Код:
begin
ShowMessage('Внимание! Перед выполнением скрипта AVZ автоматически закроет все сетевые подключения.' + #13#10 + 'После перезагрузки компьютера подключения к сети будут восстановлены в автоматическом режиме.');
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
if not IsWOW64
then
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
end;
QuarantineFile('C:\Program Files (x86)\YiuAskU2\EUJHowC.dll','');
QuarantineFile('C:\Users\Piecework\AppData\Roaming\Microsoft\msi.exe','');
QuarantineFile('C:\Users\Piecework\AppData\Roaming\curl\curl_7_54.exe','');
QuarantineFile('C:\Users\Piecework\AppData\Roaming\curl\curl.exe','');
QuarantineFile('C:\Program Files (x86)\YiuAskU\nISNhLA.dll','');
TerminateProcessByName('c:\program files (x86)\yiuaskie\mnu8ofaum.exe');
DelBHO('{2C6A44CB-AD42-4731-A544-3FBD3D83AB5B}');
QuarantineFile('C:\Program Files (x86)\YiuAskIE\ktr9tIj.dll','');
QuarantineFile('C:\Users\Piecework\AppData\Roaming\fiibkhokmfkkadmpaigijmgmlfenpchk\ml.py','');
SetServiceStart('UbarPolicyProvider', 4);
DeleteService('UbarPolicyProvider');
SetServiceStart('SvcHost Service Host', 4);
DeleteService('SvcHost Service Host');
SetServiceStart('Ea3Host', 4);
DeleteService('Ea3Host');
TerminateProcessByName('c:\users\piecework\appdata\local\yc\application\yc.exe');
QuarantineFile('c:\users\piecework\appdata\local\yc\application\yc.exe','');
TerminateProcessByName('C:\Program Files\UBar\UbarService.exe');
QuarantineFile('C:\Program Files\UBar\UbarService.exe','');
TerminateProcessByName('C:\Program Files\UBar\ubar.exe');
QuarantineFile('C:\Program Files\UBar\ubar.exe','');
TerminateProcessByName('C:\Windows\Microsoft\svchost.exe.exe');
QuarantineFile('C:\Windows\Microsoft\svchost.exe.exe','');
TerminateProcessByName('C:\Windows\Microsoft\svchost.exe');
QuarantineFile('C:\Windows\Microsoft\svchost.exe','');
QuarantineFile('c:\program files (x86)\yiuaskie\mnu8ofaum.exe','');
TerminateProcessByName('C:\Windows\System32\Ea3Host.exe');
QuarantineFile('C:\Windows\System32\Ea3Host.exe','');
DeleteFile('C:\Windows\System32\Ea3Host.exe','32');
DeleteFile('C:\Windows\Microsoft\svchost.exe','32');
DeleteFile('C:\Windows\Microsoft\svchost.exe.exe','32');
DeleteFile('C:\Program Files\UBar\ubar.exe','32');
DeleteFile('C:\Program Files\UBar\UbarService.exe','32');
DeleteFile('c:\users\piecework\appdata\local\yc\application\yc.exe','32');
DeleteFile('C:\Users\Piecework\AppData\Roaming\fiibkhokmfkkadmpaigijmgmlfenpchk\ml.py','32');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','GoogleChromeAutoLaunch_658253F607F32ED3A165EFF0037ADBBF');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','fiibkhokmfkkadmpaigijmgmlfenpchk');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','ycAutoLaunch_FBD4BE74C60F1B2EDA690AEDF5256CF9');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','codddbumcw');
DeleteFile('C:\Program Files (x86)\YiuAskIE\ktr9tIj.dll','32');
DeleteFile('c:\program files (x86)\yiuaskie\mnu8ofaum.exe','32');
DeleteFile('C:\Program Files (x86)\YiuAskU\nISNhLA.dll','32');
DeleteFile('C:\WINDOWS\Tasks\2C6A44CB-AD42-4731-A544-3FBD3D83AB5B.job','32');
DeleteFile('C:\WINDOWS\system32\Tasks\2C6A44CB-AD42-4731-A544-3FBD3D83AB5B','64');
DeleteFile('C:\WINDOWS\system32\Tasks\2C6A44CB-AD42-4731-A544-3FBD3D83AB5B2','64');
DeleteFile('C:\WINDOWS\system32\Tasks\curl','64');
DeleteFile('C:\Users\Piecework\AppData\Roaming\curl\curl.exe','32');
DeleteFile('C:\Users\Piecework\AppData\Roaming\curl\curl_7_54.exe','32');
DeleteFile('C:\WINDOWS\system32\Tasks\curls','64');
DeleteFile('C:\WINDOWS\system32\Tasks\fiibkhokmfkkadmpaigijmgmlfenpchk','64');
DeleteFile('C:\Users\Piecework\AppData\Roaming\Microsoft\msi.exe','32');
DeleteFile('C:\WINDOWS\system32\Tasks\MSI','64');
DeleteFile('C:\WINDOWS\system32\Tasks\U2_2C6A44CB-AD42-4731-A544-3FBD3D83AB5B','64');
DeleteFile('C:\Program Files (x86)\YiuAskU2\EUJHowC.dll','32');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RebootWindows(false);
end.
Будет выполнена перезагрузка компьютера.