosoftUpdater.exe','32');
DeleteFile('C:\Windows\system32\Tasks\Microsoft\Windows\MicrosoftUpdater','64');
DeleteFile('C:\Windows\system32\Tasks\Microsoft\Windows\SafeBrowser','64');
DeleteFile('C:\Users\Лерон\AppData\Local\SystemDir\nethost.exe','32');
DeleteFile('C:\Users\Лерон\AppData\Local\Hostinstaller\1150376010_monster.exe','32');
DeleteFile('C:\Windows\system32\Tasks\UpdaterEX','64');
DeleteFile('C:\Windows\system32\Tasks\Soft installer','64');
DeleteFile('C:\Windows\system32\Tasks\nethost task','64');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RebootWindows(false);
end.
Будет выполнена перезагрузка компьютера.