Код:
begin
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
ClearQuarantineEx(true);
QuarantineFileF('C:\Program Files\ContentProtector\', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js*, *.tmp*', true, '', 0, 0);
QuarantineFileF('c:\programdata\krb updater utility', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js*, *.tmp*', true, '', 0 , 0);
QuarantineFileF('c:\users\администратор\appdata\local\microsoft\extensions', '*', true, '', 0 , 0);
QuarantineFile('C:\Users\836D~1\AppData\Local\Temp\TasksWatch.exe', '');
QuarantineFile('C:\Program Files (x86)\iWebar\iWebar-updater.exe', '');
QuarantineFile('C:\ProgramData\KRB Updater Utility\krbupdater-utility.exe', '');
QuarantineFile('C:\Users\Администратор\AppData\Local\Microsoft\Extensions\extsetup.exe', '');
QuarantineFile('C:\Program Files (x86)\Common Files\Adobe\OOBA\PDApp\PPAPI\CF4DA53E-E7C6-4F12-874B-64F225724942.exe', '');
QuarantineFile('C:\Windows\system32\drivers\ContentProtectorDrv.sys', '');
DeleteFile('C:\Users\836D~1\AppData\Local\Temp\TasksWatch.exe', '32');
DeleteFile('C:\Program Files (x86)\iWebar\iWebar-updater.exe', '32');
DeleteFile('C:\ProgramData\KRB Updater Utility\krbupdater-utility.exe', '32');
DeleteFile('C:\Users\Администратор\AppData\Local\Microsoft\Extensions\extsetup.exe', '32');
ExecuteFile('schtasks.exe', '/delete /TN "iWebar-updater" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "KRB Updater Utility" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "extsetup" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "KRB Updater Utility Service" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "SafeBrowser" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "avastBCLRestartS-1-5-21-2644496669-1680244695-3235772995-500" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "iWebar-chromeinstaller" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "AFB40D0DC-E662-4F8E-9A8F-3F81A0FB43FC" /F', 0, 15000, true);
DeleteFileMask('c:\programdata\krb updater utility', '*', true);
DeleteFileMask('c:\users\администратор\appdata\local\microsoft\extensions', '*', false);
DeleteDirectory('c:\programdata\krb updater utility');
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run', 'AppDownloads');
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\SPDriver', 'command');
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\TasksWatch', 'command');
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1201', 3);
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1001', 1);
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1004', 3);
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '2201', 3);
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1804', 1);
CreateQurantineArchive(GetAVZDirectory + 'quarantine.zip');
ExecuteSysClean;
ExecuteWizard('TSW', 2, 2, true);
ExecuteWizard('SCU', 2, 3, true);
RebootWindows(true);
end.