Код:
begin
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
ClearQuarantineEx(true);
QuarantineFile('C:\Users\КоТ\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk', '');
QuarantineFile('C:\Users\КоТ\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Интернет.lnk', '');
QuarantineFile('C:\Users\КоТ\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Интернет.lnk', '');
QuarantineFile('C:\Users\КоТ\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk', '');
QuarantineFile('C:\Users\КоТ\Desktop\Интернет.lnk', '');
QuarantineFile('C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk', '');
QuarantineFile('C:\Users\КоТ\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\MoneyBot.exe.lnk', '');
QuarantineFile('C:\Users\Public\Desktop\MoneyBot.lnk', '');
QuarantineFile('C:\ProgramData\Microsoft\Windows\Start Menu\Programs\4game\4game.lnk', '');
QuarantineFile('C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WNetworkEn\Settings.lnk', '');
QuarantineFile('C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WNetworkEn\SignIn with Facebook.lnk', '');
QuarantineFile('C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WNetworkEn\SignIn with Twitter.lnk', '');
QuarantineFile('C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WNetworkEn\Wajam Website.lnk', '');
QuarantineFile('C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WNetworkEn\Explore Social Search\Ask.lnk', '');
QuarantineFile('C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WNetworkEn\Explore Social Search\Google.lnk', '');
QuarantineFile('C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WNetworkEn\Explore Social Search\IMDb.lnk', '');
QuarantineFile('C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WNetworkEn\Explore Social Search\Shopping.com.lnk', '');
QuarantineFile('C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WNetworkEn\Explore Social Search\TripAdvisor.lnk', '');
QuarantineFile('C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WNetworkEn\Explore Social Search\Wikipedia.lnk', '');
QuarantineFile('C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WNetworkEn\Explore Social Search\Yahoo!.lnk', '');
QuarantineFile('C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WNetworkEn\Explore Social Shopping\Amazon.lnk', '');
QuarantineFile('C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WNetworkEn\Explore Social Shopping\Argos.lnk', '');
QuarantineFile('C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WNetworkEn\Explore Social Shopping\Ebay.lnk', '');
QuarantineFile('C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WNetworkEn\Explore Social Shopping\Etsy.lnk', '');
QuarantineFile('C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WNetworkEn\Explore Social Shopping\HomeDepot.lnk', '');
QuarantineFile('C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WNetworkEn\Explore Social Shopping\Ikea.lnk', '');
QuarantineFile('C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WNetworkEn\Explore Social Shopping\Lowe'+ #39 +'s.lnk', '');
QuarantineFile('C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WNetworkEn\Explore Social Shopping\Mercadolivre.lnk', '');
QuarantineFile('C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WNetworkEn\Explore Social Shopping\MyShopping.lnk', '');
QuarantineFile('C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WNetworkEn\Explore Social Shopping\Sears.lnk', '');
QuarantineFile('C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WNetworkEn\Explore Social Shopping\Target.lnk', '');
QuarantineFile('C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WNetworkEn\Explore Social Shopping\Tesco.lnk', '');
QuarantineFile('C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WNetworkEn\Explore Social Shopping\Walmart.lnk', '');
QuarantineFile('C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WNetworkEn\Explore Social Shopping\Zalando.lnk', '');
QuarantineFile('C:\Users\КоТ\AppData\Roaming\Update\MSupdate.exe', '');
QuarantineFile('C:\Users\61AB~1\LOCALS~1\Temp\cceaaisjo.exe', '');
QuarantineFile('D:\KoT\program\Fastfreelikes.com', '');
QuarantineFileF('C:\Program Files (x86)\BonanzaDeals', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js*, *.tmp*', true, '', 0, 0);
QuarantineFileF('C:\Users\КоТ\AppData\Roaming\FreeVPN', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js*, *.tmp*', true, '', 0, 0);
QuarantineFileF('C:\Program Files (x86)\IconRunner\', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js*, *.tmp*', true, '', 0, 0);
DeleteFileMask('C:\Program Files (x86)\IconRunner\', '*', true);
DeleteDirectory('C:\Program Files (x86)\IconRunner\');
DeleteFile('C:\Users\КоТ\AppData\Roaming\Update\MSupdate.exe', '32');
DeleteFile('C:\Users\61AB~1\LOCALS~1\Temp\cceaaisjo.exe', '32');
DeleteFileMask('C:\Program Files (x86)\BonanzaDeals', '*', true);
DeleteFileMask('C:\Users\КоТ\AppData\Roaming\FreeVPN', '*', true);
DeleteDirectory('C:\Program Files (x86)\BonanzaDeals');
DeleteDirectory('C:\Users\КоТ\AppData\Roaming\FreeVPN');
RegKeyParamDel('HKEY_CURRENT_USER', 'Software\Microsoft\Windows NT\CurrentVersion\Windows', 'Load');
CreateQurantineArchive(GetAVZDirectory + 'quarantine.zip');
ExecuteSysClean;
ExecuteWizard('SCU', 2, 3, true);
RebootWindows(true);
end.