begin
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
SearchRootkit(true, true);
SetAVZGuardStatus(True);
ClearQuarantineEx(true);
QuarantineFile('C:\Users\Серго\AppData\Local\Pupdbrowser\Pupdbrowser.exe', '');
QuarantineFile('C:\Users\Серго\AppData\Roaming\nssm.exe', '');
DeleteSchedulerTask('Pupdbrowser');
DeleteFile('C:\Users\Серго\AppData\Local\Pupdbrowser\Pupdbrowser.exe', '32');
DeleteFile('C:\Users\Серго\AppData\Roaming\nssm.exe', '32');
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\start', 'command', '32');
RegKeyDel('HKEY_LOCAL_MACHINE', 'SYSTEM\CurrentControlSet\Services\Eventlog\Application\NSSM', '32');
BC_ImportALL;
ExecuteSysClean;
ExecuteWizard('SCU', 2, 3, true);
BC_Activate;
RebootWindows(true);
end.
