Китайский антивирус - Удаление вирусов - Ответ 9213914

begin
ShowMessage('Внимание! Перед выполнением скрипта AVZ автоматически закроет все сетевые подключения.' + #13#10 + 'После перезагрузки компьютера подключения к сети будут восстановлены в автоматическом режиме.');
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
if not IsWOW64
 then
  begin
   SearchRootkit(true, true);
   SetAVZGuardStatus(True);
  end;
 TerminateProcessByName('C:\Program Files\Baidu\BaiduPinyin\3.3.2.1028\baidupinyin.exe');
 TerminateProcessByName('c:\programdata\cloudprinter\cloudprinter.exe');
 SetServiceStart('CloudPrinter', 4);
 QuarantineFile('C:\Users\Секретарь\ReportSender\ReportSender.exe','');
 QuarantineFile('C:\Users\Секретарь\AppData\Roaming\FreeVPN\FreeVPN.exe','');
 QuarantineFile('C:\Users\Секретарь\AppData\Local\J-how.exe','');
 QuarantineFile('c:\programdata\cloudprinter\cloudprinter.exe','');
 DeleteFile('c:\program files\baidu\baidupinyin\3.3.2.1028\baidupinyin.exe','32');
 DeleteFile('C:\Program Files\Baidu\BaiduPinyin\3.3.2.1028\baidupinyin.exe','32');
 DeleteFile('c:\programdata\cloudprinter\cloudprinter.exe','32');
 DeleteFile('C:\Program Files\Baidu\BaiduPinyin\3.3.2.1028\BasicNetUtils.dll','32');
 DeleteFile('C:\Program Files\Baidu\BaiduPinyin\3.3.2.1028\bdaucommon.dll','32');
 DeleteFile('C:\Program Files\Baidu\BaiduPinyin\3.3.2.1028\bdcloud.dll','32');
 DeleteFile('C:\Program Files\Baidu\BaiduPinyin\3.3.2.1028\bdnetdll.dll','32');
 DeleteFile('C:\Program Files\Baidu\BaiduPinyin\3.3.2.1028\clientstat.dll','32');
 DeleteFile('C:\Program Files\Baidu\BaiduPinyin\3.3.2.1028\Configure.dll','32');
 DeleteFile('C:\Program Files\Baidu\BaiduPinyin\3.3.2.1028\Converter.DLL','32');
 DeleteFile('C:\Program Files\Baidu\BaiduPinyin\3.3.2.1028\imezlib.dll','32');
 DeleteFile('C:\Program Files\Baidu\BaiduPinyin\3.3.2.1028\libcurl.dll','32');
 DeleteFile('C:\Program Files\Baidu\BaiduPinyin\3.3.2.1028\LIBEAY32.dll','32');
 DeleteFile('C:\Program Files\Baidu\BaiduPinyin\3.3.2.1028\loginengine.dll','32');
 DeleteFile('C:\Program Files\Baidu\BaiduPinyin\3.3.2.1028\microkernel.dll','32');
 DeleteFile('C:\Program Files\Baidu\BaiduPinyin\3.3.2.1028\Protocol.dll','32');
 DeleteFile('C:\Program Files\Baidu\BaiduPinyin\3.3.2.1028\Report.dll','32');
 DeleteFile('C:\Program Files\Baidu\BaiduPinyin\3.3.2.1028\SSLEAY32.dll','32');
 DeleteFile('C:\Program Files\Baidu\BaiduPinyin\3.3.2.1028\WinMsgCenter.dll','32');
 DeleteFile('C:\Program Files\Baidu\BaiduPinyinUpdate\bdupdate.exe','32');
 DeleteFile('C:\Users\Секретарь\AppData\Local\J-how.exe','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.5.17490.219\QQPCRTP.exe','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMGR\QQRepair194e','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMGR\QQRepairFixSVC','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.5.17490.219\QMUdisk.sys','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.5.17490.219\QQSysMon.sys','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMGR\SRepairDrv','32');
 DeleteFile('C:\Windows\system32\Drivers\TFsFlt.sys','32');
 DeleteFile('C:\Windows\system32\DRIVERS\TSDefenseBt.sys','32');
 DeleteFile('C:\Windows\system32\drivers\TsFltMgr.sys','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.5.17490.219\TsNetHlp.sys','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.5.17490.219\QQPCTRAY.EXE','32');
 DeleteFile('C:\Users\Секретарь\AppData\Local\Amigo\Application\vk.exe','32');
 DeleteFile('C:\Users\Секретарь\AppData\Roaming\FreeVPN\FreeVPN.exe','32');
 DeleteFile('C:\Windows\system32\Tasks\Microsoft\Windows\Multimedia\FreeVPN','32');
 DeleteFile('C:\Users\Секретарь\ReportSender\ReportSender.exe','32');
 DeleteFile('C:\Windows\system32\Tasks\Microsoft\Windows\Multimedia\ReportSender','32');
 DeleteService('CloudPrinter');
 DeleteService('downlzhiup');
 DeleteService('BaiduPinyinUpdater');
 DeleteService('QQPCRTP');
 DeleteService('QQRepair194e');
 DeleteService('QQRepairFixSVC');
 DeleteService('tsnethlp');
 DeleteService('TsFltMgr');
 DeleteService('TSDefenseBt');
 DeleteService('TFsFlt');
 DeleteService('SRepairDrv');
 DeleteService('QQSysMon');
 DeleteService('QMUdisk');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','QQPCTray');
 BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RebootWindows(false);
end.

begin
CreateQurantineArchive('c:\quarantine.zip');
end.