begin
ShowMessage('Внимание! Перед выполнением скрипта AVZ автоматически закроет все сетевые подключения.'+#13#10+'После перезагрузки компьютера подключения к сети будут восстановлены в автоматическом режиме.');
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
TerminateProcessByName('C:\Windows\Temp\gB71F.tmp.exe');
TerminateProcessByName('C:\Windows\Temp\g5D21.tmp.exe');
QuarantineFile('C:\Users\C559~1\AppData\Roaming\SETUPS~1\python\pythonw.exe','');
QuarantineFile('C:\Users\C559~1\AppData\Roaming\SETUPS~1\ml.py','');
QuarantineFile('C:\Users\C559~1\AppData\Roaming\setupsk\python\pythonw.exe','');
QuarantineFile('C:\Users\C559~1\AppData\Roaming\setupsk\ml.py','');
QuarantineFile('C:\Users\Юля\AppData\Roaming\Adobe\Manager.exe','');
QuarantineFile('C:\ProgramData\RegisterObject\RegisterObject.exe','');
QuarantineFile('C:\ProgramData\302G455G644r994\302G455G644r994.dll','');
QuarantineFile('C:\Users\Юля\AppData\Roaming\Browsers\exe.resworb.bat','');
QuarantineFile('C:\Users\Юля\AppData\Roaming\Browsers\exe.rehcnualebivsusa.bat','');
QuarantineFile('C:\WINDOWS\TEMP\g5D21.tmp.exe','');
QuarantineFile('C:\Windows\Temp\gB71F.tmp.exe','');
QuarantineFile('C:\Windows\Temp\g5D21.tmp.exe','');
QuarantineFile('C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\АsusVibeLaunchеr.lnk','');
QuarantineFile('C:\Users\Юля\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Yаndеx.lnk ','');
QuarantineFile('C:\Users\Юля\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mail.Ru.lnk','');
QuarantineFileF('C:\Users\C559~1\AppData\Roaming\SETUPS~1', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js*, *.tmp*', true, '', 0 ,0);
QuarantineFileF('C:\Users\C559~1\AppData\Roaming\setupsk', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js*, *.tmp*', true, '', 0 ,0);
QuarantineFileF('C:\ProgramData\RegisterObject', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js*, *.tmp*', true, '', 0 ,0);
QuarantineFileF('C:\ProgramData\302G455G644r994', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js*, *.tmp*', true, '', 0 ,0);
QuarantineFileF('C:\Users\Юля\AppData\Roaming\Browsers', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js*, *.tmp*', true, '', 0 ,0);
DeleteFile('C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\АsusVibeLaunchеr.lnk','32');
DeleteFile('C:\Users\Юля\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Yаndеx.lnk ','32');
DeleteFile('C:\Users\Юля\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mail.Ru.lnk','32');
DeleteFile('C:\Windows\Temp\g5D21.tmp.exe','32');
DeleteFile('C:\Windows\Temp\gB71F.tmp.exe','32');
DeleteFile('C:\WINDOWS\TEMP\g5D21.tmp.exe','32');
DeleteFile('C:\Users\Юля\AppData\Roaming\Browsers\exe.rehcnualebivsusa.bat','32');
DeleteFile('C:\Users\Юля\AppData\Roaming\Browsers\exe.resworb.bat','32');
DeleteFile('C:\ProgramData\302G455G644r994\302G455G644r994.dll','32');
DeleteFile('C:\ProgramData\RegisterObject\RegisterObject.exe','32');
DeleteFile('C:\Users\Юля\AppData\Roaming\Adobe\Manager.exe','32');
DeleteFile('C:\Users\C559~1\AppData\Roaming\setupsk\ml.py','32');
DeleteFile('C:\Users\C559~1\AppData\Roaming\setupsk\python\pythonw.exe','32');
DeleteFile('C:\Users\C559~1\AppData\Roaming\SETUPS~1\ml.py','32');
DeleteFile('C:\Users\C559~1\AppData\Roaming\SETUPS~1\python\pythonw.exe','32');
ExecuteFile('schtasks.exe', '/delete /TN "mrupdsrv" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "302G455G644r994" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "ravcpl64" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "RegisterObject" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "Manager" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "setupsk" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "setupsk_upd" /F', 0, 15000, true);
DeleteFileMask('C:\Users\C559~1\AppData\Roaming\SETUPS~1','*', true);
DeleteFileMask('C:\Users\C559~1\AppData\Roaming\setupsk','*', true);
DeleteFileMask('C:\ProgramData\RegisterObject','*', true);
DeleteFileMask('C:\ProgramData\302G455G644r994','*', true);
DeleteFileMask('C:\Users\Юля\AppData\Roaming\Browsers','*', true);
DeleteDirectory('C:\Users\C559~1\AppData\Roaming\SETUPS~1');
DeleteDirectory('C:\Users\C559~1\AppData\Roaming\setupsk');
DeleteDirectory('C:\ProgramData\RegisterObject');
DeleteDirectory('C:\ProgramData\302G455G644r994');
DeleteDirectory('C:\Users\Юля\AppData\Roaming\Browsers');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\RunOnce','ULIA');
ExecuteSysClean;
ExecuteWizard('SCU',2,2,true);
CreateQurantineArchive(GetAVZDirectory+'quarantine.zip');
RebootWindows(true);
end.