Код:
begin
TerminateProcessByName('c:\program files (x86)\crossbrowse\crossbrowse\application\crossbrowse.exe');
TerminateProcessByName('c:\program files (x86)\28ccc0de-1441086277-e111-bfcf-0013206ecd20\hnsacc65.tmp');
TerminateProcessByName('c:\program files (x86)\28ccc0de-1441086277-e111-bfcf-0013206ecd20\jnsab6c1.tmp');
TerminateProcessByName('c:\program files (x86)\28ccc0de-1441086277-e111-bfcf-0013206ecd20\knsp9d80.tmpfs');
TerminateProcessByName('c:\iqiyi video\common\qykernel.exe');
TerminateProcessByName('c:\users\stepan\appdata\local\28ccc0de-1441097121-e111-bfcf-0013206ecd20\snsv409b.tmp');
StopService('fisulyzo');
StopService('gopibeko');
StopService('jimocoso');
StopService('totyseku');
QuarantineFileF('c:\program files (x86)\crossbrowse', '*', true, '', 0 , 0);
QuarantineFileF('c:\iqiyi video', '*', true, '', 0 , 0);
QuarantineFileF('C:\Program Files (x86)\globalUpdate', '*', true, '', 0 , 0);
QuarantineFileF('C:\Program Files (x86)\AnyProtectEx', '*', true, '', 0 , 0);
QuarantineFileF('C:\Users\Stepan\AppData\Local\SmartWeb', '*', true, '', 0 , 0);
QuarantineFileF('C:\Program Files (x86)\WordSurfer', '*', true, '', 0 , 0);
QuarantineFile('c:\program files (x86)\crossbrowse\crossbrowse\application\crossbrowse.exe', '');
QuarantineFile('c:\program files (x86)\28ccc0de-1441086277-e111-bfcf-0013206ecd20\hnsacc65.tmp', '');
QuarantineFile('c:\program files (x86)\28ccc0de-1441086277-e111-bfcf-0013206ecd20\jnsab6c1.tmp', '');
QuarantineFile('c:\program files (x86)\28ccc0de-1441086277-e111-bfcf-0013206ecd20\knsp9d80.tmpfs', '');
QuarantineFile('c:\iqiyi video\common\qykernel.exe', '');
QuarantineFile('c:\users\stepan\appdata\local\28ccc0de-1441097121-e111-bfcf-0013206ecd20\snsv409b.tmp', '');
QuarantineFile('C:\IQIYI Video\Common\Accelerator\browserhook.dll', '');
QuarantineFile('C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\chrome_elf.dll', '');
QuarantineFile('C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\chrome_child.dll', '');
QuarantineFile('C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\libglesv2.dll', '');
QuarantineFile('C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\libegl.dll', '');
QuarantineFile('C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\chrome.dll', '');
QuarantineFile('C:\IQIYI Video\Common\HCDNClientNet.dll', '');
QuarantineFile('C:\IQIYI Video\Common\Accelerator\browseradapter.dll', '');
QuarantineFile('C:\IQIYI Video\Common\UI.dll', '');
QuarantineFile('C:\IQIYI Video\Common\PopupWndProxy.dll', '');
QuarantineFile('C:\IQIYI Video\Common\QuiLib.dll', '');
QuarantineFile('C:\IQIYI Video\Common\AppNet.dll', '');
QuarantineFile('C:\IQIYI Video\Common\Accelerator\VideoInfoExtract.dll', '');
QuarantineFile('C:\IQIYI Video\Common\Accelerator\StrikeWing.dll', '');
QuarantineFile('C:\IQIYI Video\Common\fp2xh.dll', '');
QuarantineFile('C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe', '');
QuarantineFile('C:\Users\Stepan\AppData\Local\Kometa\Application\kometa.bat', '');
QuarantineFile('C:\IQIYI Video\Common\Accelerator\IEHelper.dll', '');
QuarantineFile('C:\Users\Stepan\AppData\Roaming\6rqnVk6gTN5Ku.exe', '');
QuarantineFile('C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe', '');
QuarantineFile('C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\utility.exe', '');
QuarantineFile('C:\Users\Stepan\AppData\Roaming\ZZSFEFOHFwciWG4Dhdz8WSTdc.exe', '');
QuarantineFile('C:\Users\Stepan\AppData\Local\SmartWeb\SmartWebHelper.exe', '');
QuarantineFile('C:\Program Files (x86)\WordSurfer_1.10.0.19\Update\WordSurferAutoUpdateClient.exe', '');
QuarantineFile('C:\Users\Stepan\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MCPHJ5X7\DivXInstaller.exe', '');
QuarantineFile('C:\Users\Stepan\appdata\local\smartweb\__u.exe', '');
DeleteFile('C:\Windows\Tasks\6rqnVk6gTN5Ku.job', '64');
DeleteFile('C:\Windows\Tasks\APSnotifierPP1.job', '64');
DeleteFile('C:\Windows\Tasks\APSnotifierPP2.job', '64');
DeleteFile('C:\Windows\Tasks\APSnotifierPP3.job', '64');
DeleteFile('C:\Windows\Tasks\Crossbrowse.job', '64');
DeleteFile('C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job', '64');
DeleteFile('C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job', '64');
DeleteFile('c:\program files (x86)\crossbrowse\crossbrowse\application\crossbrowse.exe', '32');
DeleteFile('c:\program files (x86)\28ccc0de-1441086277-e111-bfcf-0013206ecd20\hnsacc65.tmp', '32');
DeleteFile('c:\program files (x86)\28ccc0de-1441086277-e111-bfcf-0013206ecd20\jnsab6c1.tmp', '32');
DeleteFile('c:\program files (x86)\28ccc0de-1441086277-e111-bfcf-0013206ecd20\knsp9d80.tmpfs', '32');
DeleteFile('c:\iqiyi video\common\qykernel.exe', '32');
DeleteFile('c:\users\stepan\appdata\local\28ccc0de-1441097121-e111-bfcf-0013206ecd20\snsv409b.tmp', '32');
DeleteFile('C:\IQIYI Video\Common\Accelerator\browserhook.dll', '32');
DeleteFile('C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\chrome_elf.dll', '32');
DeleteFile('C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\chrome_child.dll', '32');
DeleteFile('C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\libglesv2.dll', '32');
DeleteFile('C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\libegl.dll', '32');
DeleteFile('C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\chrome.dll', '32');
DeleteFile('C:\IQIYI Video\Common\HCDNClientNet.dll', '32');
DeleteFile('C:\IQIYI Video\Common\Accelerator\browseradapter.dll', '32');
DeleteFile('C:\IQIYI Video\Common\UI.dll', '32');
DeleteFile('C:\IQIYI Video\Common\PopupWndProxy.dll', '32');
DeleteFile('C:\IQIYI Video\Common\QuiLib.dll', '32');
DeleteFile('C:\IQIYI Video\Common\AppNet.dll', '32');
DeleteFile('C:\IQIYI Video\Common\Accelerator\VideoInfoExtract.dll', '32');
DeleteFile('C:\IQIYI Video\Common\Accelerator\StrikeWing.dll', '32');
DeleteFile('C:\IQIYI Video\Common\fp2xh.dll', '32');
DeleteFile('C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe', '32');
DeleteFile('C:\Users\Stepan\AppData\Local\Kometa\Application\kometa.bat', '32');
DeleteFile('C:\IQIYI Video\Common\Accelerator\IEHelper.dll', '32');
DeleteFile('C:\Users\Stepan\AppData\Roaming\6rqnVk6gTN5Ku.exe', '32');
DeleteFile('C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe', '32');
DeleteFile('C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\utility.exe', '32');
DeleteFile('C:\Users\Stepan\AppData\Roaming\ZZSFEFOHFwciWG4Dhdz8WSTdc.exe', '32');
DeleteFile('C:\Users\Stepan\AppData\Local\SmartWeb\SmartWebHelper.exe', '32');
DeleteFile('C:\Program Files (x86)\WordSurfer_1.10.0.19\Update\WordSurferAutoUpdateClient.exe', '32');
DeleteFile('C:\Users\Stepan\appdata\local\smartweb\__u.exe', '32');
DeleteService('fisulyzo');
DeleteService('gopibeko');
DeleteService('jimocoso');
DeleteService('totyseku');
DeleteService('globalUpdate');
DeleteService('globalUpdatem');
DeleteFileMask('c:\program files (x86)\crossbrowse', '*', true);
DeleteFileMask('c:\iqiyi video', '*', true);
DeleteFileMask('C:\Program Files (x86)\globalUpdate', '*', true);
DeleteFileMask('C:\Program Files (x86)\AnyProtectEx', '*', true);
DeleteFileMask('C:\Users\Stepan\AppData\Local\SmartWeb', '*', true);
DeleteFileMask('C:\Program Files (x86)\WordSurfer', '*', true);
DeleteDirectory('c:\program files (x86)\crossbrowse');
DeleteDirectory('c:\iqiyi video');
DeleteDirectory('C:\Program Files (x86)\globalUpdate');
DeleteDirectory('C:\Program Files (x86)\AnyProtectEx');
DeleteDirectory('C:\Users\Stepan\AppData\Local\SmartWeb');
DeleteDirectory('C:\Program Files (x86)\WordSurfer');
DelBHO('{FB4F6285-4C32-49F2-950F-A5998F9CEC6C}');
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "6rqnVk6gTN5Ku" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "APSnotifierPP1" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "APSnotifierPP2" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "APSnotifierPP3" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "globalUpdateUpdateTaskMachineCore" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "globalUpdateUpdateTaskMachineUA" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "SmartWeb Upgrade Trigger Task" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "WordSurfer Auto Updater 1.10.0.19 Core" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "WordSurfer Auto Updater 1.10.0.19 Pending Update" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "ZZSFEFOHFwciWG4Dhdz8WSTdc" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "{D2EA275B-BFFB-480A-93F2-5BF78D9543D8}" /F', 0, 15000, true);
RegKeyParamDel('HKEY_CURRENT_USER', 'Software\Microsoft\Windows\CurrentVersion\Run', 'HCDNClient');
RegKeyParamDel('HKEY_CURRENT_USER', 'Software\Microsoft\Windows\CurrentVersion\Run', 'GoogleChromeAutoLaunch_6D40FE679A3AF4C5BBBFEB85F4685895');
ExecuteSysClean;
ExecuteRepair(2);
ExecuteRepair(4);
ExecuteRepair(3);
ExecuteWizard('SCU', 2, 2, true);
RebootWindows(true);
end.
Компьютер перезагрузится.