Код:
begin
ExecuteAVUpdate;
ShowMessage('Внимание! Перед выполнением скрипта AVZ автоматически закроет все сетевые подключения.'+#13#10+'После перезагрузки компьютера подключения к сети будут восстановлены в автоматическом режиме.');
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
QuarantineFile('C:\Program Files\HCDNAGJEM2\HCDNAGJEM.exe','');
QuarantineFile('C:\ProgramData\54C1284L9183C152\54C1284L9183C152.dll','');
QuarantineFileF('C:\ProgramData\54C1284L9183C152', '*.exe,*.dll,*.sys, *.pif', false,'', 0, 0);
QuarantineFile('C:\Users\Lenovo\AppData\Roaming\CDManager\ml.py','');
QuarantineFile('C:\Users\Lenovo\AppData\Roaming\CDManager\updater.py','');
QuarantineFile('C:\Users\Lenovo\AppData\Roaming\ForceUpdateVOF\ml.py','');
QuarantineFile('C:\Users\Lenovo\AppData\Roaming\ForceUpdateVOF\updater.py','');
QuarantineFile('C:\Users\Lenovo\AppData\Roaming\SearchAY\app.py','');
QuarantineFile('C:\Users\Lenovo\AppData\Roaming\SearchAY\ml.py','');
QuarantineFile('C:\Users\Lenovo\AppData\Roaming\SearchAY\python\pythonw.exe','');
QuarantineFile('C:\Users\Lenovo\AppData\Roaming\VOF\ml.py','');
QuarantineFile('C:\Users\Lenovo\AppData\Roaming\VOF\python\pythonw.exe','');
QuarantineFile('C:\Users\Lenovo\AppData\Roaming\VOF\updater.py','');
QuarantineFile('C:\Users\Lenovo\AppData\Roaming\vofer\app.py','');
QuarantineFile('C:\Users\Lenovo\AppData\Roaming\vofer\ml.py','');
QuarantineFile('C:\Users\Lenovo\AppData\Roaming\vofer\python\pythonw.exe','');
QuarantineFile('C:\Windows\TEMP\g224F.tmp.exe','');
QuarantineFile('C:\Windows\TEMP\gC12E.tmp.exe','');
DeleteFile('C:\Program Files\EOALJY0RBN\3J0IZDSKG.exe','32');
DeleteFile('C:\ProgramData\54C1284L9183C152\54C1284L9183C152.dll','32');
DeleteFile('C:\Users\Lenovo\AppData\Roaming\CDManager\ml.py','32');
DeleteFile('C:\Users\Lenovo\AppData\Roaming\CDManager\updater.py','32');
DeleteFile('C:\Users\Lenovo\AppData\Roaming\ForceUpdateVOF\ml.py','32');
DeleteFile('C:\Users\Lenovo\AppData\Roaming\ForceUpdateVOF\updater.py','32');
DeleteFile('C:\Users\Lenovo\AppData\Roaming\SearchAY\app.py','32');
DeleteFile('C:\Users\Lenovo\AppData\Roaming\SearchAY\ml.py','32');
DeleteFile('C:\Users\Lenovo\AppData\Roaming\SearchAY\python\pythonw.exe','32');
DeleteFile('C:\Users\Lenovo\AppData\Roaming\VOF\ml.py','32');
DeleteFile('C:\Users\Lenovo\AppData\Roaming\VOF\python\pythonw.exe','32');
DeleteFile('C:\Users\Lenovo\AppData\Roaming\VOF\updater.py','32');
DeleteFile('C:\Users\Lenovo\AppData\Roaming\vofer\app.py','32');
DeleteFile('C:\Users\Lenovo\AppData\Roaming\vofer\ml.py','32');
DeleteFile('C:\Users\Lenovo\AppData\Roaming\vofer\python\pythonw.exe','32');
DeleteFile('C:\Windows\TEMP\g224F.tmp.exe','32');
DeleteFile('C:\Windows\TEMP\gC12E.tmp.exe','32');
ExecuteFile('schtasks.exe', '/delete /TN "54C1284L9183C152" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "54C1284L9183C152-dll" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "CDManager2" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "ForceUpdateVOF" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "ForceUpdateVOF2" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "SearchAY" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "SearchAY2" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "VOF" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "VOF2" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "avast! antivirus\backup" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "avast! antivirus\backup-exe" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "skypesetupfull" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "vofer" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "vofer2" /F', 0, 15000, true);
DeleteFileMask('C:\Users\Lenovo\AppData\Roaming\vofer', '*', true, ' ');
DeleteDirectory('C:\Users\Lenovo\AppData\Roaming\vofer');
DeleteFileMask('C:\Users\Lenovo\AppData\Roaming\VOF', '*', true, ' ');
DeleteDirectory('C:\Users\Lenovo\AppData\Roaming\VOF');
DeleteFileMask('C:\Users\Lenovo\AppData\Roaming\SearchAY', '*', true, ' ');
DeleteDirectory('C:\Users\Lenovo\AppData\Roaming\SearchAY');
DeleteFileMask('C:\Users\Lenovo\AppData\Roaming\ForceUpdateVOF', '*', true, ' ');
DeleteDirectory('C:\Users\Lenovo\AppData\Roaming\ForceUpdateVOF');
DeleteFileMask('C:\Users\Lenovo\AppData\Roaming\CDManager', '*', true, ' ');
DeleteDirectory('C:\Users\Lenovo\AppData\Roaming\CDManager');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','SearchAY');
RegKeyParamDel('HKEY_LOCAL_MACHINE','SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\CDManager','command');
RegKeyParamDel('HKEY_LOCAL_MACHINE','SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\ForceUpdateVOF','command');
RegKeyParamDel('HKEY_LOCAL_MACHINE','SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\LENOVO-PC','command');
RegKeyParamDel('HKEY_LOCAL_MACHINE','SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\SearchAY','command');
RegKeyParamDel('HKEY_LOCAL_MACHINE','SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\UDA1B8V6HA','command');
RegKeyParamDel('HKEY_LOCAL_MACHINE','SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\XWM2M2J5XV','command');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\RunOnce','LENOVO-PC');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
ExecuteWizard('SCU', 2, 3, true);
RebootWindows(true);
end.
После выполнения скрипта компьютер перезагрузится.