begin
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
if not IsWOW64
then
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
end;
QuarantineFile('C:\Program Files (x86)\Zaxar\ZaxarLoader.exe', '');
QuarantineFile('C:\Windows\system32\drivers\pfnfd_1_10_0_9.sys', '');
QuarantineFile('c:\program files (x86)\internet explorer\iexplore.bat','');
QuarantineFile('c:\program files (x86)\mozilla firefox\firefox.bat','');
QuarantineFile('C:\Program Files (x86)\Internet Explorer\iexplore.bat','');
QuarantineFile('C:\Users\Николай\AppData\Local\Microsoft\Start Menu\Вoйти в Интeрнeт.exe','');
DeleteFile('C:\Users\Николай\AppData\Local\Microsoft\Start Menu\Вoйти в Интeрнeт.exe','');
DeleteFile('c:\program files (x86)\internet explorer\iexplore.bat','');
DeleteFile('c:\program files (x86)\mozilla firefox\firefox.bat','');
DeleteFile('C:\Program Files (x86)\Internet Explorer\iexplore.bat','');
DeleteFile('C:\Windows\system32\drivers\pfnfd_1_10_0_9.sys', '32');
DeleteFile('C:\Program Files (x86)\Zaxar\ZaxarLoader.exe', '32');
DeleteService('pfnfd_1_10_0_9');
RegKeyParamDel('HKEY_CURRENT_USER', 'Software\Microsoft\Windows\CurrentVersion\Run', 'mgtlqnuhnh');
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'Software\Microsoft\Windows\CurrentVersion\Run', 'ZaxarLoader');
BC_ImportAll;
ExecuteWizard('SCU', 2, 3, true);
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.