begin
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
QuarantineFileF('c:\programdata\microsoft\macromed\flash player\9351fb06-7bac-44b0-8536-b458559e26e4', '*', true, '', 0 ,0);
QuarantineFileF('c:\programdata\krb updater utility', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.ps1, *.js*, *.tmp*', true, '', 0 ,0);
QuarantineFileF('c:\users\admin\appdata\local\microsoft\extensions', '*', true, '', 0 ,0);
QuarantineFile('C:\ProgramData\Microsoft\Macromed\Flash Player\9351FB06-7BAC-44B0-8536-B458559E26E4\C033F8F6-5C83-4E9F-B9A4-8756CAD564E4.exe', '');
QuarantineFile('C:\ProgramData\KRB Updater Utility\krbupdater.exe', '');
QuarantineFile('C:\Users\admin\AppData\Local\Microsoft\Extensions\extsetup.exe', '');
ExecuteFile('schtasks.exe', '/delete /TN "Microsoft\extsetupSB" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "Microsoft\KRBUUS\KRB Updater Utility Service" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "Microsoft\Windows\A9351FB06-7BAC-44B0-8536-B458559E26E4" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "Microsoft\Windows\extsetupSB" /F', 0, 15000, true);
DeleteFile('C:\ProgramData\Microsoft\Macromed\Flash Player\9351FB06-7BAC-44B0-8536-B458559E26E4\C033F8F6-5C83-4E9F-B9A4-8756CAD564E4.exe', '32');
DeleteFile('C:\ProgramData\KRB Updater Utility\krbupdater.exe', '32');
DeleteFile('C:\Users\admin\AppData\Local\Microsoft\Extensions\extsetup.exe', '32');
DeleteFileMask('c:\programdata\krb updater utility', '*', true);
DeleteFileMask('c:\users\admin\appdata\local\microsoft\extensions', '*', true);
DeleteDirectory('c:\programdata\krb updater utility');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run','9351FB06-7BAC-44B0-8536-B458559E26E4');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run','KRB Updater Utility');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run','extsetupSB');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run','9351FB06-7BAC-44B0-8536-B458559E26E4');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run','KRB Updater Utility');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run','extsetupSB');
ExecuteSysClean;
ExecuteWizard('SCU', 2, 3, true);
CreateQurantineArchive(GetAVZDirectory + 'quarantine.zip');
RebootWindows(true);
end.