begin
QuarantineFile('C:\ProgramData\ctfnnewzeiqi\qvrzqtbewhwa.exe', '');
QuarantineFile('C:\Users\ybrjk\AppData\Roaming\8dxgi.drv', '');
DeleteFile('C:\Users\ybrjk\AppData\Roaming\8dxgi.drv', '32');
DeleteFile('C:\ProgramData\ctfnnewzeiqi\qvrzqtbewhwa.exe', '64');
DeleteService('SZQZOASU');
ExecuteSysClean;
ExecuteWizard('TSW', 2, 3, true);
RebootWindows(true);
end.begin
DeleteFile(GetAVZDirectory+'quarantine.7z');
ExecuteFile(GetAVZDirectory+'7za.exe', 'a -mx9 -pmalware quarantine .\Quarantine\*', 1, 300000, false);
end.O4 - HKCU\..\Run: [utweb] = "C:\Users\ybrjk\AppData\Roaming\uTorrent Web\utweb.exe" /MINIMIZED (file missing)
O4 - HKLM\..\Run: [Driver Updater] = "C:\Program Files\Avanquest\Driver Updater\application\9.0.44065.1088\Driver Updater.exe" --initial-window-state=minimized (file missing)
O7 - Policy: (UAC) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System: [ConsentPromptBehaviorAdmin] = 0
O7 - Policy: (UAC) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System: [PromptOnSecureDesktop] = 0
O18 - HKLM\Software\Classes\Protocols\Filter\application/octet-stream: [CLSID] = {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - (no file)
O18 - HKLM\Software\Classes\Protocols\Filter\application/x-complus: [CLSID] = {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - (no file)
O18 - HKLM\Software\Classes\Protocols\Filter\application/x-msdownload: [CLSID] = {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - (no file)
O20 - HKLM\..\Winlogon\Notify\LBTWlgn: [DllName] = "c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (file missing)
O22 - Task: (damaged) HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleSystem\GoogleUpdater (empty)
O22 - Tasks: BLACK FRIDAY Task (One-Time) - C:\Program Files (x86)\IObit\Driver Booster\Pub\bf.exe /bf (file missing)
O22 - Tasks: Christmas Task (One-Time) - C:\Program Files (x86)\IObit\Driver Booster\Pub\xmas.exe /xr (file missing)
O22 - Tasks: IObit DB12Sale2024 (One-Time) - C:\Program Files (x86)\IObit\Driver Booster\Pub\dbrpop.exe /rpop (file missing)
O22 - Tasks: IObit DB2024B5 (One-Time) - C:\Program Files (x86)\IObit\Driver Booster\Pub\dbrpop.exe /rpop (file missing)
O22 - Tasks: IObit ET2025Sale (One-time) - C:\Program Files (x86)\IObit\Driver Booster\Pub\eten.exe /rpop (file missing)
O22 - Tasks: IObit SumSale2024 (One-Time) - C:\Program Files (x86)\IObit\Driver Booster\Pub\sumsale.exe /rpop (file missing)
O22 - Tasks: Opera scheduled Autoupdate 1688229722 - C:\Users\ybrjk\AppData\Local\Programs\Opera\launcher.exe --scheduledautoupdate $(Arg0) (file missing)
O23 - Service S2: McAfee WebAdvisor - C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe (file missing)
O23 - Service S2: SZQZOASU - C:\ProgramData\ctfnnewzeiqi\qvrzqtbewhwa.exe (not signed - Microsoft Corporation - error getting hash)
O23 - Service S3: Active Anticheat Error Port v1.0 - (AAErrorPort) - C:\Users\ybrjk\AppData\Local\Temp\ActiveAnticheat\aaerrport.exe (file missing)
O23 - Service S3: asrrealtimesrv - C:\Program Files (x86)\Advanced System Repair Pro 2.0.0.6.0\asrrealtimesrv.exe Files (x86)\Advanced System Repair Pro 2.0.0.6.0\asrrealtimesrv.exe (file missing)
O26 - Office Addin: HKLM\..\NativeShim - (Inquire) -> (no file)malware
сделано
begin
DeleteFile('C:\ProgramData\ctfnnewzeiqi\qvrzqtbewhwa.exe', '64');
DeleteFile('C:\Users\ybrjk\AppData\Local\Temp\ActiveAnticheat\aaerrport.exe', '64');
DeleteFile('C:\Program Files (x86)\Microsoft\Edge\Application\89.0.774.68\msedge.dll', '64');
DeleteFile('C:\Windows\System32\Drivers\UMDF\UsbccidDriver.dll', '64');
DeleteService('AAErrorPort');
DeleteService('Driver Updater Service');
DeleteService('SZQZOASU');
ExecuteSysClean;
ExecuteWizard('TSW', 2, 3, true);
RebootWindows(true);
end.вот сделал как вы просили.