После запуска ОС автоматически запускается Goole Chrome с сайтом http://uraltrack.net/

begin
ShowMessage('Внимание! Перед выполнением скрипта AVZ автоматически закроет все сетевые подключения.' + #13#10 + 'После перезагрузки компьютера подключения к сети будут восстановлены в автоматическом режиме.');
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
if not IsWOW64
 then
  begin
   SearchRootkit(true, true);
   SetAVZGuardStatus(True);
  end;
 QuarantineFile('C:\Windows\Microsoft.NET\Framework\Framework.lnk','');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','Framework','x32');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','Windows','x32');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','Fonfig','x32');
 DeleteFile('C:\Windows\Microsoft.NET\Framework\Framework.lnk','32');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RebootWindows(false);
end.

begin
DeleteFile(GetAVZDirectory+'quarantine.7z');
ExecuteFile(GetAVZDirectory+'7za.exe', 'a -mx9 -pvirus quarantine ./Quarantine/', 1, 0, true);
end.

Start::
CreateRestorePoint:
HKLM\...\RunOnce: [wextract_cleanup0] => 0
HKLM\...\RunOnce: [{f0080ca2-80ae-4958-b6eb-e8fa916d744a}] => 0
HKLM\...\RunOnce: [{d2c8df0e-f15d-4426-9e51-f13f329f9cb4}] => 0
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
FF Homepage: Mozilla\Firefox\Profiles\ob7w6okq.default -> hxxp://uraltrack.net
Task: {18E6D428-D26C-4169-BEDF-3B5BDDC952F6} - \Microsoft\Windows\Application Experience\ProgramDataUpdater -> No File <==== ATTENTION
Task: {1EC9510D-A439-4950-9399-B6399EDF9EA7} - \Microsoft\Windows\Autochk\Proxy -> No File <==== ATTENTION
Task: {50FB5A03-0E1E-48DE-B8A1-BEE9D7D2CD0F} - \Microsoft\Windows\User Profile Service\HiveUploadTask -> No File <==== ATTENTION
Task: {9EFACBE6-A797-4905-A0C6-014CD3000DBB} - \Microsoft\Windows\Customer Experience Improvement Program\KernelCeipTask -> No File <==== ATTENTION
Task: {A316E645-1C56-45A6-BD6A-7DCA79778090} - \Microsoft\Windows\Customer Experience Improvement Program\UsbCeip -> No File <==== ATTENTION
Task: {A6394592-54CE-4E93-8D64-1A068F462632} - \Microsoft\Windows\Customer Experience Improvement Program\Consolidator -> No File <==== ATTENTION
Task: {D21F6024-191F-4454-BBBC-09A650DA2549} - \Microsoft\Windows\Application Experience\AitAgent -> No File <==== ATTENTION
Task: {DE8699D2-8A05-42F7-8A85-5162AF47D26A} - \Microsoft\Windows\Windows Error Reporting\QueueReporting -> No File <==== ATTENTION
Reboot:
End::