Устанавливаются автоматически программы

begin
ShowMessage('Внимание! Перед выполнением скрипта AVZ автоматически закроет все сетевые подключения.' + #13#10 + 'После перезагрузки компьютера подключения к сети будут восстановлены в автоматическом режиме.');
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
if not IsWOW64
 then
  begin
   SearchRootkit(true, true);
   SetAVZGuardStatus(True);
  end;
 TerminateProcessByName('c:\programdata\bamcof\bamcof.exe');
 SetServiceStart('Bamcof', 4);
 QuarantineFile('C:\Users\Хакер\appdata\local\smartweb\__u.exe','');
 QuarantineFile('C:\Users\Хакер\appdata\local\smartweb\swhk.dll','');
 QuarantineFile('C:\Users\Хакер\AppData\Roaming\WindowsUpdater\Updater.exe','');
 QuarantineFile('C:\Users\Хакер\AppData\Local\Hostinstaller\513067230_installcube.exe','');
 QuarantineFile('C:\Program Files\GoSave\qxqxTI86brELq6.dll','');
 QuarantineFile('C:\Users\Хакер\AppData\Local\mmLtRvZdtxZiNb\GdJAaHQrkPduZ1.bat','');
 QuarantineFile('C:\Users\Хакер\AppData\Local\VbRnUtqA\PnbsETvNn0.bat','');
 QuarantineFile('C:\Users\Хакер\AppData\Local\coprofit\config.json','');
 QuarantineFile('C:\Users\Хакер\AppData\Local\coprofit\coprofit_stb.exe','');
 QuarantineFile('C:\Users\Хакер\AppData\Roaming\MyDesktop\qweeeCL.exe','');
 QuarantineFile('C:\Users\Хакер\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll','');
 QuarantineFile('C:\Users\Хакер\AppData\Local\SmartWeb\SmartWebHelper.exe','');
 QuarantineFile('C:\Windows\system32\XP-37BBAB17.EXE','');
 QuarantineFile('C:\Program Files\Sound+\Sound+.exe','');
 QuarantineFile('C:\Windows\system32\drivers\swsedrvr_vt_1_10_0_25.sys','');
 QuarantineFile('C:\ProgramData\Tmp0x0x\ProtectWindowsManager.exe','');
 QuarantineFile('C:\Program Files\SFK\SSFK.exe','');
 QuarantineFile('C:\Program Files\DC8139B9-1450112062-F968-C200-001D60D7683C\knssC3EF.tmpfs','');
 QuarantineFile('C:\Program Files\DC8139B9-1450112062-F968-C200-001D60D7683C\jnshDC64.tmp','');
 QuarantineFile('C:\Users\Хакер\AppData\Local\Mediafan.exe','');
 QuarantineFile('C:\Users\Хакер\AppData\Local\DC8139B9-1450129945-F968-C200-001D60D7683C\qnsx54A7.tmp','');
 QuarantineFile('C:\Program Files\Dripkick\Dripkick.exe','');
 QuarantineFile('C:\ProgramData\ApplicationHosting\ApplicationHosting.exe','');
 QuarantineFile('c:\programdata\bamcof\bamcof.exe','');
 DeleteFile('c:\programdata\bamcof\bamcof.exe','32');
 DeleteFile('C:\ProgramData\ApplicationHosting\ApplicationHosting.exe','32');
 DeleteFile('C:\Program Files\Dripkick\Dripkick.exe','32');
 DeleteFile('C:\Users\Хакер\AppData\Local\DC8139B9-1450129945-F968-C200-001D60D7683C\qnsx54A7.tmp','32');
 DeleteFile('C:\Program Files\DC8139B9-1450112062-F968-C200-001D60D7683C\jnshDC64.tmp','32');
 DeleteFile('C:\Program Files\DC8139B9-1450112062-F968-C200-001D60D7683C\knssC3EF.tmpfs','32');
 DeleteFile('C:\Program Files\SFK\SSFK.exe','32');
 DeleteFile('C:\ProgramData\Tmp0x0x\ProtectWindowsManager.exe','32');
 DeleteFile('C:\Windows\system32\drivers\swsedrvr_vt_1_10_0_25.sys','32');
 DeleteFile('C:\Program Files\Sound+\Sound+.exe','32');
 DeleteFile('C:\Windows\system32\XP-37BBAB17.EXE','32');
 DeleteFile('C:\Users\Хакер\AppData\Local\SmartWeb\SmartWebHelper.exe','32');
 DeleteFile('C:\Users\Хакер\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll','32');
 DeleteFile('C:\Users\Хакер\AppData\Roaming\MyDesktop\qweeeCL.exe','32');
 DeleteFile('C:\Users\Хакер\AppData\Local\coprofit\coprofit_stb.exe','32');
 DeleteFile('C:\Users\Хакер\AppData\Local\coprofit\config.json','32');
 DeleteFile('C:\Program Files\baidu\ppt.exe','32');
 DeleteFile('C:\ProgramData\itdefender.exe','32');
 DeleteFile('C:\Users\Хакер\AppData\Local\VbRnUtqA\PnbsETvNn0.bat','32');
 DeleteFile('C:\Users\Хакер\AppData\Local\mmLtRvZdtxZiNb\GdJAaHQrkPduZ1.bat','32');
 DeleteFile('C:\Program Files\GoSave\qxqxTI86brELq6.dll','32');
 DeleteFile('C:\Users\Хакер\AppData\Local\Hostinstaller\513067230_installcube.exe','32');
 DeleteFile('C:\Windows\system32\Tasks\Soft installer','32');
 DeleteFile('C:\Windows\system32\Tasks\SmartWeb Upgrade Trigger Task','32');
 DeleteFile('C:\Windows\system32\Tasks\WindowsUpdater4','32');
 DeleteFile('C:\Users\Хакер\AppData\Roaming\WindowsUpdater\Updater.exe','32');
 DeleteFile('C:\Users\Хакер\appdata\local\smartweb\swhk.dll','32');
 DeleteFile('C:\Users\Хакер\appdata\local\smartweb\__u.exe','32');
 DelBHO('{dad636be-4cd3-4456-b889-b4d4a1367146}');
 DeleteService('swsedrvr_vt_1_10_0_25');
 DeleteService('WindowsMangerProtect');
 DeleteService('SSFK');
 DeleteService('rufyximi');
 DeleteService('rizyqibe');
 DeleteService('posuownooadoonloader');
 DeleteService('hidekoqe');
 DeleteService('Dripkick');
 DeleteService('ApplicationHosting');
 DeleteService('Bamcof');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','XP-37BBAB17');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','Sound+');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','SmartWeb');
 RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','BackgroundContainer');
 RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','coprofit');
 RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','apphide');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Internet Security','command');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RebootWindows(false);
end.

begin
CreateQurantineArchive('c:\quarantine.zip');
end.